Re: SableVM and Firefox not possible?

Hi Kim,

The reason we're not currently devoting time to integrate SableVM within
Firefox is not technical; it is for the safety of Firefox users.

It would be irresponsible to integrate SableVM in a web browser before:

1- adding a bytecode verifier to SableVM, and making sure that this
   verifier is robust.

2- Conducting a full and careful audit of all the GNU Classpath library
   code to make sure it has no security holes.

3- Conducting a full audit of the SableVM code and SableVM-specific
   library code to make sure it has no security holes.

Doing otherwise would potentially expose users to malicious applets on
the web.  We do not want to expose users to such risks, so we do not
feel that SableVM and its class libraries are ready for this yet.  Maybe
GNU Classpath developers have conducted some audit of their code; I do
not know.  You can ask them about it on the GNU Classpath mailing list
(see http://classpath.org/).  All I can say is that the SableVM team has
not conducted any code audit so far.

Have fun!

Etienne

Kim Fredenberg wrote:
> I have been googling around for a while and noticed there seems to be no
> way of running applets on Firefox/Mozilla using SableVM and that this
> fact is due to Mozilla using the OJI interface.
> 
> Is my statement correct?
> 
> This is a bit offtopic on this list but:
> 
> Are there any people here that have put up a browser supporting applets
> on an arm (PXA255) based board running linux? If so, what components did
> you use?

-- 
Etienne M. Gagnon, Ph.D.            http://www.info2.uqam.ca/~egagnon/
SableVM:                                       http://www.sablevm.org/
SableCC:                                       http://www.sablecc.org/

_______________________________________________
SableVM-user mailing list
[email protected]
http://sablevm.org/lists/control/listinfo/sablevm-user

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDhemWjyrJi4rH84gRAk/RAJ4q0F5ELT7MdLf2dO1dikSUhvryhACfeopb
QqbqnM/67hjUXPYr/qVh1ds=
=lS+Q
-----END PGP SIGNATURE-----