http://www.zdnet.com/article/why-is-java-so-insecure-buggy-open-source-components-take-the-blame/#ftag=RSSbaffb68