Steven Weller writes:
Posted on RISKS:
From: Ed Felten <felten@CS.Princeton.EDU>
We have discovered another serious security flaw in the Java programming language,
There is only one way to fix Java -- which is to turn it off. The hubris of the people who created it truly astounds me. After the current flurry of obvious holes gets patched is the point when I'm really going to worry, because thats when people are going to get complacent until the one day when the big flaw is found by the good guys, months after the bad guys found it. Java security depends on 1) Perfect security model 2) Perfect implementation of the perfect security model 3) Nothing else in the surrounding system somehow undermining the perfect implementation of the perfect security model. I don't believe humans are perfect. When you design a system on the basis that humans are imperfect, and you cut out functionality until you can fully understand the system (say, because the sources are down to a single page of C) and you try to restrict the damage that any possible failure mode could provide, you will still sometimes make mistakes, but at least they won't be too bad or too frequent. When you build something large and complex, and you require that the entire thing work for you to be secure, there are just too many failure modes. Perry