java nightmare
432 views | +0 today
Follow
Your new post is loading...
Your new post is loading...
Scooped by softwarenightmare
Scoop.it!

Dinis Cruz Blog: We need Security-focused SAST/Static-Analysis rules

more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Should I use a 32- or a 64-bit JVM? | Plumbr blog

Should I use a 32- or a 64-bit JVM? | Plumbr blog | java nightmare | Scoop.it
This is a question I have faced several times during my career in enterprise software development. Every once in awhile I've had to hand out recommendations for configuring a specific new environment.
more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Android apps used by millions vulnerable to password, e-mail theft

Android apps used by millions vulnerable to password, e-mail theft | java nightmare | Scoop.it
Researchers uncover faulty encryption in apps available in Google's Play Market.
more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

java - Tomcat + NetBeans + JAX-WS Sample Project results in javax.xml.ws.WebServiceException - Stack Overflow

more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Boneh Publications: The most dangerous code in the world: validating SSL certificates in non-browser software

SSL (Secure Sockets Layer) is the de facto standard for secure Internet communications. Security of SSL connections against an active network attacker depends on correctly validating public-key certificates presented when the connection is established. We demonstrate that SSL certificate validation is completely broken in many security-critical applications and libraries. Vulnerable software includes Amazon's EC2 Java library and all cloud clients based on it; Amazon's and PayPal's merchant SDKs responsible for transmitting payment details from e-commerce sites to payment gateways; integrated shopping carts such as osCommerce, ZenCart, Ubercart, and PrestaShop; AdMob code used by mobile websites; Chase mobile banking and several other Android apps and libraries; Java Web-services middleware - including Apache Axis, Axis 2, Codehaus XFire, and Pusher library for Android - and all applications employing this middleware. Any SSL connection from any of these programs is insecure against a man-in-the-middle attack. The root causes of these vulnerabilities are badly designed APIs of SSL implementations (such as JSSE, OpenSSL, and GnuTLS) and data-transport libraries (such as cURL) which present developers with a confusing array of settings and options. We analyze perils and pitfalls of SSL certificate validation in software based on these APIs and present our recommendations.

more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Problem with CRL Distribution Point List and latest Java JDK.

more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Sometimes I feel like constructors should be removed from Java

Sometimes constructors in Java are convenient. You can instantiate your class with all the data you need with a simple one-liner: Car car = new Car(numberOfWheels, color, engine, doors); That code ...
more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Java update process is broken

Java update process is broken | java nightmare | Scoop.it
I've been researching some problems with Java updates. It turns out that the issues are so extensive that they're going to take up my entire column. I wrote in...
more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

A 12-year-old bug in JDK, still out there leaking memory in our applications | Plumbr blog

A 12-year-old bug in JDK, still out there leaking memory in our applications | Plumbr blog | java nightmare | Scoop.it
This story goes back. For weeks or even decades, depending on how you mark the starting date. Anyhow, few weeks ago one of our customers had problems with interpreting a leak reported by Plumbr.
more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Why Are Java Deployments Still So Hard? | UC4 Blog

Why Are Java Deployments Still So Hard? | UC4 Blog | java nightmare | Scoop.it
So why are deployments still hard? What is DevOps? With all the advancements in Java based application servers you'd think deployment is a non issue by now.
more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Software Simplexity: Just another Package Manager

The first thing you need to do when you go into the cloud is have a plan. Well, have been brooding for the last three years so there is no lack of ideas. Second thing is to get a cluster running. Obviously it is not that hard to get some process going on a Linux machine and start them. However, I ran into my by far greatest frustration with Java. Java is supposed to be "Write once, Run anywhere," but in practice they leave out this perky little detail of deployment. Java is amazingly poor in bridging that last mile.

more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Eclipse 4.2 performance slated - will the community come out in force?

Eclipse 4.2 performance slated - will the community come out in force? | java nightmare | Scoop.it
Criticism of Eclipse 4.2's performance had been bubbling under the surface for some time, as had concerns over funding and resources. Question is - will anyone help Eclipse out?
more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Why Java EE Lost and Spring Won | Javalobby

Why Java EE Lost and Spring Won | Javalobby | java nightmare | Scoop.it
Curator's note: Andy is the CEO of OSI (Open Software Integrators). He's a forward-thinker and exceptional blogger. He will be writing regularly on DZone, so I...
more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Is OSGi ready for Enterprise yet? | Javalobby

Is OSGi ready for Enterprise yet? | Javalobby | java nightmare | Scoop.it
OSGi and enterprise computing, no problem - is there? Being a Spring enthusiast used to plain old Spring and JEE projects I recently took over a project based...
more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Certificates and Revocation - OpenStack Compute Administration Manual  - Essex (2012.1)

more...
No comment yet.
Scooped by softwarenightmare
Scoop.it!

Java and overcomplication

Java and overcomplication | java nightmare | Scoop.it
When I first started working with Java to do real work, the servlet spec was pretty immature, and I was coming from a world of cgi-lib.pl and PHP.  Things were quite simple.  You wrote a class that...
more...
No comment yet.