This was the stupidest thing Oracle could do with Java. Oracle specifically BROKE the Java sandbox, allowing Java to interact directly with computer systems.

Why is Java over the Internet now so dangerous? Thank Oracle, who obtained Java when they bought Sun Microsystems. Check up on their reputation and verify they are NOT Trojans. So avoid running mysterious Java apps you know nothing about. Trojan horse Java applications are possible. As detailed by Apple in a technical document, OS X Yosemite will add JavaScript support for scripting and automation: The JavaScript OSA component implements JavaScript for Automation.

Just be sure you run Java apps, off the Internet, from reliable developers. NOTE: Running Java applications off the Internet is not typically a problem. But for the sake of simplicity and the ability to reinstate the Java Plug-In whenever you may want to actually use it on the Internet, I'd leave everything else in place. There are other Java bits and pieces you could trash. Java now cannot run in them over the Internet, which is where Java is particularly dangerous. I have them in a folder labeled 'Internet Plug-ins (disabled)' inside the Library folder.ģ) QUIT and restart all your web browsers. I advise that you store these files somewhere, just in case you want to use them later for some odd purpose. Yes, that includes Apple's own alias file 'ugin'. A quick and simple way to DISABLE running JAVA over the Internet (if you have Admin privileges):Ģ) Remove from this directory everything listed as 'Java'.

Java for mac os x yosemite