12 deadly and intractable errors in the JAVA language about which you did not know, according to the magazine PC Week / RE of 06/19/07: 1. The ability to implement code, for example, SQL commands; 2. XSS vulnerability; 3. Disadvantages of identification management; 4. Incorrect search procedure for errors; 5. The software code used for testing falls into the final version; 6. The presence of methods that allow developers to call C / C ++ code from java-programs, which introduce security problems characteristic of C / C ++; 7. Compatibility and synchronization errors; 8. Lack of control over access to servers; 9. Disadvantages of session management; 10. Use of unchecked cookies and HTTP header packets; 11. Logging of confidential information without ensuring their safety; 12. The configuration provides unlimited access without the use of monitoring and auditing.
The article is very amused. Only the question remains: what's with JAVA? And ... I understand, below is the article: The main impetus for the transition to Vista - security.