3 ms·
Java's bad safety reputation comes mostly from the Java plugin, where many inventive ways to bypass its sandbox have been discovered. When used as a normal prog
by cesarb 10y ago
Java's bad safety reputation comes mostly from the Java plugin, where many inventive ways to bypass its sandbox have been discovered. When used as a normal programming language, without depending on it for sandboxing (that is, when all code running in the JVM is trusted), its safety is quite good.
(Java also has a not so great reputation about speed. That one also comes from the Java plugin, which often took minutes to start up, while keeping the Netscape browser UI locked up.)
- the_why_of_y 10y ago... and just to add to that, if you look at the other popular sandboxed client-side runtimes, i.e., Adobe Flash and various JavaScript-enabled browsers (all of them implemented in C++), you will find a similar number of critical vulnerabilities.
- EugeneOZ 10y agoI see a lot of NPE in IntelliJ IDEA, especially EAPs. It's not browser's plugin.
- the8472 10y agoNPEs are not a security issue in the same sense as a buffer overflow or null pointer dereference.