How to disable Java in your web browser - gHacks Tech News

How to disable Java in your web browser

By now you have probably heard about a new Java vulnerability that is been actively exploited on the Internet.

I do not want to rehash all that has been said, and would like to suggest articles on ZDnet and Securelist for that which should provide you with an overview of the threat. Only that much: only Java 7.x is affected by the vulnerability.

Visit the following website to find out which version of Java, if any, is installed on your computer. Check the version entry on the page to find out which version of Java you have installed.

You may not get a reading here if you do not have Java installed, if you are using click to play in the browser, or if you have disabled Java.

test java version

Java 7 version 06 is installed on the computer in the case above.You can alternative check the Java version on this page which also highlights whether your computer is vulnerable to the exploit.

You have several options at your disposal to protect your system from exploits:

  • Uninstall Java. Without doubt the best option if you do not use desktop apps or web apps that require Java
  • Disable Java. This needs to be done in every web browser that you use. More about that later.
  • Enable click to play. If your web browser supports click to play, you can enable the feature to block Java contents from being loaded automatically.
  • Use a security extension like NoScript. NoScript blocks scripts from being executed automatically.
  • Downgrade to Java 6.x

Disabling Java in your web browser

Please note that you may see multiple Java listings, and that it is recommended to disable all that you find.

Google Chrome: Type chrome://plugins in the address bar and hit enter. This displays all plugins that the browser has found on your system. Some may be enabled, others disabled. Locate Java in the listing and click on the Disable link to disable the plugin in the browser. The disable link should turn into Enable, and the background color of the row to gray.

disable java

Mozilla Firefox: Type about:addons in the browser's address bar and hit enter. Switch to Plugins on the page that opens and locate Java here. Click on the disable button to disable Java in Firefox.

disable java firefox

It should then read (disabled) after the name of the plugin.

Opera: Type opera:plugins in the browser's address bar and hit enter. Locate Java there and click on the disable links to disable the plugin.

disable java opera

The font color should turn to light gray and the link at the end of each line should read enable.

Internet Explorer: Here you need to change a Registry key. Press Windows-r, type in regedit and hit enter. Now navigate to the Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3  and change the value of 1C00 to 0. More about the process here.

Closing Words

Java is installed on a lot of desktop systems even though most regular Internet users do not need the plugin or technology at all for their day to day activities. If you are not sure whether you need Java, I'd suggest to uninstall it and see if you are running into issues opening applications or contents on the Internet. Chance is, you won't.





  • We need your help

    Advertising revenue is falling fast across the Internet, and independently-run sites like Ghacks are hit hardest by it. The advertising model in its current form is coming to an end, and we have to find other ways to continue operating this site.

    We are committed to keeping our content free and independent, which means no paywalls, no sponsored posts, no annoying ad formats (video ads) or subscription fees.

    If you like our content, and would like to help, please consider making a contribution:

    Comments

    1. Mystique said on August 30, 2012 at 3:25 pm
      Reply

      One of the many reasons to search for alternatives for java written programs, I always try to avoid anything in .net, java and flash is rapidly becoming a problem, ever since adobe acquired out macromedia things just haven’t been the same. I also avoid anything adobe, corel and symantec.

      1. Midnight said on August 30, 2012 at 8:21 pm
        Reply

        Adobe and Symantec, for sure, but there’s nothing wrong with Corel.
        Been using PSP for ages, without any issues!

    2. catatonic said on August 30, 2012 at 4:05 pm
      Reply

      computers suck.

    3. Rahul said on August 30, 2012 at 4:23 pm
      Reply

      Uninstalling java is the best option, but yes its true many of the softwares still relies on java, especially which i install from sourceforge.

      Many have recommended to remove it…but is there any way to secure that application, so that it runs in sandbox mode and if it is exploited..it should not ruin system badly.. matt you discussed here about ASLR (address space layout randomisation) few days back..i haven’t tried it..have you tested any application with this tool, in which java is a primary requirement

    4. Transcontinental said on August 30, 2012 at 4:43 pm
      Reply

      This is giving me the opportunity to realize that, here, the system will work out well and better without Java, since no application is requiring it, at this time. I did encounter a few web apps (mainly testing sites) that pointed out lack of Java: yes, I removed it completely. If I ever reinstall it it won’t be before an update, not a patch, an update; and still, not sure.
      Oracle as to what I’ve read was aware since last April of these problems among others. Frankly, if true, I just don’t understand their security policy. They are running after Java 8 when Java 7 is buggy : today’s world, typically.

    5. PixelWizard said on August 30, 2012 at 7:15 pm
      Reply

      A couple of days ago I too opted for the “uninstall Java altogether” route. So far so good; just one defunct software encountered: DirDup,- used for quick, manually activated differential backups.

      My backup is daily, so I replaced DirDup with something that’s turned out to be pretty great: GFI Backup Freeware. Available at http://www.gfi.com/pages/backup-freeware.asp

    6. Midnight said on August 30, 2012 at 8:19 pm
      Reply

      Oracle has just released an update/fix for the problem with Java.
      Should be good to go, until the next vulnerability!

      https://threatpost.com/en_us/blogs/oracle-releases-fix-java-cve-2012-4681-flaw-083012

      1. Martin Brinkmann said on August 30, 2012 at 8:30 pm
        Reply

        Nice but to late for me. I have uninstalled Java on all my systems.

        1. Transcontinental said on August 31, 2012 at 11:09 am
          Reply

          Too late for me as well.

          QUOTE from nakedsecurity ( http://preview.tinyurl.com/9o4gwjh )
          “The bigger question is, “Do you really need Java?” If you can get by without it, you should. That is true for any application that interfaces with the internet. Fewer programs means fewer vulnerabilities.”

          I don’t really need it.

    7. boris said on August 30, 2012 at 9:16 pm
      Reply

      I uninstalled Java few month ago and everything is fine. Only few websites with old games and IP checks use java now anyway.

    Leave a Reply