[2981] in java-interest

home help back first fref pref prev next nref lref last post

Re: Dynamic libraries, security, and extensibility

daemon@ATHENA.MIT.EDU (ser@jersey.uoregon.edu)
Tue Oct 24 22:32:08 1995

From: ser@jersey.uoregon.edu
To: java-interest@java.Eng.Sun.COM
Date: Tue, 24 Oct 1995 16:35:52 -0700

-----BEGIN PGP SIGNED MESSAGE-----

Content-Type: text/plain; charset=us-ascii

Sami.Shaio@Eng.Sun.COM said:
> You're exagerating the problem here. As you say, unauthenticated 
> applets will never get the ability to load in dlls. However, nothing 
> prevents you from distributing a dll for tk say that users have to 
> install on their system if they want. The problem is sending dlls, 
> unauthenticated over the net. It's not that Java doesn't support them 
> since it does. 

- From the FAQ:
> Call C Code from Java?
> First of all for security reasons you can only call external code from
> an application. You cannot call external code from an applet. 
> (Otherwise all the security would go out the window.)

I am aware that DLLs are accessable from applications.  I have also seen alpha 
applets which access DLLs which you are required to install yourself on your 
system.  I am not certain that this functionality is available in the beta 
release.  The need is to be able to access system-wide DLLs, like a common 
compression library such as zlib without having to rewrite the entire library 
in Java; the library is extant in the system, so there should ideally be no 
need for redundant installations of the code.  However, if the ability exists 
in the beta incarnation of Java to access DLLs, even user-local ones, from 
applets then the situation is not as dismal as I proposed.  We are still left, 
then, with the security issue: Java can have no control over the behavior of 
native code, and so to be secure, should not allow access to native code from 
applets.  I am not neccessarily supporting this dogma, but it seems to be a 
major issue in the success of Java.

- --- SER


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBMI14VLcbQtHnunGxAQFJFwMAhCBfN/9YdcYDYd55ic/QLosHzP4A9ghn
TtDDrJydedFzbs0ozSd79fhVQH1AdijvkvkW6nLV9Ud8ySX+I2tJ/O2rOY060VIv
z/Fh6YPOlzBuAvixgk34Rbg2xGTfwt+W
=o+jj
-----END PGP SIGNATURE-----

-
This message was sent to the java-interest mailing list
Info: send 'help' to java-interest-request@java.sun.com

home help back first fref pref prev next nref lref last post