Open Source News » Tags

Feeds

34757 items (30244 unread) in 5 feeds

OpenSource

Security

Linux

35 items tagged "java"

Why You Can't Dump Java (Even Though You Want To)

Posted: May 9th, 2012, 2:20am CEST by Soulskill

Tags: java

snydeq writes "Since so many recent exploits have used Java as their attack vector, you might conclude Java should be shown the exit, but the reality is that Java is not the problem, writes Security Advisor's Roger Grimes. 'Sure, I could opt not to use those Java-enabled services or install Java and uninstall when I'm finished. But the core problem isn't necessarily Java's exploitability; nearly all software is exploitable. It's unpatched Java. Few successful Java-related attacks are related to zero-day exploits. Almost all are related to Java security bugs that have been patched for months (or longer),' Grimes writes. 'The bottom line is that we aren't addressing the real problems. It isn't a security bug here and there in a particular piece of software; that's a problem we'll never get rid of. Instead, we allow almost all cyber criminals to get away with their Internet crime without any penalty. They almost never get caught and punished. Until we solve the problem of accountability, we will never get rid of the underlying problem.'"

Read more of this story at Slashdot.

Java Web Attack Installs Malware In RAM

Posted: March 19th, 2012, 8:55pm CET by Soulskill

Tags: java

snydeq writes "A hard-to-detect piece of malware that doesn't create any files on the affected systems was dropped onto the computers of visitors to popular news sites in Russia in a drive-by download attack, according to Kaspersky Lab. 'What's interesting about this particular attack is the type of malware that was installed in cases of successful exploitation: one that only lives in the computer's memory. ... It's ideal to stop the infection in its early stages, because once this type of "fileless" malware gets loaded into memory and attaches itself to a trusted process, it's much harder to detect by antivirus programs.'"

Read more of this story at Slashdot.

Oracle and the Java Ecosystem

Posted: January 16th, 2012, 6:53pm CET by samzenpus

Tags: java

First time accepted submitter twofishy writes "After an undeniably rocky start, which saw high profile resignations from the JCP, including Doug Lea (who remains active in the OpenJDK), and the Apache Software Foundation, Oracle is making significant efforts to re-engage with the wider Java ecosystem, a theme which it talked up at the most recent JavaOne conference. The company is working hard to engage with the Java User Group leaders and Java Champions, membership of the OpenJDK project is growing, and the company is making efforts to reform the Java Community Process to improve transparency. The firm has also published a clear, well-defined Java roadmap toward Java 8 and Java 9."

Read more of this story at Slashdot.

Ask Slashdot: Ubuntu Lockdown Options?

Posted: December 8th, 2011, 12:24am CET by samzenpus

Tags: java

First time accepted submitter clava writes "We have a desktop Java testing application that is going to be administering tests to students on lab computers running Ubuntu 10.x. These computers are used by the students for other purposes and we're not allowed to create special users or change the OS configuration. When the testing app is launched, we need to restrict users from exiting the app so they can't do things like search the internet for answers or use other applications. Is there a good way to put an Ubuntu machine in kiosk mode or something via our application and have exiting kiosk mode be password protected? Any ideas are appreciated."

Read more of this story at Slashdot.

Java 7 Ships With Severe Bug

Posted: July 29th, 2011, 7:13pm CEST by Soulskill

Tags: java

Lisandro writes "Lucid Imagination just posted an announcement about a severe bug in the recently released Java 7. Apparently some loops are mis-compiled due to errors in the HotSpot compiler optimizations, which causes programs to fail. This bug affects several Apache projects directly — Apache Lucene Core and Apache Solr have already raised a warning, noting that the bug might be present in Java 6 as well."

Read more of this story at Slashdot.

Oracle Announces Java SE 7

Posted: July 28th, 2011, 8:10pm CEST by timothy

Tags: java

vivin writes "Oracle has announced the release of Java SE 7. This is the first release of Java under the stewardship of Oracle."

Read more of this story at Slashdot.

Red Hat Uncloaks 'Java Killer': the Ceylon Project

Posted: April 13th, 2011, 4:21am CEST by timothy

Tags: java

talawahdotnet writes "Gavin King of Red Hat/Hibernate/Seam fame recently unveiled the top secret project that he has been working on over the past two years, a new language and SDK designed to replace Java in the enterprise. The project came out of hiding without much fanfare or publicity at QCon Beijing in a keynote titled 'The Ceylon Project — the next generation of Java language?'"

Read more of this story at Slashdot.

Tomcat 7 Finalized

Posted: January 16th, 2011, 10:18am CET by timothy

Tags: java

alphadogg writes "The volunteer developers behind Apache Tomcat have released version 7.0.6 of the open-source Java servlet container. 'This is the first stable release of the Tomcat 7 branch,' developer Mark Thomas wrote in an e-mail announcing the release on various Tomcat developer mailing lists. While not a full application server, Tomcat implements the functionality described in the Java Enterprise Edition Web profile specifications. Most notably, it supports version 3.0 of the Servlet API (application programming interface) and version 2.2 of JavaServer Pages, both part of the recently ratified JEE 6. A servlet container manages Java-based applications that can be accessed from a Web browser. One big area of improvement is in configuration management for Web applications. Previous versions required all Web app configuration changes to be entered in a central file called web.xml, a process that led to unwieldy web.xml files as well as security risks."

Read more of this story at Slashdot.

New Programming Language Weaves Security Into Code

Posted: October 25th, 2010, 11:47pm CEST by Soulskill

Tags: java

Ponca City writes "Until now, computer security has been reactive. 'Our defenses improve only after they have been successfully penetrated,' says security expert Fred Schneider. But now Dr. Dobb's reports that researchers at Cornell are developing a programming platform called 'Fabric,' an extension to the Java language that builds security into a program as it is written. Fabric is designed to create secure systems for distributed computing, where many interconnected nodes — not all of them necessarily trustworthy — are involved, as in systems that move money around or maintain medical records. Everything in Fabric is an 'object' labeled with a set of policies on how and by whom data can be accessed and what operations can be performed on it. Even blocks of program code have built-in policies about when and where they can be run. The compiler enforces the security policies and will not allow the programmer to write insecure code (PDF). The initial release of Fabric is now available at the Cornell website."

Read more of this story at Slashdot.

Serious New Java Flaw Affects All Browsers

Posted: April 9th, 2010, 11:20pm CEST by Soulskill

Tags: java

Trailrunner7 writes "There is a serious vulnerability in Java that makes all current browsers vulnerable to simple Web-based attacks that could lead to a complete compromise of the affected system. Two separate researchers released information on the vulnerability on Friday, saying that it has been present in Java for years. The problem lies in the Java Web Start framework, a technology that Sun Microsystems developed to enable the simplified deployment of Java applications. In essence, the JavaWS technology fails to validate parameters passed to it from the command line, and attackers can control those parameters using specific HTML tags on a Web page, researcher Ruben Santamarta said in an advisory posted Friday morning."

Read more of this story at Slashdot.

Ask Jazz Technical Lead Dr. Erich Gamma

Posted: June 30th, 2009, 8:49pm CEST by ScuttleMonkey

Tags: java

As IBM continues to build out Jazz, their community-oriented development site, technical lead Dr. Erich Gamma has offered to answer questions about Jazz or anything else in his realm of expertise. Among his many accomplishments, Erich worked for Kent Beck on the Java unit testing framework, JUnit, and was actively involved until JUnit 4. Dr. Gamma was also one of the fathers of Eclipse and the original lead on the Eclipse Java development tools. Feel free to fire away on Eclipse, Java, JUnit, the Rational suite, the Jazz site, or anything else you think Erich might be able to answer. Usual Slashdot interview rules apply. Update 19:05 GMT by SM: As pointed out by user Hop-Frog, Dr. Gamma is also co-author of the influential computer science textbook Design Patterns: Elements of Reusable Object-Oriented Software.

Read more of this story at Slashdot.

Java's New G1 Collector Not For-Pay After All

Posted: June 5th, 2009, 3:04pm CEST by kdawson

Tags: java

An anonymous reader writes "As a follow-up to our previous discussion, Sun appears to have quietly edited the Java 6u14 release notes language to say now: 'G1 is available as early access in this release, please try it and give us feedback. Usage in production settings without a Java SE for Business support contract is not recommended.' So does this mean it was all one huge typo? Or was Oracle/Sun tentatively testing the waters to see the community's reaction? In either case it's nice to see Java's back on the right path."

Read more of this story at Slashdot.

Java Gets New Garbage Collector, But Only If You Buy Support

Posted: May 29th, 2009, 9:00pm CEST by ScuttleMonkey

Tags: java

An anonymous reader writes "The monetization of Java has begun. Sun released the Java 1.6.0_14 JDK and JRE today which include a cool new garbage collector called G1. There is just one catch. Even though it is included in the distribution, the release notes state 'Although G1 is available for use in this release, note that production use of G1 is only permitted where a Java support contract has been purchased.' So the Oracle touch is already taking effect. Will OpenJDK be doomed to a feature-castrated backwater while all the good stuff goes into the new Java SE for Business commercial version?"

Read more of this story at Slashdot.

Java Program Uses Neural Networks To Monitor Games

Posted: May 14th, 2009, 8:13am CEST by Soulskill

Tags: java

tr0p writes "Java developers have used the open source Neuroph neural network framework to monitor video game players while they play and then provide helpful situational awareness, such as audio queues when a power-up is ready or on-the-fly macros for combo attacks. The developers have published an article describing many of the technical details of their implementation. 'There are two different types of neural networks used by DotA AutoScript. The first type is a simple binary image classifier. It uses Neuroph's "Multi-Layer Perceptron" class to model a neural network with an input neurons layer, one hidden neurons layer, and an output neurons layer. Exposing an image to the input layer neurons causes the output layer neurons to produce the probability of a match for each of the images it has been trained to identify; one trained image per output neuron.'"

Read more of this story at Slashdot.

Sun's Phipps Slams App Engine's Java Support

Posted: April 13th, 2009, 11:46pm CEST by samzenpus

Tags: java

narramissic writes "Sun Microsystems' chief open source officer, Simon Phipps, said in an April 11 blog post that Google committed a major transgression by only including support for a subset of Java classes in its App Engine development platform. 'Whether you agree with Sun policing it or not, Java compatibility has served us all very well for over a decade,' Phipps wrote. 'That includes being sure as a developer that all core classes are present on all platforms. Creating subsets of the core classes in the Java platform was forbidden for a really good reason, and it's wanton and irresponsible to casually flaunt the rules.' Phipps characterized his remarks as non-official, saying: 'This isn't something I could comment on on Sun's behalf. My personal comments come purely from my long association with Java topics.'"

Read more of this story at Slashdot.

Sun Slips Firefox Extension Into Java Update

Posted: February 21st, 2009, 9:31pm CET by timothy

Tags: java

pcardno writes "It seems it's not just Microsoft that have spotted a good opportunity to distribute their software through Firefox Addons. On installing the latest annoying, sysbar bubble based Java update, my Firefox informed me that I had a wonderful new Java addon automatically. Here's the addon screenshot. Yes, I could opt out of it, but why are Sun installing Addons to my Firefox without me making specific choices in the application itself? To be clear — I have never chosen to install this Addon, yet it has been installed without my permission with the latest Java Update."

Read more of this story at Slashdot.

Java EE 6 Platform Draft Published

Posted: January 31st, 2009, 7:12pm CET by Soulskill

Tags: java

synodinos writes "The public draft of the Java EE 6 Platform specification has been published and will remain open for public review and feedback until the 23rd of Feb, 2009. Perhaps the most notable part of this delayed draft is the Web Profile, which is first profile in the history of the Java EE platform. The draft is available for download and contains both the Java EE 6 Spec and the Web Profile Spec. There is a poll running at java.net regarding what the community thinks about the new spec. Although participation is yet rather small the results tend to show that the released draft did not cause any excitement."

Read more of this story at Slashdot.

Java EE 6 Platform Draft Published

Posted: January 31st, 2009, 7:12pm CET by Soulskill

Tags: java

Read more of this story at Slashdot.

Java Performance On Ubuntu Vs. Windows Vista

Posted: December 19th, 2008, 4:49pm CET by kdawson

Tags: java

Henckle writes "Phoronix did a comparison of the Java performance between Ubuntu and Windows Vista. They tested both Java and OpenJDK on Ubuntu 8.10 and Java on Windows Vista Premium SP1, all with stock configurations. To no-one's surprise, Ubuntu was faster in a majority of the tests. The two OSs were similar in ray-tracing, and Vista was faster at Java OpenGL due to shortcomings with the Linux graphics driver."

Read more of this story at Slashdot.

Java Performance On Ubuntu Vs. Windows Vista

Posted: December 19th, 2008, 4:49pm CET by kdawson

Tags: java

Read more of this story at Slashdot.

Java Performance On Ubuntu Vs. Windows Vista

Posted: December 19th, 2008, 4:49pm CET by kdawson

Tags: java

Read more of this story at Slashdot.

Is JavaScript Ready For Creating Quality Games?

Posted: December 17th, 2008, 9:03am CET by Soulskill

Tags: java

kumpetan writes "After seeing so many games built with JavaScript, and considering the applications it powers and the use of Ajax, it seems like web developers are now in the game development pot. It is getting easier and more popular with libraries like jQuery, MooTools, Prototype, etc. There are even libraries like Game JS, GameQuery or JavaScript GameLib, specifically for this purpose. So, will we start to see more ambitious game projects arise using these tools?"

Read more of this story at Slashdot.

64-Bit Java For Linux

Posted: December 16th, 2008, 3:48am CET by kdawson

Tags: java

LWATCDR writes "First we got 64-bit Flash; then the beginnings of 64-bit Wine; now Sun is providing a 64-bit Java plugin. For most people there is nothing to hold you back from running 64-bit Linux."

Read more of this story at Slashdot.

64-Bit Java For Linux

Posted: December 16th, 2008, 3:48am CET by kdawson

Tags: java

LWATCDR writes "First we got 64-bit Flash; then the beginnings of 64-bit Wine; now Sun is providing a 64-bit Java plugin. For most people there is nothing to hold you back from running 64-bit Linux."

Read more of this story at Slashdot.

64-Bit Java For Linux

Posted: December 16th, 2008, 3:48am CET by kdawson

Tags: java

LWATCDR writes "First we got 64-bit Flash; then the beginnings of 64-bit Wine; now Sun is providing a 64-bit Java plugin. For most people there is nothing to hold you back from running 64-bit Linux."

Read more of this story at Slashdot.

Sun Releases JavaFX

Posted: December 4th, 2008, 11:50pm CET by timothy

Tags: java

ink writes "Sun released JavaFX 1.0 today, in a bid to take on Adobe's Flash and Microsoft's Silverlight technologies. It is Sun's first Java release to include standardized, cross-platform audio and video playback code (in the form of On2 licensed codecs). The lack of a Linux or Solaris release is a notable absence. The development kit currently consists of the base run-time, a NetBeans/Eclipse plug-in and a set of artifact exporters for Adobe CS 3&4." An anonymous reader adds a link to several tutorials accompanying the new release.

Read more of this story at Slashdot.

Java, Where To Start?

Posted: September 1st, 2008, 5:25pm CEST by houbou (posted by ScuttleMonkey)

Tags: java

I'm a web developer who has design and programming experience. So, VB, ASP, PHP, Coldfusion, Perl, even C and C++ I have in my belt. I also use Dreamweaver and/or do a lot of my HTML/XHTML/JavaScript coding by hand. So, the DOM, DHTML, etc, all good to me and even OOP thinking and design I have when I code. And I even have MySQL and other databases, again, not an issue here. So, my weak point is — Java — I see so many jobs out there with J2EE, Hibernate, Eclipse, Netbeans. Beside the obvious, which is to learn Java the core language, I don't know where else to go from there. There is so much! What should I read? in what order? What software do I require? UML? Swing? I mean, what is the curriculum required for someone to say they are a solid Java developer? Even assuming I have to go through Java itself, what are the good books out there?

Read more of this story at Slashdot.

Java, Where To Start?

Posted: September 1st, 2008, 5:25pm CEST by houbou (posted by ScuttleMonkey)

Tags: java

Read more of this story at Slashdot.

Does an Open Java Really Matter?

Posted: June 26th, 2008, 6:48pm CEST by CmdrTaco

Tags: java

snydeq writes "Fatal Exception's Neil McAllister questions the relevance of the recent opening of Java given the wealth of options open source developers enjoy today. Sure, as the first full-blooded Java implementation available under a 100 percent Free Software license, RedHat's IcedTea pushes aside open source objections to developing in Java. Yet, McAllister asks, if Java really were released today, brand-new, would it be a tool you'd choose? 'The problem, as I see it, is twofold,' he writes. 'First, as the Java platform has matured, it has become incredibly complex. Today it's possible to do anything with Java, but no one developer can do everything — there simply aren't enough hours in the day to learn it all. Second, and most important, even as Java has stretched outward to embrace more concepts and technologies — adding APIs and language features as it goes — newer, more lightweight tools have appeared that do most of what Java aims to do. And they often do it better.'" Since Java itself never mattered except to sell books, I still don't see why opening it matters.

Read more of this story at Slashdot.

Sun's Java Will Be Free This Year

Posted: June 23rd, 2008, 11:12am CEST by kdawson

Tags: java

Ian Whyde notes that Sun is finally coming to the end of its struggle to open up Java completely. Simon Phipps, the chief open source officer at Sun Microsystems, said: "There were a couple of holdouts there. One was the area to do with raster graphics and 2D graphics. That turned out to be owned by a company that didn't want us to release that code as open source. We negotiated with them and because they've said 'yes, you can open source the code'... The only element that's left now is actually a sound-related component within Java. We finally decided that the vendor that's involved there just isn't going to play ball and we're rewriting the code from scratch. That's going to be done within the next couple of months." In another sense the milestone of a free Java was reached this week when IcedTea passed the rigorous Java Test Compatibility Kit.

Read more of this story at Slashdot.

IcedTea's OpenJDK Passes Java Test Compatibility Kit

Posted: June 19th, 2008, 8:04pm CEST by timothy

Tags: java

emyar writes "At JavaOne in May, 2006, Sun Microsystems announced they were going to release Java as free software under the terms of the GPL. The size of the task (6.5 million lines of code) was only eclipsed by the size of the opportunity for Java as a free and open technology. [...] This week the IcedTea Project reached an important milestone — The latest OpenJDK binary included in Fedora 9 (x86 and x86_64) passes the rigorous Java Test Compatibility Kit (TCK). This means that it provides all the required Java APIs and behaves like any other Java SE 6 implementation — in keeping with the portability goal of the Java platform."

Read more of this story at Slashdot.

Scalable Nonblocking Data Structures

Posted: May 27th, 2008, 10:10pm CEST by kdawson

Tags: java

An anonymous reader writes "InfoQ has an interesting writeup of Dr. Cliff Click's work on developing highly concurrent data structures for use on the Azul hardware (which is in production with 768 cores), supporting 700+ hardware threads in Java. The basic idea is to use a new coding style that involves a large array to hold the data (allowing scalable parallel access), atomic update on those array words, and a finite-state machine built from the atomic update and logically replicated per array word. The end result is a coding style that has allowed Click to build 2.5 lock-free data structures that also scale remarkably well."

Read more of this story at Slashdot.

Java SE 6 For Mac OS X

Posted: May 3rd, 2008, 10:11pm CEST by timothy

Tags: java

wchatam writes "After a long delay, Apple has finally released a version of Java 6 for OS X. 64-bit Intel Macs are starting to see this pushed out via Software Update, but there has not been an announcement for when 32-bit Intel and PowerPC Mac users will get their versions."

Read more of this story at Slashdot.

Sun to Fully Open Source Java

Posted: April 23rd, 2008, 11:20pm CEST by Soulskill

Tags: java

Dionysius, God of Wine and Leaf brings news that Sun Microsystems will be removing the last restrictions on Java to make it completely open source. Sun wants Java to be easily available for use in Linux distributions. We've discussed the steps Sun has taken to open-source Java over the past couple years. From Yahoo! News: "'We've been engaging with the open-source community for Java to finish off the OpenJDK project, and the specific thing that we've been working on with them is clearing the last bits that we didn't have the rights,' to distribute, Sands said. 'Over the past year, we have pretty much removed most of those encumbrances.' Work still needs to be done to offer the Java sound engine and SNMP code via open source; that effort is expected to be completed this year. Developers, though, may be able to proceed without a component like the sound engine, Sands said.

Read more of this story at Slashdot.

NULL Pointer Exploit Excites Researchers

Posted: April 18th, 2008, 11:18am CEST by Soulskill

Tags: java

Da Massive writes "Mark Dowd's paper "Application-Specific Attacks: Leveraging the ActionScript Virtual Machine" has alarmed researchers. It points out techniques that promise to open up a class of exploits and vulnerability research previously thought to be prohibitively difficult. Already, the small but growing group of Information Security experts who have had the chance to read and digest the contents of the paper are expressing an excited concern depending on how they are interpreting it. While the Flash vulnerability described in the paper[PDF] has been patched by Adobe, the presentation of a reliable exploit for NULL pointer dereferencing has the researchers who have read the paper fascinated. Thomas Ptacek has an explanation of Dowd's work, and Nathan McFeters at ZDNet is 'stunned by the technical details.'"

Read more of this story at Slashdot.

Open Source News » Tags » java

Feeds

35 items tagged "java"

Posted: May 9th, 2012, 2:20am CEST by Soulskill

Tags: java

Posted: March 19th, 2012, 8:55pm CET by Soulskill

Tags: java

Posted: January 16th, 2012, 6:53pm CET by samzenpus

Tags: java

Posted: December 8th, 2011, 12:24am CET by samzenpus

Tags: java

Posted: July 29th, 2011, 7:13pm CEST by Soulskill

Tags: java

Posted: July 28th, 2011, 8:10pm CEST by timothy

Tags: java

Posted: April 13th, 2011, 4:21am CEST by timothy

Tags: java

Posted: January 16th, 2011, 10:18am CET by timothy

Tags: java

Posted: October 25th, 2010, 11:47pm CEST by Soulskill

Tags: java

Posted: April 9th, 2010, 11:20pm CEST by Soulskill

Tags: java

Posted: June 30th, 2009, 8:49pm CEST by ScuttleMonkey

Tags: java

Posted: June 5th, 2009, 3:04pm CEST by kdawson

Tags: java

Posted: May 29th, 2009, 9:00pm CEST by ScuttleMonkey

Tags: java

Posted: May 14th, 2009, 8:13am CEST by Soulskill

Tags: java

Posted: April 13th, 2009, 11:46pm CEST by samzenpus

Tags: java

Posted: February 21st, 2009, 9:31pm CET by timothy

Tags: java

Posted: January 31st, 2009, 7:12pm CET by Soulskill

Tags: java

Posted: January 31st, 2009, 7:12pm CET by Soulskill

Tags: java

Posted: December 19th, 2008, 4:49pm CET by kdawson

Tags: java

Posted: December 19th, 2008, 4:49pm CET by kdawson

Tags: java

Posted: December 19th, 2008, 4:49pm CET by kdawson

Tags: java

Posted: December 17th, 2008, 9:03am CET by Soulskill

Tags: java

Posted: December 16th, 2008, 3:48am CET by kdawson

Tags: java

Posted: December 16th, 2008, 3:48am CET by kdawson

Tags: java

Posted: December 16th, 2008, 3:48am CET by kdawson

Tags: java

Posted: December 4th, 2008, 11:50pm CET by timothy

Tags: java

Posted: September 1st, 2008, 5:25pm CEST by houbou (posted by ScuttleMonkey)

Tags: java

Posted: September 1st, 2008, 5:25pm CEST by houbou (posted by ScuttleMonkey)

Tags: java

Posted: June 26th, 2008, 6:48pm CEST by CmdrTaco

Tags: java

Posted: June 23rd, 2008, 11:12am CEST by kdawson

Tags: java

Posted: June 19th, 2008, 8:04pm CEST by timothy

Tags: java

Posted: May 27th, 2008, 10:10pm CEST by kdawson

Tags: java

Posted: May 3rd, 2008, 10:11pm CEST by timothy

Tags: java

Posted: April 23rd, 2008, 11:20pm CEST by Soulskill

Tags: java

Posted: April 18th, 2008, 11:18am CEST by Soulskill

Tags: java