Does Java 8 Delay Mean Oracle Finally Serious about Security?

Does Java 8 Delay Mean Oracle Finally Serious about Security?

http://threatpost.com/does-java-8-delay-mean-oracle-finally-serious-about-security/

 

If they completely scrap it and rebuild it, perhaps. Other than that, it'll be more of the same. I don't take Oracle at all seriously.

 

I don't have high hopes.

They may improve somewhat, but Java's own goals of "being architecture neutral, portable, and dynamically adaptable", although noble, give room for an inherently insecurity by design.

 

Well, I mean how many times does it take? It's one thing to constantly need patching, all software does. But they have to patch their patches. Every. Single. Time. No end user should have to suffer that kind of, well, I have no way else to put how I feel it is, incompetence. It doesn't even take a month before patches are needing patches, that's just unacceptable to me. They've honestly earned the harsh criticism.

 

On one of my projects, we simply have Java in a recurring weekly patch SCCB for our systems in scope.