Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.java.programmer > #33679
| From | Arne Vajhøj <arne@vajhoej.dk> |
|---|---|
| Newsgroups | comp.lang.java.programmer |
| Subject | Re: A very dark day indeed :-( |
| Date | 2016-02-08 12:37 -0500 |
| Organization | Aioe.org NNTP Server |
| Message-ID | <n9ajpe$a8m$1@gioia.aioe.org> (permalink) |
| References | <n99ukc$11o8$1@gioia.aioe.org> <n9a6fg$u1s$1@news2.informatik.uni-stuttgart.de> <JavaScript-20160208150210@ram.dialup.fu-berlin.de> |
On 2/8/2016 9:04 AM, Stefan Ram wrote: > Thomas Richter <thor@math.tu-berlin.de> writes: >> What I do not understand is how Java applets can be insecure and at the >> same time, Java webstart is supposed to be secure. In the end, it's all >> the same java virtual machine behind it, with the same security problems >> and the same issues to begin with. > > It is true that Java indeed had security defects. But the press decided > to make it the scapegoat while no one is allowed to mention the elephant > in the room: JavaScript. Anything allowing code downloaded from the internet to be executed locally has the potential for having security problems. They depend on various mechanisms (sandbox, same origin policy etc.) to be secure. But those mechanisms are implemented in software written by humans. So they are not perfect. > Before I append my usual JavaScript security rant, I'd like to mention > that I believe that technically it should be possible to detect applet tags > with JavaScript, read the class files in JavaScript and execute them > with an JVM written in JavaScript, where a canvas element can be used > to actually implement the visible area of the applet. (GWT is already > doing something similar.) Possible, but I doubt performance is good. But anyone can try it out. It exists. https://github.com/Jivings/jsJVM http://plasma-umass.github.io/doppio-demo/ Arne
Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
A very dark day indeed :-( Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2016-02-08 19:36 +0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 08:45 -0500
Re: A very dark day indeed :-( Thomas Richter <thor@math.tu-berlin.de> - 2016-02-08 14:50 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 12:37 -0500
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 12:55 -0500
Re: A very dark day indeed :-( Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2016-02-09 05:39 +0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 17:22 -0500
Re: A very dark day indeed :-( maherrj@googlemail.com - 2016-02-08 17:08 -0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 20:30 -0500
Re: A very dark day indeed :-( maherrj@googlemail.com - 2016-02-08 18:31 -0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 22:02 -0500
Re: A very dark day indeed :-( maherrj@googlemail.com - 2016-02-08 20:04 -0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:18 -0500
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:55 -0500
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-10 06:32 -0800
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-09 05:27 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-09 15:24 +0100
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-09 06:38 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-09 16:00 +0100
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-09 07:20 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-09 16:39 +0100
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-09 07:50 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-09 17:16 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:40 -0500
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-10 06:28 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-10 17:21 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-10 22:03 -0500
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-11 09:33 +0100
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-11 05:32 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-11 15:42 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-10 21:58 -0500
Re: A very dark day indeed :-( Nigel Wade <nmw@ion.le.ac.uk> - 2016-02-09 15:59 +0000
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-09 17:24 +0100
Re: A very dark day indeed :-( Nigel Wade <nmw@ion.le.ac.uk> - 2016-02-09 16:30 +0000
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-10 01:47 +0100
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-09 08:55 -0800
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-10 01:59 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:48 -0500
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-10 17:35 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-10 22:05 -0500
Re: A very dark day indeed :-( Silvio <silvio@internet.com> - 2016-02-11 09:39 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:30 -0500
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:28 -0500
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-09 20:27 -0500
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-10 05:27 -0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-10 22:23 -0500
Re: A very dark day indeed :-( Eric Douglas <e.d.programmer@gmail.com> - 2016-02-08 13:58 -0800
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 17:20 -0500
Re: A very dark day indeed :-( Thomas Richter <thor@math.tu-berlin.de> - 2016-02-08 19:44 +0100
Re: A very dark day indeed :-( Arne Vajhøj <arne@vajhoej.dk> - 2016-02-08 14:06 -0500
Re: A very dark day indeed :-( Brixomatic <brixomatic@yahoo.com> - 2016-02-10 22:39 +0100
csiph-web