Hacker News Reader

Comment by paulie_a | Hacker News Reader

Not to discount the work done here. Big high five. But I am surprised hundreds more of these bugs haven't found every week. It's Oracle. Their mission statement might as well be "we make security vulnerabilities and charge you a shitload"

I would never trust any Oracle product in any form in production environment.

View on HN

I hate Oracle and consider them among the most evil of companies out there. However, I don't think that's a very fair characterization of their mission statement.

I think [1] shows that it is far from being an unfair synopsis of their mission statement.

[1]: https://news.ycombinator.com/item?id=10039202

It's called exaggerated sarcasm. But it is absolutely fair of the products they build. They are complete garbage. It's like Adobe and Oracle have a side bet on who can introduce the most vulnerabilities. That is how terrible of a track record they have. I will be extreme here and say all of their products, especially Java, flash, and acrobat should outright be banned from a corporate network. It should be considered a liability and insurance companies should actually build it into their models.

True, I think it's actually Adobe's.

To be fair, this is Sun (or probably Innotek) code almost certainly. Sun I generally trusted in production.

The commodity x86 virtualization gold rush happened some years before writing system code in memory-safe languages got back into vogue, and people only started doing real vulnerability research when they were already estabilished. so most of the hypervisors are prone to this stuff.

Reply on news.ycombinator.com