3 ms·
I am willing to take my chances with the security record and response of the Chrome team over Adobe or Oracle's.
by drivebyacct2 14y ago
I am willing to take my chances with the security record and response of the Chrome team over Adobe or Oracle's.
- tsotha 14y agoPeople used to say the same thing about Java. When you can write a web app for Chrome that can do the same sorts of things applets can do, you're going to see the same sorts of exploits. The problem isn't that the Sun and Oracle people didn't know what they were doing. The problem is your opportunities for security problems scale with the amount of functionality you're delivering.
- drivebyacct2 14y agoYou can do almost anything you can do in an applet, now from NaCl/PNaCl or from Javascript (including TCP/UDP sockets, etc) when writing a Chrome CRX or CRX-less webapp that the user opts to install. Maybe you're right, we'll see. That having been said, again, with Chrome's track record, update schedule, update mechanics and more, I'm trusting them a huge factor more than Oracle. Also, keeping in mind that having different implementations across 2-3 major web browsers dampens the effect of having an exploit in one.