If you're talking about the Java windows updater, IME it gives up really easily and then doesn't remember to update until the next patch goes out. Also, aborts if any other installer is running.

OTOH, the Linux openjdk package stays pretty up to date and doesn't install the Ask toolbar ;-).

I've seen some machines where it tries to update with every release, and every release it fails with some cryptic error message, leaving the user on the old version. That can't be good for security.

Perhaps there's a reported bug for this, you could add a comment describing what you saw. If we report bugs in software then we're contributing to better software.

Ironically, the people reporting the bugs won't be able to automatically update to the new versions with the bug fix.

All thus security issues in Java is bad enough, but the whole ask toolbar thing makes it even worse. Java should be auto updating as default. Instead they make us go thru the same wizard again and again, with only on goal; hope someone makes a mistake and install the ask bar.

Make my wonder if there other products may be dangerous too.

It's every other day for me unless I go out of my way to tell it to stop. Even then it starts up for no reason later on.

Uninstall it, then use ninite to install it again. This prevents adware from being installed and kills the update popups. http://ninite.com/ To update it later, just run the same ninite binary again; it will check for a new version automatically. Or, install Secunia's PSI which will silently update various programs in the background. http://secunia.com/vulnerability_scanning/personal/

Ha! After my wife accidentally missed the checkbox and her laptop was "infected" with the Ask toolbar, I uninstalled Java on all my Windows machines at home.

Apparently I don't have any software that is depended on it. If I had known I would have uninstalled it a long time ago!