4 ms·
This is a misleading headline, since the article is referring to the security of old versions of Java. I guess "Outdated Software Contains Known Security Holes
by humbledrone 13y ago
This is a misleading headline, since the article is referring to the security of old versions of Java. I guess "Outdated Software Contains Known Security Holes and Will Probably Never be Patched, Experts Say" is not as catchy of a title.
How is this news? The more popular a piece of software is, and the longer a specific version of it has been in use, the more bugs will be found and exploited. Duh?
- bickfordb 13y agoI agree. I think this should be titled "Security alarmists (who have something to gain) issue another press release about an obvious problem"
- jared314 13y agoIt is alarmist and misleading, but it is also something that will continue to detract a new user's view of the JVM as a platform, like startup time. This is more a PR battle than anything else.
- jebblue 13y ago>> It is alarmist and misleading, but it is also something that will continue to detract a new user's view of the JVM as a platform, like startup time. No, it's just alarmist and mis-leading, the answer is upgrade. That's the answer for Java, Operating Systems (example Windows XP), Smart Phones, it's how software has worked for decades. There's nothing new about it. Someone got a wild hair and posted a sensationalist title that JavaScript people on HN would like and want to jump on.
- pekk 13y agoStartup time is a legitimate issue with the JVM...
- pjmlp 13y agoWhich JVM? There are plenty to choose from.
- sixbrx 13y agoThe one you have to use when you don't get to place all of the working code in jeopardy of not working in random places on your own initiative at the place that you work. WHich almost always means Sun's JDK or OpenJDK.
- pjmlp 13y agoThat can mean Oracle, IBM, Aonix, Azul, JamaicaVM, JRockit, HP-UX on my line of business. So again which one?
- sixbrx 13y agoI know there are a bunch of JVM's. Just trying to make the point that for most people in most organizations, there's really no choice in the matter, leaving only Oracle's JVM or the OpenJDK - due to the weight of potential compatibility issues, need for retesting, uncertainty about future support/viability, etc. That's a large organization for you, I'm sure it's different at smaller shops and I can envy that.
- pjmlp 13y agoFortune 500 consulting, average projects tend to be 3 development sites with offshore component, having around 30 to 100 developers on project. Typical enterprise stuff.
- SCdF 13y agoSo in terms of client-side startup it can become a pain, because if you're starting and stopping a jvm all the time you tend to feel it. You encounter these problems if: - People write unix-style tools on the JVM (imagine if ls was a Java program). Thankfully almost no one does this, but... - When you use tooling for things that involve JVM languages, such as Clojure's lein or Scala's sbt. Starting lein / sbt is annoyingly slow. Using Scalaiform to format scala code takes a noticeable chunk of time because it's booting up a jvm each time. So noticeable that as much as I'd like to have it happen every time I save a file it makes SublimeText way too choppy. This is less noticable on faster computers (my current work box is a i7 laptop with 12GB and an SSD) but on older computers it's still a real pain. Working with Clojure on a 2009MBP can be an exercise in frustration.
- gph 13y agoWhile I agree that the article is highly misleading, I don't think this is a complete non-issue. I imagine there are still a lot of organizations (especially those in developing countries) that have systems that were setup a decade or so ago with XP, IE7, Java5, etc. and haven't been properly upgraded.