applets in 1.4.2_05 have no security restrictions

[blahblahblahh]

http://jouko.iki.fi/adv/javaplugin.html

A vulnerability in Java Plugin allows an attacker to create an Applet which can disable Java’s security restrictions and break out of the Java sandbox.
…
Such Applet can then take any action which the user could: browse, read, or modify files, upload more programs to the victim system and run them, or send out data from the system.

Yummy. So, basically, if you’re coding games, can you say “JOGL/LWJGL works on all versions of java prior to 1.4.2_06” ? :

[Malohkan]

OOOO I wanna do that! I’ll pay someone $200 to make Rimscape work with LWJGL in an Applet

[weston]

isn’t the problem with lwjgl in applets that it doesn’t use awt?

[Matzon]

well, you just launch the applet and make it start the lwjgl display and then render into that - no need to sign anything