On: OpenSSL Security Advisory

[lmm]

> Java has horrible security bugs even today.

Example?

> Bugs can be found in code written in all languages.

And there's no difference between a bug every week and a bug every 10 years?

[robert-wallis → lmm]

Here's a list of Java CVEs: https://www.cvedetails.com/vulnerability-list/vendor_id-93/p...

To be clear, I am not a security researcher, and I haven't verified the severity of these issues. But in 2016 alone there are 16 CVEs which is 4 per month.

[lmm → robert-wallis]

Those are vulnerabilities in the JVM itself - and I'd bet a fair bit the majority will be in the C/C++ parts, not the Java parts.