4 ms·
Not to discount the work done here. Big high five. But I am surprised hundreds more of these bugs haven't found every week. It's Oracle. Their mission statement
by paulie_a 8y ago
Not to discount the work done here. Big high five. But I am surprised hundreds more of these bugs haven't found every week. It's Oracle. Their mission statement might as well be "we make security vulnerabilities and charge you a shitload"
I would never trust any Oracle product in any form in production environment.
- freedomben 8y agoI hate Oracle and consider them among the most evil of companies out there. However, I don't think that's a very fair characterization of their mission statement.
- Nerdfest 8y agoTrue, I think it's actually Adobe's.
- cyphar 8y agoI think [1] shows that it is far from being an unfair synopsis of their mission statement. [1]: https://news.ycombinator.com/item?id=10039202 https://news.ycombinator.com/item?id=10039202
- paulie_a 8y agoIt's called exaggerated sarcasm. But it is absolutely fair of the products they build. They are complete garbage. It's like Adobe and Oracle have a side bet on who can introduce the most vulnerabilities. That is how terrible of a track record they have. I will be extreme here and say all of their products, especially Java, flash, and acrobat should outright be banned from a corporate network. It should be considered a liability and insurance companies should actually build it into their models.
- monocasa 8y agoTo be fair, this is Sun (or probably Innotek) code almost certainly. Sun I generally trusted in production.
- fulafel 8y agoThe commodity x86 virtualization gold rush happened some years before writing system code in memory-safe languages got back into vogue, and people only started doing real vulnerability research when they were already estabilished. so most of the hypervisors are prone to this stuff.