<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for MP</title>
	<atom:link href="http://www.music-piracy.com/?feed=comments-rss2" rel="self" type="application/rss+xml" />
	<link>http://www.music-piracy.com</link>
	<description>piracy makes everything better</description>
	<lastBuildDate>Fri, 06 Aug 2010 20:42:37 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>Comment on Dear DHS, by Matt</title>
		<link>http://www.music-piracy.com/?p=177&#038;cpage=1#comment-6337</link>
		<dc:creator>Matt</dc:creator>
		<pubDate>Fri, 06 Aug 2010 20:42:37 +0000</pubDate>
		<guid isPermaLink="false">http://www.music-piracy.com/?p=177#comment-6337</guid>
		<description>Keven, I get what you are saying.  But the TSA really does mean well.  You should cut them some slack.</description>
		<content:encoded><![CDATA[<p>Keven, I get what you are saying.  But the TSA really does mean well.  You should cut them some slack.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Dear DHS, by Keven</title>
		<link>http://www.music-piracy.com/?p=177&#038;cpage=1#comment-6301</link>
		<dc:creator>Keven</dc:creator>
		<pubDate>Wed, 04 Aug 2010 20:52:17 +0000</pubDate>
		<guid isPermaLink="false">http://www.music-piracy.com/?p=177#comment-6301</guid>
		<description>How arrogant and utterly juvenile.</description>
		<content:encoded><![CDATA[<p>How arrogant and utterly juvenile.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why I hate the Android SDK. by Matt</title>
		<link>http://www.music-piracy.com/?p=257&#038;cpage=1#comment-5630</link>
		<dc:creator>Matt</dc:creator>
		<pubDate>Mon, 05 Jul 2010 18:43:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.music-piracy.com/?p=257#comment-5630</guid>
		<description>C is always faster than Java, and benchmarks have born that truth out since the beginning of time.  So claims that Java is faster than C++ are wantonly absurd.

Maybe you refer to specific superset functions of C++ or maybe you are mixing C++ with C#.  I don&#039;t know.  But C# has in my experience produced far faster, and more stable code than any Java app I have ever encountered.  So I think there may be more at play than weighted benchmarks.

Regardless that is not even relevant to this line of discussion.

The problem is that Dalvik is NOT a jvm.  The creators of dalvik, as well as google have been excited as hell to say as much.  Sure it can handle JVM byte code.  But it can handle anything that can throw DEX at it.  It is in all senses of the word, a VM.  

If google wanted a JVM, they would have had their pick of the proverbial litter in optimized JVMs.  They could have just opened up a linux SDK like Nokia did and allow people to use the JVM of their choice.  They didn&#039;t do that.

They wanted people originally to use Dalvik as it was intended.  As a real true to form VM.  They didn&#039;t.  Developers demanded access to native environment.  So they caved and quickly cobbled together a hack to allow some access to the native environment.

The problem is.  That NDK sucks.  It&#039;s a hack.  And it relies on Dalvik still.  It also relies on Dalvik SDK hooks still.

So, assuming they have given up on the dream of using dalvik as a VM.  I ask this.  Why not just expose a gcc toolchain.  let people push linux binaries to the device.  Suddenly a trillion and one apps, utilities, and segments of code become directly portable to the phone.  No longer are people constrained to the busted up eclipse IDE.  And everyone can let dalvik be dalvik and stop being a JVM.

That&#039;s really the point.

As for my solid reasoning.  I&#039;ve reiterated this point like 6 posts in a row.  You refuse to address it.  I can&#039;t reiterate it much more.  I am running out of ways to say it.</description>
		<content:encoded><![CDATA[<p>C is always faster than Java, and benchmarks have born that truth out since the beginning of time.  So claims that Java is faster than C++ are wantonly absurd.</p>
<p>Maybe you refer to specific superset functions of C++ or maybe you are mixing C++ with C#.  I don&#8217;t know.  But C# has in my experience produced far faster, and more stable code than any Java app I have ever encountered.  So I think there may be more at play than weighted benchmarks.</p>
<p>Regardless that is not even relevant to this line of discussion.</p>
<p>The problem is that Dalvik is NOT a jvm.  The creators of dalvik, as well as google have been excited as hell to say as much.  Sure it can handle JVM byte code.  But it can handle anything that can throw DEX at it.  It is in all senses of the word, a VM.  </p>
<p>If google wanted a JVM, they would have had their pick of the proverbial litter in optimized JVMs.  They could have just opened up a linux SDK like Nokia did and allow people to use the JVM of their choice.  They didn&#8217;t do that.</p>
<p>They wanted people originally to use Dalvik as it was intended.  As a real true to form VM.  They didn&#8217;t.  Developers demanded access to native environment.  So they caved and quickly cobbled together a hack to allow some access to the native environment.</p>
<p>The problem is.  That NDK sucks.  It&#8217;s a hack.  And it relies on Dalvik still.  It also relies on Dalvik SDK hooks still.</p>
<p>So, assuming they have given up on the dream of using dalvik as a VM.  I ask this.  Why not just expose a gcc toolchain.  let people push linux binaries to the device.  Suddenly a trillion and one apps, utilities, and segments of code become directly portable to the phone.  No longer are people constrained to the busted up eclipse IDE.  And everyone can let dalvik be dalvik and stop being a JVM.</p>
<p>That&#8217;s really the point.</p>
<p>As for my solid reasoning.  I&#8217;ve reiterated this point like 6 posts in a row.  You refuse to address it.  I can&#8217;t reiterate it much more.  I am running out of ways to say it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why I hate the Android SDK. by David Hope</title>
		<link>http://www.music-piracy.com/?p=257&#038;cpage=1#comment-5618</link>
		<dc:creator>David Hope</dc:creator>
		<pubDate>Sun, 04 Jul 2010 20:24:58 +0000</pubDate>
		<guid isPermaLink="false">http://www.music-piracy.com/?p=257#comment-5618</guid>
		<description>Why does the JVM offend you so much? Its not a virtual machine in the traditional sense code does eventually get compiled down to machine code and the JIT compier ensures this happens effciently. 

Java has PROVEN to be faster due to this technique in certan situations than C++.

You also talk alot about programming at the bare metal but i havent seen any mobile programmers writing in asm, so thats a complete load of bull. 

OpenGL is still a level of abstraction above the hardware and executing it from Java or from C++ should make hardly an difference, 99% of the worlds mobile games on Nokias (some of which ooze quality) run on java and have been for years and some can easily give the iphone a run for its money.

I agree with the previous posts here you need to back up your arguments with more solid reasoning.</description>
		<content:encoded><![CDATA[<p>Why does the JVM offend you so much? Its not a virtual machine in the traditional sense code does eventually get compiled down to machine code and the JIT compier ensures this happens effciently. </p>
<p>Java has PROVEN to be faster due to this technique in certan situations than C++.</p>
<p>You also talk alot about programming at the bare metal but i havent seen any mobile programmers writing in asm, so thats a complete load of bull. </p>
<p>OpenGL is still a level of abstraction above the hardware and executing it from Java or from C++ should make hardly an difference, 99% of the worlds mobile games on Nokias (some of which ooze quality) run on java and have been for years and some can easily give the iphone a run for its money.</p>
<p>I agree with the previous posts here you need to back up your arguments with more solid reasoning.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why I hate the Android SDK. by confused</title>
		<link>http://www.music-piracy.com/?p=257&#038;cpage=1#comment-5611</link>
		<dc:creator>confused</dc:creator>
		<pubDate>Fri, 02 Jul 2010 20:58:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.music-piracy.com/?p=257#comment-5611</guid>
		<description>&quot;The very idea of a VM, is that things execute inside of them.. stay inside of them&quot;

That&#039;s the definition of a user process in Unix, not of a VM. A &quot;virtual machine&quot; is typically just a way to run the same bytecoded program on different hardware machines (at least in the Java terminology, not the VMWare/VirtualBox one).

That does not imply sandboxing, as you believe. This is why Java has JNI, and .net has P/Invoke.

You can compromise a SetUID binary just as well from Java/.net/Dalvik, if it is buggy and you invoke it with the right attack payload. There are no SUID threads by the way.

It&#039;s true that you can compromise a buggy kernel from native code (i.e. performing privilege escalation), and that&#039;s probably the only reasonable complaint I see in your very long post.

From what I read, you simply dislike a VM if it doesn&#039;t completely abstract you from the operating system. No such thing exists, unfortunately.

Also, you would prefer direct native access, except that this allows you to attack the kernel.</description>
		<content:encoded><![CDATA[<p>&#8220;The very idea of a VM, is that things execute inside of them.. stay inside of them&#8221;</p>
<p>That&#8217;s the definition of a user process in Unix, not of a VM. A &#8220;virtual machine&#8221; is typically just a way to run the same bytecoded program on different hardware machines (at least in the Java terminology, not the VMWare/VirtualBox one).</p>
<p>That does not imply sandboxing, as you believe. This is why Java has JNI, and .net has P/Invoke.</p>
<p>You can compromise a SetUID binary just as well from Java/.net/Dalvik, if it is buggy and you invoke it with the right attack payload. There are no SUID threads by the way.</p>
<p>It&#8217;s true that you can compromise a buggy kernel from native code (i.e. performing privilege escalation), and that&#8217;s probably the only reasonable complaint I see in your very long post.</p>
<p>From what I read, you simply dislike a VM if it doesn&#8217;t completely abstract you from the operating system. No such thing exists, unfortunately.</p>
<p>Also, you would prefer direct native access, except that this allows you to attack the kernel.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why I hate the Android SDK. by Matt</title>
		<link>http://www.music-piracy.com/?p=257&#038;cpage=1#comment-5609</link>
		<dc:creator>Matt</dc:creator>
		<pubDate>Fri, 02 Jul 2010 19:05:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.music-piracy.com/?p=257#comment-5609</guid>
		<description>Okay, 

Dalvik is a VM.  It functions as any other VM would.  It interprets byte code, then runs that bytecode into the underlying environment.  In this case Android&#039;s linux kernel.

So yes, eventually everything ran through Dalvik does run into the linux kernel.

Now let&#039;s think about this like we would say, virtual box, or vmware workstation.  Purposely ignoring Hypervisor scenarios.

The very idea of a VM, is that things executing inside of them... stay inside of them.  That way the underlying software, in this case ( and many cases ) linux can manage resource allocation properly.  It also ensures that user execution remains contained within those VMs.  This is good stuff.

Now, if a user can break out of that VM, and run code directly on the underlying platform... linux, as they can with NDK system calls.  Whatever is happening there is no longer being constrained to a VM.  VM resource allocation and optimization just got considerably harder.  Also, the user now can attack other VMs as they see fit.  Additionally, they can possibly attack the underlying kernel.

Compromising Dalvik isn&#039;t so bad.  Dalvik executes as a reduced rights user.  But if a user compromises a SUID thread, binary, or god knows the kernel itself... you have a real problem.  Now nasty nasty stuff like Android rootkitting can occur.  It becomes very difficult to recover from an exploited state.

So what I am saying is, Dalvik is a VM.  It has all the benefits of a VM so long as it is used as a VM.  When you start treating it like a jvm, or a byte code interpreter for a specific language, in tandem with a native execution.  You lose a lot of the benefits of the VM.  

Now, at this point.  Why would you continue to maintain a VM, and all of the policy management, resource allocation, optimization, and security associated with it.  If all it really functionally is now... is an over glorified jvm.

More to the point, why not just allow developers to directly access the linux SDK hooks, instead of forcing them to access the NDK via Dalvik. 

It doesn&#039;t make any sense at all.  Unless you consider that, google simply couldn&#039;t convince their users to use Dalvik.  So they circumvented it with a nasty hack.  And now they have a big mess they are having trouble keeping cleaned up.

That&#039;s my point.  I would prefer direct native access, but if they are going to support dalvik and force people to use it.  They should do it properly.  Doing a little of one, and a little of the other is just messy and obnoxious.  But more than that, it makes security, resource allocation, and optimization a pain on their end.  To track threads they will need to pass priority info from dalvik back to the kernel and then compare it to standard posix threads.  It&#039;s absurd.  No one does that.  There&#039;s no precedent.</description>
		<content:encoded><![CDATA[<p>Okay, </p>
<p>Dalvik is a VM.  It functions as any other VM would.  It interprets byte code, then runs that bytecode into the underlying environment.  In this case Android&#8217;s linux kernel.</p>
<p>So yes, eventually everything ran through Dalvik does run into the linux kernel.</p>
<p>Now let&#8217;s think about this like we would say, virtual box, or vmware workstation.  Purposely ignoring Hypervisor scenarios.</p>
<p>The very idea of a VM, is that things executing inside of them&#8230; stay inside of them.  That way the underlying software, in this case ( and many cases ) linux can manage resource allocation properly.  It also ensures that user execution remains contained within those VMs.  This is good stuff.</p>
<p>Now, if a user can break out of that VM, and run code directly on the underlying platform&#8230; linux, as they can with NDK system calls.  Whatever is happening there is no longer being constrained to a VM.  VM resource allocation and optimization just got considerably harder.  Also, the user now can attack other VMs as they see fit.  Additionally, they can possibly attack the underlying kernel.</p>
<p>Compromising Dalvik isn&#8217;t so bad.  Dalvik executes as a reduced rights user.  But if a user compromises a SUID thread, binary, or god knows the kernel itself&#8230; you have a real problem.  Now nasty nasty stuff like Android rootkitting can occur.  It becomes very difficult to recover from an exploited state.</p>
<p>So what I am saying is, Dalvik is a VM.  It has all the benefits of a VM so long as it is used as a VM.  When you start treating it like a jvm, or a byte code interpreter for a specific language, in tandem with a native execution.  You lose a lot of the benefits of the VM.  </p>
<p>Now, at this point.  Why would you continue to maintain a VM, and all of the policy management, resource allocation, optimization, and security associated with it.  If all it really functionally is now&#8230; is an over glorified jvm.</p>
<p>More to the point, why not just allow developers to directly access the linux SDK hooks, instead of forcing them to access the NDK via Dalvik. </p>
<p>It doesn&#8217;t make any sense at all.  Unless you consider that, google simply couldn&#8217;t convince their users to use Dalvik.  So they circumvented it with a nasty hack.  And now they have a big mess they are having trouble keeping cleaned up.</p>
<p>That&#8217;s my point.  I would prefer direct native access, but if they are going to support dalvik and force people to use it.  They should do it properly.  Doing a little of one, and a little of the other is just messy and obnoxious.  But more than that, it makes security, resource allocation, and optimization a pain on their end.  To track threads they will need to pass priority info from dalvik back to the kernel and then compare it to standard posix threads.  It&#8217;s absurd.  No one does that.  There&#8217;s no precedent.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why I hate the Android SDK. by confused</title>
		<link>http://www.music-piracy.com/?p=257&#038;cpage=1#comment-5608</link>
		<dc:creator>confused</dc:creator>
		<pubDate>Fri, 02 Jul 2010 18:48:24 +0000</pubDate>
		<guid isPermaLink="false">http://www.music-piracy.com/?p=257#comment-5608</guid>
		<description>I still don&#039;t get where Android &quot;broke their design&quot;. Security is enforced by the kernel there on a per-process basis. Native code has exactly the same permissions than the VM one.

You seem to be complaining that there is no way to get rid of background tasks to execute a game, that&#039;s a &quot;feature&quot; of multi-tasking, not of using a VM.

Maybe I&#039;m missing your point, but I don&#039;t think you express it very clearly.</description>
		<content:encoded><![CDATA[<p>I still don&#8217;t get where Android &#8220;broke their design&#8221;. Security is enforced by the kernel there on a per-process basis. Native code has exactly the same permissions than the VM one.</p>
<p>You seem to be complaining that there is no way to get rid of background tasks to execute a game, that&#8217;s a &#8220;feature&#8221; of multi-tasking, not of using a VM.</p>
<p>Maybe I&#8217;m missing your point, but I don&#8217;t think you express it very clearly.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why I hate the Android SDK. by Matt</title>
		<link>http://www.music-piracy.com/?p=257&#038;cpage=1#comment-5606</link>
		<dc:creator>Matt</dc:creator>
		<pubDate>Fri, 02 Jul 2010 18:16:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.music-piracy.com/?p=257#comment-5606</guid>
		<description>No, you are missing the point entirely.

In fact, I didn&#039;t say anything about the iPhone.  I don&#039;t like the iPhone.  I had one for a few years.  I loved some parts of it.  But their app approval process is just immoral.  And, iTunes is utter garbage.  I am glad I am on the droid.  I have no desire to go back to the iPhone at all.  But I do think the iPhone SDK was a much saner design than androids.  Sure it locked you into Objective C, but at least they didn&#039;t break the crap out of their design just to try to make everyone happy.  Android chose to support Java out of the gate as their SDK language.  When the mobile phone devs criticized them for this, they released the NDK.  But the NDK was a hack.  It was poor design.  Now they have apps executing in a VM and on bare metal.  They are having a hard time managing resource allocation / security / and policy as a result.  From here on it&#039;s only going to get worse.  If they had just said &quot;well tough noogs we&#039;re only able to support Java for now.&quot; that would have been better for them in the long run.  Maybe choosing Java as their supported SDK language was a mistake.  Most developers thought it was.  But that&#039;s the choice they made.  If they want to change that, they are going to have to do it right.  What they are doing now just hurts everyone.  And that&#039;s not helping them win over developers or customers.

I still love my droid.  Best phone I&#039;ve owned by far.  But the SDK, I do truly hate. </description>
		<content:encoded><![CDATA[<p>No, you are missing the point entirely.</p>
<p>In fact, I didn&#8217;t say anything about the iPhone.  I don&#8217;t like the iPhone.  I had one for a few years.  I loved some parts of it.  But their app approval process is just immoral.  And, iTunes is utter garbage.  I am glad I am on the droid.  I have no desire to go back to the iPhone at all.  But I do think the iPhone SDK was a much saner design than androids.  Sure it locked you into Objective C, but at least they didn&#8217;t break the crap out of their design just to try to make everyone happy.  Android chose to support Java out of the gate as their SDK language.  When the mobile phone devs criticized them for this, they released the NDK.  But the NDK was a hack.  It was poor design.  Now they have apps executing in a VM and on bare metal.  They are having a hard time managing resource allocation / security / and policy as a result.  From here on it&#8217;s only going to get worse.  If they had just said &#8220;well tough noogs we&#8217;re only able to support Java for now.&#8221; that would have been better for them in the long run.  Maybe choosing Java as their supported SDK language was a mistake.  Most developers thought it was.  But that&#8217;s the choice they made.  If they want to change that, they are going to have to do it right.  What they are doing now just hurts everyone.  And that&#8217;s not helping them win over developers or customers.</p>
<p>I still love my droid.  Best phone I&#8217;ve owned by far.  But the SDK, I do truly hate.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why I hate the Android SDK. by confused</title>
		<link>http://www.music-piracy.com/?p=257&#038;cpage=1#comment-5605</link>
		<dc:creator>confused</dc:creator>
		<pubDate>Fri, 02 Jul 2010 18:08:16 +0000</pubDate>
		<guid isPermaLink="false">http://www.music-piracy.com/?p=257#comment-5605</guid>
		<description>So, If I understand correctly, the iPhone is cool because it allows native development, but Android is bad because it allows native development ?</description>
		<content:encoded><![CDATA[<p>So, If I understand correctly, the iPhone is cool because it allows native development, but Android is bad because it allows native development ?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why I hate the Android SDK. by Matt</title>
		<link>http://www.music-piracy.com/?p=257&#038;cpage=1#comment-5604</link>
		<dc:creator>Matt</dc:creator>
		<pubDate>Fri, 02 Jul 2010 17:44:35 +0000</pubDate>
		<guid isPermaLink="false">http://www.music-piracy.com/?p=257#comment-5604</guid>
		<description>&quot;&quot;&quot;Background processes will run for days, possibly months, maybe even years” — Android 2.x is fairly aggressive at terminating long-running services. If you have studies that demonstrate otherwise, please supply links to reproducible test cases.&quot;&quot;&quot;

If I decide It&#039;s worthwhile I will.  At this point I have better things to do.

&quot;&quot;&quot;“well what about the NDK? It still executes through Dalvik, but it bypasses most of the optimization.” — no, it does not “execute through Dalvik”. Dalvik executes Dalvik VM bytecode. The NDK generates chip-specific opcode libraries, linked to Dalvik applications through JNI.&quot;&quot;&quot;

Yeah you are missing the point entirely.  To hop into NDK you need to jump through Dalvik.  You are still subject to it&#039;s schedular at thread starts.  There&#039;s no reason for this, and it frustrates developers.  It&#039;s such an obvious hack.

&quot;&quot;&quot;“Their approval process is virtually nonexistent, which results in the possibility for an ( reasonable level of ) anonymous developer to add dangerous applications” — and your proof of this is, what, exactly?&quot;&quot;&quot;

Summercon 2010 Talk.

&quot;&quot;&quot;“Which means rooting the crap out of users just became that much easier.” — and your proof of this is, what, exactly?&quot;&quot;&quot;

Summercon 2010 Talk.  And subsequent removal of fake apps that could deliver payloads to users.  Namely a Twilight app.

&quot;&quot;&quot;“You are either optimizing and securing inside of Dalvik or you are doing it inside linux. One or the other, definitely not both.” — and your proof of this is, what, exactly?&quot;&quot;&quot;

It&#039;s not a statement of boolean value.  It&#039;s an opinion.  It&#039;s also kind of the whole point of the editorial.  Policy / Security / SDK should either use the Dalvik VM, or execute on Bare metal.  If you do it on both you are defeating the whole point of the Virtual Machine and generating a giant mess for developers and users alike.  

The only reason I can conceive of for google to be doing what they are doing right now is that they are scared to death of removing dalvik because Java can&#039;t execute without it.  They refuse to license a JVM.  But at the same time they refuse to release SDK tools for using Dalvik with any other language.  This cannot continue.  They need to either support other languages in Dalvik, or give up on Dalvik.

I don&#039;t think the time is right yet for Dalvik, and I think that as a design decision using Dalvik was a very bad idea.</description>
		<content:encoded><![CDATA[<p>&#8220;&#8221;"Background processes will run for days, possibly months, maybe even years” — Android 2.x is fairly aggressive at terminating long-running services. If you have studies that demonstrate otherwise, please supply links to reproducible test cases.&#8221;"&#8221;</p>
<p>If I decide It&#8217;s worthwhile I will.  At this point I have better things to do.</p>
<p>&#8220;&#8221;"“well what about the NDK? It still executes through Dalvik, but it bypasses most of the optimization.” — no, it does not “execute through Dalvik”. Dalvik executes Dalvik VM bytecode. The NDK generates chip-specific opcode libraries, linked to Dalvik applications through JNI.&#8221;"&#8221;</p>
<p>Yeah you are missing the point entirely.  To hop into NDK you need to jump through Dalvik.  You are still subject to it&#8217;s schedular at thread starts.  There&#8217;s no reason for this, and it frustrates developers.  It&#8217;s such an obvious hack.</p>
<p>&#8220;&#8221;"“Their approval process is virtually nonexistent, which results in the possibility for an ( reasonable level of ) anonymous developer to add dangerous applications” — and your proof of this is, what, exactly?&#8221;"&#8221;</p>
<p>Summercon 2010 Talk.</p>
<p>&#8220;&#8221;"“Which means rooting the crap out of users just became that much easier.” — and your proof of this is, what, exactly?&#8221;"&#8221;</p>
<p>Summercon 2010 Talk.  And subsequent removal of fake apps that could deliver payloads to users.  Namely a Twilight app.</p>
<p>&#8220;&#8221;"“You are either optimizing and securing inside of Dalvik or you are doing it inside linux. One or the other, definitely not both.” — and your proof of this is, what, exactly?&#8221;"&#8221;</p>
<p>It&#8217;s not a statement of boolean value.  It&#8217;s an opinion.  It&#8217;s also kind of the whole point of the editorial.  Policy / Security / SDK should either use the Dalvik VM, or execute on Bare metal.  If you do it on both you are defeating the whole point of the Virtual Machine and generating a giant mess for developers and users alike.  </p>
<p>The only reason I can conceive of for google to be doing what they are doing right now is that they are scared to death of removing dalvik because Java can&#8217;t execute without it.  They refuse to license a JVM.  But at the same time they refuse to release SDK tools for using Dalvik with any other language.  This cannot continue.  They need to either support other languages in Dalvik, or give up on Dalvik.</p>
<p>I don&#8217;t think the time is right yet for Dalvik, and I think that as a design decision using Dalvik was a very bad idea.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
