Minim and Java

Posted by: JSH on 10 January 2017

I rather like Minim as a server, but it is written in Java and I'm told Java is not secure.  So, is Minim safe to use? 

I use Windows Defender and Firewall on the computer I use for Minim. A friend suggested that I shall also need to set up an Exclusion for Java on it.  Should I?

Sorry for what might be Micky Mouse questions

JSH

Posted on: 11 January 2017 by jfritzen

Java is not an insecure language; in fact due to strong typing, omission of pointers and automatic memory handling, it's more secure  than other languages, e.g. C which is notorious for its buffer overflows. The Java libraries occasionally will have bugs, but this is not different from other computer languages either.

AFAIK the notion of Java being insecure comes from the historic use of Java applets, small programs from the internet that would execute within your browser. Since running untrusted code on your computer is always a risky thing, much effort has to be spent to make the executing environment safe (the "sandbox"). But with Javascript Java applets now have essentially disappeared.

So, if you trust the program you are running (minimserver), then Java is absolutely safe.

 

 

Posted on: 11 January 2017 by nbpf
JSH posted:

I rather like Minim as a server, but it is written in Java and I'm told Java is not secure.  So, is Minim safe to use? 

I use Windows Defender and Firewall on the computer I use for Minim. A friend suggested that I shall also need to set up an Exclusion for Java on it.  Should I?

Sorry for what might be Micky Mouse questions

JSH

I have been  running MinimServer on two (music) servers and on my laptop for a little bit longer than one year. Since about two weeks, a fourth instance of MinimServer is running on a Raspberry Pi 3. This is setup as an access point. I have not so far noticed any security problems related with MinimServer on any machine. MinimServer software updates run very smoothly via MinimWatch. In my view, MinimServer is a great product and support is excellent. Lately, they have added support for opening album booklets in control points (requires additional support from the control point). Of all servers that I have seen so far, MinimServer offers by far the best browsing experience, in my view. I am trying to support the development of MinimServer (and upmpdcli) with small regular donations and I am considering diverting some of the funds that I was planning to use for hardware upgrades to the development of MinimServer. Best, nbpf

Posted on: 11 January 2017 by JSH

Thank you very much JFritzen and NBPF for your help. 

I have disabled Java in my Browser (Firefox) which I hope gets over the applet issue. 

I do like Minim and for my needs it's excellent so I shall be donating too to keep it improving and pay for the excellent support. I also like the ability to tweak the sound a little too.  I've improved the sound on my Qute2 with it - to my ears anyway - though I'm sure the purists will frown!!

JSH