Flash & Java: Plugins under Chrome, Firefox & Co. under control

We’ll show you how to disable Flash and Java, activate it via Click to Play, and more, so you can keep Firefox, Chrome & Co. plugins under control.


Plugins are problematic, but unavoidable


Without additional plug-ins, which add new functionality to web browsers, the Web is less versatile. No matter whether videos or browser games - many websites build on Adobe's Flash plugin. Amazon and Sky, for example, use Microsoft's Silverlight plug-in for their video streams. Some network routers can only be configured with a Java plug-in.


If you want to use Google Hangouts in a browser other than Chrome, Google installs it for the first time - clearly - a plugin. And also for online meetings with Citrix, the configuration of Logitech's Harmony universal remote controls and the integration of the widely used Mediaplayer VLC into the browser, there are separate plug-ins.


Enable plugins only if necessary


This is quite problem-free - you guessed it - but not. The functionality of plugins requires extensive access rights, for example local files, webcam, microphone and much more. A security gap in a plugin has therefore a rapid impact. Unfortunately, such vulnerabilities are the order of the day.


Chrome


It is certain that the trend will go away from plugins. Youtube, formerly a flash island, now delivers its videos simply by HTML5 player. Firefox has largely made the Adobe Reader unnecessary with its own PDF reader and is currently working on a JavaScript-based player for Flash content. And for network routers, which can only be configured via Java or ActiveX, there have never really been good reasons.


So completely abolish plugins but probably not in the long run. This is simply because there is currently no way to deliver copy-protected videos (for example those of Netflix) without a plug-in.


Therefore, it is little surprise that we do not simply advise to uninstall your browser plugins. Our strategy is to minimize browser plugins, keep the remaining plugins up to date, and only enable them when they're needed.


Widespread plugins, especially Flash and Java, now have online update functions. If a new version appears, it will be automatically downloaded. You should accept this offer immediately, in order to be optimally protected.


The Firefox vendor Mozilla has a plug-in check, which also works in all other browsers. It shows you which plugins are installed in the respective browser and whether they are up-to-date. If you do not know what to do, google them by their name, with the addition "Uninstall" and the name of your browser. How to find out what the plug-in is for and how it can be dispensed with.


In Chrome, type this address: "chrome: // settings / content". This will take you directly to the right section of the settings. In the "Plugins" section, select "Click to play."


Subsequently, Chrome replaces all content available only with plugins with a gray placeholder. You must click on it to activate the relevant element. This allows a lot of fine control, but makes the daily surfing rather uncomfortable. For this reason, check out the Whitelist, which you can find in the Chrome settings under the address "chrome: // settings / contentExceptions # plugins". Enter the addresses of your favorite websites. Chrome plugins will then automatically activate them. Of course, this comfort gain also means a security breach.


You can disable questionable Chrome plugins at the address "chrome: // plugins /".


Also Firefox has a click-to-play feature. You can do this by clicking the Alt key (if necessary, pressing the Alt key) "Tools> AddOns> Plugins". There you can activate it individually for each plugin. You can also put questionable plugins here generally.


Firefox


Firefox will display a hint as soon as a website attempts to enable a blocked plug-in.


The blocking of plugins with the Firefox AddOn NoScript is more comfortable. This allows you to fine-tune which functions a website may use and which do not. Also, frequently used websites can be packaged on a Whitelist. However, this also requires a small amount of effort.


Internet Explorer


Internet Explorer 11 does not offer click-to-play. So you do not get any placeholders that you can click on. The filter is coarse mesh and covers only complete pages. Nevertheless, this protection is better than none. Click the gear in the upper right corner, and then click Security> ActiveX Filtering to enable it.


As soon as the filter fades out, it will show up with a blue icon in the address field. Click it to turn off the filter for the page you are viewing. Unlike the button's label, the filter remains active for other sites.


To block questionable plugins in general, run the addon management from Internet Explorer.


Safari


Then you can select plugins individually and click on "Disable" at the bottom.


In Safari 8, open the Preferences, click Security, and then click Web Site Settings behind .


Here you can activate click-to-play for each plugin individually. To do this, select the plug-in on the left and check the "Questions" section below for "When visiting other websites". In addition, you can add sites to the Whitelist and generally open them.


You can uninstall Safari plugins via the Finder. Plugins are in two folders: those that are active for all users saves OS X to "/ Library / Internet Plug-ins". Those who are only active for you are in your user folder. Open the Finder, press Cmd + Shift + G and type "~ / Library / Internet Plug-ins" to open this folder.


It is best to move (presumably) superfluous plugins to a different location. So you can restore it if problems occur.