1) http://krebsonsecurity.com/2010/10/microsoft-a-tidal-wave-of-java-exploitation/ http://krebsonsecurity.com/2010/10/microsoft-a-tidal-wave-of... 2) http://ne

1) http://krebsonsecurity.com/2010/10/microsoft-a-tidal-wave-of-java-exploitation/ http://krebsonsecurity.com/2010/10/microsoft-a-tidal-wave-of... 2) http://news.cnet.com/8301-13579_3-57410476-37/apples-security-code-of-silence-a-big-problem/ http://news.cnet.com/8301-13579_3-57410476-37/apples-securit... 3) http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/ http://krebsonsecurity.com/2012/03/new-java-attack-rolled-in... Oracle has been irresponsible if not reckless on the security front; between them and Adobe, you have the source for most of the malware attacks out there. If a company sold locks to everyone in America, and failed to notice that their locks accepted any key, I'd like to think they'd be held accountable in some way for the ensuing wave of burglaries. I know, security isn't trivial. But if you're deploying software this widely, you have a duty to the public to hire yourself a security aware dev team and make half an effort.