Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #29751 > unrolled thread

JDK 1.8.0_20 and JDK 1.7.0_67 released

Back to article view | Back to comp.lang.java.programmer

Contents

  JDK 1.8.0_20 and JDK 1.7.0_67 released Roedy Green <see_website@mindprod.com.invalid> - 2014-08-19 17:32 -0700
    Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Roedy Green <see_website@mindprod.com.invalid> - 2014-08-19 18:47 -0700
      Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Wayne <nospam@all.invalid> - 2014-08-19 23:24 -0400
        Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Roedy Green <see_website@mindprod.com.invalid> - 2014-08-19 20:54 -0700
          Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Wayne <nospam@all.invalid> - 2014-08-20 09:24 -0400
        Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Roedy Green <see_website@mindprod.com.invalid> - 2014-08-21 00:20 -0700
          Re: JDK 1.8.0_20 and JDK 1.7.0_67 released thinbluernime <thinbluernime3@gmail.com> - 2014-08-21 15:11 +0000
          Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Arne Vajhøj <arne@vajhoej.dk> - 2014-08-22 16:10 -0400
            Re: JDK 1.8.0_20 and JDK 1.7.0_67 released "Chris Uppal" <chris.uppal@metagnostic.REMOVE-THIS.org> - 2014-08-23 02:18 +0100
              Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Arne Vajhøj <arne@vajhoej.dk> - 2014-08-22 21:32 -0400
          Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Arne Vajhøj <arne@vajhoej.dk> - 2014-08-22 16:10 -0400
        Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Roedy Green <see_website@mindprod.com.invalid> - 2014-08-21 00:20 -0700
          Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Wayne <nospam@all.invalid> - 2014-08-21 23:54 -0400
      Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Jan Burse <janburse@fastmail.fm> - 2014-08-21 10:18 +0200
        Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Wayne <nospam@all.invalid> - 2014-08-21 05:37 -0400
          Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Jan Burse <janburse@fastmail.fm> - 2014-08-21 11:43 +0200
        Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Arne Vajhøj <arne@vajhoej.dk> - 2014-08-22 16:12 -0400
    Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Roedy Green <see_website@mindprod.com.invalid> - 2014-08-20 00:32 -0700
      Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Arne Vajhøj <arne@vajhoej.dk> - 2014-08-20 09:45 -0400
        Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Roedy Green <see_website@mindprod.com.invalid> - 2014-08-20 08:22 -0700
        Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Roedy Green <see_website@mindprod.com.invalid> - 2014-08-20 08:28 -0700
          Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Arne Vajhøj <arne@vajhoej.dk> - 2014-08-20 13:20 -0400
          Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Joerg Meier <joergmmeier@arcor.de> - 2014-08-21 01:53 +0200
            Re: JDK 1.8.0_20 and JDK 1.7.0_67 released markspace <markspace@nospam.nospam> - 2014-08-21 08:42 -0700
        Re: JDK 1.8.0_20 and JDK 1.7.0_67 released Roedy Green <see_website@mindprod.com.invalid> - 2014-08-20 09:39 -0700

Page 1 of 2  [1] 2  Next page →

#29751 — JDK 1.8.0_20 and JDK 1.7.0_67 released

JDK 1.8.0_20 and JDK 1.7.0_67 were just released.

changes at
http://www.oracle.com/technetwork/java/javase/8u20-relnotes-2257729.html#newft

The most important is medium security is gone. 
-- 
Roedy Green Canadian Mind Products http://mindprod.com
Errors using inadequate data are much less than those using no data at all. 
~ Charles Babbage (born: 1791-12-26 died: 1871-10-18 at age: 79)

[toc] | [next] | [standalone]

#29752

On Tue, 19 Aug 2014 17:32:32 -0700, Roedy Green
<see_website@mindprod.com.invalid> wrote, quoted or indirectly quoted
someone who said :

>changes at
>http://www.oracle.com/technetwork/java/javase/8u20-relnotes-2257729.html#newft
>
>The most important is medium security is gone. 

They have changed the name of the directory where the JRE is
installed.  It used to be: 
  C:\Program Files\Java\jre8
now it is: 
  C:\Program Files\Java\jre1.8.0_20
-- 
Roedy Green Canadian Mind Products http://mindprod.com
Errors using inadequate data are much less than those using no data at all. 
~ Charles Babbage (born: 1791-12-26 died: 1871-10-18 at age: 79)

[toc] | [prev] | [next] | [standalone]

#29753

On 8/19/2014 9:47 PM, Roedy Green wrote:
> On Tue, 19 Aug 2014 17:32:32 -0700, Roedy Green
> <see_website@mindprod.com.invalid> wrote, quoted or indirectly quoted
> someone who said :
> 
>> changes at
>> http://www.oracle.com/technetwork/java/javase/8u20-relnotes-2257729.html#newft
>>
>> The most important is medium security is gone. 
> 
> They have changed the name of the directory where the JRE is
> installed.  It used to be: 
>   C:\Program Files\Java\jre8
> now it is: 
>   C:\Program Files\Java\jre1.8.0_20
> 

I believe that's how Sun originally had it, but changed it due
to complaints that it made setting PATH and using auto-JRE updates
incompatible.

In lieu of medium security, you now get to white-list specific URLs.
However, note you cannot (as of now) white-list any IPv6 addresses.
Also, you need to white-list both the domain name and the IP address;
white-listing one doesn't imply white-listing the other.

For testing locally, you probably need to set the white-list
(add to the "exception list") to include:

   http://localhost
   http://localhost.localdomain
   http://127.0.0.1
   https://localhost
   https://localhost.localdomain
   https://127.0.0.1
   file:///

(Note, you get warnings about using HTTP or FILE protocols.)

-- 
Wayne

[toc] | [prev] | [next] | [standalone]

#29755

On Tue, 19 Aug 2014 23:24:28 -0400, Wayne <nospam@all.invalid> wrote,
quoted or indirectly quoted someone who said :

>For testing locally, you probably need to set the white-list
>(add to the "exception list") to include:

What file to you put these exceptions in?
-- 
Roedy Green Canadian Mind Products http://mindprod.com
Errors using inadequate data are much less than those using no data at all. 
~ Charles Babbage (born: 1791-12-26 died: 1871-10-18 at age: 79)

[toc] | [prev] | [next] | [standalone]

#29763

On 8/19/2014 11:54 PM, Roedy Green wrote:
> On Tue, 19 Aug 2014 23:24:28 -0400, Wayne <nospam@all.invalid> wrote,
> quoted or indirectly quoted someone who said :
> 
>> For testing locally, you probably need to set the white-list
>> (add to the "exception list") to include:
> 
> What file to you put these exceptions in?
> 

<http://docs.oracle.com/javase/8/docs/technotes/guides/deploy/exception_site_list.html>

-- 
Wayne

[toc] | [prev] | [next] | [standalone]

#29776

On Tue, 19 Aug 2014 23:24:28 -0400, Wayne <nospam@all.invalid> wrote,
quoted or indirectly quoted someone who said :

>For testing locally, you probably need to set the white-list
>(add to the "exception list") to include:
>
>   http://localhost
>   http://localhost.localdomain
>   http://127.0.0.1
>   https://localhost
>   https://localhost.localdomain
>   https://127.0.0.1
>   file:///

It seems odd that this is even necessary. Usually any program loaded
from local hard disk can do whatever it wants.

I think in future all apps, including desktop apps, should be signed.
There also should be a set of sandboxes they can run in. The OS
enforces the sandbox. You then don't have to be so careful about
loading a little app that can only play with its own limited size
files and cannot print.

Oracle has abandoned self-signed certs. I have not yet figured if they
have abandoned unsigned apps. Signing an unsigned app turns off the
sandbox and makes a safe app into a dangerous one.
-- 
Roedy Green Canadian Mind Products http://mindprod.com
Errors using inadequate data are much less than those using no data at all. 
~ Charles Babbage (born: 1791-12-26 died: 1871-10-18 at age: 79)

[toc] | [prev] | [next] | [standalone]

#29783

On Thu, 21 Aug 2014 00:20:12 -0700, Roedy Green wrote:

> I think in future all apps, including desktop apps, should be signed.

And who do you propose will pay the annual C-note to get/renew the 
certificates for all of the formerly-free apps?

You've just suggested raising the barrier to entry to create and 
distribute desktop Java apps from "nothing but time" to "$9/month/app for 
as long as you support each app". And you'd make unsupported apps stop 
working when a developer stops supporting them instead of simply no 
longer having the developer's technical assistance or new updates 
available. The practical effect would be for those apps to disappear 
behind paywalls as the developer needs to cover the cost of certificate 
renewals somehow, as well as to create planned obsolescence. All open 
source desktop Java software would evaporate, and a mob would come for 
you with torches and pitchforks.

[toc] | [prev] | [next] | [standalone]

#29808

On 8/21/2014 3:20 AM, Roedy Green wrote:
> On Tue, 19 Aug 2014 23:24:28 -0400, Wayne <nospam@all.invalid> wrote,
> quoted or indirectly quoted someone who said :
>
>> For testing locally, you probably need to set the white-list
>> (add to the "exception list") to include:
>>
>>    http://localhost
>>    http://localhost.localdomain
>>    http://127.0.0.1
>>    https://localhost
>>    https://localhost.localdomain
>>    https://127.0.0.1
>>    file:///
>
> It seems odd that this is even necessary. Usually any program loaded
> from local hard disk can do whatever it wants.
>
> I think in future all apps, including desktop apps, should be signed.
> There also should be a set of sandboxes they can run in. The OS
> enforces the sandbox. You then don't have to be so careful about
> loading a little app that can only play with its own limited size
> files and cannot print.

MS introduced that concept 2 years ago. This is how Windows Store
apps work on Windows 8.x+.

I will consider it a big failure. It has definitely not caught
on.

Arne

[toc] | [prev] | [next] | [standalone]

#29814

Arne Vajhøj wrote:

> > There also should be a set of sandboxes they can run in. The OS
> > enforces the sandbox. You then don't have to be so careful about
> > loading a little app that can only play with its own limited size
> > files and cannot print.
>
> MS introduced that concept 2 years ago. This is how Windows Store
> apps work on Windows 8.x+.
>
> I will consider it a big failure. It has definitely not caught
> on.

In what context has it not "caught on" ?  As I understand it, that is the basic 
security model of Android (can't speak for Apple stuff). Oh, and Android got 
there before MS (or at least got there > 2 years ago).

And I /seriously/ doubt whether Android was the first.

Come to that I /seriously/ doubt whether the model is sufficiently strong.

    -- chris 

[toc] | [prev] | [next] | [standalone]

#29815

On 8/22/2014 9:18 PM, Chris Uppal wrote:
> Arne Vajhøj wrote:
>>> There also should be a set of sandboxes they can run in. The OS
>>> enforces the sandbox. You then don't have to be so careful about
>>> loading a little app that can only play with its own limited size
>>> files and cannot print.
>>
>> MS introduced that concept 2 years ago. This is how Windows Store
>> apps work on Windows 8.x+.
>>
>> I will consider it a big failure. It has definitely not caught
>> on.
>
> In what context has it not "caught on" ?  As I understand it, that is the basic
> security model of Android (can't speak for Apple stuff). Oh, and Android got
> there before MS (or at least got there > 2 years ago).
>
> And I /seriously/ doubt whether Android was the first.
>
> Come to that I /seriously/ doubt whether the model is sufficiently strong.

Well - the part of what I commented on that you did not quote was:

#I think in future all apps, including desktop apps, should be signed.

I do not consider Java applets, Flash, Silverlight, iOS apps,
Android apps, WP apps etc. for desktop.

I do consider Windows 8 a desktop OS.

Arne

[toc] | [prev] | [next] | [standalone]

#29809

On 8/21/2014 3:20 AM, Roedy Green wrote:
> Oracle has abandoned self-signed certs. I have not yet figured if they
> have abandoned unsigned apps.

Unsigned applets: yes (more or less)

Unsigned applications: no

Arne

[toc] | [prev] | [next] | [standalone]

#29777

On Tue, 19 Aug 2014 23:24:28 -0400, Wayne <nospam@all.invalid> wrote,
quoted or indirectly quoted someone who said :

>   http://localhost
>   http://localhost.localdomain
>   http://127.0.0.1
>   https://localhost
>   https://localhost.localdomain
>   https://127.0.0.1
>   file:///

I have documented this at
http://mindprod.com/jgloss/exceptionsitelist.html
-- 
Roedy Green Canadian Mind Products http://mindprod.com
Errors using inadequate data are much less than those using no data at all. 
~ Charles Babbage (born: 1791-12-26 died: 1871-10-18 at age: 79)

[toc] | [prev] | [next] | [standalone]

#29799

On 8/21/2014 3:20 AM, Roedy Green wrote:
> On Tue, 19 Aug 2014 23:24:28 -0400, Wayne <nospam@all.invalid> wrote,
> quoted or indirectly quoted someone who said :
> 
>>   http://localhost
>>   http://localhost.localdomain
>>   http://127.0.0.1
>>   https://localhost
>>   https://localhost.localdomain
>>   https://127.0.0.1
>>   file:///
> 
> I have documented this at
> http://mindprod.com/jgloss/exceptionsitelist.html
> 

You might want to add, you need a port number as well
unless using the default port.  For example, if running
Glassfish on port 8080:

   http://localhost:8080/

Also, if not running any server, all you need is the
file:/// entry.  I think.

-- 
Wayne

[toc] | [prev] | [next] | [standalone]

#29778

Hi,

Roedy Green schrieb:
> They have changed the name of the directory where the JRE is
> installed.  It used to be:
>    C:\Program Files\Java\jre8
> now it is:
>    C:\Program Files\Java\jre1.8.0_20

The path can be changed during the install process
by the installer GUI. Never did this before. Lets
see whether it works.

Bye

[toc] | [prev] | [next] | [standalone]

#29779

On 8/21/2014 4:18 AM, Jan Burse wrote:
> Hi,
> 
> Roedy Green schrieb:
>> They have changed the name of the directory where the JRE is
>> installed.  It used to be:
>>    C:\Program Files\Java\jre8
>> now it is:
>>    C:\Program Files\Java\jre1.8.0_20
> 
> The path can be changed during the install process
> by the installer GUI. Never did this before. Lets
> see whether it works.

The installer doesn't add the new directory to PATH.
I just installed into ...\Java\jre8, it seems to work.
If you use the default (with a full version number),
remember to manually update PATH.

-- 
Wayne

[toc] | [prev] | [next] | [standalone]

#29780

Hi,

I have multiple JDKs installed. Isn't there
a, possibly registry based, API, that some
tools use to figure out the JDKs location?

This API is not broken?

Bye

Wayne schrieb:
> On 8/21/2014 4:18 AM, Jan Burse wrote:
>> Hi,
>>
>> Roedy Green schrieb:
>>> They have changed the name of the directory where the JRE is
>>> installed.  It used to be:
>>>     C:\Program Files\Java\jre8
>>> now it is:
>>>     C:\Program Files\Java\jre1.8.0_20
>>
>> The path can be changed during the install process
>> by the installer GUI. Never did this before. Lets
>> see whether it works.
>
> The installer doesn't add the new directory to PATH.
> I just installed into ...\Java\jre8, it seems to work.
> If you use the default (with a full version number),
> remember to manually update PATH.
>

[toc] | [prev] | [next] | [standalone]

#29810

On 8/21/2014 4:18 AM, Jan Burse wrote:
> Roedy Green schrieb:
>> They have changed the name of the directory where the JRE is
>> installed.  It used to be:
>>    C:\Program Files\Java\jre8
>> now it is:
>>    C:\Program Files\Java\jre1.8.0_20
>
> The path can be changed during the install process
> by the installer GUI. Never did this before. Lets
> see whether it works.

Changing the JDK path works so changing JRE path probably also works.

Arne

[toc] | [prev] | [next] | [standalone]

#29757

On Tue, 19 Aug 2014 17:32:32 -0700, Roedy Green
<see_website@mindprod.com.invalid> wrote, quoted or indirectly quoted
someone who said :

>JDK 1.8.0_20 and JDK 1.7.0_67 were just released.
>
>changes at
>http://www.oracle.com/technetwork/java/javase/8u20-relnotes-2257729.html#newft
>

They redirected Collections.sort to ArrayList.sort. This broke one of
my programs. I had overridden ArrayList.sort, and Collections.sort
used my method rather than ArrayList.sort as it should to work.

The problem was fairly easy to fix, however I think it is the first
time a change in Java versions broke one of my programs.

The symptom was a stack overflow, with a circular call.
 
-- 
Roedy Green Canadian Mind Products http://mindprod.com
Errors using inadequate data are much less than those using no data at all. 
~ Charles Babbage (born: 1791-12-26 died: 1871-10-18 at age: 79)

[toc] | [prev] | [next] | [standalone]

#29764

On 8/20/2014 3:32 AM, Roedy Green wrote:
> On Tue, 19 Aug 2014 17:32:32 -0700, Roedy Green
> <see_website@mindprod.com.invalid> wrote, quoted or indirectly quoted
> someone who said :
>> JDK 1.8.0_20 and JDK 1.7.0_67 were just released.
>>
>> changes at
>> http://www.oracle.com/technetwork/java/javase/8u20-relnotes-2257729.html#newft
>
> They redirected Collections.sort to ArrayList.sort. This broke one of
> my programs. I had overridden ArrayList.sort, and Collections.sort
> used my method rather than ArrayList.sort as it should to work.
>
> The problem was fairly easy to fix, however I think it is the first
> time a change in Java versions broke one of my programs.
>
> The symptom was a stack overflow, with a circular call.

You should have taken the advice of Joshua Bloch and used
composition instead of inheritance.

Extending collection classes is almost never a good idea.

I don't think it is a coincidence that Joshua Bloch use a
collection class for illustrating the favor composition over
inheritance point.

Arne

[toc] | [prev] | [next] | [standalone]

#29765

On Wed, 20 Aug 2014 09:45:11 -0400, Arne Vajhøj <arne@vajhoej.dk>
wrote, quoted or indirectly quoted someone who said :

>
>I don't think it is a coincidence that Joshua Bloch use a
>collection class for illustrating the favor composition over
>inheritance point.

This is especially true when you did not write the base class.
-- 
Roedy Green Canadian Mind Products http://mindprod.com
Errors using inadequate data are much less than those using no data at all. 
~ Charles Babbage (born: 1791-12-26 died: 1871-10-18 at age: 79)

[toc] | [prev] | [next] | [standalone]

Page 1 of 2  [1] 2  Next page →

Back to top | Article view | comp.lang.java.programmer

csiph-web