https://dfarq.homeip.net/java-is-patched-now-but-still-not-very-safe/