"The US-CERT, which is affiliated with the Department of Homeland Security, is advising people to disable Java in Web browsers."
But how will I analyze my Twixt games? I don't want someone in a basement to watch me play xbomb, like in that movie "The Girl With the Dragon Tattoo." They have it on film so it must be real.
Note: Twixt Commentator uses JavaScript and does not use Java. JavaScript may have tons of security problems, but it's unaffected by the recently (2013-01-11) found Java security hole.
The irony is that Java's bytecode was explicitly designed so that it could be executed in browsers safely. Of course, that depends on continued attention to security in the design of the JVM/libraries.