How do I disable Java in my web browser?

How do I disable Java in my web browser?


This article applies to:

  • Platform(s): Solaris SPARC, Solaris x86, Red Hat Linux, SUSE Linux, Oracle Enterprise Linux, Windows 8, Windows 7, Vista, Windows 2008 Server, Macintosh OS X
  • Browser(s): Internet Explorer, Firefox, Chrome, Safari
  • Java version(s): 7.0, 7u10+

Starting with Java Version 7 Update 10, a new security feature has been added to Java. Some web pages may include content or apps that use the Java plug-in, and these can now be disabled using a single option in the Java Control Panel.

alert iconDisabling Java through the Java Control Panel will disable Java in all browsers.

Find the Java Control Panel

Windows XP

  • Click on the Start button and then click on the Control Panel option.
  • Double click on the Java icon to open the Java Control Panel.

Windows 7, Vista

  • Click on the Start button and then click on the Control Panel option.
  • In the Control Panel Search enter Java Control Panel.
  • Click on the Java icon to open the Java Control Panel.

Windows 8
Use search to find the Control Panel

  • Press Windows logo key + W to open the Search charm to search settings
    OR
    Drag the Mouse pointer to the bottom-right corner of the screen, then click on the Searchicon.
  • In the search box enter Java Control Panel
  • Click on Java icon to open the Java Control Panel.

    Java Control Panel

Disable Java through the Java Control Panel

Enable Java

  1. In the Java Control Panel, click on the Security tab.
  2. Deselect the check box for Enable Java content in the browser. This will disable the Java plug-in in the browser.
  3. Click Apply. When the Windows User Account Control (UAC) dialog appears, allow permissions to make the changes.
  4. Click OK in the Java Plug-in confirmation window.
  5. Restart the browser for changes to take effect.

RELATED INFORMATION

Disable the Java content in the particular browser
Internet Explorer

The only way to completely disable Java in Internet Explorer (IE) is to disable Java through the Java Control Panel as noted above.

Chrome
  1. Click on the Chrome menu, and then select Settings.
  2. At the bottom of Settings window, click Show advanced settings
  3. Scroll down to the Privacy section and click on Content Settings.
  4. In the Content Settings panel, scroll down to the Plug-ins section.
  5. Under the Plug-ins section, click Disable individual plug-ins.
  6. In the Plugins panel, scroll to the Java section. Click Disable to disable the Java Plug-in.
  7. Close and restart the browser to enable the changes.

Note: Alternatively, you can access the Plug-ins settings by typing about:plugins in the browser address bar.

Firefox
  1. Click on the Firefox tab and then select Add-ons
  2. In the Add-ons Manager window, select Plugins
  3. Click Java (TM) Platform plugin to select it
  4. Click Disable (if the button displays Enable then Java is already disabled)
Safari
  1. Choose Safari Preferences
  2. Choose the Security option
  3. Deselect Enable Java
  4. Close Safari Preferences window

 

http://www.java.com/en/download/help/disable_browser.xml

New Java vulnerability is being exploited in the wild, disabling Java is currently your only option

A new Java 0-day vulnerability has been discovered, and is already being exploited in the wild. Currently, disabling the plugin is the only way to protect your computer.

Update on December 11Oracle’s Java vulnerability left open since October 2012 ‘fix’, now being used to push ransomware

The US Computer Emergency Readiness Team (US-CERT), which falls under the National Cyber Security Division of the Department of Homeland Security, has issued the following vulnerability note:

Overview – Java 7 Update 10 and earlier contain an unspecified vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.
Description – Java 7 Update 10 and earlier contain an unspecified remote-code-execution vulnerability. This vulnerability is being attacked in the wild, and is reported to be incorporated into exploit kits.
Impact – By convincing a user to visit a specially crafted HTML document, a remote attacker may be able to execute arbitrary code on a vulnerable system.

It appears this flaw was first stumbled upon by a French researcher who goes by the name Kafeine. In a post on his Malware Don’t Need Coffee website, the researcher claimed that the latest version, Java 7 Update 10, was being exploited on a site that receives “hundreds of thousands of hits daily” and concluded that “this could be mayhem.”

More importantly, Kafeine noted the two most popular Web threat tools used by hackers to distribute malware, the BlackHole Exploit Kit and the Cool Exploit Kit, already have this latest Java exploit. BitDefenderconfirmed the alleged addition of the exploit into Cool while security expert Brian Krebs confirmed the BlackHole part, as well as noted its addition into Nuclear Pack:

The curator of Blackhole, a miscreant who uses the nickname “Paunch,” announced yesterday on several Underweb forums that the Java zero-day was a “New Year’s Gift,” to customers who use his exploit kit. Paunch bragged that his was the first to include the powerful offensive weapon, but shortly afterwards the same announcement was made by the maker and seller of Nuclear Pack.

This actual vulnerability was later confirmed by security firm AlienVault Labs. With Kafeine’s help, the company reproduced the exploit on a new, fully-patched installation of Java, and used a malicious Java applet to remotely execute the Calculator application on Windows XP:

java calc 730x565 New Java vulnerability is being exploited in the wild, disabling Java is currently your only option

We recommend that regardless of what browser and operating system you’re using, you should uninstall Java if you don’t need it. If you do need it, use a separate browser when Java is required, and make sure to disable Java in your default browser.

We have contacted Oracle about this issue. We will update you if we hear back.

Update on December 11Oracle’s Java vulnerability left open since October 2012 ‘fix’, now being used to push ransomware

See also – Security companies are recommending you disable Java, or just uninstall it and Mozilla joins the chorus, tells Firefox users to disable Java due to security hole

CyanogenMod 10 ported to the Google Nexus 7

The Google Nexus 7 may be the first tablet to ship with Google Android 4.1 preloaded. But that hasn’t stopped independent developers from building custom ROMs for the tablet. One of the first is an unofficial build of CyanogenMod 10 for the Nexus 7.

Like the tablet’s default software, it’s based on Android 4.1 Jelly Bean. But it also includes CyanogenMod enhancements including a a customizable lock screen, additional options for the power widget, and support for USB OTG — which means you can plug in a USB flash drive if you have an adapter cable.

CM10 is the first version of the popular CyanogenMod operating system to be based on Android 4.1, and the developers have only been working on the software for a few weeks.

There’s not an official build available for the Nexus 7 yet, but xda-developers form member winner00 compiled his own build based on CyangoenMod source.

If you’ve already rooted your Nexus 7 and installed ClockworkMod or TWRP custom recovery, you can download the latest version of winner00′s CM10 Kang from the xda-developers forum and flash it through your recovery app.

It’s probably a good idea to use your recovery tool to make a backup of your device first, in case anything goes wrong. While most things are working in the CM10 Kang, it is an experimental build so there’s always a chance you might want to go back to the default Android firmware.

via CyanogenMod 10 ported to the Google Nexus 7.

How to change the Nexus 7 user interface to full tablet mode

The Google Nexus 7 tablet has a user interface that looks like a cross between the Google Android UI for smartphones and tablets. With Android 3.0 through Android 4.0, things were pretty clear-cut: If you had a phone, the notification area was at the top of the screen and you couldn’t rotate the home screen. On tablets, it was at the bottom and rotation was supported.

But Android 4.1 on the Nexus 7 includes a notification area at the top of the device, home, back, and recent apps buttons at the bottom, and a default home screen that doesn’t rotate. It’s a 7 inch tablet that works more like a phone — unless you apply a patch that makes it work like a 10 inch tablet.

Google still supports the same full tablet mode we saw in Android 4.0 and earlier, but only for tablets with larger displays. The new user interface we see on the Nexus 7 is designed specifically for 7 inch tablets.

When you run some apps you’ll see the two-pane view that you get with 10 inch tablets, but overall the user interface looks more like the one you’d expect for a phone. It’s not a bad way to do things — but if it’s now what you’re looking for, there are other options.

The operating system doesn’t actually know what size your screen is. It just knows how many pixels your screen can display, what the pixel density is, and what the cutoff is for showing the 7 or 10 inch versions of the Android interface. So there are a few ways to trick the Nexus 7 into thinking it should display the notification bar at the bottom.

If all you want is a home screen that can rotate, you can install any number of apps from the Play Store, including Nova Launcher, ADW Launcher, or Apex Launcher.

But if you want to use the full tablet UI, you’ll need to root your Nexus 7 and make some changes.

Option 1: Change your LCD Density

This is the easiest way to enable the tablet UI (for now). Once you’ve rooted your tablet, just install an app such as ROM Toolbox that allows you to change your LCD density. You can find that option in the build.prop Tweaks section of ROM Toolbox.

The default setting for the Nexus 7 is 213. But if you change it to something between 160 and 170, the tablet should automatically display the full Android user interface.

Unfortunately there’s a down side to this method. The Nexus 7 has a 1280 x 800 pixel display. Normally that just means text, images, and other content will look less pixelated on the tablet than on a Kindle Fire or another 7 inch tablet with a 1024 x 600 pixel screen. But if you change the LCD density, text, images, and other content will look smaller on the Nexus 7 as well.

Basically what you’re trying to do is cram all the content that would normally be displayed on a 10 inch screen onto a 7 inch screen. If you have great eyesight or like holding tablets very close to your face, this might be a good thing. If not, you might be interested in the second option.

Option 2: True Tablet UI Patch

A group of folks at the xda-developers forum found a setting in the Android 4.1 code called ShortSizeDP. Basically this tells the operating system whether to use the phone, 7 inch tablet, or larger tablet user interface depending on your screen resolution and LCD density.

If you change the ShortSizeDP, you can get the full tablet user interface without making all the text and graphics smaller.

So they’ve posted a True Tablet UI Patch that lets you do that.

It’s still a work in progress and only works if you’re running a deodexed version of Android 4.1 on your Nexus 7. Eventually the plan is to release a version that makes it easy to switch between full tablet and 7 inch tablet modes, so if that’s what you’re looking for you might want to keep your eye on the xda-developers forum thread and wait.

For now, just make sure to use ClockworkMod Recovery or TWRP to backup your device before applying the patch — that way you can always restore from the backup if you’re not happy with the results.

via How to change the Nexus 7 user interface to full tablet mode.

Proudly powered by WordPress | Theme: Baskerville 2 by Anders Noren.

Up ↑