The Java paper is open for public comment until Dec. 1 at [email protected]. While secure-programming can help, it’s not enough, Paller notes.