3 ms·
well I've read the paper a multiple times, most of these "exploits" need "malicious code", how is that even possible? If somebody can inject malicious code I wo
by merb 10y ago
well I've read the paper a multiple times, most of these "exploits" need "malicious code", how is that even possible? If somebody can inject malicious code I would say that the game is already over.
Of course Applets are different, but I always hoped that they will be removed soon and that will be the case (soon).
- tbrowbdidnso 10y agoI agree. Who runs arbitrary code in a JVM these days? We have real hardware based virtual machines now, making this irrelevant. Back in the day Java JVM was the best way to run untrusted code close to native speed. That hasn't been the case for many years now...
- WatchDog 10y agoYeah I feel like the tone of the paper is a bit unfair, all of these exploits are the result of a feature that very few other languages/runtimes even attempt to implement(safely running untrusted code).