Links for June 15th through June 18th

Posted on June 18, 2012 by Vinny

Jekyll Github Blog Feeds Template – RSS 2.0 & Atom 1.0 Feed Templates For Jekyll-Based Blogs – Jekyll Github Blog Feeds Template – RSS 2.0 & Atom 1.0 Feed Templates For Jekyll-Based Blogs
Pondasee – Front-end Starter Kit combined with the power of SCSS & Compass – Pondasee is NOT a css framework, it is only our front-end starter kit combined with the power of SCSS & Compass to build a theme. If you want to use this project as your starting point, you need to know
Lessons from Amazon RDS on Bringing Existing Apps to the Cloud | GigaSpaces on Application Scalability | Open Source PaaS and More – I believe that the lessons from Amazon RDS could serve as a good reference on what that process could be. If you are considering moving more than one application into the cloud, you should consider the use of DevOps & PaaS as the means to deliver those steps
InfoQ: Visual Studio LightSwitch Adds HTML5/JavaScript Support – At this week's TechEd conference, Microsoft announced that they are adding HTML5 support to Visual Studio LightSwitch, the tool intended to simplify the development of custom database-driven business applications.
Mobello | HTML5 framework for building mobile web app – Mobello is high performance JavaScript framework for HTML5 mobile apps. You can build native-like HTML5 apps for smartphones and tablets with Mobello. Mobello is scalable and robust framework suited for fast and rich user interface.
JMeter Cloud Testing – BlazeMeter is a 100% JMeter-compatible, self-service web load testing cloud. Instantly generate massive stress tests with comprehensive reporting and analysis tools.
The Two Horsemen of the Enterprise Software Apocalypse – Businessweek – One of the first things Duffield and his Workday co-founder Aneel Bhusri will tell you is that their company is not a revenge plot against Larry Ellison, the founder and chief executive of Oracle
The Great Replacement: Microsoft, Yammer, and a New World in Enterprise Computing | PandoDaily – Hot companies such as Dropbox, Asana, and Atlassian will ascend to the throne, while the corpses of the old rulers – Microsoft, Oracle, SAP – will lie rotting in the gutter. The Great Replacement is beginning
OWASP Top 10 for JavaScript – A3: Broken Authentication and Session Management – In this post I'll describe how OWASP Top 10: A3 – Broken Authentication and Session Management applies to javascript based applications. Problems around broken authentication and session management can happen for a number of reasons. The end result is the same
Titan – A Highly Scalable, Distributed Graph Database – Titan is a distributed graph database optimized for storing and processing large-scale graphs within a multi-machine cluster.
PhoneGap apps powered by Database.com | Adobe Developer Connection – In this article we will explore the creation of mobile applications built using PhoneGap, with all data served and persisted using Database.com. Before we dive deeper into the technical details, let's review the terminology.
AngularJS — Superheroic JavaScript MVC Framework – AngularJS lets you write web applications as if you had a smarter browser. It lets you extend HTML's syntax to express your application's components clearly and succinctly and lets use standard HTML as your template language. And it automatically synchronizes data from your UI (view) with your JavaScript objects (model) through 2-way data binding.

Links for June 20th through June 23rd

Posted on June 26, 2011 by Vinny

Kind of Screwed – Waxy.org – At the heart of this settlement is a debate that's been going on for decades, playing out between artists and copyright holders in and out of the courts.
rest-client – Java application to test RESTful webservices – RESTClient is a Java application to test RESTful webservices. It can be used to test variety of HTTP communications. From version 2.3, it has two executable Jars:
Extremely Decoupled Architecture for Web Applications (EDAWA); Part 1: Vertical Decoupling | Javalobby – Vertical decoupling brings the opportunity to exchange the whole technology stack including programming language, runtime environment, operating system or whatever.
What’s Up, JavaDoc? (Jonathan Gibbons) – The Java documentation tool, javadoc, has been somewhat neglected in recent releases, but in JDK 7, it's been getting some amount of long-overdue TLC, albeit mostly under the covers.
Announcing GitHub for Mac – GitHub – Pull requests, merge button, fork queue, issues, pages, wiki –– all awesome features that make sharing easier. But those things are only great after you've pushed your code to GitHub. Today we're happy to announce GitHub for Mac.
InfoQ: Where Did My Architecture Go? – Eoin Woods advices on writing code that preserves the initial architectural design using conventions, dependency analysis, module systems, augmenting the code & checking rules, and language extensions.
CWE – Common Weakness Enumeration: A Community-developed dictionary of software weakness types – International in scope and free for public use, CWE™ provides a unified, measurable set of software weaknesses that is enabling more effective discussion, description, selection, and use of software security tools and services that can find these weaknesses in source code and operational systems as well as better understanding and management of software weaknesses related to architecture and design.
Lessons in Software Reliability – Java Code Geeks – Ensure that you build support across the organization, build a culture that puts reliability first. Like any change, it will require patience, commitment, and unrelenting followup.
Amazon Web Services Blog: Now Available: Amazon EC2 Running Red Hat Enterprise Linux – I'm pleased to be able to tell you that you can now run Red Hat Enterprise Linux on EC2 with support from Amazon and Red Hat
Raible Designs | Java Web Application Security – Part V: Penetrating with Zed Attack Proxy – In this article, I've shown you how to pentest a web application using Firefox and OWASP's Zed Attack Proxy (ZAP). I found ZAP to be a nice tool for figuring out vulnerabilities, but it'd be nice if it had a "retest" feature to see if you fixed an issue for a particular URL.
My “NoSQL for Java Devs” slides are now online « Glen Smith – In the talk we looked at four different types of NoSQL options for Java guys: Simple Key/Value in-memory stores (Memcached), sophisticated distributed key/value stores (Voldemort), Document Databases (CouchDB), and Graph Databases (Neo4j).
An introduction to MongoDB – In this short demo, long-time developerWorks contributor Andrew Glover introduces MongoDB, provides a quick tour of its use, and helps you understand where it's most applicable
An introduction to Amazon SimpleDB – an introduction to SimpleDB, a massively scalable, highly available key/value datastore. Part of the Amazon Web Services suite, SimpleDB provides a simple web services interface to create and store multiple data sets, query the data, and return the results. Get started with SimpleDB in this short introduction.
InfoQ: 5 Classic Patterns in Everyday Code – Michael Wood explains the importance of using patterns in software design, exemplifying with Adapter, Decorator, Command, and several Factory patterns.
The Big Idea: Before You Make That Big Decision… – Harvard Business Review – In this article, we will describe a straightforward way to detect bias and minimize its effects in the most common kind of decision that executives make: reviewing a recommendation from someone else and determining whether to accept it, reject it, or pass it on to the next level.
Not doing Code Reviews? What’s your excuse? – Java Code Geeks – Reviews don’t need to be a big deal, you don’t need formal review meetings. And there are tools to help make reviews cheaper, easier and more effective. So, what about the rest of you? Why aren’t you doing code reviews? What’s your excuse?
InfoQ: New Books on Software Architecture – Software Architecture is one of the important topics for software engineers, because many failures of software development projects are caused by inadequate design. Thus, it is essential to learn more about architectural issues in theory and practice. Interesting new books that have been published recently or in the near future could be very helpful:
Cassandra vs MongoDB vs CouchDB vs Redis vs Riak vs HBase comparison :: KKovacs – In this light, here is a comparison of Cassandra, Mongodb, CouchDB, Redis, Riak, Membase, Neo4j and HBase:
» GWT Dependency Injection recipes using GIN (III) » Canoo RIA Blog – In my opinion, dependency injection allows a much cleaner structure, enables configuring the application in an elegant and easy way and, when used together with an event bus, produces low-coupled high-modular applications.
Sencha touch – show loading mask anywhere | Schogini – If, you need to show a load mask anywhere (not necessarily linked to a store) then you can do something like this:

Links for June 10th through June 11th

Posted on June 11, 2011 by Vinny

Writing a Sencha Touch Application, Part 1 – In this series we will create a Sencha Touch application that allows its users to take notes and store them on the device running the app
The Good, the Bad, and the Ugly of REST APIs – O’Reilly Broadcast – We've seen a lot of the good, the bad, and the ugly in API design. This article sums up my thinking on the subject.
Zero-downtime Deployment (and Rollback) in Tomcat; a walkthrough and a checklist – Java Code Geeks – If you thought Tomcat could not get any better, you thought wrong. Tomcat 7 introduces what is called Parallel Deployment. This was contributed by SpringSource/VMWare. Simply put, parallel deployment is the ability to deploy more than one version of your web application in parallel, making all versions available under the exact same URL.
mokk.me – Mobile web app mocks – mokk.me is a web app with no back-end, using HTML, CSS, JavaScript, and CouchDB only
Using CouchDB in an iOS Application :: myNoSQL – A guide of using mobile Couchbase Xcode project templates by Marty Schoch. It takes only 5 minutes to get started.
Why won’t Microsoft say anything about Silverlight? | Mobile development – InfoWorld – Once touted as the ultimate replacement for Adobe Flash, Microsoft Silverlight's future seems cloudier than ever
YUI Theater — Jenny Donnelly: “Introduction to Git” (53 min.) » Yahoo! User Interface Blog (YUIBlog) – YUI engineering manager Jenny Donnelly (@jennyd) gives an introduction to Git and how to use it in the real world, including branching and committing, a typical git workflow, merge vs rebase, and tips and tricks that will make your life easier.
Safer Software through Secure Frameworks – What we need is implementation-level security issues taken care of at the language and framework level. So that developers can focus on their real jobs: solving design problems and writing code that works.
Seven Security (Mis)Configurations in Java web.xml Files – There are a lot of articles about configuring authentication and authorization in Java web.xml files. Instead of rehashing how to configure roles, protect web resources, and set up different types of authentication let's look at some of the most common security misconfigurations in Java web.xml files.
Java Web Application Security – Part IV: Programmatic Login APIs | Javalobby – This article has shown you how you can programmatically login using Java EE 6, Spring Security and Apache Shiro. Before Java EE 6 (and Servlet 3), there was no API to programmatically login, so this is a welcome addition
EMC BigData Acquisition Budget: $3 Billion :: myNoSQL – EMC Corp. may spend about $3 billion on acquisitions this year, keeping pace with last year’s tally, to add businesses that can help corporate customers analyze reams of data
Java Persistence Performance: How to improve JPA performance by 1,825% – JPA provides several optimization features and techniques, and some pitfalls waiting to snag the unwary developer. Most JPA providers also provide a plethora of additional optimization features and options. In this blog entry I will explore the various optimization options and techniques, and a few of the common pitfalls.
How to Design Multi-Client Databases | Brent Ozar PLF | Brent Ozar PLF – When you’re building an application for lots of clients, there’s two common ways to design the database(s): Option A: Put all clients in the same database Option 2: Build one database per client
New Features and Enhancements in Spring 3.1 – Building on the support introduced in Spring 3.0, Spring 3.1 is currently under development, and at the time of this writing Spring 3.1 M2 has just been released. This is a list of new features for Spring 3.1
Mea Vita (My Life): Tricks I Learned At Apple: Steve Jobs Load Testing @mvorpagel – While it's hard to predict exactly how the entire system would behave in the real world, we had a good idea, before we flipped the switch, thanks to our thorough testing strategies.
For Google, iCloud Is Annoying; For Microsoft, It’s A Humiliation (AAPL, MSFT, GOOG) – The problem for Microsoft is that they had almost a decade to come up with something like iCloud to realize that vision, and they didn't.

Daily del.icio.us for March 27th through March 30th

Posted on March 30, 2010 by Vinny

Vaadin Directory Opens its Doors – Blog – vaadin.com – Vaadin Directory is now open. Your are welcome to browse, download and try number add-ons that can make you Vaadin-based applications even better!
gwt-mobile-webkit – GWT library to leverage HTML5 and Mobile WebKit features (specifically iPhone/iPod Touch) – This library contains GWT API's addressing the new HTML5 features which are supported by Mobile WebKit
GWT is Flexible — an iPhone Demo | Clay Lenhart’s Blog – For me, the difference between GWT and Javascript is whether you want to work with a static language like Java, or a dynamic language like Javascript. I assert, with little proof, that static languages are better
gwt-cal – an open-source calendar widget similar to iCal, Outlook, Google Calendar, etc – gwt-cal is a web-based calendar component similar to iCal, Microsoft Outlook or Google Calendar. It can be included in any Google Web Toolkit (GWT) web-application, and can be easily themed to resemble your favorite calendar tool.
Google’s Chrome Leaves Another Hackathon Unscathed « The Firewall – Forbes.com – This year, researchers cracked Firefox, Internet Explorer 8, and Safari in minutes, winning $10,000 each, bragging rights and the hardware those applications were running on. But more notable is the one survivor of the competition's browser category: Google's Chrome.
Software Assurance Maturity Model (SAMM): A guide to building security into software development – The Software Assurance Maturity Model (SAMM) is an open framework to help organizations formulate and implement a strategy for software security that is tailored to the specific risks facing the organization
piriti – JSON and XML Mapper for GWT – Piriti (Maori for "bridge") is a JSON and XML mapper for GWT based on annotations and deferred binding. The following code snippets show the basic idea behind Piriti.
Java-Clojure Interop: Calling Clojure From Java | Javalobby – Clojure is quickly becoming one of the more popular JVM languages because of its high performance and excellent handling of concurrency. Rich Hickey's talk entitled "An Introduction For Java Programmers" is a great resource for Java programmers who are interested in learning Clojure.
AppModuleUiBinder – gwt-mosaic – Using Application module & Actions with UiBinder. – Project Hosting on Google Code – The UiBinder framework allows you to build your applications as HTML pages with GWT widgets sprinkled throughout them (see Declarative Layout with UiBinder).<br />
<br />
This tutorial will show how to bind UiBinder declared elements with GWT Mosaic Actions using the Application module.
How to Make an HTML5 iPhone App – I’ll show you how to create an offline HTML5 iPhone application. More specifically, I’ll walk you through the process of building a Tetris game.

Daily del.icio.us for March 18th through March 20th

Posted on March 20, 2010 by Vinny

skipfish – web application security scanne – Skipfish is an active web application security reconnaissance tool. It prepares an interactive sitemap for the targeted site by carrying out a recursive crawl and dictionary-based probes
Google Releases Skipfish Application Security Scanner | threatpost – "Skipfish is an active web application security reconnaissance tool. It prepares an interactive sitemap for the targeted site by carrying out a recursive crawl and dictionary-based probes
Raible Designs | What’s New in Spring 3.0 – This morning, I attended Rod Johnson's What's New in Spring 3.0 keynote at TSSJS. Rod ditched his slides for the talk and mentioned that this might be risky
InfoQ: Industrial Strength Groovy – Paul King presents some of the tools helping one programming in Groovy: Cobertura – code coverage, CodeNarc – code style, EasyB – acceptance tests, GroovyDoc – documentation, GroovyMock/Spock – mocking and testing, Hudson – CI builds, Maven/Ant/Gant/Gradle – build files, OSGi – bundles, and Spring/Guice – dependency injection.
PrettyTime – Elapsed Timestamp Formatting and Conversion for Java (Social, JSF2) | OcpSoft – PrettyTime is an OpenSource time formatting library. Completely customizable, PrettyTime creates human readable, relative timestamps
Sonar 2.0 is Out | Javalobby – The Sonar team is pleased to announce Sonar 2.0. The main feature in Sonar 2.0 consists of analyzing Design : Architecture and Object Oriented Metrics.
Java Symposium keynote video – Red Hat’s Bob McWhirter on cloud in application delivery – SOA Talk – Red Hat's chief architect of cloud computing, Bob McWhirter said the cloud is the next logical step for application delivery in his keynote on cloud computing at TheServerSide Java Symposium.
MySQL’s Marten Mickos becomes CEO of hybrid cloud startup Eucalyptus Systems | VentureBeat – Marten Mickos, former chief executive of open source database company MySQL, is moving to cloud computing startup Eucalyptus Systems, where he will serve as CEO
Microsoft, Adobe confident there is room for Silverlight, Flash | Developer World – InfoWorld – The HTML5 specification could be a game-changer in the rich Internet application realm, but representatives of Microsoft and Adobe Systems, both of which have proprietary plug-ins for Web applications, remained confident Thursday in their companies' Web strategies.
The Secret to Having Happy Employees – You’re the Boss Blog – NYTimes.com – I have learned the long, hard and frustrating way that as a manager you cannot make everyone happy. You can try, you can listen, you can solve some problems, you can try some more. Good management requires training, counseling and patience, but there comes a point when you are robbing the business of precious time and energy.

Daily del.icio.us for Feb 24, 2007

Posted on February 24, 2007 by Vinny

52 Proven Stress Reducers – 52 Proven Stress Reducers
Microsoft ponders Ruby language | InfoWorld | News | 2007-02-23 | By Paul Krill – Microsoft is "very interested" in the Ruby programming language and also plans to expand its Expression design tools line
OWASP Tiger – OWASP – OWASP Tiger is a Windows application that helps you construct and send a HTTP requests, receive and analyze the responses, match them against a set of conditions to produce alerts, notifications
Testing Guide Foreword – OWASP – The problem of insecure software is perhaps the most important technical challenge of our time. Security is now the key limiting factor on what we are able to create with information technology. At OWASP, we’re trying to make the world a place where insec
Lock it down: Use the revised OWASP Top Ten to secure your Web applications — Part 1 – In the articles to follow, I’ll explore the 2007 OWASP Top 10. We’ll look at causes for these vulnerabilities and how to defend against potential exploits

Daily del.icio.us for Oct 30, 2006

Posted on October 30, 2006 by Vinny

Keith Donald Interviewed on the Spring Web Flow 1.0 Release | Springframework.org

In this interview with InfoQ.com on release day last Thursday, Keith discusses the Spring Web Flow 1.0 feature set and 1.1 roadmap, as well as the history of the project. You’ll gain insight into how the project started and what were some of the key chall

(tags: spring2.0 SpringFramework webflow keith_donald)
Download of the Day: VMware Converter 3.0 Beta (Windows) – Lifehacker

The process of converting an existing physical machine to virtual for running under VMware can be convoluted, tedious, and fraught with peril. The free (for now, at least) VMware Converter 3.0, now in beta, greatly s

(tags: vmware windows virtualization software xp free tools linux)
OWASP Pantera Web Assessment Studio Project – OWASP

OWASP is happy to announce the first release of OWASP Pantera â€“ Web Assessment Studio. Pantera is a mix between a pentest proxy, an application scanner, and an intelligent analysis framework. Panteraâ€™s goal is to leave the analysis and automatic (rep

(tags: owasp security pantera mysql ssl ntml ids SpikeProxy openssl opensource pentest)
Software Development in the Real World: Best of the Best Web 2.0 Web Sites

From Social Bookmarking Sites, to Real Estate sites, this list has only the best Web 2.0 Sites available today

(tags: web2.0 list web webdesign reference technology interesting)
Tim Berners-Lee talks about W3C reform and reinventing HTML

Berners-Lee hopes to establish a new working group that will focus on revising and improving the HTML standard while working to bridge the gap between HTML and XHTML

(tags: HTML standards W3C web webdesign XHTML attention XFORMS xml xul browser tim_berners-lee)
Ubuntu Edgy Upgrade Common Problems With solutions — Debian Admin

Ubuntu Edgy Upgrade Common Problems With solutions

(tags: ubuntu linux howto edgy sysadmin upgrade dapper)
Quick MySQL Backup Setup

For our 15-minute challenge, we will backup a MySQL 5.0 database on Linux. We will only use freely downloadable open source software for the solution.

(tags: mysql backup database tutorial howto linux zmanda free tools utilities programming opensource)
They Write the Right Stuff

This software never crashes. It never needs to be re-booted. This software is bug-free. It is perfect, as perfect as human beings have achieved. Consider these stats : the last three versions of the program — each 420,000 lines long-had just one error ea

(tags: software programming development nasa process space article)
Information Architects Japan Â» Blog Archive Â» The Interface of a Cheeseburger

All things have an interface. Shaping interfaces is shaping the character of things. The brand is what transports the character of things.

(tags: design interface Usability branding webdesign mcdonalds web Humor)

Vinny Carpenter’s blog

{ “passion”: “software development” }

Tag Archives: owasp