Hacker News new | ask | show | jobs
by iso-8859-1 3705 days ago
Java removed certain classes of errors (memory management). It introduced other (providing an insecure sandbox for applets).
2 comments
wolf550e 3705 days ago
I think code execution by insecure deserialization is the big Java security problem now, though I'm neither a security guy nor a Java guy.
link
lmm 3705 days ago
It's not like C applets are safer.
link
PeCaN 3705 days ago
If we consider NaCl to be "C applets"... yes, it actually is safer.
link