TECH NOTES

June 25, 2008

Tools & Code: Microsoft Blogs Presents – SQL Injection Defense Tools

Filed under: IT Tools & Code — Black Falcon @ 11:33 pm
Tags: , , ,

SQL Injection Defense Tools

Bryan here. A couple of weeks ago, I posted a blog entry with links to SQL injection defense guidelines. The SDL requires guidance and education for end-users, and tools to verify security settings are highly recommended, as defined in “Stage 5: Implementation Phase: Creating Documentation and Tools for Users that Address Security and Privacy“. Today, Microsoft is releasing two new SQL injection defense and detection tools, URLScan 3.0 and Microsoft Source Code Analyzer for SQL Injection (MSCASI). We are also excited to announce the release of HP Scrawlr, a SQL injection detection tool developed by HP Web Security Research Group in conjunction with Microsoft.

Go here to read rest of article… and get tools…


Business, Windows OS: Windows XP… Not dead yet… MS to support thru 2014…

Filed under: IT Business, IT Windows OS — Black Falcon @ 11:24 pm
Tags: , , ,


Go here for article source…

Microsoft Pledges Windows XP Support Through 2014

Microsoft may have little choice but to support XP for an extended period since most of its business customers have not upgraded to Windows Vista.

By Paul McDougall, InformationWeek
June 24, 2008
URL: http://www.informationweek.com/story/showArticle.jhtml?articleID=208800494

In an unprecedented move, Microsoft has committed to providing support services for its soon to be retired Windows XP through 2014 — a full 13 years after the operating system was originally released.

In a letter sent to customers this week, Microsoft senior VP Bill Veghte said the software maker will provide security patches “and other critical updates” for Windows XP until April, 2014.

“Our ongoing support for Windows XP is the result of our recognition that people keep their Windows-based PCs for many years,” Veghte wrote.

That may be, but Microsoft normally terminates support for an OS within ten years of its release — at the latest. For instance, it plans to end support for Windows 2000 in 2010.

Microsoft may have little choice but to support Windows XP for an extended period, given that the majority of its large business customers have not upgraded their personal computers and laptops to the newer, Windows Vista operating system.

Many companies have balked at Vista’s cost, resource requirements, and lack of compatibility with older applications.

Microsoft released Vista in January of last year. But the company has apparently accepted the fact that many of its largest customers will skip Vista altogether and will continue using XP at least until Windows 7 becomes available three years from now, and possibly longer.

In addition to supporting XP through 2014, Microsoft is now actively promoting a program that allows customers to downgrade Vista systems to XP through a loophole in the company’s licensing terms. Microsoft’s software license allows customers who purchase a copy of Windows to install and run a previous version of the OS at no additional cost.

“It’s true that we will stop selling Windows XP as a retail packaged product and stop licensing it directly to major PC manufacturers [after June 30],” wrote Veghte. “But customers who still need Windows XP will be able to get it,” he said.

Beyond the downgrade program, Microsoft will continue to make Windows XP available to manufacturers of low-cost PCs incapable of running Vista through June 2010. Low cost PCs, like the Asus Eee PC, are gaining popularity in fast growing emerging markets like India and China.

Without continued access XP, manufacturers of such systems would be forced to offer them with the rival Linux OS on board — a situation Microsoft is hoping to preempt.

R&R: “Black Holes”… They all eat the same way… What are they? A Fraternity?

Filed under: IT R&R — Black Falcon @ 11:15 pm
Tags: , ,

Black Holes All Eat The Same Way

By Robert Roy Britt
and
Clara Moskowitz
posted: 23 June 2008
7:00 a.m. ET

Go to article source here…



This composite image of M81 includes X-rays from the Chandra (blue), optical data from Hubble (green), infrared from Spitzer (pink) and ultraviolet data from GALEX (purple). The inset shows a close-up of the Chandra image where a supermassive black hole about 70 million times more massive than the Sun lurks. A new study using data from Chandra and ground-based telescopes, combined with detailed theoretical models, shows that the giant black hole in M81 feeds just like ones with masses of only about ten times that of the Sun. Credit: X-ray: NASA/CXC/Wisconsin/D.Pooley and CfA/A.Zezas; Optical: NASA/ESA/CfA/A.Zezas; UV: NASA/JPL-Caltech/CfA/J.Huchra et al.; IR: NASA/JPL-Caltech/CfA

(more…)

Tools & Code: Replace Adobe Reader With Smaller and Faster “Foxit Reader”

Filed under: IT Tools & Code — Black Falcon @ 11:05 pm
Tags: , ,

Foxit Reader 2.3 for Windows

Go here for free software…

An exclusive small and fast PDF Reader!

Overview

Foxit Reader is a free PDF document viewer and printer, with incredible small size (only 2.55 M download size), breezing-fast launch speed and rich feature set. Foxit Reader supports Windows Me/2000/XP/2003/Vista. Its core function is compatible with PDF Standard 1.7.

In the past, you’ve had to download a huge PDF reader from another software company, go through a lengthy installation process and wait for an annoying splash window to disappear just to open a PDF document. Moreover, if you want to annotate a PDF document, you have to pay US$299 to buy certain software.

Now with Foxit Reader, you don’t have to endure such pain any more. The following is a list of compelling advantages of Foxit Reader:

  • Incredibly small: The download size of Foxit Reader is only 2.55 M which is a fraction of Acrobat Reader 20 M size.
  • Breezing-fast: When you run Foxit Reader, it launches instantly without any delay. You are not forced to view an annoying splash window displaying company logo, author names, etc.
  • Annotation tool: Have you ever wished to annotate (or comment on) a PDF document when you are reading it? Foxit Reader allows you to draw graphics, highlight text, type text and make notes on a PDF document and then print out or save the annotated document.
  • Text converter: You may convert the whole PDF document into a simple text file.
  • High security and privacy: Foxit Reader highly respects the security and privacy of users and will never connect to the Internet without users’ permission. While other PDF readers often silently connect to the Internet in the background. Foxit PDF Reader does not contain any spyware.

Tools & Code: “JVM-Based Languages Grow In Popularity”

Filed under: IT Tools & Code — Black Falcon @ 10:56 pm
Tags: , , , , ,


Go here for article source…

JVM-Based Languages Grow In Popularity

Written by Reuven Lerner – Jun. 20, 2008

When Sun Microsystems first unveiled Java in 1995, it was hard to define. That’s because Java has several parts: It is, of course, an object-oriented programming language. Java is also a standard (or multiple standards, including mobile, standard, and enterprise versions) that defines the language, as well as the libraries that a programmer can expect to have available with each version. Finally, Java is a “virtual machine” (the “JVM”), a software environment on which Java programs execute. You can only run Java programs if you have a JVM — but JVMs are available for every platform you can imagine, making Java a highly portable language.

One of the fascinating trends that the Java world has seen in the last few years is the growth of non-Java languages that use the JVM. After all, if you create a new programming language, you will need to write it for a particular platform. If you want your language to be portable across platforms, you will need to implement versions for each of those platforms. By contrast, if you implement your language on the JVM, then your language will work on any system with a JVM, which means basically everywhere.

A growing number of languages are thus being written for the JVM. Four of the most popular are distributed under an open-source license. Given that Java is now open source, this means that you have a fully open-source stack to work with–one that’s also portable. Because these languages are implemented on top of the JVM, they also have access to standard Java classes and libraries. This means that if a third-party product includes connectivity routines in Java, but you prefer to work in Python, you can use Jython and access the Java libraries from within your program.

The oldest JVM-based language, so far as I know, is Jython, formerly known as JPython. Jython, as you might guess from its name, is an implementation of the Python language on the JVM. Jython is compatible with the standard version of Python (sometimes known as “CPython”) through version 2.2, which means that it is missing some of the newer Python features. The most recent version was released in October 2007 — but Sun hired two well-known Jython developers earlier this year, and the language can now run the Django application framework, testifying to its compatibility.

Sun similarly sponsors the development of JRuby, a JVM-based version of Ruby. Whereas Jython is one of only two implementations of Python, JRuby is one of several implementations of the Ruby language. However, JRuby is widely seen as a particularly important variation, partly because it has become both fast and highly compatible with the standard C implementation of Ruby. It is able to run Ruby on Rails, in addition to many other functions.

Jython and JRuby are both ports of existing languages to the JVM. Two languages that are totally new to the JVM are Groovy and Scala. Both are growing in popularity; the difference is that while Groovy is more of a dynamic, “scripting” language, Scala is a statically typed language. Perhaps the best-known use of Groovy is in the Groovy on Grails project, a Web application framework (similar to Ruby on Rails) written in Groovy, and hosted on the JVM. Grails has found its way into commercial applications, most notably LinkedIn, where they found that it was much faster and easier to develop in than straight Java. Scala, by contrast, is a very strongly typed language, about which Steve Yegge spoke in a recent talk, and for which he got a bit of flak and pushback on his characterization of the Scala type system.

Java has clearly succeeded as a popular language. It is now growing in popularity as a platform as well, with these four languages just the beginning of what we can expect will emerge in the coming years as language implementers experiment with the JVM.

June 22, 2008

Business: “The Corporation: The Pathological Pursuit of Profit and Power” (Author: Joel Balkan)

Filed under: IT Business — Black Falcon @ 5:46 pm
Tags: , , , ,

Get the book here…
Get the movie here…

For those of you that read my own posts concerning management you may wonder why I write so passionately about its failings as well as its dehumanizing bent towards so many in the US work force.

It would be easy to say that after 35 years in the Information Technology field I have had my fill of dysfunctional management and you would be correct in in this perrception.

You could also say that I am just another disgruntled IT professional that has nothing better to write about and you would completely wrong. I have plenty I can write about but on TECH NOTES, I write for the professional IT technician and technical manager, the latter I hope will either get some insight from my writings or already agree with them because they are among the few that are attempting to manage their projects properly while maintaining a good level of morale among their staff.

Nonetheless, I have little use for today’s modern corporation since none of them offer anythng towards the betterment of Humanity in any ethical, sociological, or morale sense of the word.

(more…)

Tools & Code: Oracle’s “SQL Developer”; Keeping Your Connections

Filed under: IT Tools & Code — Black Falcon @ 4:28 pm
Tags: , ,


Oracle’s “SQL Developer” is a maddening tool. So much potential always seems to be lost in a host of annoying idiosyncracies. The tool appears to have been built either by college students or part-timers neither of which seem to have enough time to do good QA before releasing the software.

Version 1.5 has been by far the best version released to date and offers a host of features
as well as a new raft of annoyances. The latest such annoyance is if you don’t initialize the application from the executable itself your database connections will not appear in the left-side panel. If you do a migration they may not appear. And you could simply lose them by doing something while using the tool.

Arun Subramanian of “Arun’s Blog” has offered up the perfect solution to technicians being driven insane by this quirk in “SQL Developer 1.5″. See it below and go to his blog for more technical tips and know-how.


SQL Developer 1.5 connection setting lost

Go here for article source…

If you work with Oracle Database, then you might have heard about SQL Developer. SQL Developer is a free graphical tool for database development. I use this for some of my Oracle work. It’s a decent tool and it’s free.

When I upgraded my SQL Developer to the latest version (1.5.0.53), I lost my database connection settings. The settings worked the first time I created them in the new version, but it was lost the next time I opened the SQL Developer. When I tried to recreate, the save or connect key did not work. I finally fixed it as per the advise given in the OTN forum. All you have to do is edit the sqldeveloper.conf file located under C:\Program Files\sql developer installation folder\sqldeveloper\bin using notepad or wordpad and add the following lines to the end of the file. Save and restart SQL Developer. You should see your connection settings back.

AddJavaLibFile ../../lib/java/api/jaxb-api.jar
AddJavaLibFile ../../lib/java/api/jsr173_api.jar
AddJavaLibFile ../../j2ee/home/lib/activation.jar
AddJavaLibFile ../../lib/java/shared/sun.jaxb/2.0/jaxb-xjc.jar
AddJavaLibFile ../../lib/java/shared/sun.jaxb/2.0/jaxb-impl.jar
AddJavaLibFile ../../lib/java/shared/sun.jaxb/2.0/jaxb1-impl.jar


June 21, 2008

Trends: Bad Business Managers Create Bad Software Projects

Filed under: IT Industry Trends — Black Falcon @ 5:19 pm
Tags: , , , , ,

Many reasons have been given for project failure in the Information Technology field. Practically all of them relate to the technical areas, all of which are directed at poor technical management.

However, it is never emphasized where these problems actually start; their source as they say. It is true that we have plenty of bad technical managers in the IT field. Yet, who hires these people; the business managers who run the company. And who are these people?

If one were to read Joel Bakan’s highly acclaimed treatise, “The Corporation” you would get a very good idea who these people are. For the most part they are swindlers, dishonest to the core, suffer from severe personality disorders, and solely devoted to the pursuit of profit. All of this has been continuously well documented over the years with little mention when concerned with software development, which is an engineering profession.

And the further up the “food chain” in a corporation you go the less intelligence is to be found. Is it any wonder that so many companies are now suffering at the hands of incompetent CEOs along with their lackey assistants? CitiCorp is just a prime example of the disasters such management are capable of creating. And they in turn are well encouraged and supported by the United States government in their activities. Maybe we should blame all such failure on the Office of the President of the US since it is this office that so often makes such horrendous policy as to allow such incompetence to reign in Corporate America.

(more…)

Tools & Code: JavaScript Frameworks That Make Client-Side Scripting Easier

Filed under: IT Tools & Code — Black Falcon @ 1:46 am
Tags: , , ,


Javascript framework usage among top websites

June 11, 2008

Which Javascript frameworks are the most common?

To answer that question, we here at Pingdom have examined a set of almost 200 popular websites to see if they use a Javascript framework, and in that case which framework they have chosen. The websites were collected from the Alexa US Top 100 and the Webware Top 100 Web Apps. The frameworks we looked for were Prototype, JQuery, MooTools, Yahoo! UI Library, Dojo, ExtJS and MochiKit.

We quickly saw that Dojo, ExtJS and MochiKit were not used at all by these sites, which lead us to focus on the other four in this article.


Prototype

Prototype is one of the earlier Javascript frameworks and is also included in the Ruby on Rails framework. Of the websites in this test, a total of 13 used the Prototype framework.

Go here to read rest of article…

Tools & Code: LifeHacker Presents… Firefox 3

Filed under: IT Tools & Code — Black Falcon @ 1:33 am
Tags: , , ,



The Power User’s Guide To Firefox 3



Go here to read article…

Next Page »

Blog at WordPress.com.