Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I found a document on the Oracle website, , that lists the capabilities of unsigned applets, unsigned applets with JNLP and signed applets.
When i encounter an unsigned applet on a webpage (I am using Firefox), a popup says:

"this application will run with unrestricted access"

asking whether to execute it or not.

I don't understand if the applet is already being executed in the sandbox without explicit consent and now it is asking for more privileges, or if it is waiting for approval to be executed.

What happens if the signed applet certificate is expired, unvalid, or simply refused by the user? What level of privilege is assigned to the applet showing a request like this?


The question refers to the Java 7 implementation provided by Oracle in its binaries, as a plugin for 64 bit web browsers on OS X, that can be found at http://www.java.com/en/download/manual.jsp

share|improve this question
    
In the second case the warning appear misleading to me, since (exploits aside) it will not be run with unfettered access to the system (not root neither current user's privileges), ot at least this is what the guide said. In the first case this would mean that the system is unnecessarily exposing the Java functionality to every website I visit, that leaves plenty of room for exploits to break the sandbox. –  Valentine Dec 3 '12 at 23:23
    
Hi Valentine! Please register your account here, so you can stay logged in, comment on your posts and edit them. I've merged your (unregistered) accounts for now, but that probably won't hold long. –  slhck Dec 5 '12 at 7:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.