Why java is very secure

tell the reasons why java is very secure compare than other languages

s.s.s.s wrote:
tell the reasons why java is very secure compare than other languagesIts not, security is not determined by the language or platform. Sure Java provides the tools to implement a secure environment, and I'd hesitate to say that Java is among the easier platforms to get solid security setup. But it still depends on one major factor if it is ever going to happen: you.

Similar Messages

Why java is secured?

hi all
can anybody tell me why java is secured?
any help will be appreciated
thanks

Java doesn't allow direct access to memory like C/C++. Memory access violations are the root cause of 90% (approx, maybe more) of all software bugs/problems. This is also the root cause of many viruses, etc. But there are many more reasons why Java is secure. Read up on Java and security and stuff...

Why java is free?

I don't understand why java technology is free to download, and even more of this, the source code is available.
I think sun can make a lot of money from us. (without giving ideas)

They're trying mic$ofts trick - for years micro$oft offered wondoze on easy to copy disks, with little or no security (even though they could have implemented some kind) knowing that people would pirate it, and spread it around very quickly. Then, when most of the computing world is hooked on using windoze, they upgrade to a flashy secure version that you have to pay loads for. It was a gamble, but certainly paid off. What sun are doing is the only possible tactic for them at the moment, which is to spread java as much as possible to ensure loads of people use it - they are not doing this for fun, or the love of the language, but purley and simply as a business strategy.

Java.lang.SecurityException: [Security:090398]Invalid Subject: WEBLOGIC 9.1

Hi
I am getting this error when I am making an EJB method which resides in a different weblogic 9.1 server.
I have enaled the trust between my two domains. Set the required class path settings.
My client call is from a JSP , say client.jsp.
Here I get remote object of the EJB and calls the required method
Now
1) My EJB calls are succesful when I DO NOT secure it
2) but when I make it is secured , ie when I
include the jsp in secured URL ie. under <security-constraint><url-pattern>client.jsp</> in web.xml
, it gives me the follwing error
The stack trace is given below
java.lang.SecurityException: [Security:090398]Invalid Subject: principals=[com.ebreviate.security.wl9realm.EBRUser@a09a08, ess, everyone]
at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:191)
at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:315)
at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:250)
at weblogic.jndi.internal.ServerNamingNode_910_WLStub.lookup(Unknown Source)
at weblogic.jndi.internal.WLContextImpl.lookup(WLContextImpl.java:374)
Truncated. see log file for complete stacktrace
Any idea why it is ?
Please let me know
Thanks
Binu
Edited by binurajkr at 01/25/2008 4:36 AM

Hi. Contact official BEA Support. This is likely
to be a known issue with a patch available to fix it.
Joe
binu raj wrote:
Hi
I am getting this error when I am making an EJB method which resides in a different weblogic 9.1 server.
I have enaled the trust between my two domains. Set the required class path settings.
My client call is from a JSP , say client.jsp.
Here I get remote object of the EJB and calls the required method
Now
1) My EJB calls are succesful when I DO NOT secure it
2) but when I make it is secured , ie when I
include the jsp in secured URL ie. under <security-constraint><url-pattern>client.jsp</> in web.xml
, it gives me the follwing error
The stack trace is given below
java.lang.SecurityException: [Security:090398]Invalid Subject: principals=[com.ebreviate.security.wl9realm.EBRUser@a09a08, ess, everyone]
at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:191)
at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:315)
at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:250)
at weblogic.jndi.internal.ServerNamingNode_910_WLStub.lookup(Unknown Source)
at weblogic.jndi.internal.WLContextImpl.lookup(WLContextImpl.java:374)
Truncated. see log file for complete stacktrace
Any idea why it is ?
Please let me know
Thanks
Binu
Edited by binurajkr at 01/25/2008 4:36 AM

Java.lang.SecurityException: [Security:090398]Invalid Subject

Hi
          I am getting this error when I am making an EJB method which resides in a different weblogic 9.1 server.
          I have enaled the trust between my two domains. Set the required class path settings.
          My client call is from a JSP , say client.jsp.
          Here I get remote object of the EJB and calls the required method
          Now
          1) My EJB calls are succesful when I DO NOT secure it
          2) but when I make it is secured , ie when I
          include the jsp in secured URL ie. under <security-constraint><url-pattern>client.jsp</> in web.xml
          , it gives me the follwing error
          The stack trace is given below
          java.lang.SecurityException: [Security:090398]Invalid Subject: principals=[com.ebreviate.security.wl9realm.EBRUser@a09a08, ess, everyone]
          at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:191)
          at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:315)
          at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:250)
          at weblogic.jndi.internal.ServerNamingNode_910_WLStub.lookup(Unknown Source)
          at weblogic.jndi.internal.WLContextImpl.lookup(WLContextImpl.java:374)
          Truncated. see log file for complete stacktrace
          Any idea why it is ?
          Please let me know
          Thanks
          Binu

I got this issue resolved by setting
          Context.SECURITY_PRINCIPAL, "" , before the RMI ejb call
          Binu

Java.lang.SecurityException: Security: Invalid Subject: principals

I am getting the following exception intermittently:
java.lang.SecurityException: Security: Invalid Subject: principals=[XXX, Administrators]
What i am doing is, i have two weblogic servers both running Weblogic 10.0 and running on different domains, a war is deployed on one server (server A) which sends a message to queue on another server (Server B), now everything works but if i restart B then A throws the above Security Exception while looking up the queue on Server B?? Any ideas why, i haven't configured any security credentials.
If i restart A after restarting B then everything works again but restarting all the servers each time one gets restarted is cumbersome,so does someone knows answer to the question above?
Edited by: user4828945 on Feb 11, 2009 5:41 PM

If you dont require authentication, then enable the global trust between the domains.
When this feature is enabled, identity is passed between WebLogic Server domains over an RMI connection without requiring authentication in the second domain. When inter-domain trust is enabled, transactions can commit across domains. A trust relationship is established when the Domain Credential for one domain matches the Domain Credential for another domain.
By default, the Domain Credential is randomly generated and therefore, no two domains will have the same Domain Credential. If you want two WebLogic Server domains to interoperate, you need to replace the generated credential with a credential you select, and set the same credential in each of the domains.
Link :[http://e-docs.bea.com/wls/docs100/ConsoleHelp/taskhelp/security/EnableGlobalTrustBetweenDomains.html]

Java 2D very slow with Windows XP

Hi all!
I'm writing an isometric game engine using Java 2D API, in full-screen exclusive mode and using all the advantages of the new VolatileImage class. The engine is almost finished, I'm testing it putting some animated players on screen and showing the frame rate of the engine. Everything went right, frame rate was very high in Linux and Windows 98/Me. But when I try to run the engine on Windows XP I can only get 5 or 6 fps!!!! And I don't know why!! It seems that XP makes Java run very slow... at least when using Java2D...
Please, anyone knows why the performance is reduced??? Is there a new JRE release for Windows XP?? I'm using JDK 1.4.1.
Thanks for your help.

If you're using the Fullscreen API, then you're using BufferStrategy, thus you shouldn't use VolatileImages, it does this for you in the background. You shouldn't create any buffers, simply use the one provided. I'm assuming your problem probably lies in transparency. I've made an isometric engine using the fullscreen API that has run with complete 60fps page flipping. I would assume your bottle-neck lies in:
Transparencys (These are very slow, there is a way to make a bitmask, much like you'd do in DirectX)
Dynamic Memory allocation/Alpha rendering in your animation loop. (You need to allocate ALL of the colors you're going to use, and avoid using an alpha component if you want to avoid the VM getting bogged down by the garbage collector because you're allocating 30 Color objects a second).
I made a Color object that was some what hacked together that has methods to allow you to access it's values for doing this kind of thing, allocating your scheme before hand is an easier approach.
The method that performs the page flipping is a BLOCKING method, so you should orient your drawing before it, and not assume it's simply placing a request, like repaint does.
-Jason Thomas.

Why Java? Why not C++ ?

Hi
This question has probably been asked here before. I am new to this forum, as well as to Java: actually, I'm trying to decide if it's worth learning. I do know C++, but have not worked with it for several years now (I am not in the software profession in the true sense of the word).
My understanding is that Java is some sort of 'safer' version of C++, without several C++ features. Some of Java's shortcomings relative to numerical computation, for example, are itemized here: http://math.nist.gov/javanumerics/reports/jgfnwg-01.html. I'm sure C++ has its own list of shortcomings, but it seems a very powerful language. I understand that C++ can be 'dangerous', but presumably its 'dangerous' aspects can be avoided by the inexperienced programmer (I am not trying to be snobby here... I have several years of programming experience, but it dates back quite a while).
Java is very popular for creating web applets (it may very well be the only language that allows this... presumably, this is determined by browser technology). I am slightly peeved at having to learn another OOP language only to be able to write applets. Had anyone ever thought of implementing a 'C++ virtual machine'? Was the task considered too complex? What marketing factors were present?
I am writing this partly because I must now learn yet another OOP...Object Oriented Pascal... (at least its rudiments) because I'm using a RAD tool (Lazarus) at work... sigh. This is another case of "tool-driven language learning"...
I currently work in a hardware-language environment. It's curious to note that Pascal has its roots in ALGOL, as does VHDL. I would liken Java & OOPascal to VHDL, which is a very strongly typed language and has other 'safe' features (along with often frustrating limitations); and C++ to Verilog, which is very flexible and hence considered 'dangerous'.

Hi
This question has probably been asked here before. I
am new to this forum, as well as to Java: actually,
I'm trying to decide if it's worth learning. I do
know C++, but have not worked with it for several
years now (I am not in the software profession in the
true sense of the word).
My understanding is that Java is some sort of 'safer'
version of C++, without several C++ features. Some of
Java's shortcomings relative to numerical
computation, for example, are itemized here:
http://math.nist.gov/javanumerics/reports/jgfnwg-01.ht
ml. I'm sure C++ has its own list of shortcomings,
but it seems a very powerful language. I understand
that C++ can be 'dangerous', but presumably its
'dangerous' aspects can be avoided by the
inexperienced programmer (I am not trying to be
snobby here... I have several years of programming
experience, but it dates back quite a while).The alleged dangers of C++ are manageable.
Java is very popular for creating web applets (it may
very well be the only language that allows this...
presumably, this is determined by browser
technology). I'd say that applets are one of the least important features of Java. You've been reading too much stuff from 1998.
I am slightly peeved at having to learn
another OOP language only to be able to write
applets. This is an ignorant statement. That's not why you should learn Java.
Had anyone ever thought of implementing a
'C++ virtual machine'? Was the task considered too
complex? What marketing factors were present?Why? What does that buy you?
ANSI C++ is pretty portable stuff. You can compile and run it on any machine that has an ANSI C++ compiler, and the list is long.
Language extensions (e.g., Microsoft enhancements) are what keep C++ from being portable.
I am writing this partly because I must now learn yet
another OOP...Object Oriented Pascal... (at least its
rudiments) because I'm using a RAD tool (Lazarus) at
work... sigh. This is another case of "tool-driven
language learning"...So why are you are asking about Java if you're learning Object Pascal?
I currently work in a hardware-language environment.
It's curious to note that Pascal has its roots in
ALGOL, as does VHDL. I would liken Java & OOPascal to
VHDL, which is a very strongly typed language and has
other 'safe' features (along with often frustrating
limitations); and C++ to Verilog, which is very
flexible and hence considered 'dangerous'.Don't be so afraid. C++ is the predecessor of Java, so they are pretty similar. There are bits that were taken out of and added to Java based on lessons learned, but C++/Java/C# can be considered to be in the same family of languages.
%

Why sun leader do not think about "Why Java Web Start not be used widely"

{color:#ff0000}Why sun leader do not think about "Why Java Web Start not be used widely"
{color}
Java Web Start was instruduced in jdk1.2, it's about ten years ago,But it's still not widely used--WHY?
it's not because the design, it's becasue the code--the garbage code-- even the last version not work in many user computers,
just not work suddendly -- noboday know reason--- if you do not believe, please google internet, many people suffered and suffering from web start!
It's incredible that a famous big company like sun can not resolve an deployment problen in ten years that some very small company can do good work in much more short time !!!
That' sun-- always say and design good things, then publish trouble and pain to their users. I really do not know what the sun's engineers are doing in so
many years! -- why they do not know deployment is so important than others -- if deployment work fine, then the wrong thing can be correct easy !
Sun, please do an famous big company -- give happy to user rather than pain !!! Please give us -- your users an stable and fast java web start to save us.
{color:#ff6600}(Note: I use java web start to depoly our application, then receive endless complains, not work, slow and so on. now, we has no way just to give it up--design ourself's deployment-- that's also done by many pained people---just google it){color}
Here is an desing suggestion:
Client-end should be simple and stable, should let the server-end do complex thing .(now sun do opposite thing, they make Client-end complex, but server simple) ---it's because that Client-end will take widely effect on user's computer. update a few server is much more easy then update a amount of clients!
Edited by: Jethro-Soft on Jun 30, 2008 8:49 PM
Edited by: Jethro-Soft on Jun 30, 2008 8:52 PM

Please check:
http://joust.kano.net/weblog/archive/2006/04/06/why-i-will-never-deploy-with-java-web-start-again/
http://kylecordes.com/2006/04/08/auto-update-no-web-start/

Why Java not allowed Widening and auto-boxing in single expression?

Hi All,
I have a very small question in my mind, that I would like to put on this discussion board.
Why Java not allowed Widening and auto-boxing in single expression?
Like:
short s = 10;
Long l = s;I want to know if java allowed above expression then what problem may occur?
I know it is not a intelligent question, However still I ask for discussion.
Thanks advance for all viewer of this question.

JoachimSauer wrote:
jverd wrote:
I didn't like it at first, but it turns out my initial complaints were pretty much unfounded. I find it quite useful. It takes a fair amount of clutter out of code. The only real problem with it is that if you're not careful, you can end up doing a lot of unnecessary bouncing back and forth between primitives and wrappers without knowing it, which could hurt performance.In my opinion the biggest problem is getting NPEs at code lines, that look completely harmless. That used to bother me too, but then, if I'm writing
int i = getAnInteger();it's just a replacement for
int i = getAnInteger().intValue();which would also have caused NPE.
That is, if I'm using autoboxing properly, it's just shorthand for what I'd have been doing otherwise anyway. True, it's easy to not think about it, to forget to consider whether NPE is a possibility and what the proper approach is, but mostly, if I want int, I know it can't be null (or if it is, I should get NPE).
And when it comes time to debug the NPE, it's no great mystery, once you know the rules.
If you don't think of autoboxing at the right position, then you can spend hours after hours tracking down a trivial bug ... or so I've heard ;-)Even if you're not thinking about it when you write the code, when you see an "impossible" NPE during debugging, it should be an instant giveaway.

I want to ask something about firefox. why firefox use very much memory? can you develop to reduce memory comsume? this problem is very distrub in my PC with low memory.

I want to ask something about firefox.
why firefox use very much memory?
can you develop to reduce memory comsume?
this problem is very distrub in my PC with low memory.
== This happened ==
Every time Firefox opened

How much memory is Firefox using right now?
# Press '''CTRL+SHIFT+ESC''' to load the Task Manager window
# Click the Processes tab at the top. (Click once near the top of the window if you don't see tab
# Find firefox.exe, and see how many kilobytes of memory it's using.
Showing around 80MB when Firefox first starts is normal. Right now, I have 75 tabs open and it's using 500MB - this varies a lot depending on what you have in the tabs.
Other than high memory usage, what other problems are you experiencing? (Examples include slowness, high CPU usage, and failure to load certain sites)
Many of these issues, including high memory usage, can be caused by misbehaving add-ons. To see if this is the case, try the steps at [[Troubleshooting extensions and themes]]. Outdated plugins are another cause of this issue - you can check for this at http://www.mozilla.com/plugincheck

Why java file name and class name are equal

could u explain why java file name and class name are equal in java

The relevant section of the JLS (?7.6):
When packages are stored in a file system (?7.2.1), the host system may choose to enforce the restriction that it is a compile-time error if a type is not found in a file under a name composed of the type name plus an extension (such as .java or .jav) if either of the following is true:
* The type is referred to by code in other compilation units of the package in which the type is declared.
* The type is declared public (and therefore is potentially accessible from code in other packages).
This restriction implies that there must be at most one such type per compilation unit. This restriction makes it easy for a compiler for the Java programming language or an implementation of the Java virtual machine to find a named class within a package; for example, the source code for a public type wet.sprocket.Toad would be found in a file Toad.java in the directory wet/sprocket, and the corresponding object code would be found in the file Toad.class in the same directory.
When packages are stored in a database (?7.2.2), the host system must not impose such restrictions. In practice, many programmers choose to put each class or interface type in its own compilation unit, whether or not it is public or is referred to by code in other compilation units.

Why Java Web Start doesn't support Pack200 out-of-the-box?

Hello All,
Why Java Web Start doesn't support Pack200 out-of-the-box? I was hoping that Java 6 would make things easier by adding direct support for Pack200 in Java Web Start and JNLP without needing to use servlets, etc.? All my clients are Java 5 or above so I can't push the Pack200 compressed version of the jar to every single one of them and there is no selection process needed. But I can't do it because of the servlet or complex Apache server setup requirement (it would be a headache to get customers' web server admins to set up Apache or whatever web server that way).
My question is why is there unwillingness to add Pack200 support directly to Java Web Start and JNLP so that you can start Pack200 compressed jars just like you would start any jar using Java Web Start? Is te a technical problem?
Thank you,
Mete Kural

Hallo,
I didn�t try it, but the webstart FAQ�s read:
Can I use Pack200 compression with the JnlpDownloadServlet?
Yes. The JnlpDownloadServlet distributed in the samples directory of the JDK now supports Pack200. If you deploy yourfile.jar along with yourfile.jar.pack.gz the packed file will be downloaded when the client is running Java Web Start 1.5.0 or later.
http://java.sun.com/javase/6/docs/technotes/guides/javaws/developersguide/faq.html#217
For further information you may want to look at
http://java.sun.com/javase/6/docs/technotes/guides/javaws/developersguide/downloadservletguide.html#pack200
The configuration of the server and the the servlet (as described in the second link) is as easy as it seems.
I got it working on the first try and it was my first experience with websevers at all.
Bye Schippe
Message was edited by:
Schippe

Why won't my secure thumb drive (FAT32) work with os lion?

Why won't my secure thumb drive (FAT32) work with os lion? I have used it ok with older mac operating systems. When the thumb drive is inserted in the usb port, an error message appears stating that the disk was not ejected properly. It shows as readonly in Finder. When I try to eject it, the spinning wheel appears and I have to relaunch finder.

Hi princessmonsta,
Thanks for using Apple Support Communities. This article has some information on things to check if your sound is not working as expected that may help:
OS X Mavericks: Adjust your computer’s sound output
http://support.apple.com/kb/PH13908
Cheers,
- Ari

Why java is called java2

why java is called java2 and another thing that i would like to know is why it was renamed to java from its previous name OAK
Thanx
Manish

why java is called java2Not to sure about this one, but I think it was a marketing decision - I guess 'Welcome to the Java 2 platform' sounds better than saying 'Welcome to the JDK 1.2.1 platform' :=)
and another thing that i
would like to know is why it was renamed to java from
its previous name OAKThere was already a patented product named 'OAK', so they had to rename it to something else to avoid the law.
>
Thanx
ManishA brief history of Java:
http://java.sun.com/features/1998/05/birthday.html
http://www.ils.unc.edu/blaze/java/javahist.html

Why java is very secure

Similar Messages

Maybe you are looking for