Comment Re:Kill it with FIRE (Score 1) 150
If you run some unix, you can create a standalone "executable" from java classes:
https://coderwall.com/p/ssuaxa
This still needs a JVM, but then your proposal does as well...
If you run some unix, you can create a standalone "executable" from java classes:
https://coderwall.com/p/ssuaxa
This still needs a JVM, but then your proposal does as well...
it's significantly easier to parse javascript source, determine its validity and generate machine code from it than it is just to verify java bytecode.
for example: prove that the stack looks the same for every different way a basic block can be entered.
Huh? Did you ever take a compiler class? Verifying java bytecode is really not that hard...
Dude. Open Office is written in C++. It has some plug-ins written in java, but the main bloat is C++.
This might be related to chrome.
Maybe you want to try firefox for android - it works quite well for me. If it turns out to be faster, it's still google's fault, but then you know the chrome guys are responsible, and not the android guys...
An appropriate solution would be to use something like noscript, which automatically blocks all java applets (flash and javascript as well), and makes it easy to maintain a whitelist of websites that are allowed to run java applets/javascript/flash/etc.
The problem is that security cost usability.
Completely disable the ability of Java to read/write files on the local filesystem and it'd be a lot more secure for example, but then it'd be more useful as well.
This problem has already been solved, and solved mostly well. It is possible to specify exactly where a piece of java code may access files, and enforce it.
The problem is that some bugs in the JVM make it possible to bypass these checks, and then p.ex. access files that should be impossible to access.
Actually...
- Healthy food is significantly more expensive - and poor people usually have not enough money for anything
- Exercise takes time you probably don't have when working two to three jobs (while still being poor).
I do not mean to say that poor people bear no responsibility for their health. Still, reality is more complicated
than "it's all their own damn fault".
What does "online java application" mean? The app opens a network connection and communicates with some other host?
Such an app would not become more safe if it were written in, say, C++ or C# or most other languages.
The danger about java is in the browser plugin, because it downloads and runs untrusted byte code. This is about as unsafe as using an ordinary browser with java script enabled - which also downloads and runs untrusted code.
Is finding a bug and writing an exploit for it illegal yet?
You know the difference between a browser plugin and the JRE?
Do you really think that having eclipse or matlab installed on your computer (both contain a JRE) makes it magically vulnerable?
"Engineering without management is art." -- Jeff Johnson
