A recent Java 7 update allows users to completely prevent Java applications from running inside browsers or to restrict how Web-based Java content is handled by the Java Runtime Environment client.

To submit credentials to an application, the user simply inserts the key into a USB socket, runs the MetaPass Java application, enters the master password, and clicks an icon for the account he ...