Java: can you disable (enable on demand)?

[CavemanMike]

I need Java in order to install firmware on my new printer.

I hate Java and know how big of a security risk it is.

Other than installing the 157 meg download, doing my firmware, and uninstalling it,

IS THERE A WAY TO SAFELY DISABLE IT so it doesn't pose a threat when I don't need it?

I use chrome & safari for browsing, but also want it completely disabled from an OS perspective.

Thanks for any tips to keep me safe from Java!

Mike

 

[CavemanMike]

Is this the Java ? OK to uninstall from terminal?

I downloaded and installed the java development kit from:

http://www.oracle.com/technetwork/java/javase/downloads/jdk7-downloads-1880260.html

When I looked for the icon so I could delete it (until I found the answer on how to disable it), I didn't see it in my applications folder in finder.

So, I entered this terminal command:

sudo rm -fr /Library/Internet\ Plug-Ins/JavaAppletPlugin.plugin

which I read at this page:
http://www.java.com/en/download/help/mac_uninstall_java.xml

Am I safe from Java?

Thanks,
Mike

PS: Have I mentioned how much I hate java?

 

[antonis]

That's not the java you deleted, it's just the browser plugin, which is the one responsible for security issues. Other than that, the rest of the java is still installed but it is not a threat (just enter the terminal: java -version to see if it is installed).

The browser plugin part, can also be disabled from each browser's preferences.

 

[CavemanMike]

How do I get rid of the rest of java?

Thanks. Interesting.

How do I get rid of Java if I don't see it in the list of applications in finder?

Michaels-MacBook-Pro:~ Michael$ java -version
java version "1.7.0_51"
Java(TM) SE Runtime Environment (build 1.7.0_51-b13)
Java HotSpot(TM) 64-Bit Server VM (build 24.51-b03, mixed mode)
Michaels-MacBook-Pro:~ Michael$

 

[DeltaMac]

Java is not an installed application, and you would not find it in the Applications folder in any case - it is used by the system as an installed framework.

However, there's no logical need to remove all pieces of Java. You will possibly run across some other applications that need the Java frameworks installed.

The only element of Java that allows threats is the Java Plugin. (It's Java's "door" to your system)
If you remove that plugin, then outside threats through Java do not have access to your system. (remove the "door", and no one can get through, at least with Java methods)
More info about uninstalling Java here: http://www.java.com/en/download/help/mac_uninstall_java.xml

 

[antonis]

Mine is /Library/Java/JavaVirtualMachines/jdk1.7.0_51.jdk

Erasing this jdk1.7.0_51.jdk folder should remove java.

Mind this is not the user folder's Library, it's on the root of the hard disk.
So if I had to remove it I would type from terminal:

cd /Library/Java/JavaVirtualMachines
rm -rf ./jdk1.7.0_51.jdk

 

[CavemanMike]

Re-Installing Java w/ Chrome?

Since I had already used the terminal command to remove the plug-in, I wanted to see how the mac handles merely disabling it.

So, I went to Java.com and clicked Java. I got this:

"Recommended Version 7 Update 51 (filesize: 48.4 MB)

Chrome does not support Java 7 on Mac OS X. Java 7 runs only on 64-bit browsers and Chrome is a 32-bit browser.

If you download Java 7, you will not be able to run Java content in Chrome on Mac OS X and will need to use a 64-bit browser (such as Safari or Firefox) to run Java content within a browser. Additionally, installing Java 7 will disable the ability to use Apple Java 6 on your system.

I understand the above and want to download Java 7 for Mac OS X (10.7.3 and above)."​

1. Does this mean when I'm surfing with Chrome, I'm safe from java threats?
2. Why was their download 48 megs, but what I installed originally 179 megs? From here: http://www.oracle.com/technetwork/java/javase/downloads/jdk7-downloads-1880260.html

 

[antonis]

You are equally safe when you disable the plugin from Safari/Firefox or using Chrome that is unable to use the plugin due to 32bit-only architecture. As long as the plugin is not active, it cannot be used. Personally, I consider Safari more safe as I don't trust google's products much, due to their shady politics they have every now and then, concerning user data.

The size difference is due to the JDK and JRE. JDK (which you downloaded at first place) is the full java language for developers allowing you to develop and build java applications (JDK=Java Development Kit) while the JRE (Java Runtime Environment) is smaller as it has only the required runtime components to execute java applications. So, JRE is a subset of JDK.

 

[CavemanMike]

Thanks antonis! How to get rid of both?

How can I get this stuff of my pristine mac?

I'm sure deleting the JavaAppletPlugin.plugin doesn't get rid of all 500 megs of extracted Java Junk.

Thx

Mike

----------

I found this thread at:
https://discussions.apple.com/thread/4772629?tstart=0

Which says:

Your browser will use JRE7, if it is installed as Apple has disabled the web plugin for java6.

Do not attempt to remove java6 as just about every software that uses java on OS X requires java6 to be installed and removing it will break those programs. Different java versions are not necessarely backwards compatible. If you java6 installed, you also have programs that depend on it installed as well.​

 

[tgara]

In many cases, simply moving the icon to the trash will do the job (at least in the case of Apple apps). To remove apps completely, I've used AppCleaner. It's been recommended by several Mac blogs.

http://lifehacker.com/5828738/the-best-app-uninstaller-for-mac

It's not 100% effective, but it will identify most files relating to the app you want to remove. And the app is free.

As for enablement with Java, keep in mind that the latest version of Safari will allow you to enable the Java plugin only with websites that you authorize. For example, I have one website that requires Java to run. I've authorized it for that site, and that site only, because I trust that website's security. Every other site must ask permission before proceeding. This makes the security risk with Java plugin much more tolerable.

http://osxdaily.com/2013/11/01/install-java-os-x-mavericks/

http://osxdaily.com/2013/04/16/enable-java-plugin-per-website-basis-safari-mac-os-x/