Intel platforms from 2008 onwards have a remotely exploitable security hole

Re:Intel platforms from 2008 onwards have a remotely exploit... by mike_hearn on Monday May 01, 2017 @01:57PM (#14239848)

Java has a new zero-day every week

No it doesn't. The last one was in 2015. Before that I think there was a two year gap to the prior one. Zero days in Java are actually very rare these days.

That doesn't mean bugs are rare - like any large piece of software Java gets regular security patches, but those are flaws found by the developers themselves rather than attackers, so they aren't zero days.

[ Parent | on HN ]

Re:Intel platforms from 2008 onwards have a remotely exploit... by freehunter on Monday May 01, 2017 @03:36PM (#14240730)

I think it's implied that "a new X every week" is always going to be hyperbole. I'm intentionally overstating the point so someone just like you could hop in and prove it better than I ever could.

Remember in 2012 when Apple stopped shipping Java with their browser because it was so insecure?

[ Parent | on HN ]

Re:Intel platforms from 2008 onwards have a remotely exploit... by dmichulke on Monday May 01, 2017 @05:13PM (#14241675)

Upgrading Java 5 minutes, 0 $

Upgrading your CPU 2hs, 300$

Having no secure CPU to upgrade to: priceless

[ Parent | on HN ]