Must Read: Mint 15: Today's best Linux desktop (Review)

Topic: Security

How to disable Java in your browser on Windows, Mac

Summary: Amid a serious security flaw in the latest version of Java 7, where even the U.S. Department of Homeland Security has warned users to disable the plug-in, here's how you do it.

Zack Whittaker

By for Zero Day |

 |  Image 5 of 10

OS X: Step 2

A new window will appear warning you that the Java settings need to be opened in a new console. This will open. Same as with Windows, simply:

  • Hit the Security tab.
  • On the Security settings, uncheck the box saying Enable Java content in the browser.
  • Hit Apply then OK.

You should now have disabled Java in OS X.

  • Thumbnail 1
  • Thumbnail 2
  • Thumbnail 3
  • Thumbnail 4
  • Thumbnail 5
  • Thumbnail 6
  • Thumbnail 7
  • Thumbnail 8
  • Thumbnail 9
  • Thumbnail 10

Topics: Security, Oracle

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

Talkback

49 comments
Log in or register to join the discussion

  • No need in Windows

    Unless you decided to install that slow buggy mess yourself (in which case you should know how to uninstall it) there hasn't been a Java delivered with Windows for quite a few years.
    Tony_McS
    Reply 1 Vote

    • This is not the way it looks in Windows 8

      No security slider visible in Windows 8 when you go to the Java control panel.
      deshmyster
      Reply 2 Votes

      • "This is not the way it looks in Windows 8"

        That's because java isn't included in Windows 8...
        xplorer1959
        Reply Vote

      • Here Is How

        Bring up charm bar and click on search
        Click on settings
        Type Java in search bar
        Click on Java Icon
        Click Advance
        Uncheck the Java plug in box

        While you are there, might want to check other options.
        eargasm
        Reply Vote

        • thanks - but a bit more information

          Many windows 8 users like me never see the charms menu or the new interface (I may use it when there are decent apps but not yet - just wanted it for speed increase)
          Control panel is where it always was
          so start >control panel>Java
          However on the advanced panel
          There are settings for Java Console (show hide don't start)
          Default Java for browsers (IE ticked but greyed out Mozilla family ticked and active)
          Java Plugin - enable next generation java plug in - I am guessing this is the one but it is not obvious
          Then there are a whole shed load of other stings oddly unticking that and applying doesn't grey out any other settings so does that imply that things can happen even if you disable java?
          I do have an understanding of using control panel tools but this list is slightly confusing and ambigious to me - an inexperienced user would stop at the word "advanced"
          cymru999
          Reply Vote

      • Are you running it in administrator mode?

        I think that's required to change security settings...
        D. W. Bierbaum
        Reply Vote

      • Windows 7 and 8 disabing Java

        The Security tab in the Java control panel applet does NOT appear as shown here UNLESS you UNINSTALL all prior Java updates, THEN install (or re-install) the latest. Then it's easy to uncheck the browser enable box.
        jgarman@...
        Reply Vote

    • I have sent this about windows 8 to the author - posting here for others

      I would like to apply it but the settings you show are not there in Windows 8 control panel - only a button saying certificates. There is a setting in the Java tab which gives the path of java runtime and version etc and has a enable tick box at the end of the row (that is on the user tab) then there is another sub tab system which has the same one line entry (though it looks like more can be added)

      On the certificates tab is a worrying entry for our university VLE Blackboard which has its certificate listed - if blocking java means that our students wont be able to use parts of blackboard it will be a major problem for us.

      The last tab is Advanced where there is a whole list of things so maybe your techies can add a windows 8 fix please

      Also is there a quick way for an end user to find out which websites NEED java to function
      cymru999
      Reply Vote

  • ATO need to learn from this

    I really hope the ATO are listening to this! Their business portal (which is a security nightmare to get setup, particularly on anything other than windows) requires Java running in the browser - because of what they claim, is for security reasons. Seems to me they are forcing all australian businesses to take very bad security practices if they want to submit their quarterly BAS.

    PLEASE ATO, fix it soon - I can't afford this sort of vulnerability in my business systems.

    Ben
    ben+zdnet@...
    Reply Vote

  • If it was that easy....why did it take SO long to get this simple

    solution OUT .......Microsft web site was the usual complete round around......Windows is CRAP.....end of story
    Linux_Lives
    Reply Vote

    • @ If it was that easy....why did it take SO long to get this simple

      I guess it is to those who don't have the IQ to figure out how to use it.
      MelbourneTweetr
      Reply 2 Votes

  • GoToMeeting

    Problem is that so many web services require us to use their Java apps, i.e. GoToMeeting :-(
    marketingdiy
    Reply Vote

  • Important to differentiate "Java Plugins" from "Java Script"

    Somewhere in the furor over Java exploits, it'd be nice if someone speaking to the general public would point out that "Java Script" (ECMA script language found on almost every web site, including this one), is not the problem, but rather Java Applets or plugins which use JRE. Not that scripting cannot be used for malicious purposes...
    TwangGuru
    Reply 2 Votes

    • Java Plugins versus Java Script

      Though I generally concur with TwangGuru, trying to explain the differences between these two to the general public, successfully, is about as likely as the probability that more than 50% of the general population can tell you what JRE stands for, if asked.

      The more important issue is that Java, though wonderfully generic and portable for programming, is a nightmare for security. Even if you get all the settings to perfectly firewall a system, the problem is that every click of the mouse will generate a consent box, and some things won't work any more. Within days, the users are disabling the protections because Java is so ubiquitous to everything. It's also a concern that the most recent exploit used trojan websites and single clicks to deliver payloads, a security breach at an extremely high level. Without Homeland Security putting the heat on them, Oracle might have waited weeks to patch the program. And as noted elsewhere, scripting still could be used maliciously. I certainly don't trust my security to anything Oracle says or does.

      But as I noted about users not wanting the inconvenience and security warnings, those of us who have more experience in such things should be educating others about what to watch for - unnecessary clicking of links or popups that are not familiar, odd texts/emails that have been spoofed, and the way to use anti-virus and anti-malware apps to protect the machine.

      Now if we can just figure out a way to completely firewall the JRE from the rest of the computer, seamlessly, for the 50+ million people who play Minecraft every day, we'll be golden. Not really, but it would be a start.
      screamino
      Reply Vote

  • Java Control Panel

    On step 3, Java Control Panel, Security tab, I do not have the option to Enable Java Content in the Browser (thus I cannot disable it). What now? Running Windows 7, IE 9. Under Security, it simply has "Use certificates to pisitively identify yourself, certifications, authorities, and publishers."
    Loretta Cahill
    Reply 2 Votes

    • Java Control Panel

      Um, that should have been "positively."
      Loretta Cahill
      Reply 1 Vote

    • security screen

      update your java to the latest version and the screen you seek should be there. Then disable it.
      michael56555@...
      Reply Vote

      • Screenshots are different

        Like Loretta I too have the same layout.

        Java says that I am up to date (2 days old).
        imaginarynumber
        Reply Vote

    • disable in IE

      Hi Loretta

      I guess that you can just disable it in IE

      TOOLS>MANAGE ADD ONS

      look for the JAVA plugin
      imaginarynumber
      Reply Vote

      • ignore my bad advice

        Sorry the IE plugin is only the JAVA helper plug in and has little do do with JAVA apps running....
        imaginarynumber
        Reply Vote
CNET Join | Log In | Privacy | Cookies Close