Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.java.programmer > #33754
| From | Brixomatic <brixomatic@yahoo.com> |
|---|---|
| Newsgroups | comp.lang.java.programmer |
| Subject | Re: A very dark day indeed :-( |
| Date | 2016-02-10 22:39 +0100 |
| Organization | Aioe.org NNTP Server |
| Message-ID | <MPG.3125cc82db90e30b9896ac@news.aioe.org> (permalink) |
| References | <n99ukc$11o8$1@gioia.aioe.org> <n9a6fg$u1s$1@news2.informatik.uni-stuttgart.de> <JavaScript-20160208150210@ram.dialup.fu-berlin.de> |
In article <JavaScript-20160208150210@ram.dialup.fu-berlin.de>, Stefan Ram (ram@zedat.fu-berlin.de) says... > It is true that Java indeed had security defects. But the press decided > to make it the scapegoat while no one is allowed to mention the elephant > in the room: JavaScript. It always escaped me that Java Applets were blamed, while the ones to blame really were the browser vendors who had plugins, all of them, active by default. ActiveX got exploited because they did that, Flash was exploited because of the same reason, the Real Player was exploited because of this, Java was exploited this way, you name it: It got abused because it was executed automatically. The simple lesson was: Don't have plugins execute arbritrary code from the internet by default and without user notice. Simple as that. Got ignored for like 20 years, now they're removing their plugin interfaces alltogether and the next thing they'll do it have byte code executed by browser, as an alternative to Java Script, which is executing arbritrary code by default, worse: The browser doesn't even care that it's not signed. Which basically means they're sayng: If we can't get our plugins secure, let's execute the malware ourselves, oh and by the way: trust every code from the internet and never check if the code is the one that the author intended to run. Kind regards, Wanja -- ..Alesi's problem was that the back of the car was jumping up and down dangerously - and I can assure you from having been teammate to Jean Alesi and knowing what kind of cars that he can pull up with, when Jean Alesi says that a car is dangerous - it is. [Jonathan Palmer]
Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Find similar | Unroll thread
A very dark day indeed :-( Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2016-02-08 19:36 +0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 08:45 -0500
Re: A very dark day indeed :-( Thomas Richter <thor@math.tu-berlin.de> - 2016-02-08 14:50 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 12:37 -0500
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 12:55 -0500
Re: A very dark day indeed :-( Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2016-02-09 05:39 +0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 17:22 -0500
Re: A very dark day indeed :-( maherrj@googlemail.com - 2016-02-08 17:08 -0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 20:30 -0500
Re: A very dark day indeed :-( maherrj@googlemail.com - 2016-02-08 18:31 -0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 22:02 -0500
Re: A very dark day indeed :-( maherrj@googlemail.com - 2016-02-08 20:04 -0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:18 -0500
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:55 -0500
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-10 06:32 -0800
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-09 05:27 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-09 15:24 +0100
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-09 06:38 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-09 16:00 +0100
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-09 07:20 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-09 16:39 +0100
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-09 07:50 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-09 17:16 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:40 -0500
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-10 06:28 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-10 17:21 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-10 22:03 -0500
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-11 09:33 +0100
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-11 05:32 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-11 15:42 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-10 21:58 -0500
Re: A very dark day indeed :-( Nigel Wade <nmw@ion.le.ac.uk> - 2016-02-09 15:59 +0000
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-09 17:24 +0100
Re: A very dark day indeed :-( Nigel Wade <nmw@ion.le.ac.uk> - 2016-02-09 16:30 +0000
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-10 01:47 +0100
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-09 08:55 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-10 01:59 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:48 -0500
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-10 17:35 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-10 22:05 -0500
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-11 09:39 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:30 -0500
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:28 -0500
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:27 -0500
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-10 05:27 -0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-10 22:23 -0500
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-08 13:58 -0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 17:20 -0500
Re: A very dark day indeed :-( Thomas Richter <thor@math.tu-berlin.de> - 2016-02-08 19:44 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 14:06 -0500
Re: A very dark day indeed :-( Brixomatic <brixomatic@yahoo.com> - 2016-02-10 22:39 +0100
csiph-web