Posted
by
timothy
from the layers-within-layers dept.
Trailrunner7 writes "In a guest editorial on Threatpost, Mac hacker and security researcher Dino Dai Zovi writes that 2010 will be the year that software vendors get religion about sandboxing untrusted data in desktop apps. 'Instead of the usual top ten lists that are all-too-common with predictions for the new year, I have just one: 2010 will be the year of desktop applications handling untrusted data in sandboxed processes, and it will be about time. The largest Internet security threats now arrive through malicious web pages or e-mail attachments. This is because attackers are opportunistic and these are the weakest links especially because they easily pass through every firewall. Security is not and never was about SYN packets, it is about data: the software attack surface that attacker-controlled data interacts with and what sensitive data the attacker can get a hold of if they can exploit vulnerabilities in that software.'"
Posted
by
ScuttleMonkey
from the everybody-hates-the-big-guy dept.
LawWatcher writes "On October 1, 2008, a federal judge in California upheld a class action claiming that Apple and AT&T Mobility's five-year exclusive voice and data service provider agreement for the iPhone violates the anti-monopoly provisions of the antitrust laws. The court also ruled that Apple may have violated federal and California criminal computer fraud and abuse statutes by releasing version 1.1.1 of its iPhone operating software when Apple knew that doing so would damage or destroy some iPhones that had been 'unlocked' to enable use of a carrier other than AT&T."
It's been possible to run JavaScript on a JVM for some time now (based on Mozilla's Rhino). Does anybody have any numbers as to how these recent in-browse JavaScript optimisations stack up against 10+ years of Sun work on general virtual machine optimisation? Could it be faster just to fire up the Sun JVM and use that as the JavaScript engine?