Hacker News Reader

Comment by moksly | Hacker News Reader

> Everyone still downloads and runs an entire JVM.

They do? I work in the Scandinavian public sector and we abandoned Java two or three years ago because of the continued security issues it posed. Software that require an install JVM to operate doesn’t get past our IT department.

I’m not sure modules would help though, as I don’t know much about them. But not everyone still installs JVM.

View on HN

Java in the browser (Applet) is unsecured, because it can download and run untrusted code in the user machine.

Java in the server, on the other hand, is as secured as any other runtime, i.e only as good as the application written on it.

Alternatives like TeaVM let you code Java in the browser but it compiles quickly to compact JavaScript. This way you can get the best of both worlds. A typed language, full-stack refactorings, and the security of the browser JS VM.

TeaVM Website: https://teavm.org/

Tutorial in Java Magazine: https://blogs.oracle.com/javamagazine/java-in-the-browser-wi...

Typescript has already filled the niche of a typed, OOP language in the browser for me. And it's surely much better supported than TeaVM.

It’s not Java in the browser, it’s the Java virtual environment required to run Java apps.

If that’s not the JVM then my mistake.

I had in my mind people who use Java for their projects, not in general sense.

What kind of security issues? A random native app is more secure?

Let me guess, you've standardized on Electron apps?

Not exactly. Most of our apps are some form of client/server architecture which means most of them are moving to JavaScript clients, but typically it’s react, angular or vue.

Which Scandinavian public sector? Sounds like you are talking about client side java - applets maybe?

Reply on news.ycombinator.com