Go Back   MacRumors Forums > Archive > Archives of Old Posts > MacBytes.com News Discussion

 
 
Thread Tools Search this Thread Display Modes
Old Apr 24, 2007, 09:03 AM   #1
MacBytes
macrumors bot
 
Join Date: Jul 2003
Mac flaw may also affect Windows




Category: News and Press Releases
Link: Mac flaw may also affect Windows
Description:: none

Posted on MacBytes.com
Approved by Mudbug
MacBytes is offline   0
Old Apr 24, 2007, 09:16 AM   #2
ppc_michael
Guest
 
Join Date: Apr 2005
Location: Los Angeles, CA
Send a message via AIM to ppc_michael
Yet another reason to hate Java.
ppc_michael is offline   0
Old Apr 24, 2007, 09:37 AM   #3
clevin
macrumors G3
 
clevin's Avatar
 
Join Date: Aug 2006
Quote:
users of both the Mac OS X and Windows should turn off Java, if they have Apple's QuickTime software installed, Dai Zovi said.
another reason to use VLC rather than quicktime, lol
clevin is offline   0
Old Apr 24, 2007, 09:48 AM   #4
dmelgar
macrumors 65816
 
Join Date: Apr 2005
Quote:
Originally Posted by ppc_michael View Post
Yet another reason to hate Java.
There are no reasons to hate Java. Java is the key portable language. Its hated by Microsoft. Every other language tends to lock you into an operating system or platform, but you can write a Java program and run it on Mac OSX, or Linux or Windows or just about anywhere. Microsoft hates that. Thats enough for me to love it.
BTW, Java has an excellent security model as well, unlike other languages.
dmelgar is offline   0
Old Apr 24, 2007, 10:35 AM   #5
Sam0r
macrumors regular
 
Join Date: Jun 2005
Location: Birmingham, UK
To me, Java and TCL/TK are two of those scripting languages that should never ever ever ever have been created.

They're so amazingly slow and resource hungry, its just astonishing how they've actually lasted this long.

Take a look at Azureus, aMSN, Mercury Messenger and you'll see what I mean.
__________________
2011 iMac 27", i5 2.7ghz, 8gb, Radeon 6770m
2011 MacBook Pro 13", i5 2.3ghz, 8gb, Intel HD 3000
iPhone 5 White 32gb
Sam0r is offline   0
Old Apr 24, 2007, 10:41 AM   #6
dejo
Moderator
 
dejo's Avatar
 
Join Date: Sep 2004
Location: The Centennial State
Quote:
Originally Posted by Sam0r View Post
To me, Java and TCL/TK are two of those scripting languages that should never ever ever ever have been created.
Java is not a scripting language. That would be JavaScript. And although JavaScript and Java are (loosely) related, they are not at all the same thing.
dejo is online now   0
Old Apr 24, 2007, 10:41 AM   #7
clevin
macrumors G3
 
clevin's Avatar
 
Join Date: Aug 2006
Quote:
Originally Posted by Sam0r View Post
To me, Java and TCL/TK are two of those scripting languages that should never ever ever ever have been created.

They're so amazingly slow and resource hungry, its just astonishing how they've actually lasted this long.

Take a look at Azureus, aMSN, Mercury Messenger and you'll see what I mean.
if there were no osx, linux, unix, only windows, then u won't need to bear java anymore.

nothin in this world is perfect, you sure can complain its defects, but dont forget its benefit at the same time.
clevin is offline   0
Old Apr 24, 2007, 10:45 AM   #8
Sam0r
macrumors regular
 
Join Date: Jun 2005
Location: Birmingham, UK
Sorry, not scripting language, I forgot the word for a languate that isn't compiled.

Anyway, the only reason people use java is because its so damn easy to port the application to other operating systems.

Yeah, thats a great thing, but i'd much rather the application be as snappy as a c++ application which has been compiled than a slow, memory hungry, uncompiled java application.

Java isn't too bad from my experience with it on windows, but it sure is slow on a mac, and dont even get me started on TCL/TK.
__________________
2011 iMac 27", i5 2.7ghz, 8gb, Radeon 6770m
2011 MacBook Pro 13", i5 2.3ghz, 8gb, Intel HD 3000
iPhone 5 White 32gb
Sam0r is offline   0
Old Apr 24, 2007, 10:55 AM   #9
jwa276
macrumors regular
 
Join Date: Aug 2005
Location: Los Angeles, CA
I hate Java apps. I wish they would all dissappear! They are always buggy, slow, and hog all my resources (especially when used over the web).

Has anybody seen Adobe's new Apollo? It looks like the graphic designer's revenge to Java. It covers the multi platform issue seamlessly while being up to date on the most recent web 2.0 technologies.

I for one hope that Java dies a painful and meaningless death.

Sorry if that's a bit dark, I just had a sudden spurt of hatred because my health plan's online chat system uses Java and it crapped out on every computer I own...
jwa276 is offline   0
Old Apr 24, 2007, 10:56 AM   #10
iJawn108
macrumors 65816
 
iJawn108's Avatar
 
Join Date: Apr 2006
Quote:
What's Java, you ask? Beats me. I think I used it in 1995. Really, would you allow a 12-year old to run wild in your browser?
I never run with Java on, and I have yet to see any need to.
__________________
Eagerly awaiting the new Mac Pro
iJawn108 is offline   0
Old Apr 24, 2007, 10:58 AM   #11
dejo
Moderator
 
dejo's Avatar
 
Join Date: Sep 2004
Location: The Centennial State
Quote:
Originally Posted by Sam0r View Post
Sorry, not scripting language, I forgot the word for a languate that isn't compiled.
I believe the term you're looking for is "interpreted language". Ah, but Java is compiled, normally just to bytecode, but compilation to native machine code is also possible. Seems like you have heard some common Java misconceptions. I'd suggest doing a bit of research.
dejo is online now   0
Old Apr 24, 2007, 11:00 AM   #12
Sam0r
macrumors regular
 
Join Date: Jun 2005
Location: Birmingham, UK
Quote:
Originally Posted by dejo View Post
I believe the term you're looking for is "interpreted language". Ah, but Java is compiled, normally just to bytecode, but compilation to native machine code is also possible. Seems like you have heard some common Java misconceptions. I'd suggest doing a bit of research.
You're probably right. I always thought it was an interpreted languge (thankyou).

So, if it IS infact compiled, why is it so slow?
__________________
2011 iMac 27", i5 2.7ghz, 8gb, Radeon 6770m
2011 MacBook Pro 13", i5 2.3ghz, 8gb, Intel HD 3000
iPhone 5 White 32gb
Sam0r is offline   0
Old Apr 24, 2007, 11:07 AM   #13
dejo
Moderator
 
dejo's Avatar
 
Join Date: Sep 2004
Location: The Centennial State
Quote:
Originally Posted by Sam0r View Post
So, if it IS infact compiled, why is it so slow?
It's normally not compiled to machine code and most compilers don't do any optimization but rather leave it to the JRE.

Okay, enough thread hijacking...
dejo is online now   0
Old Apr 24, 2007, 12:46 PM   #14
Earendil
macrumors 68000
 
Earendil's Avatar
 
Join Date: Oct 2003
Location: Washington
After taking a crash course in Java Programming this last January term from the amazing (at least to us) Dr. Jones, I'd like to add my two sense concerning Java Bashing :-)

Java used to be dog slow due to the interpretation.
However, Java as it stands today has about a 1% loss in performance, and if done well, even less, application depending.

There are probably a number of Java shareware apps that you use and don't know they are even written in Java because they don't act/behave like the java apps of the late 90's early 00's.

Peace,
~Tyler
__________________
Current: MacMini 2ghz / iPod Touch 2g / iPhone 4g
Retired: Alum Powerbook 1.25ghz / 4gb iPod Mini

"ooo! They have the internet on computers now!" - Homer J. Simpson
Earendil is offline   0
Old Apr 24, 2007, 12:50 PM   #15
tutubibi
macrumors 6502a
 
tutubibi's Avatar
 
Join Date: Sep 2003
Location: localhost
Quote:
Originally Posted by jwa276 View Post
I hate Java apps. I wish they would all dissappear! They are always buggy, slow, and hog all my resources (especially when used over the web).

Has anybody seen Adobe's new Apollo? It looks like the graphic designer's revenge to Java. It covers the multi platform issue seamlessly while being up to date on the most recent web 2.0 technologies.

I for one hope that Java dies a painful and meaningless death.

Sorry if that's a bit dark, I just had a sudden spurt of hatred because my health plan's online chat system uses Java and it crapped out on every computer I own...
Nobody is forcing you to use Java apps (unless you are in the SW development field ).

And often it's not Java but sloppy programming to blame. Entry criteria to be considered a programming these days is pretty low (started going downhill with Visual Basic ).
tutubibi is offline   0
Old Apr 24, 2007, 01:22 PM   #16
aranhamo
macrumors regular
 
Join Date: Oct 2004
Java is nominally an interpreted language, and it used to be slow back in the old days. A lot of the FUD about Java used to be true, just like a lot of the criticisms of Macs used to be true, but are mostly false today.

Just-In-Time compilers have greatly improved the performance of interpreted languages like Java and C#. I don't have a lot of experience with .NET applications, but as I understand it, all .NET applications are compiled into a form of bytecode called Common Intermediate Language, regardless of which language they were originally developed in. They are then compiled at runtime, using a JIT, but the performance is still very good and for most applications indistinguishable from compiled code.

This is how modern Java JVMs work as well. Most of the code executed during a typical Java program is actually native code, as common packages are precompiled, and each class is only interpreted the first time that it is loaded. During my undergrad studies, we performed a number of benchmarks comparing Java performance with compiled C and C++ code, and for most applications the Java code performed about as fast as the native code, and in a few cases even faster. There were of course some applications where the native code always beat the Java code, but usually not by much.

JVMs vary, and I've heard that performance is poor in Apple's JVM, but I've never noticed it myself. But I rarely have an opportunity to code in Java at all, let alone on a Mac. At my current job I work mostly in Perl on Linux and VSC++ 6.

Every language and programming environment has its advantages; sometimes Java is an appropriate language to use, sometimes it's not. Development with Java is often faster and more bug-free than many other languages, particularly C and C++. There are great IDEs available for Java development. It can be easier to develop multi-platform programs in Java. It's more object-oriented than most other languages, which can contribute to better, more bug-free code.

Especially don't confuse Java with Javascript. They have similar syntax, but they are totally different, and most of the problems I encounter with websites have nothing to do with Java, but rather Javascript.

As another poster said, there are probably a lot of applications you use that were written in Java and you don't even know it.

Below is a nice article on what's good about Java, but other languages have their strengths as well:
http://www.unix.org.ua/orelly/java-ent/jnut/ch01_02.htm
aranhamo is offline   0
Old Apr 24, 2007, 01:36 PM   #17
aranhamo
macrumors regular
 
Join Date: Oct 2004
Quote:
Originally Posted by iJawn108 View Post
I never run with Java on, and I have yet to see any need to.
Strikes me as ironic that Pinkerton calls Java irrelevant while posting on his Camino blog...
aranhamo is offline   0
Old Apr 24, 2007, 03:00 PM   #18
daveL
macrumors 68020
 
daveL's Avatar
 
Join Date: Jun 2003
Location: Montana
From what I recall, no one had been able to hack the Mac after the first 2 days of the contest, so the organizers rigged up a malformed, empty Web page to provide a target for the attack. It was only then that the winner of the contest succeeded in breaking in.

I won't be turning Java off.
__________________
-daveL
daveL is offline   0
Old Apr 24, 2007, 03:42 PM   #19
aranhamo
macrumors regular
 
Join Date: Oct 2004
Quote:
Originally Posted by daveL View Post
From what I recall, no one had been able to hack the Mac after the first 2 days of the contest, so the organizers rigged up a malformed, empty Web page to provide a target for the attack. It was only then that the winner of the contest succeeded in breaking in.

I won't be turning Java off.
My understanding is that the attacker created the web page, which exploited a Java-related flaw in Quicktime (which Safari uses for a number of things). Then, when viewing the page in Safari on the target computer, it allows the attacker to gain access to a shell with user-level privileges.

The rules were relaxed to allow that exploit, but only in that I believe the first day rules required the attacker to gain access without user intervention, which no one was able to do on the first day. The successful exploit requires the user to visit the malicious web site.
aranhamo is offline   0
Old Apr 24, 2007, 05:47 PM   #20
nagromme
macrumors G5
 
nagromme's Avatar
 
Join Date: May 2002
Quote:
Originally Posted by daveL View Post
From what I recall, no one had been able to hack the Mac after the first 2 days of the contest, so the organizers rigged up a malformed, empty Web page to provide a target for the attack. It was only then that the winner of the contest succeeded in breaking in.

I won't be turning Java off.
That's not quite what happened. Nothing was done to make the target MacBook more vulnerable than normal. Rather, exploits that involved the World Wide Web were not allowed at first, with the plan being to allow them later. That's what happened. Perfectly fair rules, since people do use the World Wide Web.

YOUR computer is vulnerable to this bug, regardless of whether you use Safari, Firefox, or IE, with no rigging needed, if you visit a malicious Web site, or if a site you already use is hacked to make it malicious.

The reason there's not much cause to worry is that the details have not been shared with the public. But in theory someone else COULD find the flaw before Apple fixes it, and COULD craft a malicious page, and you COULD visit that page for some reason before it gets caught and shut down.

Pretty long odds, but if you don't need Javascript*, turning it off for a week or two is simple protection

Last edited by nagromme; Apr 24, 2007 at 07:00 PM. Reason: *
nagromme is offline   0
Old Apr 24, 2007, 06:25 PM   #21
Stratification
macrumors regular
 
Join Date: Jan 2005
Location: Spokane, WA
Quote:
Originally Posted by jwa276 View Post
I hate Java apps. I wish they would all dissappear! They are always buggy, slow, and hog all my resources (especially when used over the web).

Has anybody seen Adobe's new Apollo? It looks like the graphic designer's revenge to Java. It covers the multi platform issue seamlessly while being up to date on the most recent web 2.0 technologies.

I for one hope that Java dies a painful and meaningless death.

Sorry if that's a bit dark, I just had a sudden spurt of hatred because my health plan's online chat system uses Java and it crapped out on every computer I own...
Keep in mind that a lot of Apollo apps will be written in Flex Builder, which is built on Eclipse, which is . . . a Java application.
Stratification is offline   0
Old Apr 24, 2007, 06:48 PM   #22
dejo
Moderator
 
dejo's Avatar
 
Join Date: Sep 2004
Location: The Centennial State
Quote:
Originally Posted by nagromme View Post
Pretty long odds, but if you don't need Javascript, turning it off for a week or two is simple protection
You meant Java, right?
dejo is online now   0
Old Apr 24, 2007, 07:00 PM   #23
nagromme
macrumors G5
 
nagromme's Avatar
 
Join Date: May 2002
Quote:
Originally Posted by dejo View Post
You meant Java, right?
* Yes, indeed I do Which is lucky, since turning off JavaScript would inconvenience me more.
nagromme is offline   0
Old Apr 25, 2007, 06:52 AM   #24
zv470
macrumors 6502
 
Join Date: Jul 2004
Location: New Zealand
Quote:
Originally Posted by Sam0r View Post
So, if it IS infact compiled, why is it so slow?
...because Java does all the memory management for you.
zv470 is offline   0
Old Apr 25, 2007, 07:01 AM   #25
SPUY767
macrumors 68000
 
SPUY767's Avatar
 
Join Date: Jun 2003
Location: GA
So are we certain that this is Java because originally it was JavaScript's webkit implementation, now, it's a Quicktime but with java. All this, while being reported by SecuurityFocus which is believe is a Symantec sponsored website. With David Dai Zoi or whatever the hell his name is being quoted as saying now three different things that I have read. Someone needs to get down to the bottom of this. The most likely scenario is a combination of Java not playing like its supposed to, and Quicktime not handling some erroneous data properly.
__________________
Yo' mama's so STUPID, she went to Bangkok to get a TIE Fighter.

Last edited by SPUY767; Apr 25, 2007 at 08:26 AM.
SPUY767 is offline   0


 
MacRumors Forums > Archive > Archives of Old Posts > MacBytes.com News Discussion

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
thread Thread Starter Forum Replies Last Post
Lost windows 7 password. Need to create windows bootable usb with my mac oxplode OS X 1 Mar 17, 2014 12:35 PM
why does DU show windows.boot.ini files updated when I don't have windows on my mac GlowJoy MacBook Pro 1 Feb 22, 2014 08:41 PM
iMac vs Mac Mini graphics and how it would affect me? kbutler84 Buying Tips and Advice 3 Jul 18, 2013 09:29 AM
mac mini 2012 all usb 3.0 port affect wifi lauandyuen Mac mini 13 Apr 2, 2013 03:37 AM
question about how switching to mac will affect other apple devices watchthesky Mac Basics and Help 8 Jun 23, 2012 11:49 PM

Forum Jump

All times are GMT -5. The time now is 06:27 PM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC