Re: SableVM and Firefox not possible?

Kim Fredenberg <[email protected]> Thu, 24 Nov 2005 18:37:37 +0200
Newsgroups gmane.comp.java.vm.sablevm.general
Message-ID <[email protected]>
Hello Etienne,

Thank you for your reply. I needed this verification so that I would not
"go around wasting time" on a solution that would not work at the
moment. I will check out some other solution for now and hope that you
get time in the future to conduit all the neccessary audits to be able
to support Firefox. From the VM:s I tested I felt that SableVM was
working really nicely on the arm platform.

best regards, Kim

Etienne Gagnon wrote:
> Hi Kim,
> 
> The reason we're not currently devoting time to integrate SableVM within
> Firefox is not technical; it is for the safety of Firefox users.
> 
> It would be irresponsible to integrate SableVM in a web browser before:
> 
> 1- adding a bytecode verifier to SableVM, and making sure that this
>    verifier is robust.
> 
> 2- Conducting a full and careful audit of all the GNU Classpath library
>    code to make sure it has no security holes.
> 
> 3- Conducting a full audit of the SableVM code and SableVM-specific
>    library code to make sure it has no security holes.
> 
> Doing otherwise would potentially expose users to malicious applets on
> the web.  We do not want to expose users to such risks, so we do not
> feel that SableVM and its class libraries are ready for this yet.  Maybe
> GNU Classpath developers have conducted some audit of their code; I do
> not know.  You can ask them about it on the GNU Classpath mailing list
> (see http://classpath.org/).  All I can say is that the SableVM team has
> not conducted any code audit so far.
> 
> Have fun!
> 
> Etienne
> 
> Kim Fredenberg wrote:
> 
>>I have been googling around for a while and noticed there seems to be no
>>way of running applets on Firefox/Mozilla using SableVM and that this
>>fact is due to Mozilla using the OJI interface.
>>
>>Is my statement correct?
>>
>>This is a bit offtopic on this list but:
>>
>>Are there any people here that have put up a browser supporting applets
>>on an arm (PXA255) based board running linux? If so, what components did
>>you use?
> 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> SableVM-user mailing list
> [email protected]
> http://sablevm.org/lists/control/listinfo/sablevm-user