Never, ever, ever, ever install a 'required plug-in' that a random web site tries to 'give you.'

[onehandle]

I think Mac people are mostly smart about this, but case in point...

Yontoo spoofs an Apple dialogue box used to seek permission to install a program. "After clicking on 'Install the plug-in, the user is redirected to another site from which Trojan.Yontoo.1 is downloaded," Dr Web says.

Fraudsters have rigged movie trailer pages that contain a prompt encouraging users to install a plugin needed to view the content. However, granting permission merely installs the Yontoo plugin.

"Yontoo has also been deceptively packaged as a media player, video enhancement software and a download accelerator, including an offer to install "Free Twit Tube", which again installs Yontoo. Once installed, it displays ads that would not otherwise appear," Dr Web says.

Not all antivirus companies are classifying Yontoo as a trojan, however. Symantec assessed the Windows version of Yontoo as "potentially unwanted software". On Windows, the plugin installs a browser extension displaying advertisements that appeared to come from Facebook, Symantec said.

http://www.zdnet.com/is-the-new-mac-trojan-hitting-os-x-browsers-really-a-trojan-7000012937

[snappyturtle]

1. Further clue from one who uses the internet solely to watch teevee:

Never install ANY plug-in on these sites. It's costly believe me! You don't need them.

[onehandle]

2. The only plug-ins I have in Safari is an ad blocker.

No Flash. No Java.

On the rare occasion I need Flash (usually for a dumbly encoded video) I open Google Chrome, which has it built in.

[snappyturtle]

3. I'm not saying all plug-ins are bad if that's what you thought. I just know

that the ones I tried never helped with streaming or video viewing and found out they can be malicious.

[onehandle]

4. No, no. That's not what I thought.

Browsers are laggy enough on their own without the extra baggage of plug-in applications.

That's all I meant.

[cbayer]

5. Do you know if it's now safe to upload the Java updates?

I miss doing the NYT acrostic and can't do it without that.

[onehandle]

6. For the moment. I use Chrome for that as well, if absolutely necessary.

I treat Chrome like a dog treats a fire hydrant.