Apple tries to kill its own Java on most Macs
Pushes users to deal with Oracle, which maintains Java 7 for OS X
Computerworld - Apple yesterday started scrubbing most Macs of older Java browser plug-ins, a move that will force users to download the software from Oracle. The company also patched Java for OS X, the second time Apple synchronized its Java security update with Oracle's, releasing its patches for OS X the same day as the Java software maker.
Along with the Java patches, Apple beefed by OS X security by uninstalling old browser plug-ins for the software.
The update aimed at Lion and Mountain Lion --which collectively accounted for 60% of all Macs last month -- zaps plug-ins provided by Apple via Java 6 and earlier.
"This update uninstalls the Apple-provided Java applet plug-in from all Web browsers," Apple said in a support document.
Apple's Java update for Snow Leopard did something different: "On systems that have not already installed Java for Mac OS X 10.6 update 9 or later, this update will configure Web browsers to not automatically run Java applets," Apple stated.
After the Lion and Mountain Lion update is applied, users who browse to websites that require Java will see the message "Missing plug-in," and can then proceed to the Oracle site to download the newest version of Java 7 and its browser plug-in.
Apple has been ratcheting up efforts to eliminate some plug-ins, notably Adobe's Flash Player and Oracle's Java, after hundreds of thousands of Macs were infected by the Flashback Trojan horse last March and April.
The company reacted with several measures, including blocking older versions of Flash. Earlier, Apple had made similar moves on Java, first blocking automatic execution of the Oracle plug-in, then following that with a patch that automatically disabled the plug-in if it had not been run in the past 35 days.
Wolfgang Kandek, CTO of Qualys, saw Wednesday's plug-in elimination as both a security enhancement and an attempt by Apple to push customers towards Oracle as the distributor of Java.
"[This] might be part of the migration to a Java completely provided by Oracle," said Kandek via instant message today. "It will [also] enhance security, and reduce the number of web-accessible Java installations on Macs."
Apple stopped bundling Java with OS X starting with 2011's Lion; this year's Mountain Lion also omitted Java. The Cupertino, Calif. company is still responsible for patching Java 6 and earlier, but Oracle takes care of OS X users running Java 7.
While Lion and Mountain Lion did not include Java, users may have installed it themselves: When a browser encounters a Java applet, OS X asks for permission to download the Oracle software. People running the older Snow Leopard (2009) and Leopard (2007) have Java installed by default.
- Feds declare big win over Cryptolocker ransomware
- Hackers hit more businesses through remote access accounts
- P.F. Chang's post-breach move to manual processing is telling
- Microsoft withholds monster IE update from Windows 8.1 dawdlers
- In baffling move, TrueCrypt open-source crypto project shuts down
- 'Oleg Pliss' hack makes for a perfect teachable IT moment
- Give IE the heave-ho until Microsoft patches zero-day
- Hackers find first post-retirement Windows XP-related vulnerability
- Researcher claims two hacker gangs exploiting unpatched IE bug
- Update: Third of Internet Explorer users at risk from attacks
- Enable secure remote access to 3D data without sacrificing visual perfomance Design and manufacturing companies must adapt quickly to the demands of an increasingly global and competitive economy. To speed time to market for...
- The Truth About Virtual Computing for CAD If you're a user of graphics-intensive software such as 3D modeling, simulation and analysis, and visualization, you might be skeptical about moving to...
- Virtually Delivered High Performance 3D Graphics "A picture is worth a thousand words." That old phrase is as true today as it ever was. Pictures (i.e., those with heavy...
- Simplifying Product Design In A Complex World Product design engineering has moved far beyond the confines of ever-more powerful workstations. Companies can't afford to restrict projects to using only local...
- What should I look for in a Next Generation Firewall? SANS Provides Guidance With so many vendors claiming to have a Next Generation Firewall (NGFW), it can be difficult to tell what makes each one different....
- Why Are Customers Really Deploying an NGFW? It seems every IT Security expert is talking about the NGFW, but what are people really doing? This webcast covers 5 real-world customer... All Mac OS X White Papers | Webcasts
Our new weekly Consumerization of IT newsletter covers a wide range of trends including BYOD, smartphones, tablets, MDM, cloud, social and what it all means for IT. Subscribe now and stay up to date!