[The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-30 Thread Roel Spilker
JDK/JRE 1.6.0u29 was unusable for a lot of our customers since it could no longer connect to an MS-SQL database (see bug). Those are the things you never ever want to encounter. -- You received this message because you are subscribed

Re: [The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-22 Thread Fabrizio Giudici
On Mon, 23 Jan 2012 00:07:06 +0100, clay wrote: How does a multiplayer game present security risks? And how does an embedded Java make security risks worse than C or other dev platforms? As long as the embedded VM isn't being used to run potentially malicious applets and web start programs fro

[The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-22 Thread clay
How does a multiplayer game present security risks? And how does an embedded Java make security risks worse than C or other dev platforms? As long as the embedded VM isn't being used to run potentially malicious applets and web start programs from around the Internet, users shouldn't be at any mor

[The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-21 Thread Simon Ochsenreither
> > If a client is running a video game based on an old JVM, what kind of > security attacks could exploit that? Does the term "multiplayer" sound familiar to you? Not many games these days are shipped without some component talking to a network. I would suggest having a look at Minecraft for

Re: [The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-21 Thread Ricky Clarkson
bundle it but have it update itself on install. -Original Message- From: Simon Ochsenreither Sender: javaposse@googlegroups.com Date: Fri, 20 Jan 2012 16:50:05 To: Reply-To: javaposse@googlegroups.com Subject: [The Java Posse] Re: What if... Java Self-Updated Like Chrome This sounds lik

[The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-20 Thread clay
On Jan 20, 6:50 pm, Simon Ochsenreither wrote: > Attackers currently attack old Java installations because the Update system > is not working as good and fast as it should. The JVM security problems tend to be malware that exploits webstart or applets embedded into a web page. If a JVM is embedd

[The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-20 Thread Simon Ochsenreither
This sounds like dystopia too me and exactly the thing I don't want. I can understand why a _few_ applications want to ship with their own JVM (IDEs, medical devices, nuclear facilities) but outside of that, this behavior should stop. Attackers currently attack old Java installations because the

[The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-20 Thread clay
Sorry quick ammendment: Wakfu auto updates. IntellIJ automatically prompts for an update, which is probably safer for a developer audience. Neither program expects the end user to have a system level Java runtime installed. That is the ideal model. On Jan 20, 6:29 pm, clay wrote: > Java should co

[The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-20 Thread clay
Java should completely abandon the model of expecting end users to install/maintain a system wide Java and simply embed the JVM into applications. IntelliJ does this. New Java games like Wakfu do this. Then those end user applications could use an auto-update mechanism as appropriate. On Jan 12,

[The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-20 Thread Casper Bang
On Thursday, January 12, 2012 9:39:37 PM UTC+1, Chris Koerner wrote: > > But then Chrome showed them differently, and now even Microsoft is going > to start self-updating the browser. > That only works for Chrome because 1) they're cheating (running executable code in the users home) and because

[The Java Posse] Re: What if... Java Self-Updated Like Chrome

2012-01-18 Thread ebresie
Seems like as long as updates don't cause things to break (i.e. Changing from Sun to Oracle), your not on an isolated network, not concern with CM or legal restrictions, that it could potentially be feasible. Eric -- You received this message because you are subscribed to the Google Groups "Th