undefined | Better HN

0 pointsgraemep7mo ago0 comments

We had multiple implementations of Java, but if still failed for that reason. Even if the concerns had been completely addressed MS did not only want to stop Oracle taking control, it wanted to establish control itself.

Was Java any worse from a security point of view than what we have now?

0 comments

achierius7mo ago

Yes, significantly. The JVM just flat out does not provide a sandbox. Remember the bad old days of clicking on a suspicious link and getting pwnd? That's what we'd have if it weren't for modern JavaScript engines

graemepOP7mo ago

I thought the JVM had permissions restrictions in the days of Java applets?

ezst7mo ago

I suppose it had, but as a large codebase written in a memory-unsafe language with unrestricted system access, in an era where browser plugins weren't sandboxed by design, it was a cat and mouse game.

j / k navigate · click thread line to collapse