Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I found a document on the Oracle website, , that lists the capabilities of unsigned applets, unsigned applets with JNLP and signed applets.
When i encounter an unsigned applet on a webpage (I am using Firefox), a popup says:

"this application will run with unrestricted access"

asking whether to execute it or not.

I don't understand if the applet is already being executed in the sandbox without explicit consent and now it is asking for more privileges, or if it is waiting for approval to be executed.

What happens if the signed applet certificate is expired, unvalid, or simply refused by the user? What level of privilege is assigned to the applet showing a request like this?

The question refers to the Java 7 implementation provided by Oracle in its binaries, as a plugin for 64 bit web browsers on OS X, that can be found at

Note: In the second case the warning appear misleading to me, since (exploits aside) it will not be run with unfettered access to the system (not root neither current user's privileges), or at least this is what the guide said. In the first case this would mean that the system is unnecessarily exposing the Java functionality to every website I visit, that leaves plenty of room for exploits to break the sandbox.

share|improve this question
Hi Valentine! Please register your account here, so you can stay logged in, comment on your posts and edit them. I've merged your (unregistered) accounts for now, but that probably won't hold long. – slhck Dec 5 '12 at 7:12

You must log in to answer this question.

Browse other questions tagged .