With all this fuss about the flashback Trojan, I realized I never use java. I don't remember why I even have it installed. There must be some way to remove java. Does anyone know how?
this might help you:
http://osxdaily.com/2012/04/07/tips-secure-mac-from-virus-trojan/
be careful though, you might use it without knowing.
You don't need to remove it. Just disable it in Safari.With all this fuss about the flashback Trojan, I realized I never use java. I don't remember why I even have it installed. There must be some way to remove java. Does anyone know how?
You don't need to remove it. Just disable it in Safari...
[snip]
That's all you need to do to keep your Mac completely free of any virus, trojan, spyware, keylogger, or other malware.
You can certainly uninstall it if you want, but there are some legitimate websites that won't function properly without Java enabled. Perhaps you never visit such sites, but if you do, you may find yourself reinstalling Java.That may be true is you're the only person who uses your computer. I want to uninstall Java from our family macbook as there aren't any applications that use it (that I couldn't replace). I can and have disabled it in Safari, Chrome and Firefox (must remember to do Camino as well in case anyone uses that) but I can't protect that option and anyone could enable it in any of the browsers running as a standard user:
The difference between running an admin or standard account is negligible. There are no great security benefits to running as a standard user.(I wonder why you don't also recommend running as a Standard user, which is strongly advisable when other people use the account, and is only a slight chore?)
Mac OS X admin accounts are set up to give the admin as much privileges as possible while avoiding almost all of the pitfalls of running as root.
Almost all of the sensitive areas of OS X require admin authentication to modify in an admin account. An admin account in Mac OS X is not like an admin account in Windows XP (and earlier Windows NT based OS).
The security sensitive folders in an admin account that can be modified without authentication can not be abused to install malicious software that will compromise apps such as Safari, Mail, iTunes, or any other default OS X app.
The only security sensitive folder that I can think of that can be modified without authentication in an OS X admin account is "username"/Library/LaunchAgents. Even this folder is not that security sensitive.
If you decide to use a standard account to further increase your security, you will not have to log out/in to perform tasks. You can use the admin credentials from the standard account to perform admin tasks.
That may be true is you're the only person who uses your computer. I want to uninstall Java from our family macbook as there aren't any applications that use it (that I couldn't replace). I can and have disabled it in Safari, Chrome and Firefox (must remember to do Camino as well in case anyone uses that) but I can't protect that option and anyone could enable it in any of the browsers running as a standard user: if I uninstall it though, it can't be reinstalled without the admin password which only I know.
What's really bugging me is that the Java for OS X 2012-00x update removed the -uninstall option for Java and so I have to jump through the hoops detailed in http://apple.stackexchange.com/questions/24131/uninstalling-java-on-lion
(I wonder why you don't also recommend running as a Standard user, which is strongly advisable when other people use the account, and is only a slight chore?)