Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Oracle: 'We Have to Fix Java'
eSecurity Planet ^ | 28 January 2013 | Sean Michael Kerner

Posted on 01/29/2013 7:04:53 AM PST by ShadowAce

click here to read article


Navigation: use the links below to view more comments.
first previous 1-2021-37 last
To: dfwgator
I work a lot with server-side Java, but there is NO WAY I would advocate using Java in the browser.

I was one of the earliest adopters of Java in the world outside of Sun Microsystems, amazed by the active content that could be added to a web page using the JVM. It saddens me that as of several years ago, I make exactly the same recommendation as above.

21 posted on 01/29/2013 8:06:00 AM PST by kevkrom (If a wise man has an argument with a foolish man, the fool only rages or laughs...)
[ Post Reply | Private Reply | To 9 | View Replies]

To: ShadowAce

The best thing Oracle could do for the world would be to give away all the patents it has stolen/eaten to some open foundation, put down all its former empleyees - anyone with a molecule of the rank stink of Oracle on them, and then for the rest collective suicide.


22 posted on 01/29/2013 8:07:49 AM PST by Hardraade (http://junipersec.wordpress.com (Vendetta))
[ Post Reply | Private Reply | To 1 | View Replies]

To: dfwgator

Theoretically any system that uses pre-complied pseudo code that is executed by a virtual machine could allow reflection....


23 posted on 01/29/2013 8:11:29 AM PST by central_va ( I won't be reconstructed and I do not give a damn.)
[ Post Reply | Private Reply | To 18 | View Replies]

To: knarf

PHB’s PHB is the hacker in that scenario, I believe.


24 posted on 01/29/2013 8:51:28 AM PST by Ingtar (Everyone complains about the weather, but only Liberals try to legislate it.)
[ Post Reply | Private Reply | To 19 | View Replies]

To: ShadowAce

freeping on an xbox and no java or anything else useful


25 posted on 01/29/2013 9:00:31 AM PST by GeronL (http://asspos.blogspot.com)
[ Post Reply | Private Reply | To 1 | View Replies]

To: knarf
Put a bit more simply, RAM is your desk. You can have all kinds of stuff laid out on it for working on. The larger your desk (more RAM) the more you can work on easily and quickly. Your filing cabinet is where you permanently store the files and the work you've done--this is your hard drive. It takes you time to move from your desk to your filing cabinet, find the file, then put it on your desk for working.

RAM is more-or-less right there, whereas hard drive data has to be found and transferred into RAM for work to be done.

26 posted on 01/29/2013 9:09:39 AM PST by Future Snake Eater (CrossFit.com)
[ Post Reply | Private Reply | To 7 | View Replies]

To: dfwgator

I would echo that remark. Java has been hyped from the beginning as the language of the web when in fact it really is not. It is true that when it was first released, Java was leaps and bounds above C++ and some of the other options out there for web programming which at that time was fairly new. There are now other, better options, designed for programming the web and web browsers. Java is a great server-side language but not so good for the web and browsers.


27 posted on 01/29/2013 9:32:26 AM PST by RJS1950 (The democrats are the "enemies foreign and domestic" cited in the federal oath)
[ Post Reply | Private Reply | To 9 | View Replies]

To: dfwgator

Yes, C# uses reflection and reflection is a useful and valid tool.

Whether it is C# or Java, the use of reflection is only as secure as the knowledge and attention that the programmer or team that uses it gives to securing it as well as judicious use of the reflection class.


28 posted on 01/29/2013 9:35:39 AM PST by RJS1950 (The democrats are the "enemies foreign and domestic" cited in the federal oath)
[ Post Reply | Private Reply | To 18 | View Replies]

To: ShadowAce

Oracle is not always all that good with its customer support anyway. They make it difficult to do the right things and frequently ignore that which does not pertain to their bottom line. When Oracle bought Java, there was a bit of discussion about how well they would support the syatem and keep it up to date. Any programming language application is only as secure as the knowledge and proficiency of the developer(s) who build it.


29 posted on 01/29/2013 9:39:26 AM PST by RJS1950 (The democrats are the "enemies foreign and domestic" cited in the federal oath)
[ Post Reply | Private Reply | To 1 | View Replies]

To: knarf
So .. an outsider (hacker) can be called by dilbert or the hacker IS dilbert?

An outsider [think Catbert, the evil HR director of OtherBigCorp] can call upon Dilbert and use his reflection capabilities for OtherBigCorp's own purposes.

30 posted on 01/29/2013 9:51:21 AM PST by ShorelineMike (Constituo, ergo sum.)
[ Post Reply | Private Reply | To 19 | View Replies]

To: ShadowAce

Seems like they need to turn off reflection, self-awareness which would then trigger or put the onus on developers of Java apps to rewrite their stuff in such a way that those features aren’t needed.

I have no idea or how hard that would be for the various owners of the various apps.

Maybe the reflection/self-awareness only gets turned off in the context of running in a web browser but can be enabled in other use cases.


31 posted on 01/29/2013 10:00:08 AM PST by 2 Kool 2 Be 4-Gotten
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShorelineMike
This is all so ... soap operish.

Some things are best left to they that speak the language and understand the natives/customs

32 posted on 01/29/2013 10:01:33 AM PST by knarf (I say things that are true ... I have no proof ... but they're true)
[ Post Reply | Private Reply | To 30 | View Replies]

To: Hardraade

Wow, really?

A bit harsh, but hey, that’s just me.


33 posted on 01/29/2013 11:42:29 AM PST by AllAmericanGirl44 (Fluck this adminstration of misfits.)
[ Post Reply | Private Reply | To 22 | View Replies]

To: AllAmericanGirl44

Basically, Oracle destroys everything it touches. It’s also a fount of corruption and scamming. Let it get its hands on a governemt contract and watch the money disappear while nothing of value gets delivered.

Sometimes I think a basic requirement for an Oracle executive is to have some experience of prison life, or as close as possible.


34 posted on 01/29/2013 11:50:19 AM PST by Hardraade (http://junipersec.wordpress.com (Vendetta))
[ Post Reply | Private Reply | To 33 | View Replies]

To: ShadowAce
Oracle: 'We Have to Fix Java'

OK, sell it. :)

35 posted on 01/29/2013 11:53:41 AM PST by Mr. Jeeves (CTRL-GALT-DELETE)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Hardraade

Well, all I do know is my ex is an exec there and he is
as upstanding as they come. Not sure about the rest of them!


36 posted on 01/29/2013 12:04:13 PM PST by AllAmericanGirl44 (Fluck this adminstration of misfits.)
[ Post Reply | Private Reply | To 34 | View Replies]

The only role I see for java is server side where it outshines most every other webtech. It’s a dead-ender client side where HTML5+ has taken over.


37 posted on 01/30/2013 1:12:45 AM PST by Gene Eric
[ Post Reply | Private Reply | To 1 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-37 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson