I don't think there's anything about Java the language, any more than any plugin. It is the development and deployment methodology that is dated. Oracle (and t

I don't think there's anything about Java the language, any more than any plugin. It is the development and deployment methodology that is dated. Oracle (and the same went for Sun) issues updates on a scale of months. I think this is now turning out to be an unviable strategy for any platform that has to survive in the wild and run untrusted code. It's hard to swallow, but we have to accept: 1. Completely secure code is extraordinarily expensive and difficult to write. All cost effective software is going to contain vulnerabilities 2. The only path to security is aggressive discovery and disclosure followed up with an immediate patch and deploy mechanism This is the new model which Chrome and various other end-user-facing software is running - silent, rapid updates and a product engineered from the ground up to support that without major regressions. Anybody who wants to be a player in the browser market basically has to adopt this model. If Oracle cares about retaining any presence of their browser plugin in modern browsers they need to drastically change course - but I'm not sure they do.