6 ms·

> Everyone still downloads and runs an entire JVM. They do? I work in the Scandinavian public sector and we abandoned Java two or three years ago because of th

by moksly 5y ago

> Everyone still downloads and runs an entire JVM. They do? I work in the Scandinavian public sector and we abandoned Java two or three years ago because of the continued security issues it posed. Software that require an install JVM to operate doesn’t get past our IT department. I’m not sure modules would help though, as I don’t know much about them. But not everyone still installs JVM.

fenesiistvan 5y ago
What kind of security issues? A random native app is more secure?
vbezhenar 5y ago
I had in my mind people who use Java for their projects, not in general sense.
dikei 5y ago
Java in the browser (Applet) is unsecured, because it can download and run untrusted code in the user machine. Java in the server, on the other hand, is as secured as any other runtime, i.e only as good as the application written on it.
- TeaVMFan 5y ago
  Alternatives like TeaVM let you code Java in the browser but it compiles quickly to compact JavaScript. This way you can get the best of both worlds. A typed language, full-stack refactorings, and the security of the browser JS VM. TeaVM Website: https://teavm.org/ https://teavm.org/ Tutorial in Java Magazine: https://blogs.oracle.com/javamagazine/java-in-the-browser-with-teavm https://blogs.oracle.com/javamagazine/java-in-the-browser-wi...
  - dikei 5y ago
    Typescript has already filled the niche of a typed, OOP language in the browser for me. And it's surely much better supported than TeaVM.
- moksly 5y ago
  It’s not Java in the browser, it’s the Java virtual environment required to run Java apps. If that’s not the JVM then my mistake.
deleted 5y ago
[deleted]
stickfigure 5y ago
Let me guess, you've standardized on Electron apps?
- moksly 5y ago
  Not exactly. Most of our apps are some form of client/server architecture which means most of them are moving to JavaScript clients, but typically it’s react, angular or vue.
barbarbar 5y ago
Which Scandinavian public sector? Sounds like you are talking about client side java - applets maybe?

by moksly 5y ago

fenesiistvan 5y ago

What kind of security issues? A random native app is more secure?

vbezhenar 5y ago

I had in my mind people who use Java for their projects, not in general sense.

dikei 5y ago

Java in the browser (Applet) is unsecured, because it can download and run untrusted code in the user machine. Java in the server, on the other hand, is as secured as any other runtime, i.e only as good as the application written on it.

TeaVMFan 5y ago
Alternatives like TeaVM let you code Java in the browser but it compiles quickly to compact JavaScript. This way you can get the best of both worlds. A typed language, full-stack refactorings, and the security of the browser JS VM. TeaVM Website: https://teavm.org/ https://teavm.org/ Tutorial in Java Magazine: https://blogs.oracle.com/javamagazine/java-in-the-browser-with-teavm https://blogs.oracle.com/javamagazine/java-in-the-browser-wi...
- dikei 5y ago
  Typescript has already filled the niche of a typed, OOP language in the browser for me. And it's surely much better supported than TeaVM.
moksly 5y ago
It’s not Java in the browser, it’s the Java virtual environment required to run Java apps. If that’s not the JVM then my mistake.

deleted 5y ago

[deleted]

stickfigure 5y ago

Let me guess, you've standardized on Electron apps?

moksly 5y ago
Not exactly. Most of our apps are some form of client/server architecture which means most of them are moving to JavaScript clients, but typically it’s react, angular or vue.

barbarbar 5y ago

Which Scandinavian public sector? Sounds like you are talking about client side java - applets maybe?