Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -1 down vote favorite

My company is researching a complete removal of JRE on our windows platform. I have researched several alternatives for implementation in a large enterprise architecture. Simply, wanted to throw the question out there if anyone has suggestions. Thanks

share|improve this question
Hi, welcome to IT Security. It is expected that questions asked here relate to IT Security as defined in the FAQ. Your question will most likely be closed by a mod as it isn't on topic. – Terry Chia Oct 3 '12 at 13:55
1  
In addition to @TerryChia's comment, this question is rather vague as it stands. You say you want to "throw the question out there" but I don't see a single question (these usually end with question marks - ?) in your post. What exactly are you asking for? If you're asking for recommended alternative products, this still may not be a good fit for StackExchange as "product suggestion" questions are off-topic on most SE sites. If there's something else regarding Java alternatives you want to ask about, Server Fault might be a better place for a more well-formed and specific question. – Iszi Oct 3 '12 at 15:12
Shopping Questions are Off-Topic on any of the Stack Exchange sites. See Q&A is hard, lets go Shopping and the FAQ for more details. – Chris S Oct 3 '12 at 15:32

closed as off topic by Terry Chia, Iszi, Rory Alsop♦ Oct 3 '12 at 15:16

Questions on IT Security Stack Exchange are expected to relate to IT security within the scope defined in the FAQ. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about closed questions here.

1 Answer

up vote 1 down vote

I suppose you want to remove the Oracle JRE because of the security issues which have recently been found.

There are other implementations of Java out there, but the efficient and reasonably complete ones all derive from the same base code (OpenJDK, JDK from IBM...) so they tend to share the same security issues.

An important thing to note: security issues with Java are about the sandbox model, i.e. for applets running in the Web browser. It makes little sense to ban Java itself from the desktop machines (if Java itself, not the applet part, is a security issue, then this means that people run potentially hostile applications, and Java does not make it worse -- a simple executable which was written in C has already as much destructive power). You could deactivate the Java browser plugin, which would prevent execution of applets, but not of applications which use Java locally (e.g. an Oracle database).

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.