I agree with you, but also think the anoncow is right. The chart is misleading, indicating that java has oh so many cumulative holes. If we looked at Apache like that, it would be less secure than IIS.
Also, was this strictly applets? Or was it all things ever written in Java? That's a lot of variations, platforms, etc, which although the fact that a java app will run differently on my mac versus my windows box is itself potentially unsecure, the fact that it has that capability beats the current functionality of.net.
Which, IMO, brings this down to, the more functionality, the less secure it's going to be. Java has more functionality, it's inevitible it will be less secure.
Slashdot Mirror
I agree with you, but also think the anoncow is right. The chart is misleading, indicating that java has oh so many cumulative holes. If we looked at Apache like that, it would be less secure than IIS. Also, was this strictly applets? Or was it all things ever written in Java? That's a lot of variations, platforms, etc, which although the fact that a java app will run differently on my mac versus my windows box is itself potentially unsecure, the fact that it has that capability beats the current functionality of .net.
Which, IMO, brings this down to, the more functionality, the less secure it's going to be. Java has more functionality, it's inevitible it will be less secure.