[pve-devel] Fw: new vnc 1.2 works fine now with http://fqdn....
Michael Rasmussen
mir at datanom.net
Sat Apr 20 19:17:06 CEST 2013
Sorry, forgot to send to list.
Begin forwarded message:
Date: Sat, 20 Apr 2013 19:07:16 +0200
From: Michael Rasmussen <mir at datanom.net>
To: Dietmar Maurer <dietmar at proxmox.com>
Subject: Re: [pve-devel] new vnc 1.2 works fine now with http://fqdn....
On Sat, 20 Apr 2013 16:53:43 +0000
Dietmar Maurer <dietmar at proxmox.com> wrote:
> > > Besides, I still do not understand how that improves security.
> > >
> > It does not. Java applets are, security wise, defective by design!
>
> I do not really understand that. It is exactly the same if
> you download and install a program? So why is java defective by design?
>
Read this:
http://www.cert.org/blogs/certcc/2008/06/signed_java_security_worse_tha.html
Especially: "[..]This means that if you run a signed Java applet from
one particular vendor, you will trust all Java applets from that vendor
by default, regardless of the site that is hosting them"
--
Hilsen/Regards
Michael Rasmussen
Get my public GnuPG keys:
michael <at> rasmussen <dot> cc
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E
mir <at> datanom <dot> net
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C
mir <at> miras <dot> org
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917
--------------------------------------------------------------
The last thing one knows in constructing a work is what to put first.
-- Blaise Pascal
--
Hilsen/Regards
Michael Rasmussen
Get my public GnuPG keys:
michael <at> rasmussen <dot> cc
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E
mir <at> datanom <dot> net
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C
mir <at> miras <dot> org
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917
--------------------------------------------------------------
I'm not afraid of death -- I just don't want to be there when it
happens. -- Woody Allen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.proxmox.com/pipermail/pve-devel/attachments/20130420/0fe602cc/attachment.sig>
More information about the pve-devel
mailing list