'Java is a mess. It's not secure. You have to disable it' | Hacker News Reader

'Java is a mess. It's not secure. You have to disable it'

ibnlive.in.com

14 pointsfactorialboy9 comments

Off topic: that website has a horrible amount of animated ads, pop-ups, and social media share buttons.

Here is the original article (with quote) from Reuters: http://www.reuters.com/article/2013/01/10/us-java-security-i...

So much Internet "journalism" is simply a summarising of stories from other sources, in the name of "curation". Please post original source when possible folks. /rant

This could qualify as blog spam. Flag accordingly.

This article is so ripe with wrong facts that it is hard to accept this is not an onion article. I hope most people disabled the Java browser plugin already.

It is an abomination of ancient times (and imho worse than flash).

But the article totally neglects that Java != the Java plugin. Yes, Java has bugs and I ran into most of them being a Java developer for years now, but it still is a very solid (if clumsy and inconvenient) system to build your applications upon.

"Java != the Java plugin" amen to that.

Those are really bold, ignorant statements against Java, but how do you even begin to challenge an article that doesn't explain how or why the claims within it are made? We should all just skip low-quality content like this, where nobody seems to know what they're talking about.

There's so much FUD being spread around every time there's a vulnerability in the Java browser plugin.

Certain online banks (almost every single one in Norway) require an Java applet for two-factor authentication, so uninstalling the plugin is simply not an option.

Most modern browsers (atleast Chrome) require the user to whitelist domains where applets are allowed to run. In addition, applets that contain a digital signature will notify you that it has been verified and you are given a choice wheter you want to run it.

And as others have mentioned: Java and the Java browser plugin are not the same thing.

wow... isn't this a bit opinionated? How having a single bug makes for Java being a mess in the whole? Will someone argue and explain if this is really the case? Thank you

This is not the case.

All software has bugs and security holes. The thing is that we haven't found them all. Its a constant game of cat and mouse which will never end.

Java has had a lot of bad press recently, but that doesn't suddenly make it useless. In fact, all it does is improve it as an identified hole is usually a fixed hole.

What is happening at the moment is that instead of reporting these issues to the vendor and giving them time to fix, people are throwing stuff out into the wild immediately for either fame or fortune.

The real issue here is an ethical one I.e the ethics are non existent for a recently larger proportion of the hacking community. Perhaps a bold statement, but they give all of us a bad name and should be chucked in jail.

A single bug? Do you live under a rock?

Reply on news.ycombinator.com