From: Victor Boyko <vboykod@eldorado.stern.nyu.edu>
Date: Sun, 5 May 1996 14:48:51 +0800
To: EALLENSMITH@ocelot.Rutgers.EDU
Subject: Re: Why I dislike Java. (was Re: "Scruffies" vs. "Neats")
In-Reply-To: <01I4BN143E1S8Y56PB@mbcl.rutgers.edu>
Message-ID: <9605050200.AA01957@eldorado.stern.nyu.edu>
MIME-Version: 1.0
Content-Type: text/plain


>>>>> "Allen" == "E ALLEN SMITH" <EALLENSMITH@mbcl.rutgers.edu> writes:

    Allen> 	Why bother, if they don't have any critical stuff on
    Allen> them?

But you certainly would not want the Java machines to be behind the
same firewall as the non-Java ones, since then the firewall would be
useless (see http://www.cs.princeton.edu/sip/pub/secure96.html). And
you would probably want to have a second firewall anyway, since the
machine running Netscape can contain confidential information
downloaded from the net. Also, if Netscape is used to access password
protected (or SSL encrypted) documents/forms, an attacker with access
to the non-secure machine can get many kinds of secret information,
including passwords and credit card numbers.

-Victor

-- 
Victor Boyko <vboykod@is-2.nyu.edu>
http://galt.cs.nyu.edu/students/vb1890/
To get my PGP key, finger or send e-mail with subject "send pgp key".