Java is vulnerable,why don't we discard it?

[m0ldy]

Many good points mentioned above. While java is chosen for its ease of use and "write once, run anywhere concept," anyone really concerned with security should not be looking at java.


Enterprises that dont want java on every single desktop can develop their own solutions in-house, but that is much more costly.



Where possible; i like to rip java out completely, else turn up the HIDS & IDS.

[Stackprotector]

Start with Adobe flash, and all the others waiting in the line. Company's often don't care about security. As long as it does not ruin themselves.

[m0ldy]

Start with Adobe flash, and all the others waiting in the line. Company's often don't care about security. As long as it does not ruin themselves.

^^ Exactly....People choose easy over secure any day when it comes to having to maintain / test code. Enterprises choose keeping these vuln apps and patching them as often as possible (in some cases) to keep up. Thats not a good answer. But hey, it gives us more attack vectors. I love finding those old 1.5/1.4 installs >_<