I remember when

Story: Yet another Java flaw allows “complete” bypass of security sandboxTotal Replies: 4
Author Content
tuxchick

Sep 26, 2012
7:28 PM EDT
I remember when Scott McNealy boasted of Java's security, and how it was designed from the bottom up to be immune to Windows nasties. I guess that was then.
jdixon

Sep 26, 2012
8:36 PM EDT
Scott McNealy doesn't work there anymore.
BernardSwiss

Sep 26, 2012
8:50 PM EDT
Does anyone have a handle on how these Java sandbox vulnerabilities do/don't affect java alternative plugins like IcedTea>
r_a_trip

Sep 27, 2012
4:17 AM EDT
how it was designed from the bottom up to be immune to Windows nasties

< snark > Windows nasties are still out of the question, since Windows doesn't run on the JVM < /snark >, but java isn't the security panacea Mr. MecNealy promised us.

Or did Oracle really bork it up that fast......
CFWhitman

Sep 27, 2012
10:45 AM EDT
Well, this particular flaw predates Oracle's acquisition. This doesn't mean anything for any software that's not running as a web plugin, since that's the only version of Java in a sandbox anyway (the same as pretty much all the other Java security flaws).

Posting in this forum is limited to members of the group: [ForumMods, SITEADMINS, MEMBERS.]

Becoming a member of LXer is easy and free. Join Us!