SecurityFocus

PHP security (or the lack thereof) Jun 16 2006 11:21AM
Darren Reed (avalon caligula anu edu au) (4 replies)

Re: PHP security (or the lack thereof) Jun 22 2006 12:15PM
john mullee (jmullee yahoo com) (1 replies)

Re: PHP security (or the lack thereof) Jun 24 2006 10:42PM
Darren Reed (avalon caligula anu edu au) (2 replies)

Re: PHP security (or the lack thereof) Jun 27 2006 05:47AM
Tonnerre Lombard (tonnerre lombard sygroup ch) (1 replies)

Salut,

On Sun, 2006-06-25 at 08:42 +1000, Darren Reed wrote:
> There have barely a *handful* of JRE/JVM security problems.

I know for the fact that there are quite some though. Also, what should
one think about a company that didn't manage to fix a simple path
traversal vulnerability in their jar(1) utility in almost a year? The
same goes for the serialization DoS.

I really like Sun Fire servers, but I can't agree that Java is the
bug-free issue-free big white horse. Especially not if you need a couple
of hundreds of megabytes of RAM just to run java -version...

As to useable Java applications: there are such nice things like Tomcat,
the Java web server. The funniest thing about it is that it starts up so
unbelievably slowly, and while everyone tells you that the JIT business
is going to optimize the slowness away in just a day or two, it needs a
restart every 20 hours or it will stop responding. Maybe this is the
-fomit-instructions optimization the Gentoo people are so fond of?

The same goes for my java.core collection. I keep it right next to my
bash.core and cc1.core files.

So, by "free of issues", are you talking about a Java implementation
from a parallel universe?

Tonnerre
--
SyGroup GmbH
Tonnerre Lombard

Loesungen mit System
Tel:+41 61 333 80 33 Roeschenzerstrasse 9
Fax:+41 61 383 14 67 4153 Reinach BL
Web:www.sygroup.ch tonnerre.lombard (at) sygroup (dot) ch [email concealed]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (NetBSD)

iQIVAwUARKDGcO1mMGan/TnWAQK8JRAAme3jP0fjIU02FrzcCBlvqTcRzn+Eiel7
0n3nG5pft5MOaREi2XN0hUplw/AXd44WDZmwZ2WGtaoZvEAN9g1DvFMX3MYMz69d
DYbkIzpoEUmNfqkzHH6+F+ucSmQd2wM4Lm5KIQ1gmsYGjGLIz/L/mIb1kngovE0+
QB/G6ysQQ1eIlLcCDOEAjGx0j0xNm/RAJSuPSzfrP3GfXkSthiqn2hVj4+n6YJvA
Q1KU76HmlsyS/rhSBf1NhqkGb35mqhdl1TU4Us2C26oe4VYxQcVyhHwpFSZRwtTm
N5jUs4YuVr6ouvMHUDMknF2C5DGLZm0K9n04/j86BjgXwzFHVGKAjN8DpCJxkWod
XFIKevjKNfxwqao8fvlmzaDkPHuRL4IEYBNp4uP3z5H2mbuP4TVufesQadaxtz5k
qYIsNY7XBCYfWO04Emo0JcFLL57YeYs6+zv1+emvTU5pTXZOIe5SYQ0Pq4+MpkA8
FZtRqR0hLg6OffSWTOY7Rc510vKkvCUqm2DquwmlXSN9SWbirmfO8loyPk2wt0jp
82ElmDEAPlqcJibvbF9dfniDHqqx4RefNrPh5ZnbAumTiG9InqE7JS+DNrVTxLqx
43LZ78DOcI2lY8cqmJ8MADC2Pjc5LCDt1nZ0OGBv+bpPbExnD/Pjjcglxf0JAVBx
/PpF4UwTaf4=
=486/
-----END PGP SIGNATURE-----

[ reply ]

Re: PHP security (or the lack thereof) Jun 27 2006 10:27AM
Darren Reed (avalon caligula anu edu au)

Re: PHP security (or the lack thereof) Jun 27 2006 03:38AM
Ronald Chmara (ron Opus1 COM) (1 replies)

Re: PHP security (or the lack thereof) Jul 05 2006 04:17PM
Dan Falconer (dan avsupport com) (1 replies)

Re: PHP security (or the lack thereof) Jul 06 2006 06:47AM
Darren Reed (avalon caligula anu edu au)

Re: PHP security (or the lack thereof) Jun 19 2006 05:07PM
Neil Neely (neil frii com) (1 replies)

RE: [lists] Re: PHP security (or the lack thereof) Jul 16 2006 11:26PM
Curt Purdy (purdy tecman com)

Re: PHP security (or the lack thereof) Jun 17 2006 01:50AM
Jose Nazario (jose monkey org) (1 replies)

Re: PHP security (or the lack thereof) Jun 17 2006 06:06PM
Geo. (geoincidents nls net) (2 replies)

Re: PHP security (or the lack thereof) Jun 22 2006 01:01AM
Crispin Cowan (crispin novell com)

Re: PHP security (or the lack thereof) Jun 20 2006 04:54AM
kicktd (cooljay1804ml bellsouth net) (1 replies)

Re: PHP security (or the lack thereof) Jun 20 2006 10:02AM
Geo. (geoincidents nls net)

Re: PHP security (or the lack thereof) Jun 16 2006 11:06PM
Bojan Zdrnja (bojan zdrnja gmail com) (1 replies)

Re: PHP security (or the lack thereof) Jun 17 2006 05:08PM
Jessica Hope (jessicasaulhope googlemail com)