Disable Java for security?

Question

I have Mac OSX 10.6.8.
I read these articles:
How to Detect and Protect Against Updated Flashback Malware
http://tidbits.com/article/12918
Flashback botnet: The end of the Mac’s malware immunity?
http://www.digitaltrends.com/computing/flashback-botnet-the-end-of-the-macs-malw are-immunity/
Beware the Morphing Flashback Malware
http://tidbits.com/article/12818
So, I disabled Java in all 4 of my installed browsers.  So far I have not noticed any downside. 
“Disabling Java will block Flashback’s “drive-by” attack, and is the most effective way for earlier users of Mac OS X to protect themselves.
          •          Safari—Go to Preferences > Security, and uncheck “Enable Java.” (While you’re in there, go to Preferences > General and make sure “Open ‘Safe’ files after downloading” is unchecked.)
          •          Firefox—Choose Tools > Add-ons, select the Plug-ins Tab, and click the “Disable” button next to Java Plug-in.
          •          Chrome — Type chrome://plugins in Chrome’s address bar. A list of available plug-ins will appear. Find Java and click the “Disable” link beneath it.
This doesn’t remove Java from your system, it just prevents Web browsers from launching or running Java apps. That’s enough to protect you from the drive-by nature of the Flashback attack. You’ll still be able to run desktop applications that require Java — a common example is things like Citrix’s GoToMeeting — but you may find you need to selectively re-enable Java in a browser to log in to services or download updates. In that case, you can selectively re-enable Java to get an app running, then disable it again when you’re done.”
http://www.digitaltrends.com/computing/flashback-botnet-the-end-of-the-macs-malw are-immunity/
I also disabled Java in Opera browser from opera:plugins
Comments?

Answer 1

The latest threat is through authentic-looking, but fraudulent Adobe Flash installation dialogs which can only appear when using a browser. Diabling Java will prevent the trojan from entering your system that way.
Java can also run as a standalone app for other programs designed for it. I believe Limewire was one example. It's been defunct for years and I don't know if there are any similar programs in common use. Disabling Java in Java Preferences as you explained will shut that door for good.
For what it's worth I have not needed Java for anything since I bought my latest iMac. When I opened Java Preferences I got this:
I was kind of surprised that I never even installed it. It's fair to say you probably won't miss it.
The digitaltrends headline you referenced is misleading - Mac malware has existed in many forms for many years. OS X gives complete and unfettered access to any program, good or evil, that a user chooses to install by granting access with his login name and password.
This is nothing new, nor does it herald the "end of immunity" since immunity never existed.