Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #27293 > unrolled thread

New Java JDK released

Back to article view | Back to comp.lang.java.programmer

Contents

  New Java JDK released Roedy Green <see_website@mindprod.com.invalid> - 2014-01-14 21:45 -0800
    Re: New Java JDK released "Qu0ll" <Qu0llSixFour@gmail.com> - 2014-01-15 18:30 +1100
      Re: New Java JDK released Roedy Green <see_website@mindprod.com.invalid> - 2014-01-15 03:37 -0800
        Re: New Java JDK released Arne Vajhøj <arne@vajhoej.dk> - 2014-01-15 22:24 -0500
          Re: New Java JDK released Joerg Meier <joergmmeier@arcor.de> - 2014-01-16 12:41 +0100
    Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-15 15:43 +0100
      Re: New Java JDK released Donkey Hottie <donkey@fredriksson.dy.fi> - 2014-01-15 21:28 +0200
        Re: New Java JDK released markspace <markspace@nospam.nospam> - 2014-01-15 11:46 -0800
          Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-15 23:34 +0100
            Re: New Java JDK released markspace <markspace@nospam.nospam> - 2014-01-15 14:41 -0800
              Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-16 01:14 +0100
                Re: New Java JDK released Arne Vajhøj <arne@vajhoej.dk> - 2014-01-15 22:18 -0500
                  Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-16 09:08 +0100
                    Re: ephemeral ports [was: New Java JDK released] Wayne <nospam@all.invalid> - 2014-01-16 04:21 -0500
                      Re: ephemeral ports [was: New Java JDK released] Silvio <silvio@internet.com> - 2014-01-16 10:35 +0100
                      Re: ephemeral ports [was: New Java JDK released] lipska the kat <lipskathekat@example.com> - 2014-01-16 09:42 +0000
                  Re: New Java JDK released Knute Johnson <eternal@knutejohnson.com> - 2014-01-16 09:29 -0800
            Re: New Java JDK released Kevin McMurtrie <mcmurtrie@pixelmemory.us> - 2014-01-15 18:46 -0800
              Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-16 08:50 +0100
                Re: New Java JDK released Joerg Meier <joergmmeier@arcor.de> - 2014-01-16 12:45 +0100
                  Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-16 13:05 +0100
      Re: New Java JDK released Roedy Green <see_website@mindprod.com.invalid> - 2014-01-15 16:14 -0800
        Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-16 01:19 +0100
          Re: New Java JDK released Roedy Green <see_website@mindprod.com.invalid> - 2014-01-17 01:47 -0800
    Re: New Java JDK released Michal Kleczek <michal_wytnijto@kleczek.org> - 2014-01-16 11:37 +0100

Page 2 of 2 — ← Prev page 1 [2]

#27316

On 01/16/2014 12:45 PM, Joerg Meier wrote:
> On Thu, 16 Jan 2014 08:50:22 +0100, Silvio wrote:
>
>> No, I am not using the Security Manager. My code runs on (mostly
>> dedicated) servers and I have never needed it.
>
>> Why does this change not impact me?
>
> Why would a change that explicitly says that it's a permissions change that
> affects Sockets used together with a SecurityManager affect something
> without a SecurityManager ? Are you also worried it will impact your file
> reading, or array initializing ?
>
> Liebe Gruesse,
> 		Joerg
>

As I already stated I use a number of libraries to embed some servers in 
my processes (HTTP/HTTPS, H2 database, SMTP, FTP) and do not know if any 
of these employs a SecurityManager.

Ignored the wise crap.

[toc] | [prev] | [next] | [standalone]

#27302

On Wed, 15 Jan 2014 15:43:11 +0100, Silvio <silvio@internet.com>
wrote, quoted or indirectly quoted someone who said :

>Did anyone try it to see what the impact of the restriction for server 
>sockets to the "ephemeral port range" is?

What is the advantage of this change?  I presume it is some security
issue. Normally Java never does anything to break old apps.
-- 
Roedy Green Canadian Mind Products http://mindprod.com
Unlike many machines, computers require no water once they are
manufactured.

[toc] | [prev] | [next] | [standalone]

#27303

On 01/16/2014 01:14 AM, Roedy Green wrote:
> On Wed, 15 Jan 2014 15:43:11 +0100, Silvio <silvio@internet.com>
> wrote, quoted or indirectly quoted someone who said :
>
>> Did anyone try it to see what the impact of the restriction for server
>> sockets to the "ephemeral port range" is?
>
> What is the advantage of this change?  I presume it is some security
> issue. Normally Java never does anything to break old apps.
>

Read my post: they have done it quite recently with no more than a vague 
remark and (luckily) a system parameter to suppress the change. That 
gave us the chance to temporarily get the old behaviour until we could 
fix the code.

I sincerely hope they included another system property to suppress this 
one. There is nothing mentioned in the release notes though.

[toc] | [prev] | [next] | [standalone]

#27330

On Thu, 16 Jan 2014 01:19:10 +0100, Silvio <silvio@internet.com>
wrote, quoted or indirectly quoted someone who said :

>Read my post:

You did eight posts, and in them you seemed just as puzzled as I am
why they did this.
-- 
Roedy Green Canadian Mind Products http://mindprod.com
Unlike many machines, computers require no water once they are
manufactured.

[toc] | [prev] | [next] | [standalone]

#27313

W dniu 2014-01-15 06:45, Roedy Green pisze:
> Java 1.7.9_51 was released today.
>

And of course this is still not fixed:
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=8011811

All this "focusing" on security is pure crap if applying security 
related patches is a PITA for users aware of security best practices.

-- 
Michal

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | comp.lang.java.programmer

csiph-web