4 ms·

Aaaand that's why I don't have the Java plugin installed. Anywhere. I'd like to think that we're almost to the point of viewing Java in the same light as Bonzi

by jff 14y ago

Aaaand that's why I don't have the Java plugin installed. Anywhere. I'd like to think that we're almost to the point of viewing Java in the same light as Bonzi Buddy or Comet Cursor; IT discovers you got Java on your computer again, they just sigh and re-image it, with some stern warnings to please not download such sketchy software.

onedev 14y ago
Bonzi Buddy was my childhood computer hero.... Ahh to be 11yrs old again...
jacquesm 14y ago
There is a data room by a very large M&A group that requires you to install Java. I hate them with a passion because you can't really avoid them in my line of work so I end up having a VM just for them. Java as a requirement to access a document store for which you've already signed a pretty solid NDA is a real nuisance. Especially since it then ends up giving you download access through their applet anyway...
bilbo0s 14y ago
Java and Flash... I mean really ... how many zero day flaws does it take before people turn this stuff off?
jlgaddis 14y ago
I wish that were the case. Large companies tend to have important enterprise applications that require Java to run and, even worse, in some cases upgrading the version of Java on the user's desktop will break the application. You then end up with hundreds or thousands or users with vulnerable versions of Java on the PC that you can't upgrade until the software vendor fixes whatever is wrong with their application. I've seen it countless times at my previous job (.edu with 1000s of staff and faculty) where we were basically helpless to do anything because absolutely critical applications would break if we upgraded Java on the desktop. Solution: closely monitor traffic to/from user's PC's, hope for the best, and re-image when they inevitably got pwned. Before someone chimes in with the obvious "switch to a different application", it's not that easy when you have millions invested and training the user base sometimes takes months. Yeah, I hate Java.
- yuhong 14y ago
  Oracle BTW offers paid support for old Java versions long after they no longer release public updates. The Feb 2013 end of support date for 6.0 is for free support.
- pjmlp 14y ago
  > Yeah, I hate Java. What about C and C++ induced security holes?
  - canttestthis 14y ago
    Indeed. Compare the number of Java vulnerabilities (plugin vulnerabilities included) with the number caused due buffer overflows and such in C/C++.
hshshzjaj 14y ago
Don't forget rails. Is also crap.
pjmlp 14y ago
Do you have C and C++ dynamic libraries installed instead?

by jff 14y ago

onedev 14y ago

Bonzi Buddy was my childhood computer hero.... Ahh to be 11yrs old again...

jacquesm 14y ago

There is a data room by a very large M&A group that requires you to install Java. I hate them with a passion because you can't really avoid them in my line of work so I end up having a VM just for them. Java as a requirement to access a document store for which you've already signed a pretty solid NDA is a real nuisance. Especially since it then ends up giving you download access through their applet anyway...

bilbo0s 14y ago

Java and Flash... I mean really ... how many zero day flaws does it take before people turn this stuff off?

jlgaddis 14y ago

I wish that were the case. Large companies tend to have important enterprise applications that require Java to run and, even worse, in some cases upgrading the version of Java on the user's desktop will break the application. You then end up with hundreds or thousands or users with vulnerable versions of Java on the PC that you can't upgrade until the software vendor fixes whatever is wrong with their application. I've seen it countless times at my previous job (.edu with 1000s of staff and faculty) where we were basically helpless to do anything because absolutely critical applications would break if we upgraded Java on the desktop. Solution: closely monitor traffic to/from user's PC's, hope for the best, and re-image when they inevitably got pwned. Before someone chimes in with the obvious "switch to a different application", it's not that easy when you have millions invested and training the user base sometimes takes months. Yeah, I hate Java.

yuhong 14y ago
Oracle BTW offers paid support for old Java versions long after they no longer release public updates. The Feb 2013 end of support date for 6.0 is for free support.
pjmlp 14y ago
> Yeah, I hate Java. What about C and C++ induced security holes?
- canttestthis 14y ago
  Indeed. Compare the number of Java vulnerabilities (plugin vulnerabilities included) with the number caused due buffer overflows and such in C/C++.

hshshzjaj 14y ago

Don't forget rails. Is also crap.

pjmlp 14y ago

Do you have C and C++ dynamic libraries installed instead?