Java Update Implements Whitelists To Combat 0-Day Hacks

kylus writes "The Register is reporting that Oracle's new Java 7 update 40 release comes complete with a new 'Deployment Rule Set' capability which allows administrators to define which particular applets and Java Web Start applications ('Rich Internet Applications') are permitted to run on a given machine. Not a complete solution for the recent trend of Java hacks that have cropped up, but good news for enterprises that have to run this in their environment." Update: 09/19 20:08 GMT by U L : There's an introduction to deploying rule sets on the Java platform group weblog too.

Comments

Re:Whitelists mean nothing

[Joining Yet Again]

What if you're wearing a condom but your one night stand has a knife? Did you even think that through?

Re:Whitelists mean nothing

[JustOK]

My night stand doesn't have a knife. Toe nail clippers, phone charger, box of kleenex, clock radio, lamp: those are the things my night stand has.