How to disable Java

[KynloStephen66515]

Java was once touted as the "write once, run anywhere" language. In theory, a single Java program could run on any Java-supporting platform. That dream never quite came to perfection, though, and these days Java is a favorite attack vector for hackers. The Flashback Trojan breached Macintosh computers via a Java vulnerability last year, for example. In August, researchers at FireEye reported another zero-day vulnerability in Java. The most recent Java vulnerability affects all versions of Java 7, including the most current version. Unless you absolutely need it, you should disable Java now.

Fortunately, Oracle offers a Web page with straightforward instructions on how to turn off Java.

Disable Java in All Browsers
Last month Oracle released a new Java version, Update 10, that includes a one-stop option for disabling Java in all browsers in the Java Control Panel. Open Control Panel and launch the Java applet. If you don't see it, switch to Classic View (in XP) or small icons (in Vista or Windows 7). Click the Security tab. In previous versions this tab just allowed advanced users to manage Java-related certificates. It now displays a security-level slider and, more important, a single checkbox titled "Enable Java content in the browser." Un-check this box, click OK, and you're done.

Disable Java in One Browser
 For security's sake you really should be using the very latest Java version. If you're not, or if you need to enable Java in some browsers but disable it in others, you can do that too.

Using Chrome? Enter chrome://plugins in the browser's address bar. Scroll down to Java and click the link to disable it. That was easy, and a bit simpler than Oracle's recommended steps. The process is similar in Opera, which Oracle's page doesn't mention. First, enter about:config in the address bar. Click the Java heading to expand that section, un-check the checkbox, and click the Save button. In Safari, choose Preferences, choose Security, and deselect Enable Java.

The only way to disable Java in Internet Explorer is through the Java Control Panel. Launch it as described above, click the Advanced tab and expand the item titled Default Java for browsers. Un-check the boxes for Microsoft Internet Explorer. You may need to click the item and press spacebar in order to clear the checkmarks.

Firefox users can click the Firefox button at the top and choose Add-ons from the resulting menu. On the Plugins tab, click the Disable button next to "Java(TM) Platform." You can also disable Java for all Mozilla family browsers by un-checking the Mozilla family box in the Java control panel.

Source: http://www.pcmag.com...,2817,2414191,00.asp

[f0dder]

1) Do you need Java?
If not, uninstall it complete. If you're not sure, well, you're probably not a techy user - no fret, and it's not meant as a derogatory term - simply as a matter of fact (and count yourself blessed).

2) Which browser do you use?
If you're on Chrome, be sure to turn on the "click to play" feature. If you're not, you should disable the following plugins entirely in your primary browser, and use a secondary browser (like Chrome) for the few sites that require the aforementioned: Java, Flash, Adobe PDF.

Those two points are un-negotiable.

After that comes a lot of possible ways to harden your online experience, which are optional. But the two above, currently, aren't.

[TaoPhoenix]

1) Do you need Java?
If not, uninstall it complete. If you're not sure, well, you're probably not a techy user - no fret, and it's not meant as a derogatory term - simply as a matter of fact (and count yourself blessed).

-f0dder (January 11, 2013, 06:07 PM)

Well, maybe not "need need", but something wanted it so I put it back against last month. But I took the advice and unclicked the box. I do only need it infrequently for a very few web uses. So maybe this is a compromise.

[f0dder]

But I took the advice and unclicked the box

-TaoPhoenix (January 11, 2013, 11:10 PM)

"Unclicked the box"? Do you mean "enabled click-to-play", or "disabled 'always trust this applet' (for a signed applet)?

Keep in mind that only signed applets get the "always trust this" - drive-by attacks will be done with unsigned applets that load entirely automagically, unless you block them or use your browser's click-to-play.

[tomos]

I uninstalled Java seeing as I had an older version anyway.

Anyone know what JavaFX is?

==================================================
Entry Name          : JavaFX 2.1.1
Installation Date   : 2012-06-24 14:13:57
Installation Folder : C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\
Install Source      : C:\Users\_____\AppData\LocalLow\Oracle\Java\FX2.0\
Installer           : Windows Installer
==================================================

should that go as well?

[f0dder]

Anyone know what JavaFX is?

-tomos (January 14, 2013, 07:58 AM)

Some stuff to make it easier to make GUIs with Java, AFAIK (a bit of a simplification ).

should that go as well?

-tomos (January 14, 2013, 07:58 AM)

If you don't know you need it, there's a good chance you can simply remove it - haven't bumped into any applications requiring it. It's installed by default by at least some versions of the JRE, so there's a good chance you got it without asking for it.

[tomos]

Anyone know what JavaFX is?

-tomos (January 14, 2013, 07:58 AM)

Some stuff to make it easier to make GUIs with Java, AFAIK (a bit of a simplification ).

should that go as well?

-tomos (January 14, 2013, 07:58 AM)

If you don't know you need it, there's a good chance you can simply remove it - haven't bumped into any applications requiring it. It's installed by default by at least some versions of the JRE, so there's a good chance you got it without asking for it.

-f0dder (January 14, 2013, 08:07 AM)

thanks - it's gone - will report if there's any problems