Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.java.programmer > #21465

Re: U.S. warns on Java software as security concerns escalate

From Joshua Cranmer <Pidgeot18@verizon.invalid>
Newsgroups comp.lang.java.programmer
Subject Re: U.S. warns on Java software as security concerns escalate
Date 2013-01-16 21:55 -0600
Organization A noiseless patient Spider
Message-ID <kd7sns$bjl$1@dont-email.me> (permalink)
References <kcrlqe$noj$1@speranza.aioe.org> <kd2lhe$roc$1@speranza.aioe.org> <bflbf8hjjkajgd7opk4vn167dsmtst6m1e@4ax.com> <kd7hn0$jls$1@speranza.aioe.org>

Show all headers | View raw


On 1/16/2013 6:47 PM, Rajiv Gupta wrote:
> Contrast this with the sandboxing model the CLR uses, where access
> grants can only originate from outside of the VM -- it is impossible, by
> design, for managed code to enable grants that the VM itself was not
> externally configured to provide.

You clearly do not understand the Java security management policy. It is 
very much possible to request JVMs to lock down the policy in such a way 
that the JVM cannot grant itself access. But why let facts get in the 
way of attacking Java?

-- 
Beware of bugs in the above code; I have only proved it correct, not 
tried it. -- Donald E. Knuth

Back to comp.lang.java.programmer | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

U.S. warns on Java software as security concerns escalate emf <emfril@gmail.com> - 2013-01-12 07:48 -0500
  Re: U.S. warns on Java software as security concerns escalate Arne Vajhøj <arne@vajhoej.dk> - 2013-01-12 09:05 -0500
    Re: U.S. warns on Java software as security concerns escalate RVic <rvince99@hotmail.com> - 2013-01-12 08:00 -0800
      Re: U.S. warns on Java software as security concerns escalate Arne Vajhøj <arne@vajhoej.dk> - 2013-01-12 11:23 -0500
  Re: U.S. warns on Java software as security concerns escalate Peter Duniho <NpOeStPeAdM@NnOwSlPiAnMk.com> - 2013-01-12 10:28 -0800
  Re: U.S. warns on Java software as security concerns escalate Roedy Green <see_website@mindprod.com.invalid> - 2013-01-12 10:38 -0800
    Re: U.S. warns on Java software as security concerns escalate Arne Vajhøj <arne@vajhoej.dk> - 2013-01-12 13:41 -0500
  Re: U.S. warns on Java software as security concerns escalate "Hiram Hunt" <hiramhunt@verizon.net> - 2013-01-13 15:41 -0500
  Re: U.S. warns on Java software as security concerns escalate Rajiv Gupta <rajiv@invalid.com> - 2013-01-15 15:22 +1100
    Re: U.S. warns on Java software as security concerns escalate Lew <lewbloch@gmail.com> - 2013-01-15 07:31 -0800
    Re: U.S. warns on Java software as security concerns escalate Roedy Green <see_website@mindprod.com.invalid> - 2013-01-15 14:23 -0800
      Re: U.S. warns on Java software as security concerns escalate Arne Vajhøj <arne@vajhoej.dk> - 2013-01-15 21:10 -0500
      Re: U.S. warns on Java software as security concerns escalate Rajiv Gupta <rajiv@invalid.com> - 2013-01-17 11:47 +1100
        Re: U.S. warns on Java software as security concerns escalate Lew <lewbloch@gmail.com> - 2013-01-16 17:01 -0800
          Re: U.S. warns on Java software as security concerns escalate Rajiv Gupta <rajiv@invalid.com> - 2013-01-17 14:50 +1100
            Re: U.S. warns on Java software as security concerns escalate Roedy Green <see_website@mindprod.com.invalid> - 2013-01-17 14:31 -0800
        Re: U.S. warns on Java software as security concerns escalate Joshua Cranmer <Pidgeot18@verizon.invalid> - 2013-01-16 21:55 -0600
        Re: U.S. warns on Java software as security concerns escalate Roedy Green <see_website@mindprod.com.invalid> - 2013-01-17 14:57 -0800
      Re: U.S. warns on Java software as security concerns escalate Jim Janney <jjanney@shell.xmission.com> - 2013-01-17 12:36 -0700
        Re: U.S. warns on Java software as security concerns escalate Roedy Green <see_website@mindprod.com.invalid> - 2013-01-17 14:33 -0800
        Re: U.S. warns on Java software as security concerns escalate Arne Vajhøj <arne@vajhoej.dk> - 2013-01-17 18:14 -0500
        Re: U.S. warns on Java software as security concerns escalate Arne Vajhøj <arne@vajhoej.dk> - 2013-01-17 18:16 -0500
  Re: U.S. warns on Java software as security concerns escalate Roedy Green <see_website@mindprod.com.invalid> - 2013-01-15 00:23 -0800
    Re: U.S. warns on Java software as security concerns escalate Patricia Shanahan <pats@acm.org> - 2013-01-15 06:47 -0800
      Re: U.S. warns on Java software as security concerns escalate Roedy Green <see_website@mindprod.com.invalid> - 2013-01-15 14:34 -0800

csiph-web