3 ms·
It's an improvement because all applets will by default not run at all, and most users don't need to use any applets and thus will not in fact be trained to agr
by brazzy 13y ago
It's an improvement because all applets will by default not run at all, and most users don't need to use any applets and thus will not in fact be trained to agree to run applets.
Basically, it acknowledges that the Java sandbox is as leaky as a sieve and that securitywide, running an applet not much different from downloading and running a regular executable file, so you should only do it if you trust the source.
- 0x0 13y agoIt's a shame if poorly written applets end up being signed cluelessly. At least the sandbox used to prevent accidents, if not malicious code. Plenty of things like "lights-out" server admin tools seem to ship with semi-dodgy applets for KVM stuff etc.