[Bug 867] https://bcee.snet.lu/ssogate/xlogin gives 'Array index out of range'

Mon Mar 5 03:31:45 PST 2012

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=867

--- Comment #7 from Xerxes Rånby <xerxes at zafena.se> 2012-03-05 11:31:45 UTC ---
The login applet produced by DanID are in many ways bad. It uses a lot of code
obfuscation techniques to hide its inner workings.

To start with the applet jar files are obfuscated. They are loading classes
from compressed strings inside the applet.
The applet downloads some "plugins" and unpacks these into a folders on the
users hard-drive.
Inside this folder you can find some .gif files these .gif files are actually
JNI code for various platforms.

Its really hard to know what went wrong since its almost impossible to trace
the inner workings of these applets.

Personally I would not trust these applets at all for any login, you basically
give unrestricted access to your computers files to a applet that you have no
way to check what it are doing.

-- 
Configure bugmail: http://icedtea.classpath.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.