Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.sys.mac.apps > #36851
| From | Peter Köhlmann <peter-koehlmann@t-online.de> |
|---|---|
| Newsgroups | comp.sys.mac.apps |
| Subject | Re: Java - To install or not to install |
| Date | 2016-10-10 13:19 +0200 |
| Organization | DNLA GmbH |
| Message-ID | <ntftfm$e0j$1@dont-email.me> (permalink) |
| References | (2 earlier) <slrnnvl0iq.1c6r.g.kreme@snow.local> <0001HW.D420D55D03097354B02919BF@news.astraweb.com> <1muwjhb.pcrr751ppf7reN%befr@eaglesoft.de> <ntfq83$1jk$3@dont-email.me> <1muwm6k.888v16mrz9eoN%befr@eaglesoft.de> |
Bernd Fröhlich wrote: > Peter Köhlmann <peter-koehlmann@t-online.de> wrote: > >> > Because a Java program can be executed from the browser (if you allow >> > it), so any website you visit can exploit a java bug. >> >> This is bullshit. A Java *applet* can be executed from the browser. And >> only when it is signed. And even then the user is asked if it should be >> executed >> >> A "normal" Java program can *not* be executed from the browser >> >> > A C++ program can´t be executed from the browser. >> >> The same as with a Java program >> >> > So having Java installed is not really a problem as long as you don´t >> > enable it in your browser. >> >> You don't enable "Java programs" in the browser. You enable Java applets >> Big difference. > > > Sorry if I used a wrong word, we mean the same thing. > > Whether you call it "program", "applet", "application", "script", > "code", "executable" or anything else, what I meant was: a java-thing > (whatever you call it) can be executed from a browser while a C++-thing > can´t. While this is (somewhat) true, a Java installed locally is not more a security threat than any other programming environment, like C++ for example. Because a intruder needs to have established access to the machine in order to exploit any bugs which may be present. So security is already broken at that point, with or without Java. Instead of thinking about Java as "security risk" it would be wiser to think about real risks, like PHP installed. PHP has much more security holes than Java ever had. And PHP programs *can* be executed from within the browser. Other *real* risks are MS Office documents with embedded Macros.
Back to comp.sys.mac.apps | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Java - To install or not to install gtr <xxx@yyy.zzz> - 2016-10-08 09:20 -0700
Re: Java - To install or not to install Jolly Roger <jollyroger@pobox.com> - 2016-10-08 16:25 +0000
Re: Java - To install or not to install gtr <xxx@yyy.zzz> - 2016-10-08 11:56 -0700
Re: Java - To install or not to install gtr <xxx@yyy.zzz> - 2016-10-08 11:59 -0700
Re: Java - To install or not to install Jolly Roger <jollyroger@pobox.com> - 2016-10-08 19:37 +0000
Re: Java - To install or not to install gtr <xxx@yyy.zzz> - 2016-10-08 13:53 -0700
Re: Java - To install or not to install Michael Vilain <mev94303y@yahoo.com> - 2016-10-08 14:01 -0700
Re: Java - To install or not to install dorayme <do_ray_me@bigpond.com> - 2016-10-09 11:42 +1100
Re: Java - To install or not to install gtr <xxx@yyy.zzz> - 2016-10-08 17:46 -0700
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-08 14:13 -0500
Re: Java - To install or not to install Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-08 20:22 +0000
Re: Java - To install or not to install Calum <com.gmail@nospam.scottishwildcat> - 2016-10-28 20:30 +0100
Re: Java - To install or not to install Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-29 04:11 +0000
Re: Java - To install or not to install Larry Gusaas <larry.gusaas@gmail.com> - 2016-10-28 22:33 -0600
Re: Java - To install or not to install dorayme <do_ray_me@bigpond.com> - 2016-10-09 11:41 +1100
Re: Java - To install or not to install Davoud <star@sky.net> - 2016-10-08 21:20 -0400
Re: Java - To install or not to install Barry Margolin <barmar@alum.mit.edu> - 2016-10-08 23:43 -0400
Re: Java - To install or not to install Jolly Roger <jollyroger@pobox.com> - 2016-10-09 04:24 +0000
Re: Java - To install or not to install Davoud <star@sky.net> - 2016-10-09 10:59 -0400
Re: Java - To install or not to install Tim Streater <timstreater@greenbee.net> - 2016-10-09 16:41 +0100
Re: Java - To install or not to install Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-09 18:21 +0200
Re: Java - To install or not to install Tim Streater <timstreater@greenbee.net> - 2016-10-09 17:40 +0100
Re: Java - To install or not to install Barry Margolin <barmar@alum.mit.edu> - 2016-10-10 12:43 -0400
Re: Java - To install or not to install nospam <nospam@nospam.invalid> - 2016-10-09 12:47 -0400
Re: Java - To install or not to install Tim Streater <timstreater@greenbee.net> - 2016-10-09 18:45 +0100
Re: Java - To install or not to install gtr <xxx@yyy.zzz> - 2016-10-09 11:37 -0700
Re: Java - To install or not to install nospam <nospam@nospam.invalid> - 2016-10-09 14:40 -0400
Re: Java - To install or not to install Jolly Roger <jollyroger@pobox.com> - 2016-10-09 23:02 +0000
Re: Java - To install or not to install Phillip Jones <pjonescet@comcast.net> - 2016-10-09 19:39 -0400
Re: Java - To install or not to install befr@eaglesoft.de (Bernd Fröhlich) - 2016-10-10 09:11 +0200
Re: Java - To install or not to install gtr <xxx@yyy.zzz> - 2016-10-16 15:42 -0700
Re: Java - To install or not to install Michael Vilain <mev94303y@yahoo.com> - 2016-10-16 22:20 -0700
Re: Java - To install or not to install Paul Sture <nospam@sture.ch> - 2016-10-15 13:44 +0200
Re: Java - To install or not to install Tim Streater <timstreater@greenbee.net> - 2016-10-15 13:37 +0100
Re: Java - To install or not to install Paul Sture <nospam@sture.ch> - 2016-10-15 17:44 +0200
Re: Java - To install or not to install Jolly Roger <jollyroger@pobox.com> - 2016-10-15 15:54 +0000
Re: Java - To install or not to install Alan Browne <alan.browne@freelunchvideotron.ca> - 2016-10-09 15:12 -0400
Re: Java - To install or not to install gtr <xxx@yyy.zzz> - 2016-10-09 16:29 -0700
Re: Java - To install or not to install Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-10 05:39 +0000
Re: Java - To install or not to install Tim Streater <timstreater@greenbee.net> - 2016-10-10 09:05 +0100
Re: Java - To install or not to install dorayme <do_ray_me@bigpond.com> - 2016-10-10 09:59 +1100
Re: Java - To install or not to install gtr <xxx@yyy.zzz> - 2016-10-09 16:30 -0700
Re: Java - To install or not to install dorayme <do_ray_me@bigpond.com> - 2016-10-10 14:12 +1100
Re: Java - To install or not to install dorayme <do_ray_me@bigpond.com> - 2016-10-10 09:57 +1100
Re: Java - To install or not to install Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-09 17:47 +0000
Re: Java - To install or not to install Michael Vilain <mev94303y@yahoo.com> - 2016-10-09 16:47 -0700
Re: Java - To install or not to install Barry Margolin <barmar@alum.mit.edu> - 2016-10-10 12:40 -0400
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-10 17:30 -0500
Re: Java - To install or not to install Barry Margolin <barmar@alum.mit.edu> - 2016-10-12 11:28 -0400
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-12 11:58 -0500
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-09 13:22 -0500
Re: Java - To install or not to install Paul Sture <nospam@sture.ch> - 2016-10-15 13:36 +0200
Re: Java - To install or not to install Nelson <nelson@nowhere.com> - 2016-10-09 09:51 -0400
Re: Java - To install or not to install Tim Streater <timstreater@greenbee.net> - 2016-10-09 15:48 +0100
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-09 13:24 -0500
Re: Java - To install or not to install Tim Streater <timstreater@greenbee.net> - 2016-10-09 19:53 +0100
Re: Java - To install or not to install dorayme <do_ray_me@bigpond.com> - 2016-10-10 09:55 +1100
Re: Java - To install or not to install Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-09 17:45 +0000
Re: Java - To install or not to install Nelson <nelson@nowhere.com> - 2016-10-10 05:19 -0400
Re: Java - To install or not to install Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-10 11:51 +0200
Re: Java - To install or not to install befr@eaglesoft.de (Bernd Fröhlich) - 2016-10-10 11:51 +0200
Re: Java - To install or not to install Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-10 12:24 +0200
Re: Java - To install or not to install befr@eaglesoft.de (Bernd Fröhlich) - 2016-10-10 12:51 +0200
Re: Java - To install or not to install Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-10 13:19 +0200
Re: Java - To install or not to install Tim Streater <timstreater@greenbee.net> - 2016-10-10 13:03 +0100
Re: Java - To install or not to install Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-10 14:29 +0200
Re: Java - To install or not to install Tim Streater <timstreater@greenbee.net> - 2016-10-10 14:03 +0100
Re: Java - To install or not to install befr@eaglesoft.de (Bernd Fröhlich) - 2016-10-10 15:27 +0200
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-10 17:43 -0500
Re: Java - To install or not to install Barry Margolin <barmar@alum.mit.edu> - 2016-10-10 12:49 -0400
Re: Java - To install or not to install Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-10 13:41 +0000
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-10 17:38 -0500
Re: Java - To install or not to install Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-10 23:18 +0000
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-11 17:30 -0500
Re: Java - To install or not to install Barry Margolin <barmar@alum.mit.edu> - 2016-10-12 11:26 -0400
Re: Java - To install or not to install Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-12 16:45 +0000
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-12 12:06 -0500
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-12 12:17 -0500
Re: Java - To install or not to install "Happy.Hobo" <Happy.Hobo@Spam.Invalid> - 2016-10-12 12:05 -0500
Re: Java - To install or not to install dorayme <do_ray_me@bigpond.com> - 2016-10-11 09:50 +1100
Re: Java - To install or not to install Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-10 13:38 +0000
Re: Java - To install or not to install Barry Margolin <barmar@alum.mit.edu> - 2016-10-10 12:51 -0400
Re: Java - To install or not to install Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-10 23:16 +0000
csiph-web