tag:blogger.com,1999:blog-6042572809285034351.post8506892584581669939..comments2024-03-28T06:24:32.786-05:00Comments on atsec IT security blog: Using Java Security WiselyAndreashttp://www.blogger.com/profile/17368437730621711005noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-6042572809285034351.post-24645366186870482382011-04-07T16:20:56.032-05:002011-04-07T16:20:56.032-05:00Jeremy, first let me thank you for educating your ...Jeremy, first let me thank you for educating your readers that Java is <b>systematically</b> more secure than languages such as C/C++ or Assembly. I am myself an advocate of Memory Safe Programming Languages (also called Type Safe Programming Languages).<br />There are many more languages of this kind around, namely Cyclone and Modula-3. I invented one myself and I leave it to the reader to find out which one it is. <br />Unfortunately, Java comes with a lot of runtime inefficiency, which is not really required. For example, Full Automatic Garbage Collection is not necessary for a Memory Safe Programming Language. Also, current Java implementations are not really that robust, which you can verify by running the YaCy Distributed Search Engine. It will sooner or later crash the JVM while parsing some PDF from the internet. <br />So there is a lack of "Proven Correct" implementations of Compilers, Operating Systems, Web Browsers, Sandboxes and so on. If the firehose of government funding could be turned to these rather limited endeavours...Dipl.-Ing.(BA) Frank Gerlachhttp://www.sappeur.eunoreply@blogger.comtag:blogger.com,1999:blog-6042572809285034351.post-49970542003417636462011-03-29T21:44:52.489-05:002011-03-29T21:44:52.489-05:00In order to use java security accurately here are ...In order to use java security accurately here are some secure coding guidelines... <br />http://www.oracle.com/technetwork/java/seccodeguide-139067.htmlAnonymoushttps://www.blogger.com/profile/15024378865052024570noreply@blogger.com