Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: JAVA more insecure than true compiled code?

Re: JAVA more insecure than true compiled code?

From: -l0rt- <simon_at_snosoft.com>
Date: Mon, 8 Apr 2002 14:03:42 -0400 (EDT)

Steven,
        I don't think that Java is less secure than any other language. I
think that if Java is being used by someone that understands it, and
understands security than it can be secure. The majority of security
issues come from:

1-) Managers that rush developers due to VC pressure.
2-) Lack of security education in developers.
3-) Lack of motivation or even care to code securley.

I hope this helps..

-l0rt-

http://www.snosoft.com
---------------------------------------------------------------------
That file you've been guarding, isn't.
---------------------------------------------------------------------

On Fri, 5 Apr 2002 steven.sporen_at_za.pwcglobal.com wrote:

> Hi,
>
> I was wondering what people's thoughts are regarding the security of code
> written in JAVA, I recently reverse engineered a product with a freely
> available JAVA decoder and found that it produced code with variable names
> imports etc, making it very easy to find out how it hung together. Could
> this be construed as a security flaw with JAVA?
>
> Thoughts comments are appreciated.
>
> Steven
> ----------------------------------------------------------------
> The information transmitted is intended only for the person or entity to
> which it is addressed and may contain confidential and/or privileged
> material. Any review, retransmission, dissemination or other use of, or
> taking of any action in reliance upon, this information by persons or
> entities other than the intended recipient is prohibited. If you received
> this in error, please contact the sender and delete the material from any
> computer.
>
Received on Apr 08 2002

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos