From: Adam Shostack <adam@bwh.harvard.edu>
To: rjc@clark.net (Ray Cromwell)
Message Hash: 7b3685d8eab7187ed1b53ba7cce77e7dd5ac929931ce66d6d5237b7b15e08537
Message ID: <9507281717.AA09190@leonardo.bwh.harvard.edu>
Reply To: <199507281624.MAA11581@clark.net>
UTC Datetime: 1995-07-28 17:17:48 UTC
Raw Date: Fri, 28 Jul 95 10:17:48 PDT
From: Adam Shostack <adam@bwh.harvard.edu>
Date: Fri, 28 Jul 95 10:17:48 PDT
To: rjc@clark.net (Ray Cromwell)
Subject: Re: Java, Netscape, OpenDoc, and Babel
In-Reply-To: <199507281624.MAA11581@clark.net>
Message-ID: <9507281717.AA09190@leonardo.bwh.harvard.edu>
MIME-Version: 1.0
Content-Type: text/plain
Ray writes:
| Object Oriented Superdistributed components are so useful an abstraction,
| I think it's worth the security risk. HotJava solves some fundamental
| issues with protocols. Right now the W^3 working groups have been struggling
Its nice of you to say that. Its nice of Perry to disagree.
Lets start using some concrete examples, so the source of
disagreements become obvious?
I suspect Ray is working in an environment less security
concious than Perry's. Perry works on a lot of security-critical
applications where a lot of money is at stake. If I were going to go
after financial institutions, I'd definetly look at which ones were
using Java, and see what I could upload into their systems. Getting
copies of the recent files might be *very* informative. I'd be
worried if I were at Solomon brothers.
If I were running Java at home, I'd be a lot less worried,
especially as all the interesting data on my hard drive sits on an
encrypted partition.
Adam
--
"It is seldom that liberty of any kind is lost all at once."
-Hume
Return to July 1995
Return to “tcmay@sensemedia.net (Timothy C. May)”