Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #28210

Re: Java vs JavaScript

Show all headers | View raw

On 4/24/2014 10:22 AM, Arne Vajhøj wrote:
> On 4/23/2014 11:39 AM, Roedy Green wrote:
>> I have always thought the Java sandbox was so restrictive, there was
>> nothing a user need worry about. There is no way an unsigned applet
>> could do any damage.
>
> That is true assuming there are no bugs in the Java applet security
> implementation.
>
> I think they have found 200-300 bugs during the last 2-3 years.

So what? How does the imapact-meter rate with the likes of Heart-Bleed 
and OpenSSL?
>
>> But Oracle and the browsers are acting like unsigned Applets are
>> highly dangerous, making you do override after override to run them.
>
> If a bug in Java allows an unsigned applet to gain privs, then it is
> extremely dangerous as a malicious site could run a 1 pixel applet
> that infected the PC without the user not even knowing that Java was
> running.

You don't need a 1px applet; 0x0 is just fine. Once again, look at the 
following link to BSD Socket functionality and Contacts lookup and so on 
and then ask the Applet Slaggers to shut their fucking mouths!

https://wiki.mozilla.org/WebAPI
>
> Apparently Oracle does no longer believe that they can fix all
> security bugs.

Just the incompetent people they've hired.

>
> Given the recent history, then that seems realistic.

Given you're a knob I need not respond.
>
>> On the other hand I don't think JavaScript has any sort of sandbox at
>> all, and everyone blissfully runs scripts that can do anything.
>
> Not true.
>
> JavaScript is sandboxed and has about the same access as an unsigned
> applet.

Wake up to modern Web-Apps!

>
> And because there are no concept of signed JavaScript with granted
> privs then it is probably easier to avoid bugs as the code must be
> a lot simpler.
>
>> Why the double standard? Is JavaScript safer than I thought?
>
> There has been found plenty of JavaScript bugs over the years.
>
> But JavaScript has done better than Java in recent years.

There are none so blind as those who will not see.

>
> Arne
>

Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Java vs JavaScript Roedy Green <see_website@mindprod.com.invalid> - 2014-04-23 08:39 -0700
  Re: Java vs JavaScript markspace <markspace@nospam.nospam> - 2014-04-23 09:10 -0700
  Re: Java vs JavaScript Joshua Cranmer 🐧 <Pidgeot18@verizon.invalid> - 2014-04-23 15:48 -0500
  Re: Java vs JavaScript Silvio <silvio@internet.com> - 2014-04-23 23:36 +0200
    Re: Java vs JavaScript "Chris Uppal" <chris.uppal@metagnostic.REMOVE-THIS.org> - 2014-04-27 12:20 +0100
      Re: Java vs JavaScript Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2014-04-27 20:05 +0800
      Re: Java vs JavaScript Joerg Meier <joergmmeier@arcor.de> - 2014-04-27 22:55 +0200
      Re: Java vs JavaScript "Chris Uppal" <chris.uppal@metagnostic.REMOVE-THIS.org> - 2014-05-01 08:52 +0100
        Re: Java vs JavaScript Silvio <silvio@internet.com> - 2014-05-01 10:26 +0200
          Re: Java vs JavaScript Gene Wirchenko <genew@telus.net> - 2014-05-01 14:10 -0700
            Re: Java vs JavaScript Silvio <silvio@internet.com> - 2014-05-02 11:10 +0200
              Re: Java vs JavaScript Gene Wirchenko <genew@telus.net> - 2014-05-02 10:20 -0700
                Re: Java vs JavaScript Joerg Meier <joergmmeier@arcor.de> - 2014-05-02 20:16 +0200
                Re: Java vs JavaScript "Chris Uppal" <chris.uppal@metagnostic.REMOVE-THIS.org> - 2014-05-04 10:38 +0100
                Re: Java vs JavaScript Joshua Cranmer 🐧 <Pidgeot18@verizon.invalid> - 2014-05-05 00:16 -0500
                Re: Java vs JavaScript Tim Slattery <tim@risingdove.com> - 2014-05-06 13:06 -0400
                Re: Java vs JavaScript Joshua Cranmer 🐧 <Pidgeot18@verizon.invalid> - 2014-05-06 12:40 -0500
            Re: Java vs JavaScript Simon Lewis <simonlewis2001@gmail.com> - 2014-05-02 12:53 +0200
          Re: Java vs JavaScript Arne Vajhøj <arne@vajhoej.dk> - 2014-05-01 21:16 -0400
            Re: Java vs JavaScript Silvio <silvio@internet.com> - 2014-05-02 11:17 +0200
  Re: Java vs JavaScript Arne Vajhøj <arne@vajhoej.dk> - 2014-04-23 22:22 -0400
    Re: Java vs JavaScript Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2014-04-24 16:20 +0800
      Re: Java vs JavaScript Arne Vajhøj <arne@vajhoej.dk> - 2014-04-29 21:07 -0400
  Re: Java vs JavaScript Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2014-04-24 16:15 +0800
    Re: Java vs JavaScript lipska the kat <lipskathekat@example.com> - 2014-04-27 09:00 +0100
      Re: Java vs JavaScript Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2014-04-27 20:15 +0800
        Re: Java vs JavaScript lipska the kat <lipskathekat@example.com> - 2014-04-27 16:59 +0100
  Re: Java vs JavaScript Ray Osborne <rko153@gmail.com> - 2014-05-22 05:08 -0700

csiph-web