Java updated

[Thrawn]

Go install the Quickjava add-on https://addons.mozilla.org/en-us/firefox/addon/quickjava/?src=ss, drag and drop the J,F,SL,CS,I and A onto your toolbar and click on the J(for java) and it will turn red.Java will then be blocked. For the rare situations in which you do need java and want to turn it temporarily on click again and it will turn blue. When you are done click on it again to turn it red (disabled)and you go merrily on your way.

Yes, that's a good option.

For a more comprehensive approach, covering every kind of plugin and JavaScript (because they all get zero-days sometimes), you can instead use the NoScript addon, which will allow you to block all active content by default, then specify which sites you trust. Within a few days, you'll have trained it to trust your regular sites, and then it will only get in your way when browsing to new, unexplored and potentially-dangerous sites.

[lyceus]

And again there is a new vulnerability in Java!

Just check the link (and the URL):
http://thenextweb.com/insider/2013/03/0 ... -settings/

I think that the arrogance of Oracle just shoot their feet now. XD

So again kids: If you don't use Java, disable it NOW! *GRRR*

[Moonchild]

Pale Moon already blocks it by default now and requires a "click to play" action.

[polarbear]

I require Java for my trading platform, so disabling is a no go. A lot of trading software actually runs on Java, so I'm surprised there's not more attention being given to these ongoing issues. Then again, you only access your trading platforms via a secure connection, which mitigates the risks.

[Moonchild]

It's not blocked as a whole in Pale Moon at the moment, you just need to confirm you want to start the java applet if you need it. This to prevent hidden applets running, etc.

It will look like this:

java1.png

[Blacklab]

@polarbear: I'm sure it's a real PIA at the moment if you need to run Java. I found a couple of very good articles on the new Java Security Controls when answering the OP's final questions in the recent "Java Error" topic on PM Portable board: http://forum.palemoon.org/viewtopic.php ... 647#p11647

[satrow]

Even after yesterday's emergency 'patch' issued for Java: http://www.oracle.com/technetwork/topic ... 15081.html , Oracle are still investigating some 5 further vulnerabilities, one of which is being actively exploited already: http://thenextweb.com/insider/2013/03/0 ... -the-wild/