Java?

[Annette]

It may be a silly question but......Something called Java wants to update itself. Now that's o.k? It's a legit computer thinngy? I know we have Javascript so I assume Java 5.0 Update 9 from Java (TM) is just an update of an exsisting program. With all these virus infections going around I thought I should ask before I go ahead 

[J. M. Pescado]

Java is normally a legitimate program, but many evil programs can masquerade as legitimate programs. However, if it's asking, it's probably the real thing. So say no anyway. Then ban it from accessing the Internet, because even legitimate programs may be evil, especially if they've been talking to the mothership.

[Annette]

  I'll let it remind me in 3 days then, give me time to mull over whether I need it updated or not 

[dizzy]

Actually, some updates are necessary security updates (fixes to otherwise exploitable buffer overflows and such). It is strongly advisable that you *do* update, and frequently.

[J. M. Pescado]

Update MANUALLY ONLY. Never automatically update anything. Even letting it LOOK for those is a security threat.