Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!eternal-september.org!feeder.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: =?UTF-8?B?Sm9zaHVhIENyYW5tZXIg8J+Qpw==?= <Pidgeot18@verizon.invalid>
Newsgroups: comp.lang.java.programmer
Subject: Re: How to make my java applets more user friendly
Date: Fri, 11 Jul 2014 17:34:58 -0500
Organization: A noiseless patient Spider
Lines: 32
Message-ID: <lppora$r3l$1@dont-email.me>
References: <04c1fe18-b023-4f45-8fa3-3c2f78cba69e@googlegroups.com> <lp2h1b$pi3$1@dont-email.me> <00019c29-614d-4cfc-aca8-4606bee766dd@googlegroups.com> <lp3p8f$s8v$1@dont-email.me> <c2b3btFm296U1@mid.individual.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Fri, 11 Jul 2014 22:35:22 +0000 (UTC)
Injection-Info: mx05.eternal-september.org; posting-host="8cedddb29338592f734c41b16a68fadc"; logging-data="27765"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX19fvxjCRjgYcC0T66JlnCgKC7Wi/0PfGeM="
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.0
In-Reply-To: <c2b3btFm296U1@mid.individual.net>
Cancel-Lock: sha1:XUsEggnjXTfKv5MDBc3ZieqTdWM=
Xref: csiph.com comp.lang.java.programmer:29060

On 7/11/2014 4:30 PM, blmblm@myrealbox.com wrote:
> In article <lp3p8f$s8v$1@dont-email.me>,
> Eric Sosman  <esosman@comcast-dot-net.invalid> wrote:
>> On 7/3/2014 9:01 AM, w.tom.adams@gmail.com wrote:
>>> [...]
>>> One question I have is this:  Why is Javascript not as vulnerable as Java Applets?
>>
>>       Experts (I'm not one) have opined that the security models for
>> JavaScript and Java are fundamentally different.  JavaScript (they
>> say) was designed from its infancy to run in a browser's sandbox,
>> but Java is a fully-functional general-purpose language with a
>> sandbox bolted on afterwards.
>
> Hm!  I thought I had read, back when I first started learning Java
> (1998?), that one of the original design goals of the language was
> to provide just the kind of sandbox that would make it safe to run
> applets from possibly-untrustworthy sources, and its evoluation into
> a general-purpose language came later.  But I haven't researched
> the history, so you could be right.

Java was originally designed for *safety*, not *security*. According to 
Wikipedia, Java (the language) was originally designed to be used for 
programming smart appliances, and was basically meant to fix C++'s 
deficiencies, particularly its compatibility with horribly-unsafe C and 
its lack of portability. Apparently, they changed tack after cable 
companies decided they didn't want highly interactive set-top box 
platforms, and transitioned to trying to add interactivity to web-pages 
afterwards.

-- 
Beware of bugs in the above code; I have only proved it correct, not 
tried it. -- Donald E. Knuth