Java 6 exploit found in the wild

Re:Java 6 exploit found in the wild by pachydermic on Tuesday August 27, 2013 @10:47AM (#6283732)

Question:

Why does Java have so many security holes? Is it really worse than any other language, or is it just so ubiquitous that it presents itself as a good target?

[ Parent | on HN ]

Re:Java 6 exploit found in the wild by jsight on Tuesday August 27, 2013 @11:04AM (#6283844)

I don't think the Java Sandbox has had significantly more security holes than other similar sandboxes (eg, Flash).

Most of these vulnerabilities are only applicable to environments which are required to run untrusted code.

[ Parent | on HN ]

Re:Java 6 exploit found in the wild by randyrand on Tuesday August 27, 2013 @12:28PM (#6284433)

It's not the language that has holes - it's the java plug-in runtime. I agree that this gives java a bad rep but it really isn't related to the language all that much for normal non-plug-in usage.

Writing good sandboxes can be hard. Web browsers are pretty good at it but unlike java - they dont also have to support unsandboxed code running on the same VM so that makes things considerably easier.

[ Parent | on HN ]