I keep coming across articles talking about browser vulnerabilities related to java. Apparently I don't have to worry about Chrome or Firefox, but it appears Java is enabled by default in Safari.
I had a hard time finding documentation on the correct safari defaults to set to disable Java in Safari 6.
If you really need to run java for some shit, keep it off by default and turn it on when needed.
defaults write com.apple.Safari com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaEnabled -boolean NO
defaults write com.apple.Safari com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaEnabled -boolean NO
defaults write com.apple.Safari com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaEnabled -boolean YES
defaults write com.apple.Safari com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaEnabled -boolean YES
I just said fuck java and ran this too.
sudo rm -rf /Library/Internet\ Plug-Ins/JavaAppletPlugin.plugin
I went with a slightly less destructive approach. I can see future self yelling at current self while I'm already pissed that I need Java for some terrible bank website or something.