From: Phil Fraering <pgf@tyrell.net>
To: perry@piermont.com
Message Hash: b2a2f11392999fc21b1815df31085f7b8b9c8a7e39fc4c835c93f67fafaca258
Message ID: <199507282003.AA24860@tyrell.net>
Reply To: <9507281410.AA07271@snark.imsi.com>
UTC Datetime: 1995-07-28 20:07:53 UTC
Raw Date: Fri, 28 Jul 95 13:07:53 PDT
From: Phil Fraering <pgf@tyrell.net>
Date: Fri, 28 Jul 95 13:07:53 PDT
To: perry@piermont.com
Subject: Java, Netscape, OpenDoc, and Babel
In-Reply-To: <9507281410.AA07271@snark.imsi.com>
Message-ID: <199507282003.AA24860@tyrell.net>
MIME-Version: 1.0
Content-Type: text/plain
Reply-To: perry@piermont.com
X-Reposting-Policy: redistribute only with permission
Date: Fri, 28 Jul 1995 10:10:59 -0400
From: "Perry E. Metzger" <perry@imsi.com>
...
I exagerate only slightly. I don't believe Java to be secure, in spite
of the claims. Its too complicated, and it operates in an environment
who's correct operation is required for it to remain secure. Good
system design says that you want a system's failure mode to produce a
secure result, but thats not what Java does.
Perry
How would you make Java secure or create a secure Javalike language?
(Secure to your satisfaction, of course).
I don't even play a security consultant on TV, but would removing hooks
into X-windows (if it has them; I don't know if it does, although Ray
mentioned something about how it could open multiple windows with graphics
in them, I think) be a good start?
What sort of interface does it have to the filesystem? I would guess that
a secure language would have its own filesystem mapped to a file of fixed
size in the normal filesystem, so that it couldn't cause disaster by
filling your hard disk.
Does it have that?
Phil
Return to July 1995
Return to “tcmay@sensemedia.net (Timothy C. May)”