4 ms·
I have heard some security researchers are not pleased with Oracles security fix response time. Other people feel the JVM is highly targeted. Or has more secur
by voidlogic 14y ago
I have heard some security researchers are not pleased with Oracles security fix response time.
Other people feel the JVM is highly targeted. Or has more security bugs than it should. Or is too bloated for the limited services they use it for and could be smaller and this present a smaller target. etc
I'm not saying these concerns are necessarily valid, but I have had customers who had no JVM rules...
- tptacek 14y agoYou are confusing the Java applet sandbox with the JVM. Serverside JVM applications don't try to safely execute arbitrary JVM opcodes from random Internet hosts.
- voidlogic 14y ago"You are confusing the Java applet sandbox with the JVM" I tried to be clear I was expressing common views customers and people I have interacted with have expressed, not my own. In the context of marketing, perception matters. But I hope you are not saying the server side JVM has never has security bugs..