4 ms·
The attack did stop at the Java process level. But once you're into that, you have the same privileges as anything else the user is running, by design. That's
by daeken 14y ago
The attack did stop at the Java process level. But once you're into that, you have the same privileges as anything else the user is running, by design. That's the same model taken by, well, every other OS out there effectively; it's not a problem as long as long as you have a separation of user account levels.
- illumen 14y agoYeah, most java apps do not use OS level security features. Which is a shame, since layers of security do actually help.
- dmm 14y agoInterestingly Android does use system users to isolate applications. The android vm, Dalvik, is completely different however.
- rwmj 14y ago"That's the same model taken by, well, every other OS out there" ... except SELinux.