3 ms·
Practically nobody is exploitable! Only signed Java applets on a whitelist can be run: https://www.java.com/en/download/help/jcp_security.xml https://www.java.c
by iso8859-1 11y ago
Practically nobody is exploitable! Only signed Java applets on a whitelist can be run: https://www.java.com/en/download/help/jcp_security.xml https://www.java.com/en/download/help/jcp_security.xml
You must be either exaggerating or not up to date (not aware that not every applet is automatically run). I don't think anybody is getting harmed. What do you think a realistic attack scenario using Java applets looks like? You'll have to break RSA, or how are you going to fool the browser plugin to run your exploit?
- jessaustin 11y agoGGP comment observed that many people can't avoid using Java applets. Others have observed that the Java people have to use for applets is often quite old, so it is perhaps as old as the Java I used the last time I had to use Java applets. I'm sure that very few of us are "up to date"; that's kind of the point. Perhaps there are strange applet fetishists who keep their Java package installs at the bleeding edge of postmodern Java applet specialness. Even so, forcing normal people to use Java applets is harming your users, because normal people turn it off.