[47791] in Cypherpunks
Re: Hack Java
daemon@ATHENA.MIT.EDU (Benjamin Renaud)
Tue Jan 23 19:12:10 1996
Date: Tue, 23 Jan 1996 16:01:33 -0800
From: br@scndprsn.Eng.Sun.COM (Benjamin Renaud)
To: gback@facility.cs.utah.edu, crypto@midex.com
Cc: rsalz@osf.org, cypherpunks@toad.com
]Both of you are correct if you look carefully at the assumptions. Rich
]assumes that you have a 'malicious compiler'. Godmar is right that Java
]does not utilize pointers in the byte code. What would make the entire
]scenario work is a malicious interpreter or a 'NotJava Browser'(TM) that
]allowed malicious code to be executed. Couple a bad compiler and a bad
]interpreter and you are in buisness (nasty business that is).
Yes. And if you also let an intruder in your house, have them sit at
your computer with your newborn child in the room and go on vacation,
things can get really, really nasty.
Sort of like when you execute untrusted code in an untrusted
environment...
-- Benjamin
Java Products Group
