Thanks for pointing out that this link may not be relevant. But what about the main question regarding safety of icedtea-plugins?

1 members found this post helpful.

Icedtea has a different codebase then the Oracle plugin, so the recent exploit does not work with it. Of course no software can be 100% secure, so it may be that there will be exploits in the future. I can only speak for my self,but such critical holes are usually fixed within hours in open source software. Oracle didn't fix that hole in months, until it now was recognized that there exists an exploit for it that is already widely used. Decide for yourself which one you prefer, I will go with the open source solution.

1 members found this post helpful.

CERT also agrees that Java is still not safe even with the new patch, and it probably won't be safe for up to 2 years:
http://www.networkworld.com/communit...ke-2-years-fix

Knowing Oracle ... it probably never will be safe.

My personal recommendation is to uninstall java unless you absolutely need it, and if you do then use openjdk (and icedtea if you need it). I haven't used java since Oracle bought Sun.

1 members found this post helpful.

There is the recommencation to return to the 1.6...
I wonder if I will mess up my system if I install IceTea?

Edit - of course, I still firmly believe in the base principles of Java, and it is moments like these that show the ongoing evolution. You can only find out about a weakness if you ...break something. I dont blame Java, but (sorry, guys) the "owner" thereof: Oracle. I was (and still firmly am) sceptical at the news that Oracle took over Sun, and hence owned Java. Oracle's core goal is not a programming platform but a database platform...hence the "sloppyness" around Java from Oracle's part. They're not to blame, and yet at the same time are to blame...for not sticking to the core bizz...
My humble two cents...

1 members found this post helpful.

"of course no software can be 100% secure"


I have watched patches, fixes, claims for almost 30 years now. Still exploits, hacks and rootkits virus's and malware exist at all levels and versions.

Sad part is that peoples lives are on attack not just industry, organizations and governments. Common folks think they can bank without fear or use credit cards only to have some crook hold them up.

Back to the topic, java has been considered less than secure for a very long time.

1 members found this post helpful.

New vulnerability being sold, and analysis from openjdk:
http://developers.slashdot.org/story...ploit-for-sale

1 members found this post helpful.

And it continues:
http://developers.slashdot.org/story...ss-flaws-found

...does this mean this is a prelude of a next-gen Java to come? Or could is mean Oracle is secretly looking for a buyer for the Java/Sun component...hence the lack of envolvement of the part of Oracle...

Why did they even buy Sun ? Probably just to eliminate competition or yeah sell it to someone else.

...umm, let me put some focus on the currently raging financial crisis (in europe - small 'e' mind you) today...where did that start? With some biggie (a bank in this case) that wanted to gobble up a smaller biggie.
Oracle's problem is that Java (programming languages) is NOT the core, but it complements the core business well. Kinda like you'd like an airplane but you dont know how to fly one. Solution: get the plane...and a *** pilot!
Oracle bought Sun, what happened? OpenJDK happened, if I'm not mistaken. The pilot(s) hopped on an other plane...
Now, the passengers are in panic because the plane is crashing, or, as mentioned, is on the tarmac, for sale...in small print...

And again:
http://developers.slashdot.org/story...ed-in-the-wild

This is getting old. Well, it doesn't bother me, I haven't installed java since Oracle bought sun.

It's a symptom of an industry that works on impulses that do not work anymore in today's economy: unbridled growth. Economists seem to forget that a company has FOUR life phases: growth, stability, stagnation and shrink. They all seem to lose focus of stability.
Why Java? To grow. Same with ***soft: they aquired Skype, Google did'nt do that, it came up with a solution of its own. Google innovates, ***soft, oracle and all the other dinosaurs dont, they aquire, that's all: repackaged stuff...
And does anyone wonder where today's crisis really comes from? I know...we all do...