 tcp1Premium
join:2000-04-17
Herndon, VA
 ·Verizon FiOS
| reply to peter_m
Re: "Torpark causes the IP address seen by the website " No, he means Sun Java, but he's being a bit vague.
Java (as in an applet) runs in its own VM, which means it's really running as it's own program locally on your machine - it's just enclosed in the browser at the interface level. Yes, Java applets running in a web browser do have stricter security restrictions than Java stand-alone applications outside the browser, however it's rather trivial for the Java applet to make its own HTTP connection and then send your local IP address to any server.
Javascript, on the other hand (which, by the way, has absolutely NOTHING to do with Java, and is related only by name), runs strictly in "browserspace", and is limited to the facilities given to it by the browser. |
 peter_mPremium
join:2005-07-13
Canada, QC
1 edit | I haven't written a line of code in over 10 years but I know the difference between the two. Just needed to know which...
You probably would argue that if I really did know the difference, then I should know that javascript is not what he was talking about. Well to this I have to answer that a few week ago someone talked about javascript's ability to scan private IPs behind a router and reporting them. I think it was in a recent "security now" pod-cast but I'm not 100% sure. Not remembering the exact details, javascript still sounds suspicious to me. Anyone know what I'm talking about? (I'm not sure I do  ) |
