The security community is denouncing Oracle over yet another zero-day vulnerability in Java. With that criticism comes the repeated expert advice that people disable it. But I must ask -- if we disable Java, what do we replace it with to ensure we can still get that functionality we've grown dependent on?\tI wonder this as I read a story from Antone Gonsalves on the latest backlash. He writes:\t\t\tJava is used in 3 billion devices worldwide, says its steward, Oracle. The platform's ubiquity makes it\u00a0a favorite hacker target, along with the fact that the platform often goes unpatched in people's computers. Security company Rapid7 estimates that 65% of the installations today are unpatched.\t\t\t"Many people don't even know Java is installed on their computers and browsers, and that's a huge problem," said Andrew Storms, director of security operations at nCircle.\t\t\tOracle contributes to the problem by not working more closely with the security industry in building better defenses in Java, Storms said. The company shares very little information with security experts between patches.\t\t\tExperts recommend disabling Java in Web browsers, unless it is needed to access specific business applications. In the latter case, a separate browser should be dedicated for the sole purpose of accessing those applications.\t\t\t"IT departments should really consider if users need to access Java for business critical applications, otherwise, they should get rid of it," said Rob Rachwald, director of security strategy at Imperva.\t\t\tAnother option is to configure a client firewall to block a browser's Java plug-in from accessing the Internet, unless the destination site is on a whitelist.\tThe question I started off with might seem juvenile to some of you, but I ask as someone who admits to not having all the answers. That's when I try turning this blog into a forum for your ideas.\tAnd so I ask: If our best option is to disable Java, what are the best alternatives? If one is dealing with a host of business-critical apps that won't run right without Java, what are some alternative options aside from those Antone mentioned above?\tPost your ideas in the comments section below, and thanks for participating!