From: Mike Fletcher <fletch@ain.bls.com>
Date: Tue, 13 Aug 1996 06:06:29 +0800
To: cypherpunks@toad.com
Subject: Re: Fun with M$
In-Reply-To: <199608121526.LAA07380@granite.cyg.net>
Message-ID: <9608121727.AA18460@outland.ain_dev>
MIME-Version: 1.0
Content-Type: text/plain



> I don't see how anyone can call this a bug. Microsoft has chosen what Sun
> should have: leave the security to the user, don't take it away from

	Good, leave it to Joe Sixpack who can bareley figure out how
to move files around without deleting half of the system directory . . .

> everyone. Java has been sverly crippled by the removal of features that
> would have made applets truly usefull, like local disk access. By leaving

	Java has local disk access.  Java _APPLETS_ are not allowed to
access local disk (among other things) if the class is loaded from a
network source.  A class which is loaded from local disk has no such
restrictions.

> these abilities and allowing the user to choose whether or not to run the
> object, leaves the trusted objects to be truly usefull. Microsoft has even
> designed a system of trust verification for these objects throught the
> trust chain and the MS download service. For details on the MS download
> service look at the july 96 issue of Microsoft Systems Journal. Security
> should be a user/parent decision not a general ban to protect a few.

	You are just a free to grab the Java class files for an applet
and store them on your local disk as you are a CaptiveX component and let
them have full run of your system.

---
Fletch                                                     __`'/|
fletch@ain.bls.com  "Lisa, in this house we obey the       \ o.O'    ______
404 713-0414(w)      Laws of Thermodynamics!" H. Simpson   =(___)= -| Ack. |
404 315-7264(h) PGP Print: 8D8736A8FC59B2E6 8E675B341E378E43  U      ------