The article links to Java web start, which is what Oracle seems to recommend: <a href="https:&#x2F;&#x2F;blogs.oracle.com&#x2F;java-platform-group&#x2F;entry&#x2F;java_web_start_in_or" rel="nofollow">https:&#x2F;&#x2F;blogs.oracle.com&#x2F;java-platform-group&#x2F;entry&#x2F;java_web_...</a><p>But yes, VM sounds like a better solution. Why risk the security of your desktop&#x2F;laptop with unmaintained legacy applications?