3 ms·
I guess you aren't aware of the dozens of 0-day exploits to the JVM that were released last year? Since Oracle took over, Java's security model is looking like
by eatmyshorts 13y ago
I guess you aren't aware of the dozens of 0-day exploits to the JVM that were released last year? Since Oracle took over, Java's security model is looking like Swiss cheese, Oracle's responsiveness to security flaws has been slow, and the fixes have introduced even more security flaws.
See here ( http://java-0day.com/ http://java-0day.com/ ) for some examples.
- tomjen3 13y agoI am away against attacks against the java applet executor, not against Java itself.
- eatmyshorts 13y agoThe problems weren't with the Java Applet executor. They were with the JVM. Java WebStart and the JVM security model are the two places where most of the 0-day exploits came. Neither of these have anything to do with applets.