So, as I posted on my other account, a bunch of guys who publish crimeware for a living found a new Java expoit. Long story short, turn that shit off. As far as I'm aware, Javascript is pretty safe, but Java is out. I'm not as tech savvy as I'd like to be, though, so I'll let this security website do the talking for me.

http://krebsonsecurity.com/2013/01/.....-in-crimeware/