US Dept of Homeland Security advises everyone to remove Java

[alexd]

Oracle apparently won's be creating security patches for it until October, and Java is now basically a vector for hackers to take over your computer and browser at the moment and probably has been this way for a while.

Here are simple instructions on how to remove Java from your computer and browsers.


For users who primarily surf using Chrome it is handy to disable Java, but allow it to work in another browser for the rare application that requires Java.

Java 7 update 10 has a security control that allowed the web browser plugin to be disabled entirely. If you're using an earlier version (or even the latest version) you can use the following instructions to remove it.

How to remove Java from your Windows 7 and Vista computer

Windows 7 and Vista users can go to Control Panel -> Programs. Older versions of Windows will be under Control Panel -> Add/Remove Programs.

Find Java in the Program list, highlight it and choose Uninstall. Windows will prompt you to confirm. Say yes.

You can confirm that Java is no longer installed by visiting java.com. Click "Do I have Java?" Click verify and confirm that it says "No working Java was detected on your system."

How to disable Java in the Chrome web browser

1. Open Chrome and type chrome://plugins into the location bar.
2. Click Disable underneath the Java plugin.

How to disable Java in Internet Explorer web browser:

These steps were derived from advice given in CERT's vulnerability note on CVE 2012-4681.

Open Internet Explorer.
Type ALT + T to activate the Tools menu and choose Manage Plugins. Choose "All items" from the Show drop-down menu. Disable "Java Plug-in --version number--." It is safe to simply disable all of the items that begin with Java, but be sure to get this one. Close Internet Explorer.

Type WINDOWS + R and type regedit (approve UAC prompt if necessary). Browse to HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\{version}\UseJava2IExplorer and change (Default) to 0. 64-bit Windows users will need to change HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Plug-in\{version}\UseJava2IExplorer to 0.

Open Notepad (WINDOWS + R and type notepad) and paste the following code into it:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0001-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0001-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0002-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0002-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0003-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0003-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0004-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0004-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0005-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0005-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0006-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-0017-0006-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
"Compatibility Flags"=dword:00000400

Click File -> Save As... and call it DisableJava.reg and put it on your Desktop.
Double-click the file on your Desktop and approve any UAC prompts.
At this point Java should be disabled.

How to disable Java in Firefox web browser

1. Open Firefox and click the Firefox button -> Add-ons (Tools -> Add-ons in Linux, OS X and Windows XP).
2. Choose the Plugins tab.
3. Select the Java plugin(s) and click disable.

How to disable Java in the Safari web browser

1. Open Safari, select the Safari menu and choose Preferences.
2. Choose the Security tab and uncheck the box next to Enable Java.

 

[ndrwrld]

no less than an hour ago, mine updated.
eek ?

 

[Silverback92]

Is there alternatives to java or are we stuck with this shit? when I disable JavaScript on my firefox browser i can't watch any videos on most sites. Not the porn ones cus those videos are disgusting. I like to watch videos on nature and other educational videos out there, I can't learn anything with JavaScript off.

they say the update still doesn't patch the other holes in that Java garbage

 

[alison87]

Anyone disabling JavaScript in their browser in this day and age might as well just stop using the internet altogether. Fortunately, this isn't a JavaScript vulnerability, it's a Java applet vulnerability, which is entirely different. Websites that still use Java applets are even rarer than websites that don't use JavaScript, yet sadly Oracle still feels the need to inflict that shit upon internet users the world over. Unless you are a server-side Java developer or use a client-side Java application for some reason, there's no reason to have Java installed on your OS, so just remove it.

That said, Oracle just released 7u11 anyway so if you close your eyes and reboot it'll probably just fix itself.

Also, don't use Firefox, it sucks. Chrome and IE have eaten it for breakfast.

 

[Blysspluss]

I use Chrome, IE9/10 and FF. They're all fine.

And M'eh...the US dept of homeland security isn't my first choice of places to get IT security info.

Java has long been a shitty POS security-wise. Adobe Flash, too.

There are reasons to have Java installed, if you use Java apps. Otherwise, sure.

 

[alison87]

Ah yes, Firefox, still not supporting box-sizing.

 

[oddmyth]

Is there alternatives to java or are we stuck with this shit? when I disable JavaScript on my firefox browser i can't watch any videos on most sites. Not the porn ones cus those videos are disgusting. I like to watch videos on nature and other educational videos out there, I can't learn anything with JavaScript off.

they say the update still doesn't patch the other holes in that Java garbage

Slow down there.

Javascript is not Java.

JavaScript is not Java - MozillaZine Knowledge Base

For the most part unless you are running some shitty, memory gobbling, slow as fuck Java applets chances are you don't even require Java on your computer.

You will continue to need Javascript in your browser however, because not only are most browsers built partially on that technology, any half decent website will also use a good amount of Javascript to scrape information and draw the page.

 

[Silverback92]

ya stupid me i got fooled by the java in javascript i thought they were from the same company. I got rid of java on both computers so it can F off. Javascript works with flash it has nothing to do with java. Looks like people are using HTML5 instead of flash, to avoid the holes in flash

 

[alison87]

It will be a happy day when applets and Flash die once and for all. And this is speaking as a Java developer. Plugins suck. And what's the deal with Flash fucking reinstalling itself every time i reboot?