News for hackers. Stuff that matters.

A comment on The decline and fall of Java on the desktop. Parent comment

Re:The decline and fall of Java on the desktop by rowls66 on Wednesday March 02, 2022 @04:58PM (#30533775)
My understanding is that most of security defects in the JRE were related to the browser integration. The core Java sandbox was secure.
[ Parent | on HN ]
Re:The decline and fall of Java on the desktop by papercrane on Wednesday March 02, 2022 @08:06PM (#30535786)
Most of the high profile security issues have been either sandbox escapes or serialization issues.

The sandbox escapes were made worse by having applets in the browser.

Now that applets are not a consideration any more the sandbox (SecurityManager) isn't used very much anymore and the Java devs are looking at deprecating and removing it, so most of the sandboxing features will go away.

[ Parent | on HN ]
Re:The decline and fall of Java on the desktop by em_te on Wednesday March 02, 2022 @08:35PM (#30536001)
I remember when Java applets could prompt the user to accept "all or nothing" permissions and fine grained permissions wasn't supported.
[ Parent | on HN ]