[4740] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

RE: Latest Java hole is Netscape/Sun only

daemon@ATHENA.MIT.EDU (Thomas Reardon)
Sun Mar 9 23:23:26 1997

From: Thomas Reardon <thomasre@microsoft.com>
To: "'Tazman'" <taz@kensico.com>
Cc: "'schemers@stanford.edu'" <schemers@stanford.edu>,
        "'Bob Denny'"
	 <rdenny@dc3.com>,
        "'WWW Security List'"
	 <WWW-SECURITY@ns2.rutgers.edu>
Date: Sun, 9 Mar 1997 18:41:13 -0800
Errors-To: owner-www-security@ns2.rutgers.edu

The Java VM is about 10% of the property of Java JDK, as Sun defines it.
 What is proprietary are the classes.

-Thomas

>-----Original Message-----
>From:	Tazman [SMTP:taz@kensico.com]
>Sent:	Sunday, March 09, 1997 3:50 PM
>To:	Thomas Reardon
>Cc:	schemers@stanford.edu; 'Bob Denny'; 'WWW Security List'
>Subject:	RE: Latest Java hole is Netscape/Sun only
>
>
>
>On Sun, 9 Mar 1997, Thomas Reardon wrote:
>
>> 	>Java is open and platform independent. Java has been tested and
>> review by many
>> 	>security expert and researchers. 
>> 
>> Let be clear: Java is platform-independent to some extent (I mean, you
>> need similar hardware, 256-color graphics, etc for just about every
>> 'plaform' JDK 1.1 works on), but IT IS NOT OPEN. 
>
>I hope you aren't browsing the net with less than 256 colors! 
>You can probably make a similiar argument for needing > 10M of space.
>Anyway, platform-independent = OS + hardware.
>
>All the specifications for the Java Virtual Machine and Java Language is 
>documented and free. You can easily find 20 vendors implementing the JVM 
>and browsers. How "open" do you want it to be? 

home help back first fref pref prev next nref lref last post