From: Adam Shostack <adam@lighthouse.homeport.org>
Date: Fri, 24 May 1996 23:52:57 +0800
To: perry@piermont.com
Subject: Re: VIRUS ALERT: Java virus that affects Netscape 2.0 & 2.01.
In-Reply-To: <199605240220.WAA27452@jekyll.piermont.com>
Message-ID: <199605241245.HAA22317@homeport.org>
MIME-Version: 1.0
Content-Type: text



	Hype about Java and a move to a policy based security
mechanism are not incompatible.  Perry's security model will probably
be NO Java, NO Livescript.  Mine might be only Java signed by McAffee
can get more than 3 seconds of CPU time, or access remote network
ports on the server it came from, no other code can run.

Adam


Perry E. Metzger wrote:

| Sadly, Java hype has become a giant industry, and the hype machine
| assures that honesty about Java is going to continue to decline. Java
| has become a major stock booster for Sun and other
| companies. Congenital Java security holes aren't going to get serious
| attention because whether one likes it or not Sun's stock is impacted
| by the whole thing.

-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume