The fact remains that search result numbers are completely useless for estimating the security of a language. Even more so without quotes. * Search results sho

The fact remains that search result numbers are completely useless for estimating the security of a language. Even more so without quotes. * Search results show visibility on the web, nothing else. * Without quotes, it may mean that more people talk about Python security than Java security. Or about writing exploits in Python, not for for Python. * Java is extremely secure if it is run in the same place as Python, and not executing untrusted bytecode in a browser plugin. Nobody runs unknown Python code on their machines. Java vs. Flash. vs. Javascript makes more sense as a comparison, because all three are used for executing untrusted code. In other news, I get 1M search results for "bieber security exploit" and 27M for "google security exploit" without quotes. But I don't think Justin Bieber or Google have more security issues than Java browser plugins.