Archive for July, 2008

Laptops With Certain NVidia Chips Failing

Thursday, July 31st, 2008

Eukariote writes “An estimated 18 million laptops with NVidia G84 and G86 graphics chips sold in the past one and a half years are experiencing high failure rates. Various laptop models from multiple manufacturers (Apple, Dell, HP, Lenovo, and others) are affected. NVidia blames it on bad chip packaging causing thermal failure. BIOS updates that turn the laptop fan on more frequently or permanently have been released by Dell and HP. The cynical interpretation is that this is likely to only delay the problem until the warranty has expired.”

Read more of this story at Slashdot.

OSCON Wrapup

Thursday, July 31st, 2008

Another OSCON has come and gone. It was a very busy week filled with talks, work, social events, and everything in between. (Sleep is optional and not recommended.)

The OmniTI family (Message Systems included) was well represented with a number of speakers and talks:

Chris Shiflett
Experience-Driven Development: Designers and Developers Working in Harmony
Security 2.0: Emerging Trends in Web Application Security
David Gray
How I Learned to Love Revision Control
Luke Welling
PHP Taint Tool: It Ain’t a Parser
Mike Hillyer
How to be Normal: A Guide for Developers
Robert Treat
Pro PostgreSQL
Theo Schlossnagle
Full-Stack Introspection Crash Course
Wez Furlong
Hot Chocolate: Creating Cocoa Apps with PHP
PDO: PHP Data Objects
PHP Extension Writing

Experience-Driven Development is a talk I gave with Jon Tan, and we explored ways designers and developers can collaborate better to create a better user experience, and thereby create a better web site. The talk was rough around the edges, but we have received a number of positive reviews so far, and it has sparked some interesting discussions. My own thoughts on the matter aren’t too solidified yet, because I’m better at identifying problems than coming up with solutions. :-) The sheer volume of horrible web sites is proof that industry standard practices suck.

I had planned to give Security 2.0 for the last time at this conference, but I received more positive feedback than I think I ever have. I was very pleased to note that more than half of the audience (which was a pretty large audience in the main auditorium) was at least somewhat familiar with CSRF already. (This was a first.) Perhaps I should just refine the talk to focus less on explaining what XSS and CSRF are and more on the interesting exploits that combine them with other technologies such as Ajax and Flash.

Luke’s talk was about a security tool we’ve been developing at OmniTI as part of our web application security practice. It’s called SNAP, and we plan to open source it soon. Garrett Serack of Microsoft attended the talk and explains it in a little more detail, and I hope to post more about SNAP soon.

I dined at Mint during 3 of my 6 evenings in Portland. Delicious. :-) I also made my way to Doug Fir and Vault, both of which are popular among OSCON regulars.

I used Twitter throughout the conference, and it looks like searching for shiflett+oscon finds most of my relevant updates, if you’re interested.

I hear OSCON is coming to San Francisco next year. Be there. :-)

Posted Thu, 31 Jul 2008 21:56:04 GMT in Chris Shiflett’s Blog

Java & Rich Internet Applications: Sun Launches JavaFX SDK Preview Release

Thursday, July 31st, 2008

Designed to “deliver content across all the screens of your life,” Sun’s rival to Adobe’s Flash/Flex - JavaFX - today releases a preview release of the JavaFX SDK, focusing on the RIA workflow. Sun’s aim is to help the world’s six million Java developers to create RIAs.

read more

Slow Cool Ain’t Cool

Thursday, July 31st, 2008

Asynchronous JavaScript and XML (AJAX) combine proven technologies including JavaScript, Extensible Markup Language (XML), dynamic HTML (DHTML), Cascading Style Sheets (CSS), and the Document Object Model (DOM) to enable the delivery of interactive Web applications. AJAX-based Web applications no longer have to reprocess and resend the entire Web page to the end user’s browser every time anything changes on the page.

read more

Citizens Spy On Big Brother

Thursday, July 31st, 2008

An anonymous reader writes “Citizens of the world are striking back at 24/7 state surveillance by pulling out their cameraphones and filming inept officials, deadly healthcare lapses and thuggish cops. So-called Sous-veillance is seeing more and more people posting damning footage of official misdemenours to sites such as YouTube to shame them into action.” I wonder what happens if you inform a cop that you are recording him when he pulls you over.

Read more of this story at Slashdot.

Qumranet’s Solid ICE Anchors Effective Hosted Desktop Virtualization

Thursday, July 31st, 2008

Qumranet announced a report published by analyst firm Ovum. The report, “Qumranet’s Solid ICE Anchors Effective Hosted Desktop Virtualization,” provides an overview of desktop virtualization as well as opportunities and challenges for Qumranet in this space.

read more

Misconfiguration Named Number One Security Risk to Virtualization Environments

Thursday, July 31st, 2008

Tripwire recently surveyed enterprise IT professionals to assess how vigorously virtualization is expanding within production server environments and to measure how security, change controls and compliance requirements are keeping pace. According to the survey report, “Is Virtualization Under Control: Current Opinions on Security and Controls for Virtual Servers in Production Environments,” virtualization has clearly gained a lasting foothold. However, who shoulders the responsibility for ensuring that security and controls are implemented across virtual infrastructure is open for debate, varying greatly between functional groups.

read more

Cuil Proves the Bubble Is Back

Thursday, July 31st, 2008

MattSparkes writes “Cuil may only have launched this week, but it seems that they’re already enjoying late-90s boom-style comforts. “Lunch is ordered in every single day. Huge fridges burst with snacks and drinks. Bowls of strawberries and muffins lie around the rest area. The company pays for a personal trainer and gym membership for everyone. A doctor calls round each Friday, after the weekly barbeque, to see if everyone’s in good health. Employees drift in an out at times that suit themselves.” Seems like an awesome place to work, but how long will their $25 million VC funding last at this rate?”

Read more of this story at Slashdot.

Ocolorize

Thursday, July 31st, 2008
Package:
Summary:
Format text with tags as colored HTML or BBCode
Groups:
Author:
Description:
This class can be used to format text with tags as colored HTML or BBcode tags.

It can take a given text string with special tags and replace them with HTML or BBCode marks that make the text appear with different colors.


Luta Spam

Thursday, July 31st, 2008
Package:
Summary:
Encode e-mail addresses to prevent harvesting
Groups:
Author:
Description:
This class can be used to encode e-mail addresses to make it more difficult to grab by e-mail harvesting robots.

It can take an e-mail address and replace some of its characters to make it difficult to recognize by robots by replacing @ and . characters by _at_ and _dot_.

The class can also do the opposite, i.e. replace _at_ and _dot_ in an encoded e-mail address by @ and . characters respectively.