[1150] in java-interest
Re: Remote Objects in Java
daemon@ATHENA.MIT.EDU (John D. Mitchell)
Fri Aug 25 03:07:06 1995
Date: Thu, 24 Aug 1995 18:18:29 -0700
From: "John D. Mitchell" <johnm@CSUA.Berkeley.EDU>
To: "Arvind Srinivasan." <asriniva@cat.syr.edu>
CC: johnm@soda.CSUA.Berkeley.EDU, nataraj@cat.syr.edu, postmaster@java.sun.com,
java-interest@java.sun.com
In-reply-to: <Pine.3.07.9508241400.A3887-d100000@lynx.cat.syr.edu>
"Arvind Srinivasan." writes:
[...]
> The local and the remote sites both run Java interpreters. The function
> we modified (with respect to executing bytecodes) was ExecuteJava() (in
> interpreter.c) which is the "heart" of the java interpreter. To make life
> easy for us, here are some of the assumptions we made
>
> A1. all .class files (needed by the program) would be
> "visible" to both the local and the remote interpreters.
So the 'local' .class files are totally accessible to the remote...
What about file access on the remote machine? Can my code use files via
that file system or is everything virtualized and so all that remote stuff
has to come back across the connection to get stuff?
> A2. the remote interpreter (which behaves as a server) would work
> in an iterative manner
What do you mean by this?
[...Lot's of interesting details...]
My question is really much simpler than all that. :-) If there now exists
(in your implementation) this spawning of and connection to a 'remote' java
interpreter then what are the security ramifications. I.e., what files
does the remote interpreter have access to? What sorts of things can I now
muck with on either/both side of the connection that I could *not* do in
the standard Java implementation? Obviously, since stuff is now be sent
across the wire, a presumed local 'secure' (e.g., standalone) app. can now
be snooped on, etc.
By 'privacy' I mean what sorts of information am I giving up when I run
remote Java applications and what sort of information are the (unwitting?)
hosts giving up when my code is allowed to run on their machines?
Thanks!
John
P.S. What's going on with the java.sun.com machine? Ever since the
weekend it seems to be nearly dead.
-
Note to Sun employees: this is an EXTERNAL mailing list!
Info: send 'help' to java-interest-request@java.sun.com
