Re: Java Sniffer (Was: Re: FV Announces That The Sky Is Falling)

[futplex@pseudonym.com (Futplex)]

-----BEGIN PGP SIGNED MESSAGE-----

Mike M^cNally writes:
> But if by being used to such windows people understand that they're
> not necessarily to be trusted, I don't see why that'd be an attractive
> way of slipping in a trojan horse.  

Well, that "if" is a critical hypothetical. I'm assuming a model in which
people perform most of their legitimate network transactions through Java 
windows. So I think they will be accustomed to typing financial identifiers 
or whatnot into windows labelled "Untrusted Applet Window". Many will
become desensitized to the UAW warning label.

I believe the work on authenticating applet servers to client in terms of
signed Java classes, etc. is the most promising long-term approach.

ObNSB: Although I seem to be cast as an opponent of Java adoption in this
thread, I'm actually a fan of Java and expect to write some Java code RSN. 

Futplex <futplex@pseudonym.com>

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQEVAwUBMQ7BYSnaAKQPVHDZAQFN9wf5AYOhtNHy2nGvQ7t/SNKy6P9Qay2K4qEY
rMIdtzHBrSpjTHq5HPZSG7YmNhd/trBpH42uUufL+WD+gDj6/amPHDV6kwdmS32d
tS28ECiZlnUidF9+PcaIISuBLiD6g67j9I8KAVdejxg79pTLNFNvjoz22oPZqRq2
PEZI/YXCm7B6J4T6WDauuMKwaMWL78NBe1Udq3o2q2AAUjQfJRkqT4I0hZe2fAEE
mpzNtIOHxDIhRVULEVC1XXPecxyOh/A070knxw3DFGLIL24oCJhODgEG1DKtKqHB
nnt5wYTpO2+vNLuOB14TdRu8fGorctvElu8ozTkrtpDFXoEgZwYVLg==
=96ZK
-----END PGP SIGNATURE-----