https://fossforce.com/2013/04/oracle-serious-about-java-security-maybe/
Oracle Serious About Java Security--Maybe