disable java browser plugin

shochatd · 01-11-2013, 04:39 PM

There's a lot in the news lately about a new security vulnerability in java. By doing about plugins (should be a colon between about and plugins but the forum software insists on turning that into a smiley) in Firefox on my wife's iMac (running Snow Leopard) I see that the Java plugin is installed. The java runtime is also installed as shown by java -version. Since MacOSX does not seem to have a package management system, I do not know the correct procedure for disabling or uninstalling the plugin (and/or the JRE). Could someone tell me the proper way to do it?
Thanks.

macosnoob · 01-11-2013, 06:44 PM

https://blog.mozilla.org/security/20...vulnerability/
https://support.mozilla.org/en-US/kb...Java%20applets

shochatd · 01-11-2013, 07:13 PM

Thank you! That took care of the plugin (for Firefox). For Safari, I used Safari->Preferences->Security. And for Chrome, the plugin can be disabled from the about(colon)plugins screen. I also found an article on CNET that said to use /Applications/Utilities/Java Preferences to disable the JRE (by unchecking). After doing that, java -version now indicates that there's no Java runtime. News reports claim that Apple is somehow disabling Java remotely, but I see no evidence of that here.

DeltaMac · 01-11-2013, 07:51 PM

So far, Apple's remote disable for JAVA is for JRE version 7 only, which means Lion (OS X 10.7.3) and newer.

ricede · 01-12-2013, 10:28 AM

In the past I have seen an application called Java Preferences in the Applcations / Utilities folder, where one could either disable Java or switch to a different version.

On looking in that folder today - i notice that Java Preferences has disappeared altogether. Does Mountain Lion no longer come with that application installed ? ( Im running 10.8.2 )

I have a bootable ext HD running Snow Leopard ( 10.6.8 ) & i just checked Utilities there & yes there is a Java Preferences application installed on that OS.

benwiggy · 01-12-2013, 11:03 AM

A couple of points to note:

1. The vulnerabilities are caused by attack vectors when running Java on a malicious webpage within a browser. Therefore, it is a very good idea to stop your browser from running Java apps (as very few websites require this).
You can do this by either removing the plug-in from /Library/Internet plug-ins, or disabling Java in the browser's preferences.

2. However, there is no need to remove the entire JRE from your computer. Java has many uses, and many mainstream apps require it. (Some versions of Adobe Creative Suite products, OpenOffice, etc.)

3. Of course, Java and JavaScript are two totally different things, and you don't need to disable JavaScript because of the security problems in Java.

Yes, I recently noticed that the Java Preferences app was missing from my Utilities folder in 10.8.2. I've downloaded JRE 7 from Oracle, and it puts a Preference Pane in the System Preferences (though all that does is call up another app to control the settings. It also includes a checkbox for showing Java in the "system tray"....

agentx · 01-15-2013, 08:22 AM

Both Apple and Oracle give me huge headaches nearly every month.

If you install Java 7 it removes "portions" of Apples Java 6 but leaves the bulk of it in place but changes the main Java path variables to use Java 7.

"Chrome will not work as an alternate browser, as Oracle’s Java 7 browser plug-in only works with 64-bit applications. Firefox and Safari are both 64-bit, but Google Chrome is a 32-bit application."

The latest fiasco being Apple disabling Java 7 in Safari leading to 100s of support requests as Juniper SSL VPN needs Java 7 !

I have to constantly switch between the 2 versions of Java to keep certain things working....grrrr.....drives me bonkers!
Most users will not notice disabling Java but some people that play games online will and as a power user who needs access to special enterprise web apps/router tools/diagnostic tools for FTTC/FTTP/ADSL etc. i have to "not" grin and bear it.

here are some Links,KB and a script written by an enterprise admin who have same issues as me...cough and solves it so fast !

http://support.apple.com/kb/HT5559?v...S&locale=en_US
http://www.oracle.com/technetwork/ja...s-1637588.html.
http://derflounder.wordpress.com/201...-web-browsers/
http://derflounder.wordpress.com/201...0-6-update-11/

If it was not for rtrouton aka derflounder i would have gone insane with all the Java mayhem over last few years !

benwiggy · 01-15-2013, 08:28 AM

I know! The Java 7 Pref pane has now disappeared; if I type "java -version", I still get 1.6; and I'm basically confused as to what is on my machine.

Thanks for those links, I'll give them a thorough read.

agentx · 01-15-2013, 10:05 AM

Oh BTW oracle write very bad installers with crappy pre/postflight scripts that often fail !

http://docs.oracle.com/javase/7/docs...eferences.html

and also note that installing Java 7 JDK (most people just use JRE) will kill crashplan and you have to relink the Java path in crashplan plist.

01-11-2013, 04:39 PM	#1
shochatd Prospect Join Date: Jul 2006 Posts: 48	disable java browser plugin There's a lot in the news lately about a new security vulnerability in java. By doing about plugins (should be a colon between about and plugins but the forum software insists on turning that into a smiley) in Firefox on my wife's iMac (running Snow Leopard) I see that the Java plugin is installed. The java runtime is also installed as shown by java -version. Since MacOSX does not seem to have a package management system, I do not know the correct procedure for disabling or uninstalling the plugin (and/or the JRE). Could someone tell me the proper way to do it? Thanks.

01-15-2013, 08:28 AM	#8
benwiggy League Commissioner Join Date: Aug 2006 Posts: 5,039	I know! The Java 7 Pref pane has now disappeared; if I type "java -version", I still get 1.6; and I'm basically confused as to what is on my machine. Thanks for those links, I'll give them a thorough read. Last edited by benwiggy; 01-15-2013 at 08:31 AM.

01-15-2013, 10:05 AM	#9
agentx Hall of Famer Join Date: Feb 2003 Location: Brighton, UK Posts: 3,807	Oh BTW oracle write very bad installers with crappy pre/postflight scripts that often fail ! http://docs.oracle.com/javase/7/docs...eferences.html and also note that installing Java 7 JDK (most people just use JRE) will kill crashplan and you have to relink the Java path in crashplan plist. Last edited by agentx; 01-15-2013 at 10:36 AM.

Thread Tools
Show Printable Version Email this Page
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

01-11-2013, 06:44 PM	#2
macosnoob MVP Join Date: Jan 2007 Posts: 1,751	https://blog.mozilla.org/security/20...vulnerability/ https://support.mozilla.org/en-US/kb...Java%20applets

01-11-2013, 07:13 PM	#3
shochatd Prospect Join Date: Jul 2006 Posts: 48	Thank you! That took care of the plugin (for Firefox). For Safari, I used Safari->Preferences->Security. And for Chrome, the plugin can be disabled from the about(colon)plugins screen. I also found an article on CNET that said to use /Applications/Utilities/Java Preferences to disable the JRE (by unchecking). After doing that, java -version now indicates that there's no Java runtime. News reports claim that Apple is somehow disabling Java remotely, but I see no evidence of that here.

01-11-2013, 07:51 PM	#4
DeltaMac League Commissioner Join Date: Jan 2002 Posts: 7,950	So far, Apple's remote disable for JAVA is for JRE version 7 only, which means Lion (OS X 10.7.3) and newer.

01-12-2013, 10:28 AM	#5
ricede All Star Join Date: Jul 2008 Location: India Posts: 505	In the past I have seen an application called Java Preferences in the Applcations / Utilities folder, where one could either disable Java or switch to a different version. On looking in that folder today - i notice that Java Preferences has disappeared altogether. Does Mountain Lion no longer come with that application installed ? ( Im running 10.8.2 ) I have a bootable ext HD running Snow Leopard ( 10.6.8 ) & i just checked Utilities there & yes there is a Java Preferences application installed on that OS.

01-12-2013, 11:03 AM	#6
benwiggy League Commissioner Join Date: Aug 2006 Posts: 5,039	A couple of points to note: 1. The vulnerabilities are caused by attack vectors when running Java on a malicious webpage *within a browser*. Therefore, it is a very good idea to stop your browser from running Java apps (as very few websites require this). You can do this by either removing the plug-in from /Library/Internet plug-ins, or disabling Java in the browser's preferences. 2. However, there is no need to remove the entire JRE from your computer. Java has many uses, and many mainstream apps require it. (Some versions of Adobe Creative Suite products, OpenOffice, etc.) 3. Of course, Java and JavaScript are two totally different things, and you don't need to disable JavaScript because of the security problems in Java. Yes, I recently noticed that the Java Preferences app was missing from my Utilities folder in 10.8.2. I've downloaded JRE 7 from Oracle, and it puts a Preference Pane in the System Preferences (though all that does is call up another app to control the settings. It also includes a checkbox for showing Java in the "system tray"....

01-15-2013, 08:22 AM	#7
agentx Hall of Famer Join Date: Feb 2003 Location: Brighton, UK Posts: 3,807	Both Apple and Oracle give me huge headaches nearly every month. If you install Java 7 it removes "portions" of Apples Java 6 but leaves the bulk of it in place but changes the main Java path variables to use Java 7. "Chrome will not work as an alternate browser, as Oracle’s Java 7 browser plug-in only works with 64-bit applications. Firefox and Safari are both 64-bit, but Google Chrome is a 32-bit application." The latest fiasco being Apple disabling Java 7 in Safari leading to 100s of support requests as Juniper SSL VPN needs Java 7 ! I have to constantly switch between the 2 versions of Java to keep certain things working....grrrr.....drives me bonkers! Most users will not notice disabling Java but some people that play games online will and as a power user who needs access to special enterprise web apps/router tools/diagnostic tools for FTTC/FTTP/ADSL etc. i have to "not" grin and bear it. here are some Links,KB and a script written by an enterprise admin who have same issues as me...cough and solves it so fast ! http://support.apple.com/kb/HT5559?v...S&locale=en_US http://www.oracle.com/technetwork/ja...s-1637588.html. http://derflounder.wordpress.com/201...-web-browsers/ http://derflounder.wordpress.com/201...0-6-update-11/ If it was not for rtrouton aka derflounder i would have gone insane with all the Java mayhem over last few years !