Hacker News new | ask | show | jobs
by JSadowski 4853 days ago
Or permanently. I have never found a use for the Java plugin in my browser. And for all other plugins I have click-to-play enabled.
2 comments

I use Java in the browser. The way you use your computer is not the same other people may use theirs.

We have a web based VPN tool that has to use Java.

I've had good experiences so far by keeping a dedicated browser for use with "legacy" services (such as school) that require Java. I haven't tried it, but I would suspect the profile manager in Firefox may help with that kind of setup, too.
Maybe a dedicated vm for anything that requires java would be safer these days. :/
I have two observations about that kind of plan.

First, it would be significantly more of a hassle to boot up a separate OS for the purpose of executing a short-lived task (such a submitting homework, or doing banking, as others have mentioned). Related to that, there is a slight disconnect between the host filesystem and the guest filesystem. The more convenience one has (e.g. greater transparency and sharing) the greater the risk.

Related, but separate from that: how would you know the VM was compromised and thus should be destroyed? One could presumably just periodically destroy (or revert to snapshot). Perhaps even if it was compromised, maybe the short lifespan of the VM would limit the damage to others.

Tell that to the entire country of Denmark where we are all bound to use a Java applet for such things as paying taxes or online banking.