Thursday, January 31, 2013

Apple Uses XProtect to Block Java 7 Update 11 and Earlier on OS X

As reported by French language site MacGeneration, Apple has evidently blocked the latest version of the Java web browser plugin, Java 7 Update 11, through XProtect, OS X's anti-malware system.  By updating XProtect to allow a minimum Java version number of 1.7.0_11-b22, Apple has blocked the current version 1.7.0_11-b21 and earlier.


This is the second time in January 2013 that Apple has used XProtect to block the Java plugin from Mac OS X users.  Introduced in 2009 with OS 10.6 Snow Leopard, XProtect is used to restrict access to plugins by setting a minimum version number requirement for the plugin.  By setting the minimum version number for Java to a non-existent version, Apple has effectively blocked OS X 10.6 and greater from running Java applications in the web browser.

Earlier in January, Apple took a similar step to restrict access to Java 7 Update 10.  Days later, Oracle released Java 7 Update 11, which exceeded the minimum version requirement set in XProtect.  At that time, Mac OS X users were once again able to run Java applications.  Until Oracle issues an update to Java that is a version number greater than 1.7.0_11-b22, Mac OS X users will be prevented from running Java applications in the web browser.

With regard to the impact of this circumstance on ParaChat customers and users who run Mac OS X 10.6 and greater, please log in via the ParaChat Flash chat client, the ParaChat Mobile chat client, or the ParaChat iOS app.

Although we DO NOT RECOMMEND OR ENDORSE THE FOLLOWING, it is possible to edit the XProtect list to unblock Java.  To do so, open Terminal and navigate to:

.../System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/

Using vi, open XProtect.meta.plistXProtect.meta.plist is a read-only file, and you must edit the file as root.  To unblock Java 7 Update 11 (assuming it is installed on your machine), change 1.7.11.22 to 1.7.11.21, then save your edit.


2 comments:

  1. Is it possible to have the Parachat login page default to the Flash option?

    ReplyDelete
  2. Your methodologies also very impressive but i try to use simple and short methods to access such blocked sites. You can open in seconds by using this.
    Unblock All Sites

    ReplyDelete