News for hackers. Stuff that matters.

A comment on Ask HN: Is web programming a series of hacks on hacks?. Parent comment

Re:Ask HN: Is web programming a series of hacks on hacks? by nixos on Monday September 12, 2016 @02:01AM (#12477507)
>XSSs, CSRF

Java had drive-by malware downloads galore. Unfortunately, Javascript isn't immune from this, probably for the same reason: to increase performance requirements, they both JIT code, which allows potential buffer overflows, etc.

[ Parent | on HN ]
Re:Ask HN: Is web programming a series of hacks on hacks? by rer on Wednesday September 14, 2016 @11:23AM (#12497848)
This doesn't sound like the full explanation about the security problems of Java applets. It sounds more like a JIT bug. One can fix the JIT to check for out of bounds errors.

What's the real reason Java applets were insecure?

[ Parent | on HN ]