Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!us.feeder.erje.net!news2.arglkargh.de!news.swapon.de!eternal-september.org!feeder.eternal-september.org!mx02.eternal-september.org!.POSTED!not-for-mail From: Jeff Higgins Newsgroups: comp.lang.java.programmer Subject: Re: Microsoft Spartan will support Applets Date: Sun, 29 Mar 2015 07:40:44 -0400 Organization: A noiseless patient Spider Lines: 28 Message-ID: References: <550b185d$0$2970$e4fe514c@news2.news.xs4all.nl> <5510c401$0$287$14726298@news.sunsite.dk> <551133f7$0$2953$e4fe514c@news.xs4all.nl> <5513cabf$0$2829$e4fe514c@news.xs4all.nl> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Injection-Date: Sun, 29 Mar 2015 11:41:17 +0000 (UTC) Injection-Info: mx02.eternal-september.org; posting-host="c50a9e5d554cfaba13eda1c71e805135"; logging-data="16045"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/ofnFObFFlOy7AnPeYeDoUJvBodk5i6/w=" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.5.0 In-Reply-To: Cancel-Lock: sha1:PWOhUlrXogXS4UbyO+nIaNIjBDw= Xref: csiph.com comp.lang.java.programmer:31402 On 03/29/2015 07:32 AM, Jeff Higgins wrote: > On 03/26/2015 08:13 AM, Eric Sosman wrote: >> On 3/26/2015 7:52 AM, Qu0ll wrote: >>> >>> JavaFX *does* have a new deployment strategy (installer packages with VM >>> included) and does an incredible amount of things that Swing could never >>> do and in a completely different and improved way. Plus, it now runs on >>> iOS, Android and Embedded platforms as well without any local JVM. >> >> Slight digression: By "without any local JVM" I guess you mean the >> JVM (or a required subset) is delivered along with the application. Is >> this safe? How do I know I'm not being handed an unpatched, out-of-date >> JVM? How do I know I'm not being handed a *hacked* JVM? >> >> Way back when, it was supposed to be safe to download and run Java >> code: The JVM that you yourself had installed to run it would police >> the safety of the downloaded code. The scheme was less than perfectly >> air-tight (ahem), but may have been slightly more secure than just >> downloading and running a random executable. Are you saying that the >> latter is now Oracle's preferred modus operandi? >> > Self-Contained Application Packaging > > Update to Java 8 Self-Contained Application Packaging