Thursday, January 10, 2013

Insecure Mess

The mess is not (as some might imagine) us, or anyone we've dated, but Oracle's Java.
"Java is a mess. It's not secure," said Jaime Blasco, Labs Manager with AlienVault Labs. "You have to disable it."
Off w/ its head!

Also, too.

5 comments:

  1. There is no such thing as a secure computer programming language. There is only secure programs, and insecure programs. The problem with Java is that people enable it in their web browsers, which in turn allows strangers to run programs on your computer. Which is sort of like allowing random strangers you run into at sleazy bars to have sex with you... sure, it might be entertaining, but eventually you're gonna catch something nasty even if you're using protection.

    - Badtux the Geeky Penguin

    ReplyDelete
  2. Yeah, the Java plugin in the browser is just stupid. I write lots of Java. I don't write, and I don't know anybody else that writes Java that needs the browser plugin anymore -- that's so 1998.

    ReplyDelete
  3. Disabled Java is still a headache on certain sites, this the NoScript. Which is its own headache.

    ReplyDelete
  4. Substance, do not confuse Java and JavaScript. Java is needed for very few sites. The scripting language turned off by NoScript, "JavaScript", whose proper name is ECMAScript (the term "JavaScript" is a trademark of Sun Microsystems/Oracle that they apply to their version of ECMAScript and cannot be used without their permission), has nothing to do with Java -- it is an entirely different computer language with entirely different problems.

    ReplyDelete
  5. Apple just blacklisted Java on OS X, in case you haven't heard.

    I have not had Java (or at least the browser plugin) installed on any of my PCs since forever plus four months, and I still can't think of any site that I visit where that's been an issue at all.

    ReplyDelete

You have the right to remain silent. You have the right to have an attorney present while you are commenting. If you cannot afford an attorney, you are "Shit Outta Luck" (SOL). Anything you type here can & may be used against you in a court of law or in a personal "beat-down" administered by a staff member or "associate" of this "web log."

The publisher thanks Google/Bugger for denecessitating verification. (Not that we need explain anything to anyone.)