[libreoffice-users] Re: JRE older installs - Windows - nowonline - no need for Oracle account

From: "Sigrid Carrera" <sigrid.carrera@googlemail.com>

> > I see no speed speed differences in the JRE 6 flavours.
> >
> > Please explain why you are promoting these older vulnerable and exploitable versions of
> > JRE instead of the latest in the JRE 6 family, update 27.
> > Since this is installed into the OS, not exclusive to a given application, it leaves 
> > the
> > end-user open to the vulnerability/exploitation vector.
>
> There is a speed difference for the different JRE's if you're using
> the BASE component from LibreOffice.
>
> So, since it is possible, to have several JRE's installed in one OS,
> the "recommendation" is to use the latest JRE for everything except
> LibreOffice. Does this make sense?
>
> Sigrid

OK, but it still leaves the end-user open to the vulnerability/exploitation vector.

I have analyzed obfuscated Javascripts and viewed deobfuscated Javascripts that uses a 
laundry list of vulnerabilities and software versions in the vulnerability/exploitation 
attack vector.

I wonder how much of a speed degradation is realized and is that worth the increased risk.


-- 
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp 




-- 
For unsubscribe instructions e-mail to: users+help@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted