JDK 10 Early Access Release Notes

Re:JDK 10 Early Access Release Notes by lvh on Saturday February 24, 2018 @10:25AM (#16453590)

As you can tell from the relnotes, there are a lot of removals. Fortunately, they're all following a pretty reasonable deprecation procedure, but I still can't shake what happened with Jigsaw and JDK9. Software broke. That didn't happen (regularly) before unless that software was doing patently silly things. This was different: _most_ software broke. Here's hoping that doesn't turn into a pattern.

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by rhencke on Saturday February 24, 2018 @11:44AM (#16454027)

I do wonder about this. Granted, Java 9 (and 10) are not LTS releases - we'll have to wait for 11 for that. (http://www.oracle.com/technetwork/java/eol-135779.html)

But, Java 8 will stop receiving public updates next year, and pretty much everywhere I've looked, folks are sticking on Java 8.

I am hoping I'm wrong, but I wonder if we will see Java 8 be forked, and live on, by community effort, as the cost to maintain it would be lower than the cost of risking moving to Java 11. For a lot of businesses, I don't think the reality has set in yet, and I don't think they're going to realize what situation they're in until Java 8 hits EOL.

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by pjmlp on Saturday February 24, 2018 @12:05PM (#16454130)

There are companies still deploying Java 1.4 into production in 2018, just because they don't want to touch their beloved servers.

This is nothing new.

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by PhaseBlue on Saturday February 24, 2018 @12:31PM (#16454276)

Granted this is an extreme case but large, complex critical systems need a certain amount of stability and upgrades across Java releases are not quite as easy as just touching the servers.

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by lvh on Saturday February 24, 2018 @12:40PM (#16454312)

Would you agree that the breakage between 1.4 and 1.5, 1.5 and 1.6, 1.6 and 1.7, 1.7 and 1.8 is not comparable to the breakage that Jigsaw alone introduced between 1.8 and 1.9?

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by pjmlp on Saturday February 24, 2018 @01:11PM (#16454456)

Yes, I do agree.

However stuff like JDBC interface changes comes up as breaking changes in previous releases.

In what concerns Java 9, Mark Reinhold keeps doing presentations about how all Java relevant frameworks and tools are already Java 9 compliant. Including many that they validated against in Maven repositories.

Last presentation I saw was at FOSDEM.

So it appears to be a major issue to anyone wanting to migrate Java 9 without updating the frameworks as well, having some kind of special case library, or using APIs that were always documented as internal.

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by lvh on Saturday February 24, 2018 @01:54PM (#16454656)

The QA outreach page [0] suggests maybe about half the projects are ready. The ones that aren't include Netty and SLF4J. Those aren't small projects. Is that page outdated or does "JDK9 ready" not really mean "JDK9 ready"?

EDIT: Maybe it's outdated; SLF4J and Netty do claim to be JDK9-ready.

[0]: https://wiki.openjdk.java.net/display/quality/Quality+Outrea...

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by vbezhenar on Saturday February 24, 2018 @12:58PM (#16454398)

Honestly I never needed any java updates on server side. I'm sure that they are fixing something important, but I've yet to encounter any bugs. My recent projects should run on Win32 and given that they dropped support, I won't migrate from Java 8 even if it won't be updated.

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by jarym on Saturday February 24, 2018 @01:51PM (#16454643)

You may not have encountered any bugs but what about the vulnerabilities they’re fixing - do you not care to have those fixes?

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by vbezhenar on Saturday February 24, 2018 @04:43PM (#16455588)

Can you provide examples of those vulnerabilities? All vulnerabilities I'm aware of are from Java applet technology and not applicable to server applications. The only vulnerability that I can remember is something about parsing float, but even that was very low risk.

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by slrz on Saturday February 24, 2018 @05:38PM (#16455871)

All those TLS/SSL implementation vulnerabilities with fancy names like POODLE, for example.

https://www.oracle.com/technetwork/topics/security/poodlecve...

There's a lot more but it of course depends on the subset of the JDK that you're using. Look over the release notes for historical JDK updates.

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by vbezhenar on Saturday February 24, 2018 @07:21PM (#16456361)

I don't use TLS and even if I would use it, I would use nginx frontend. My subset is fairy common, Spring+JDBC, sometimes Hibernate, sometimes pure servlets, but basically all interaction between outer world is via HTTP interface implemented in Tomcat.

[ Parent | on HN ]

Re:JDK 10 Early Access Release Notes by toyg on Saturday February 24, 2018 @09:03PM (#16456706)

A targeted attack would probably hole you fairly easily then. Cleartext means you’re likely open to all sorts of replay attacks and data leaks, which can then be escalated to exploit vulnerable libs and jvm.

[ Parent | on HN ]