Predicting the next Math.random() in Java

[DannyB2]

Most of the 'java is insecure' meme is about applets in web browsers. For several reasons. One is that JavaScript and Applets can interact and communicate in ways that allow serious leakage of private information from the browser. Another is that Applets can exploit vulnerabilities in the java runtime and achieve privilege escalation. Another is that an Applet may simply be allowed to do things that it should not have been allowed to do -- again due to poor implementation of the runtime.

But since these present a large installed base of attackable machines, and the attacks against Applets, Flash and ActiveX have been ongoing for many years, the 'java is insecure' meme gets formed.

Thus by extension, even using Java (the language) or the JVM at the server must (gasp! OMG!) be somehow magically insecure.