Quote:
Originally Posted by Langy
Are you talking about Java or Javascript? I can definitely believe that Javascript has lead to a ton of malware installs, but Java shouldn't be any different from any other programming language in that sense.
|
The Java web plugin, which is installed by default by the Oracle installer and has to be manually removed (by digging through hidden folders) or disabled (which has become the default behavior for many browsers) is one of the biggest, if not the single biggest, remote-attack security threat today. Java itself has security vulnerabilities which are exposed due to the "wild" by the web plugin. It's as bad as ActiveX ever was, for pretty much exactly the same reasons, except it can affect any browser on any OS that can run Oracle Java.
I've had my wife's computer compromised through a drive-by malware install due to Java (she had it installed for Pogo).
__________________
The user formerly known as ciaran_skye.
__________________
Quirks: Doesn't proofread forum posts before clicking "Submit". [-1]
Quote:
|
"My mace speaks Goblin." Antoni Ten Monros
|