Montagnier is widely recognized as a typical example of ultracrepidarianism, complete with big petitions by fellow scientists to try to stop his homeopathy / antivax / generally anti-science bullshit.

Oracle JDK is OpenJDK with some licensing restrictions, so no subtle differences nowadays. Support contract = you'll get your issues solved in 2 years if you followup on the silly administration for that long. Bullshit, though managers do like that kind of crap.

Most organizations didn't stay in Java 7 and upgraded long ago. There are no licensing issues if you stick to openjdk, which everybody sane does. Sounds like a bunch of bad excuses.

800,000 people with syphilis cannot be wrong!

Quoting TFA: "a growing body of evidence"... Exactly...

You failed a project, so Java must suck, right?

"Commons"? Fortunately, not universal. Naming a library "commons" does not make it part of the language. All those Apache Commons libraries share one thing: they are mostly collections of anti-patterns. Stuff that can often be done better without dependencies, with real standard libraries (part of the platform) instead of collections of trees of mutually-incompatible libraries that look as written by a lazy first-year student. They feature null checks that make it obvious that the lazy programmer that use them consider null and empty as equivalent, which should in itself raise red lights. At best, they reinvent the wheel, quite often in a bad way. Those dependencies are something you won't find in my projects, and the first thing I remove from projects that I have to take over. Whoever depends on this deserved those things. I'd need to read TFA more extensively, but is there any bug report open for the concerned app servers?

Or a vpn protocol over https. Or services which work directly on https. Which make any VPN useless, which has always been my opinion ;-)

Just my point ;-)

If some ISP starts "de-priotizing" all ecnrypted traffic, they'll soon have 95% de-priotized, which will make it useless anyway.

Cancer causes radiation!

Same thing, really. You can still run some DOS binaries from the 80s in latest windows, even if that's anecdotal. Nowadays, I wouldn't know which platform I could trust (= not just OS) to stay unchanged / compatible for years. Linux isn't a good example for that. BTW, I'm not on MS stack. Just wanted to be fair.

Same for any project or technology by anyone.

Java in the browser (applets) is a problem, as any untrusted code with that level of access. Java-generated pages isn't (JSP, JSF...), and can even be more secure out of the box. When we speak of Java web applications, most people mean java-generated pages on the browser. Applets are mostly gone, as they should.

> Since each supposed "security update" actually deprecates features and adds new ones, Not true. It's been backwards compatible since the beginning. Some very low-level tools can break on major jvm versions (mainly byte-code manipulation tools, which are common for example in servers), but it's mainly a question of upgrading them at the same time. Your code from 15 year ago will still work in 99% of cases, the remaining 1% being basically your fault.