News for hackers. Stuff that matters.

A comment on Say no to Electron: use JavaFX to write a fast, responsive desktop app. Parent comment

Re:Say no to Electron: use JavaFX to write a fast, responsiv... by kakwa_ on Tuesday October 03, 2017 @03:09PM (#15395133)
> I bundled the JRE with my app so the users did not need to have Java installed.

Side note here: do you track security vulnerabilities of the shipped JRE and provide updates when it happens?

Too often, I've seen java applications shipping obsolete and vulnerable JRE. And in some cases, I've seen not consistent versions across a product line.

Also wasn't there some unknowns about the right to redistribute the Oracle JRE?

[ Parent | on HN ]
Re:Say no to Electron: use JavaFX to write a fast, responsiv... by mike_hearn on Wednesday October 04, 2017 @05:13PM (#15404740)
I do track those. I didn't need to update my app at any point for them because most vulnerabilities in the JRE are to do with sandbox escapes and my app did not run potentially malicious code.
[ Parent | on HN ]
Re:Say no to Electron: use JavaFX to write a fast, responsiv... by mjparme on Wednesday October 04, 2017 @11:29AM (#15401162)
> Also wasn't there some unknowns about the right to redistribute the Oracle JRE?

Nope, Oracle clearly says you can in their FAQ:

https://java.com/en/download/faq/distribution.xml

[ Parent | on HN ]