icedtea-web installed and enabled by default in Fedora 19

Mateusz Marzantowicz mmarzantowicz at osdf.com.pl
Tue Jun 18 07:53:11 UTC 2013


On 17.06.2013 21:26, Dan Mashal wrote:
> On Mon, Jun 17, 2013 at 8:25 AM, Mateusz Marzantowicz
> <mmarzantowicz at osdf.com.pl> wrote:
>> On 17.06.2013 17:18, Heiko Adams wrote:
>>
>> From my point of view the java-plugin is a big security hole and should be
>> kicked from default installations ASAP.
>>
>>
>>
>> Then, why not fix it?
>>
>>
>> Mateusz Marzantowicz
> There is no way in hell anyone here is going to fix the security holes
> in Java (open or closed).
>
> The only way to avoid the security holes caused by java is to not use it.

Is java environment the only security flawed software distributed in
Fedora by default? I don't think so. Please, correct me if I'm wrong.
Does it mean Fedora should drop about 1/3 of packages because they have
security bugs? What about Linux Kernel? It's also buggy. Should it be
not included in Fedora?

>
> That's like telling someone not to use Firefox because it has security holes.
Isn't it what *-nix geeks tell to M$ people about using IE? "Don't use
IE - it's buggy!"


Mateusz Marzantowicz


More information about the devel mailing list