Java is vulnerable,why don't we discard it?

[parad0x]

Java is extremely vulnerable language.Why don't we discard Java.There are always some zero-day vulnerability in Java which makes the OS in which Java is running makes insecure.Many games and apps are written in Java and security holes in Java leads hackers to send malwares and other programs that can hack systems,servers,mobile phones,etc.So,why do we use Java.And plz don't get me wrong.

[p_2001]

because it is cheap. It is also cross platform.
You don't need as much skill while coding in java as you would for other language.
Then there is the library which is extensive.

the question is... If not Java then what?
it is better to patch it then make a new one.

[parad0x]

the question is... If not Java then what?
it is better to patch it then make a new one.

I agree that it is better to patch than to make a new language but what is the benefit if after patching the vulnerability and updating it,a new vulnerability comes in front of the world.
Just check out this link

[Z3R0]

@p_2001 +1 my good Sir.

I personally have never tried Java, but I always hear good things about it, especially in regards to its compatibility with a lot of different environments.

@Mr. Perfect, you have to understand, with something as adaptable, and easy to implement as Java, there are going to be an equal amount of cons to its pros. Java can be extremely secure, and as you already know, it can be extremely insecure. I believe it all depends on the developer, and how much effort they put into making a quality product. Java is extremely powerful, and shouldn't be thrown out for its security drawbacks.

[parad0x]

I personally have never tried Java, but I always hear good things about it, especially in regards to its compatibility with a lot of different environments

Ok,but as you have said,it is compactible with every platform, and I am saying that its compatibility makes every platform insecure.Are you getting me?

[Kulverstukas]

Java is too much of a subject to be thrown away - it runs practically anywhere.
Besides, Windows has lots of vulnerabilities too. Does it mean Microsoft should discard it?
Flash is full of holes too, does it mean Adobe has to discard it?
Linux kernel has lots of exploits, does it mean Linus should discontinue it?
Do you see where I am going...?

Also it's not the Java that is vulnerable - it's the JVM, because Java is a language. JVM is what interprets the Java bytecode. So if you don't like Sun's (now Oracle's) JVM, run OpenJDK and you'll be shielded from exploits (more or less...).

[parad0x]

Thanks guys, for the explanation.I am clear with my doubts.

[Deque]

Java is too much of a subject to be thrown away - it runs practically anywhere.
Besides, Windows has lots of vulnerabilities too. Does it mean Microsoft should discard it?
Flash is full of holes too, does it mean Adobe has to discard it?
Linux kernel has lots of exploits, does it mean Linus should discontinue it?
Do you see where I am going...?

Also it's not the Java that is vulnerable - it's the JVM, because Java is a language. JVM is what interprets the Java bytecode. So if you don't like Sun's (now Oracle's) JVM, run OpenJDK and you'll be shielded from exploits (more or less...).

Well said, Kulver. Couldn't do it better. (+1)

[proxx]

Java is too much of a subject to be thrown away - it runs practically anywhere.
Besides, Windows has lots of vulnerabilities too. Does it mean Microsoft should discard it?
Flash is full of holes too, does it mean Adobe has to discard it?
Linux kernel has lots of exploits, does it mean Linus should discontinue it?
Do you see where I am going...?

Also it's not the Java that is vulnerable - it's the JVM, because Java is a language. JVM is what interprets the Java bytecode. So if you don't like Sun's (now Oracle's) JVM, run OpenJDK and you'll be shielded from exploits (more or less...).

Actually flash and windows would both be really good candidates to throw away.

[silenthunder]

This is why we have network security, they have to have access to the network before they can break in through java right?

[Kulverstukas]

This is why we have network security, they have to have access to the network before they can break in through java right?

I don't think java works that way...

[silenthunder]

Well, my understand is that if you're running a game on your computer (not an online game, just a normal game) that runs on the java platform or was even coded in java, then you aren't interacting with any other computer, much less a computer outside your network. In which case, if someone was trying to hack you, they would need access to your network.

[Kulverstukas]

Well, my understand is that if you're running a game on your computer (not an online game, just a normal game) that runs on the java platform or was even coded in java, then you aren't interacting with any other computer, much less a computer outside your network. In which case, if someone was trying to hack you, they would need access to your network.

Well yes, in a way...
Although the exploits are more practical among Java applets, instead of Jars. So to execute the malicious program/code the attacker does not need to break into your network, you just need to open a website containing that applet.

[parad0x]

@silenthunter
As kulver said, applet attacks are now more commen.I refer you to my tut here

[silenthunder]

Well it does make sense since in that case, I was thinking of java programs and non-online games, but I can see where some vulnerabilities would come in.