I want to still use my old Adobe software on my mac. Would I be correct that if I've installed the Apple Java update but then disabled Java in my browser settings then I'm safe and fine. i.e., the danger is only in using your browser with Java enabled, having it installed in your OS without is OK.
MacBook Pro, OS X El Capitan (10.11.2), Java
Yes, it would be secure, not optimal, but if you really need to use it no problem.
Thanks Amilixkan
From your response it sounds as though there might still be some risks. I was under the impression that there would no risks (as well as anyone can ever know there's no risks) as long as it's not enabled for web use. I'm guessing having it on your system still carries risk. If so do you know the nature of this risk and how it van be exploited still?
Well, to be truthful everything in this world carries risks, so don't worry. Well, it may be exploited as a backdoor for your system, however this is very unlikely and only in you are actively downloading unsigned software (meaning not from Appstore or known companies) and visiting sketchy pages. if you are only using YouTube, Wikipedia, and some forums you should be fine. To be sincere, i have not disabled Java, do visit some sketchy sites, however a little bit of logical reason and precaution can go great lengths.
Don't worry, exercise precaution and common sense and you will be fine đ
Thanks Amilixan, my take then would be
1. It's still important to disable Java for web as that is still a genuine risk and you could be exploited without realising through general web use which does happen.
2. If you have JAVA on your system but have web use disabled it can still be exploited but only at system level if you download dicey software.
3. Going on horrible sites can't exploit Java directly if you've turned it off for web use, but this is simply where you might get general trojans etc which in turn attack the Java at system level.
Is this a correct understanding?
Yes basically, although I would want to know why would you visit "horrible sites" đ
lol, yep, although horrible sites can sometimes find you!
If you had JAVA on your system would you abstain from going online entirely or would you be comfortable just so long as the 'use for web' was disabled?
Well, like i said, i do have java and its not disabled for the web. And in absolutely no way i would abstain myself completely of the web. Disabling "use for the web" seems like a reasonable and secure approach.
There are two different Java distributions for end users: one from Apple, and one from Oracle. They don't overlap in function. Neither one is installed by default.
The Apple Java runtime (version 6) is needed to run bare jar files and older standalone Java applications, including Adobe products. Newer Java applications have a runtime built in and don't use Apple's. This form of Java doesn't expose you to any risk of network attack.
The Oracle Java runtime (version 8 or later) is a web plugin only. It's used to run web applets and Web Start applications. It cannot run standalone applications. To determine whether it's installed and up to date, look for a preference pane named "Java" in System Preferences. If it's present, open it. It will launch the "Java Control Panel." Select the Update tab.
Java on mac - safe ways to use it?
