https://www.sorinmustaca.com/the-sad-state-of-java-security/