Results 1 to 12 of 12

Thread: JAVA Security

  1. #1
    Luft is offline Member
    Join Date
    Dec 2012
    Posts
    4
    Rep Power
    0

    Default JAVA Security

    I'm learning JAVA and am pretty excited about its power and usability. Like any programming language it has it's quirks and drawbacks. The thing I'm most concerned about is the talk of some security flaw that was discovered a while back.

    How much of this talk was just fan-boys of rival languages and how much should be taken seriously? Have the issues been resolved?

    Thanks.

  2. #2
    gimbal2 is offline Just a guy
    Join Date
    Jun 2013
    Location
    Netherlands
    Posts
    3,776
    Rep Power
    5

    Default Re: JAVA Security

    Its more talk of over-active security "experts". The browser integration has some issues although that's being locked down through excessive measures such as requiring signed certificates; you don't have to care about that because that's not really the way to apply Java anyway and hasn't been for a long time now. Java shines on the server and its pretty decent for game development and very good for tool development.

    PS: its Java, not JAVA. Its a name, not an acronym.
    "Syntactic sugar causes cancer of the semicolon." -- Alan Perlis

  3. #3
    Luft is offline Member
    Join Date
    Dec 2012
    Posts
    4
    Rep Power
    0

    Default Re: JAVA Security

    So to be clear, just having the Java libraries on my computer does not make it vulnerable to attacks. Correct?

  4. #4
    VikramBatra is offline Member
    Join Date
    Feb 2014
    Location
    Jaipur, Rajasthan, India
    Posts
    1
    Rep Power
    0

    Default Re: JAVA Security

    Dear I have been learning JAVA and had come through this information that the latest update of Java i.e. JDK 1.7 is not secure at all. Almost majority of companies currently prefer to use JDK1.6. The reason for this is security. There are many flaws in 1.7 update. Even we were told to avoid 1.7....

  5. #5
    gimbal2 is offline Just a guy
    Join Date
    Jun 2013
    Location
    Netherlands
    Posts
    3,776
    Rep Power
    5

    Default Re: JAVA Security

    Quote Originally Posted by Luft View Post
    So to be clear, just having the Java libraries on my computer does not make it vulnerable to attacks. Correct?
    Of course not. Your OS is the main culprit to keep an eye on there.
    "Syntactic sugar causes cancer of the semicolon." -- Alan Perlis

  6. #6
    gimbal2 is offline Just a guy
    Join Date
    Jun 2013
    Location
    Netherlands
    Posts
    3,776
    Rep Power
    5

    Default Re: JAVA Security

    Quote Originally Posted by VikramBatra View Post
    Dear I have been learning JAVA and had come through this information that the latest update of Java i.e. JDK 1.7 is not secure at all. Almost majority of companies currently prefer to use JDK1.6. The reason for this is security. There are many flaws in 1.7 update. Even we were told to avoid 1.7....
    Stop spreading your unfounded lies. Most companies stick with Java 6 because they don't want to pay to have their software checked and altered so it is compatible with 7. Java 7 is simply a continuation of Java 6 and thus has all the security fixes of 6 and then a lot more.
    "Syntactic sugar causes cancer of the semicolon." -- Alan Perlis

  7. #7
    SurfMan's Avatar
    SurfMan is offline Godlike
    Join Date
    Nov 2012
    Location
    The Netherlands
    Posts
    926
    Rep Power
    2

    Default Re: JAVA Security

    Quote Originally Posted by gimbal2 View Post
    PS: its Java, not JAVA. Its a name, not an acronym.
    I thought JAVA meant: "Just Another Vague Acronym". Oh well. :)
    "It's not fixed until you stop calling the problem weird and you understand what was wrong." - gimbal2 2013

  8. #8
    gimbal2 is offline Just a guy
    Join Date
    Jun 2013
    Location
    Netherlands
    Posts
    3,776
    Rep Power
    5

    Default Re: JAVA Security

    Quote Originally Posted by SurfMan View Post
    I thought JAVA meant: "Just Another Vague Acronym". Oh well. :)
    And that's actually true!
    "Syntactic sugar causes cancer of the semicolon." -- Alan Perlis

  9. #9
    JosAH's Avatar
    JosAH is online now Moderator
    Join Date
    Sep 2008
    Location
    Voorschoten, the Netherlands
    Posts
    13,386
    Blog Entries
    7
    Rep Power
    20

    Default Re: JAVA Security

    Quote Originally Posted by VikramBatra View Post
    Dear I have been learning JAVA and had come through this information that the latest update of Java i.e. JDK 1.7 is not secure at all. Almost majority of companies currently prefer to use JDK1.6. The reason for this is security. There are many flaws in 1.7 update. Even we were told to avoid 1.7....
    Please spread your unfounded nonsense on Rose India (if it's not already there).

    kind regards,

    Jo
    cenosillicaphobia: the fear for an empty beer glass

  10. #10
    gimbal2 is offline Just a guy
    Join Date
    Jun 2013
    Location
    Netherlands
    Posts
    3,776
    Rep Power
    5

    Default Re: JAVA Security

    Heathen! Now we must perform the cleansing rituals to prevent the RI demons from being summoned at midnight. It is that site who must not be named.
    "Syntactic sugar causes cancer of the semicolon." -- Alan Perlis

  11. #11
    KevinWorkman's Avatar
    KevinWorkman is offline Crazy Cat Lady
    Join Date
    Oct 2010
    Location
    Washington, DC
    Posts
    3,889
    Rep Power
    8

    Default Re: JAVA Security

    I wrote a bit about this here: A Brief History of Java Deployment - Tutorials - Static Void Games

    I'll also throw another vote in that Vikram is, to say the least, wrong in his "assessment".
    How to Ask Questions the Smart Way
    Static Void Games - Play indie games, learn from game tutorials and source code, upload your own games!

  12. #12
    JosAH's Avatar
    JosAH is online now Moderator
    Join Date
    Sep 2008
    Location
    Voorschoten, the Netherlands
    Posts
    13,386
    Blog Entries
    7
    Rep Power
    20

    Default Re: JAVA Security

    Quote Originally Posted by gimbal2 View Post
    Heathen! Now we must perform the cleansing rituals to prevent the RI demons from being summoned at midnight. It is that site who must not be named.
    <sings>
    Rose India! Rose India!
    <dances>
    Rose India! Rose India!
    </dances>
    </sings>

    Well, it's too late now anyway ...

    kindest regards,

    Jeho^H^H^Hos
    cenosillicaphobia: the fear for an empty beer glass

Similar Threads

  1. Security in java
    By ekta in forum Advanced Java
    Replies: 6
    Last Post: 01-27-2014, 05:03 PM
  2. Replies: 0
    Last Post: 04-11-2012, 05:06 PM
  3. Security & Java
    By ajeeb in forum Enterprise JavaBeans (EJB)
    Replies: 1
    Last Post: 12-07-2010, 04:07 PM
  4. Java security
    By Zosden in forum Java Applets
    Replies: 43
    Last Post: 08-02-2008, 02:10 PM
  5. java.security.AccessControlException
    By cecily in forum Java Applets
    Replies: 1
    Last Post: 08-06-2007, 02:49 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •