Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!eternal-september.org!feeder.eternal-september.org!mx02.eternal-september.org!.POSTED!not-for-mail From: Jeff Higgins Newsgroups: comp.lang.java.programmer Subject: Re: Microsoft Spartan will support Applets Date: Sun, 29 Mar 2015 07:32:43 -0400 Organization: A noiseless patient Spider Lines: 24 Message-ID: References: <550b185d$0$2970$e4fe514c@news2.news.xs4all.nl> <5510c401$0$287$14726298@news.sunsite.dk> <551133f7$0$2953$e4fe514c@news.xs4all.nl> <5513cabf$0$2829$e4fe514c@news.xs4all.nl> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Injection-Date: Sun, 29 Mar 2015 11:33:15 +0000 (UTC) Injection-Info: mx02.eternal-september.org; posting-host="c50a9e5d554cfaba13eda1c71e805135"; logging-data="14286"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+/z5y82xP4rGGY5G+SVWAx2/z7bVKivss=" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.5.0 In-Reply-To: Cancel-Lock: sha1:vHvUbnx9CuL2tpD3mWRQFqXHL2I= Xref: csiph.com comp.lang.java.programmer:31400 On 03/26/2015 08:13 AM, Eric Sosman wrote: > On 3/26/2015 7:52 AM, Qu0ll wrote: >> >> JavaFX *does* have a new deployment strategy (installer packages with VM >> included) and does an incredible amount of things that Swing could never >> do and in a completely different and improved way. Plus, it now runs on >> iOS, Android and Embedded platforms as well without any local JVM. > > Slight digression: By "without any local JVM" I guess you mean the > JVM (or a required subset) is delivered along with the application. Is > this safe? How do I know I'm not being handed an unpatched, out-of-date > JVM? How do I know I'm not being handed a *hacked* JVM? > > Way back when, it was supposed to be safe to download and run Java > code: The JVM that you yourself had installed to run it would police > the safety of the downloaded code. The scheme was less than perfectly > air-tight (ahem), but may have been slightly more secure than just > downloading and running a random executable. Are you saying that the > latter is now Oracle's preferred modus operandi? > Self-Contained Application Packaging