Java & security

[Sara Weissman/Morris Cty Library]

For my money, best site on Java and security is Industrial Affiliates
program at Princeton (the demon fiend Java bug finders) ..program supported
by, among others, (ta! ta!) Sun. 
http://www.CS.princeton.EDU/sip/
Java FAQ at www.cs.princeton.edu/sip/java-faq.html
..dedicated to making "executable of the Internet secure". What these 
people don't know about may not be worth knowing.