Ask HN: Is web programming a series of hacks on hacks?

Re:Ask HN: Is web programming a series of hacks on hacks? by meshko on Monday September 12, 2016 @01:53AM (#12477482)

Sure, as said in other threads here -- large companies full of brilliant people can build good RIAs. Small companies full of OK people are suffering. Java Applets security could have been solved. I'm not even sure what problem you are referring to exactly. With todays web we get insanity of XSSs, CSRF and who knows what else. The only reason these are not killing modern web development is because this hydra has too many heads.

[ Parent | on HN ]

Re:Ask HN: Is web programming a series of hacks on hacks? by nixos on Monday September 12, 2016 @02:01AM (#12477507)

>XSSs, CSRF

Java had drive-by malware downloads galore. Unfortunately, Javascript isn't immune from this, probably for the same reason: to increase performance requirements, they both JIT code, which allows potential buffer overflows, etc.

[ Parent | on HN ]

Re:Ask HN: Is web programming a series of hacks on hacks? by rer on Wednesday September 14, 2016 @11:23AM (#12497848)

This doesn't sound like the full explanation about the security problems of Java applets. It sounds more like a JIT bug. One can fix the JIT to check for out of bounds errors.

What's the real reason Java applets were insecure?

[ Parent | on HN ]