[thelist] Java Applets - More Secure?

[David at softv.net]

Java applets operate in a "sandbox", that is they are unable to access the
filesystem or any API functions of the OS they are running on. You can
program an applet to interact with JavaScript within the browser it is
running in, however (but this is not really a security risk - unless you
consider running JS a risk).
So, in my opinion, blocking applets is unecessary and paranoid to boot. We
also give Microsoft a bigger slice of the pie every time we rule out Java as
an option ;-)

Dave




-----Original Message-----
From: Chris Blessing [mailto:webguy at mail.rit.edu]
Sent: Tuesday, January 22, 2002 11:16 PM
To: thelist at lists.evolt.org
Subject: RE: [thelist] Java Applets - More Secure?


Well I know Java has some nice built-in security features, mostly to keep
your classes secure, but I've never seen/done any tests on this type of
thing.  And yes, you're paranoid, we don't block applets and I've luckily
never been where they were blocked. =)

(does your company allow incoming email attachments? if so, they might as
well not have a firewall)

Chris Blessing
webguy at mail.rit.edu
http://www.330i.net