• Ethan@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 months ago

    I thought there was security code to stop that kind of thing. Granted, it’s been over 10 years since I’ve done anything with Java more than tinkering with Minecraft mods.

    • homura1650@lemm.ee
      link
      fedilink
      arrow-up
      4
      ·
      3 months ago

      Java did have a Security Manager that can be used to prevent this sort of thing. The original thinking was that the Java runtime would essentially be an OS, and you could have different applets running within the runtime. This required a permission system where you could confine the permissions of parts of a Java program without confining the entire thing; which led to the Java security manager.

      Having said that, the Java Security Manager, while an interesting idea, has never been good. The only place it has ever seen significant use was in webapps, where it earned Java the reputation for being insecure. Nowadays, Java webapps are ancient history due to the success of Javascript.

      The security manager was depreciated in Java 17, and I believe removed entirely in Java 21.