Ars Technica – (International) Java still has a crucial role to play despite security risks. Java has its security flaws, but it is not going away any time soon — many important applications run on the technology, especially in business settings. Still, many users are worried enough about vulnerabilities that they restrict Java’s ability to run on their machines. That is what Ars Technica heard when it asked its readers October 19 whether they let Java run on their computers, and why. Some users disabled or uninstalled Java entirely. However, the most common solution for those worried about security risks is to leave the Java Runtime Environment in place on the desktop while disabling the browser plugins that allow Java applets to run on Web sites. Those plugins are often vulnerable to attacks involving remote code execution.
Ali Loney, on October 22, 2012