Re: VMS website updated.

From: Barry Treahy, Jr. (Treahy_at_MMaz.com)
Date: 09/11/03 

Date: Thu, 11 Sep 2003 10:15:35 -0700

Larry Kilgallen wrote:

>>Why? MY JavaScript is not a security problem!
>>
>>
>
>But _you_ are not running that JavaScript. You are asking others to run
>it on _their_ machines.
>
>The big security problem with Java, JavaScript, ActiveX etc. is not the
>nature of the programming language but the notion of mobile code. The
>alleged sandbox environments provided by browsers are _not_ adequate.
>
>
To put JS into the same category as ActiveX and Java is wrong! JS can
only manipulate the DOM, nothing else so in in reality, the only
security concern is someone snatching your cookies which would have to
be unencrypted content to be of any remote value.

In a VMS context, I view the capabilities of JS as nothing more than a
scripting language like DCL where as both ActiveX and Java are the
compiled language equivalents; For example, DCL can't do stack
overflows, or Executive/Kernel calls, where as VMS compiled code can
(presuming you have the privs). You can't compromise a VMS system using
DCL anymore than you can compromise a Windows system with JS! There is
not one documented case of JS being the cause of a system compromise,
let alone to the extent of a virus, worm or trojan being planted.

Folks on this list rant and rave about GUI related applications on VMS,
VMS LOST THAT WAR long ago! Get over it and either stop bitching or
acquire tools that can do the job that are not seven or eight years
old... As for text only solutions like Lynx, well consider the target
market of web sites; Lynx is so low on the noise level it doesn't even
rank! Certainly not good stats for a business model...

Barry Treahy 

-- 
Barry Treahy, Jr                       E-mail: Treahy@MMaz.com
Midwest Microwave                          Phone: 480/314-1320
Vice President & CIO                         FAX: 480/661-7028

Relevant Pages

  • Re: The possibility of vms opening up?
    ... discriminate between great programmers and mediocre programmers." ... Since when did it become the purpose of a programming language to ... I presume he means with java, how do you know if someone is good at ... Does University of Scranton teach vms? ...
    (comp.os.vms)
  • Re: Comparing Lisp conditions to Java Exceptions
    ... All the ISO standards in the world will not make the world ... Nothing keeps you from annotating your program with exceptions based on what ... language should adhere to your theory. ... Curiously, although you don't say it, Java has the opposite problem. ...
    (comp.lang.lisp)
  • Re: casts
    ... This is why most shit programmers refuse to learn languages including ... C Sharp and Java. ... compiler in a later edition of Visual Basic, ... language for processing data. ...
    (comp.lang.c)
  • Re: C, really portable?
    ... > Wait, is Java a modern language superior to C, or is it still ... It is a much better OO language than C++, ... It depends what you are doing, Java aims for rigorous portability - the same ... regardless of platform. ...
    (comp.lang.c)
  • Re: Is anybodys favorite computer programming language not included here?
    ... to talk about getting me some paying work writing Java classes. ... and could be copied to a script (as in Java BeanShell or Lisp PROG). ... >> please post a followup saying what language it is, ... Server: "Mother, ...
    (comp.programming)