Disable Java in Opera to avoid Quicktime bug

April 23, 2007

News is coming out about the bug which allowed someone to exploit a MacBook with all the current (as of 2007-04-23) security updates.

NOTE: This is not just a bug for Mac OS X. Windows is also vulnerable if QuickTime is installed!

Initial reports were that the bug required that Safari be used to go to a certain website, however current reports (unconfirmed but reasonable) indicate that the problem is in Java handling in QuickTime, that any Java-enabled browser is a viable attack vector, if QuickTime is installed, and disabling Java stops the vulnerability.

While the Opera browser has not been confirmed to have this bug, it’s far better to be safe than sorry. (So far the specific details of the bug have not been released.)

Until the bug is fixed, you can easily disable Java in Opera, either by going to Preferences → Advanced and then clicking on Content. Uncheck the box next to Enable Java, as shown here:

opera-java-preferences.png

or press F12 (or Alt + F12 in Mac OS X) to bring up the quick preferences window and disable it as shown here:

opera-f12-java.png

(Note: screenshots are from MacOpera, but WinOpera will look largely the same.)

Opera is capable of setting Java on/off on a per-site basis, however, due to what I consider a design flaw in Opera, you cannot turn OFF settings like Plugins or Java or JavaScript globally and override that choice for particular sites.

I would much prefer to be able to disable Plugins, Java, and JavaScript by default and enable them only for such sites that I choose (what I would call an opt-in policy). However, Opera is not currently designed to let me do that, it functions only as opt-out.

  • Tim, I can globally disable Java (and Javascript) and enable it on a site-by-site basis.
  • bart
    "I would much prefer to be able to disable Plugins, Java, and JavaScript by default and enable them only for such sites that I choose (what I would call an opt-in policy)."

    Sounds like NoScript ;)
    http://noscript.net
  • TJ
    @non-troppo: interesting... When the feature first came out I know this wasn't possible (or at least wasn't for plugins) so I never checked it again. I'll have to check that out.

    @bart: yes, but -- and I know this will be hard for some to hear -- I just don't like Firefox's UI, and I loathe the need for extensions.
blog comments powered by Disqus

Previous post: If it’s annoying, get rid of them

Next post: NUMB3RS aka Numbers aka CSI: Math