1996-02-22 - Re: BIG JAVA SECURITY HOLE

Header Data

From: m5@dev.tivoli.com (Mike McNally)
To: perry@piermont.com
Message Hash: fa10a50f7ea243e451e106ac8edb8f006df76c202d78ece33e74c8fdd2b8031d
Message ID: <9602221339.AA15504@alpha>
Reply To: <c=US%a=_%p=INTERGRAPH%l=HQ6960221161902DK003B00@hq13.pcmail.ingr.com>
UTC Datetime: 1996-02-22 14:06:17 UTC
Raw Date: Thu, 22 Feb 1996 22:06:17 +0800

Raw message

From: m5@dev.tivoli.com (Mike McNally)
Date: Thu, 22 Feb 1996 22:06:17 +0800
To: perry@piermont.com
Subject: Re: BIG JAVA SECURITY HOLE
In-Reply-To: <c=US%a=_%p=INTERGRAPH%l=HQ6960221161902DK003B00@hq13.pcmail.ingr.com>
Message-ID: <9602221339.AA15504@alpha>
MIME-Version: 1.0
Content-Type: text/plain



Perry E. Metzger quotes:

 > > A second, also serious, bug exists in javap, the bytecode
 > > disassembler.

I haven't figured out how this is anything more than a simple bug,
unless one presumes you could concoct a trojan horse in the form of a
"really cool applet that ya just gotta disassemble dudez".

[Maybe that really is it.]

______c_____________________________________________________________________
Mike M Nally * Tiv^H^H^H IBM * Austin TX    * I want more, I want more,
       m5@tivoli.com * m101@io.com          * I want more, I want more ...
      <URL:http://www.io.com/~m101>         *_______________________________





Thread