Why are applets restricted to connecting to only one host?

I'd like someone to help me out with an explanation of why Java applets are restricted to connecting to (opening up Socket objects to, etc.) only the host from which the applet was downloaded. Why would allowing the applet to connect to arbitrary hosts be dangerous? The very point of applets is to run things from untrusted servers, using the security limitations Java places on applets for protection, right?

cronosprime1 wrote:
Well, isn't it true that if my employer wanted to programmatically communicate this information to a third party without my consent he'd be able to do so anyway? He'd just not use an applet to do it. Or he'd just use another applet, one connected to Viruses-R-Backwards from his computer, to whore my information out. It seems to me that in the end, I either trust the party I'm sending information to or I don't. If I don't, an applet can't keep my information safe because the party I'm communicating with could simply forward all of that information to untrusted parties. The only way to keep my information safe in this case is not to send it. If I do trust the party I'm communicating with, then I also trust that I won't be connected to malicious hosts. Given what I said, I still don't see how the single host limitation helps protect me. On the other hand, it prevents a great number of useful applications - such as delegating clients to alternate servers for a video game, etc.Realistically, yeah, there probably aren't many cases where the single-host limitation will help you. But by making it the default, and forcing you to explicitly allow other connections, it means you can always know where your applet is connecting to. Also note that, as I pointed out above, it's not just about protecting you, but also about making it harder for you to spread malware.
Here's one more potential scenario. You run an app from TrustyCorp™. The folks at TrustyCorp™ trust IffyCorp™, and want their app to communicate with it as part of its operation. You may or may not trust IffyCorp™. Without the default single-server limitation, it could go behind your back to connect to a site that TrustyCorp™ is okay with, but you're not.
Really, it just comes down to keeping things as minimal as possible unless you explicitly open them up. I wouldn't get too hung up on it.

Similar Messages

  • Why won't my iMessage work with only one contact in my phone all my other iMessages send and they just got an iphone but all their iMessages are sending also. I've tried restarting my phone, deleting messages, contact, restarting network

    Why won't my iMessage work with only one contact in my phone all my other iMessages send and they just got an iphone but all their iMessages are sending also. I've tried restarting my phone, deleting messages, contact, restarting network

    Hello Jesslb23,
    Thanks for using Apple Support Communities.
    For more information on this, take a look at:
    iOS: Troubleshooting Messages
    http://support.apple.com/kb/ts2755
    To resolve issues with sending and receiving iMessages, follow these steps first
    Check iMessage system status for current service issues.
    Go to Settings > Messages > Send & Receive and make sure that you have registered iMessage with your phone number or Apple ID and that you have selected iMessage for use. Learn more about troubleshooting iMessage registration if the phone number or Apple ID isn't available for use.
    Open Safari and navigate to www.apple.com to verify data connectivity. Learn more about troubleshootingcellular data or a Wi-Fi connection if a data connection isn't available.
    iMessage over cellular data might not be available while on a call. Only 3G and faster GSM networks support simultaneous data and voice calls. Learn more about which network your phone supports. Go to Settings > Wi-Fi and turn Wi-Fi on to use iMessage while on a call if your network doesn't support simultaneous data and voice calls.
    Restart your device.
    Tap Settings > General > Reset > Reset Network Settings on your iPhone.
    If you are still unable to send or receive an iMessage, follow these steps
    Make sure that the contact trying to message you isn't blocked in Settings > Messages > Blocked.
    Verify that the contact you are attempting to send a message to is registered with iMessage.
    If the issue occurs with a specific contact or contacts, back up or forward important messages and delete your current messaging threads with the contact. Create a new message to the contact and try again.
    If the issue occurs with a specific contact or contacts, delete and re-create the contact in the Contacts application. Create a new message to the newly created contact and try again.
    Back up and restore your device as new.
    Best of luck,
    Mario

  • Airport Express won't connect to ONLY ONE IP-address (website)

    This is driving me crazy !!!
    I'm using a Airport Express (Firmware 6.3) and a G5 (1.8 DP). My internet connection through Airport works fine, but... I can't connect to ONLY ONE IP-address. No PING no nothing. Coincidently it's my own website! HELP!
    When I connect my G5 directly with a cable, everything works fine.
    I've given the Airport a 'Factory reset' but even this won't help. It looks like the Airport is blocking only my own website/IP-address.
    Is there any solution?

    I have exactly the same problem. I have been going crazy for the last two days. I upgraded and downgraded the AE firmware and nothing. I reset it to factory defaults and reconfigure it from start and nothing. All my 3 macs (G3,G4, and the macbook pro) are having the same problem and it happened at the same time for no apparent reason. From my house (were the AE is) I can access any IP except the one were my server lives (outside my house at the university). I cannot even access the university web site or my mail using IMAP from Mail.app. Traceroute ends in some place outside the university. Have you found a solution? I might have to ditch AE if this continues.
    ~marcos/

  • How to create a VLAN on only one host?

    Hi,
    is there a way that a VLAN can be created on a specific host's vNICs rather than appying the VLAN to all hosts through an updating template?
    I am kinda trying to get my head around UCS, I have alwats created vlans by creating the VLANs first and then modify the VLANs in an updating template, but in this case, only one host needs that VLAN.

    Hi Max,
    The only way to do this is if you unbind the service profile from the template (service profile template, and vnic template), but this means that you will need to keep track of the changes for this service profile separately as this service profile won't be part of these templates. 
    Note that you will still need to allow the vlan on the uplinks but you will be able to assign this vlan to the unbounded service profile.

  • How can I restrict options result to only one cost center?

    In transaction KS03 (Display cost Center), when I search for a cost center (hit F4), I have an option to drill down by Company code, controlling area, Cost Center Category, Person Responsible etc.
    My question is, how can I restrict users to select only controlling area they are authorized for ? Is there any authorization object I can use to restrict user's access to particular value in the table CSKS ?
    Thanks,
    Karan.

    Hi Karan,
    If you want to restrict on the values users can return when using F4 lookup then there may be some useful info in the following link:
    Authorization object for capacity planning CM03

  • HT4437 is there a way to connect my ipad with airplay to more than one airplay enabled speaker? at the moment it allows me to connect to only one?

    is there a way to connect my ipad using airplay to more than one airplay enabled speaker?  when i tap the airplay icon on my ipad i see the list of all the speakers in each room but i can only connect to one at a time. Itunes, on my laptop, allows me to connec to all of them at the same time but Music on my ipad allows me to choose only one speaker at a time. Can several be connected at the same time using Music on Ipad or iphone?

    That's great, but not what we want to do. I've been looking at all the boards for a solution to this and, you are correct. There isn't one - at least not one native to iOS. What I think EricB2 would like, as well as many of us, is the ability to take any audio stream (pandora, tune-in radio, etc.) and stream directly to multiple airplay devices from our iPads and iPhones without having to use the computer. Just walk into the house from the car, hit a button on the iDevice and start listening to the same stream we were listening to in the car on all of our home speakers. I know, this is like science fiction.  My own opinion is that it would cut into Apples lucrative iTunes business model and really isn't in their best interest, so I don't think it will be happening anytime soon. Bottom line is if you want to use your Apple devices for whole house streaming, you need a computer and music from iTunes($$). Otherwise it's $$ out of Apples pocket.

  • Why do my email attachments open as only one page in Preview, I can't print multiple page documents

    Why do my emailattachments open as only one page in Preview? Multiple page attachments only will print as 1 page with very small  print?

    It's a Finder feature, related to Quick Look. You can hit the space bar in the file list to get a preview.
    If that doesn't work, you may have an issue witha  preference file or similar. I find rebuilding the launch databse works quite well resilving tis kind of thing, as does trashing Finder preferences

  • Why does my imported video appear on only one clip?

    I had only made a  few in the past but I remember well that the footages appeared as several clips on the pane window.On this occasion I have but only one clip, despite the fact i wasnt running the camera constantly and took several bits of film footage.Rather confused by it

    Actually i just finished importing in and it has appeared as two clips which still isnt much good as it limits my editing options somewhat.There area few bits i would like to remove , then add trans and effects as well

  • Only one Host not collecting data

    Hi,
    When I check Data Collection window only one machine seems to have a yellow colored exclamation mark next to it. It says data not collected in the latest collection cycle. I have uninstalled and re-installed the agent twice, but same message comes up. Also, i have to zones that have data collection in active. Any ideas on how to fix this issues.
    Thanks in advance.

    Hi,
    When I check Data Collection window only one machine seems to have a yellow colored exclamation mark next to it. It says data not collected in the latest collection cycle. I have uninstalled and re-installed the agent twice, but same message comes up. Also, i have to zones that have data collection in active. Any ideas on how to fix this issues.
    Thanks in advance.

  • Why are all my fonts capital letters only?

    I was trying to design a birthday invite the other day and all of my fonts are only typing in capital letters. The caps lock is not on and i tried messing with the button on my keyboard thinking maybe it was sticking but this problem is only happening in photoshop. How did my fonts become all caps locked and how can i fix it?

    AWESOME! Thanks so much! Such and easy fix, can't understand why Tech support on the phone couldn't answer that question without wanting to charge me $40!!

  • Why are my RAW and large JPGS only syncing at 3.5 mp? I open Photogene 4 and meted at shows 3.5MB only.

    Hello everyone.
    Syncing RAW files is too fast. They are only syncing as JPGS. How can I get a true RAW file sync? I know I can go to iTunes and click on the apps button and select an app that supports a "documents folder" type of sync. But, when I open photogene 4 I can't access "document folder". I was told Photogene supports RAW files. Anyone?

    Thanks, I realise that...but I only use my phone to check emails (never any heavy files as I can open them at home) and occasionally browse a few websites (again nothing really heavy). No dropbox etc use at all, so I know for a fact that my usage is under my limit of 500 MB. Also, I forgot to mention, I have only had this phone for 6 weeks and it's already showing 4.1 in + 5.3 out GB of usage!

  • Why are the creative cloud mobile apps only available for iphone and ipad? I need Android based apps

    Where are the android based mobile apps? Why do you people assume everyone uses a ipad or iphone
    I want android mobile apps!

    this didn't actually answer my question. The feature request link you sent me to didn't have the mobile apps for creative cloud listed Adobe Idea, Adobe Sketch and Ink and Slide they aren't available for android tablets and Android Phones. These aren't even available for Windows tablets. But they aren't available in the feature request section either.

  • Why are some of the CC apps only showing as "try"

    When I am logged into my account via either of 2 computers or the web, the list of "Downloads" says "TRY" on  the download button for Lightroom and other apps. Which apps does my CC membership include?

    Restarting the Creative Cloud Desktop app. worked. All Adobe apps are once again available. Although LR5 doesn’t recognize that the current app is already installed on my computer. Thanks. jd
    Technically speaking, yours:
    Jeff Dunker
    <Removed by Moderator>

  • Why are my color choices coming out only in grey tones?

    I am using photoshop CS2. for some reason in the picture im working on, i am only able to work in black, white and shades of grey. i choose  color (green, say) for the forground color, and by the time i've said "ok" and gone back to the work space, its shown me a grey that is the same tone as the green i chose...but grey none the less. weird, right?

    go to Image-Mode and make sure you're not in Greyscale mode. Switch to RGB and then you should be okay.

  • Why are there restricted procedures in forms?

    I accept it as a fact that they exist. But it would be a lot less annoying to me when I am restricted by them to understand the reason for there existence.
    Would somebody please point me to some resource that explains the reason for the existence of restricted procedures in Oracle Forms.

    Honestly, we didn't put that restriction in just for the hell of it ;o)
    The reason is actually very sound. Many triggers involve internal navigation by Forms. If you override this you can "break" where Forms thinks the current item is and where it infact really is...It also stops you jumping out of places where you need to stay..
    Having said that there is a work around - if you need to use a restriced built in, instead create a trigger that fired and then put the code in the WHEN-TIMER-EXPIRED trigger.
    Hope that helps
    Regards
    Grant Ronald
    Oracle Product Management

Maybe you are looking for