The New York Times says that Oracle killed a Sun project to clone Intel’s x86 Xeon server chip and turn out a “no-frills, low-power variant” that it could put into thousands of servers for folks like Facebook, Yahoo and Google. The paper said it had heard tell of such a thing for a long time but could never quite nail it until recently when it happened to interview a couple of people “with knowledge of Sun’s plans,” “who are not authorized to speak publicly.” As part of the fey plan Sun bought the assets of one Montalvo Systems that had done work on low-power Intel clones and hired some “top talent” out of AMD.
If Apple's recent patent application tells you anything, its that the giant technology firm is working on further entry into the fitness space. That's something the fitness industry better pay close attention to. As the patent illustration shows on the left, the application includes an extensive interface running on the iPhone. The black and white images show the iPhone interface controlling and monitoring all details, from starting a treadmill to managing the number of curls you perform as part of a workout.
This is a revisit of the ADF Security features under JDeveloper 11g and subsequent deployment to WLS. There are plenty of good examples and documentation on this feature and readers are encouraged to seek those out. This post is my cut of implementing ADF Security to make sure I've all the moving pieces clearly defined in my head. As usual I thought this post may be of interest to readers.
Assumptions
Readers understand the security concepts of authentication and authorization, and readers are familiar with the WLS security "myrealm" concept.
Sample Application
What I find difficult with the JDev 11g Fusion Guide is the raw depth of information to read and assimilate around the security space. Section 29 has 80 odd pages on security which is a lot to digest. Without a doubt security is an important topic but trying to understand the full 80 pages leaves me wiped out.
To make the discussion on ADF Security easier, let's discuss an extremely simple application and then describe what we're attempting to achieve in terms of security.
Consider the following application:
... and the following page flow:
The diagram reveals the following points about our application:
1) The Splash page is a landing page for our application where new unauthenticated sessions will land as they access the application for the first time. This page will be a simple web page with no ADF Bindings. It will provide links to the other 3 pages.
2) ViewBookings, a page showing data using ADF Bindings, will be a secured page. Only authenticated users will be able to access the page and they must have the ADMIN role.
3) ViewEvents, another databound ADF page using ADF Bindings, will also be a secured page. Only authenticated users will be able to access the page, but there are no role restrictions on the page, giving any authenticated user the right to access the page.
4) ViewOrganisations, another databound ADF page using ADF Bindings, will not be secured. Therefore authenticated and non-authenticated users will be able to access the page, and implicitly via this, there are no role restrictions on the page.
(You'll note in the above points I've been careful to identify databound pages that have ADF Bindings (ie. ViewBookings) and those that don't (ie. Splash). The ADF Security mechanisms *only* work for pages that have ADF Bindings and the relating pagedef files. A page that doesn't have ADF Bindings is not secured. This implies how we treat the unbound Splash page vs the bound ViewOrganisations page is different. The mechanisms for this will become apparent further in this post.)
Best practice side note: as a general recommendation while this article demonstrates a page that is totally unsecured via the ADF Bindings mechanism, readers should give strong consideration to create PageDef files for all pages regardless if they are databound or not. This is done by selecting the Page Definitions option from the page's context menu, then allocating them the anonymous-role making them accessible to anyone as explained later in this article. Implementing this gives you a number of advantages:In order to support our application as described in the points above, we'll need a number of security "parts" for our application. Following is a summary of those parts, of which we'll describe in detail next in this document
a) Improved control of the public page's content, displaying different content for authenticated vs unauthenticated users
b) A consistent security implementation across all pages
c) Easier to audit the security implementation



















This is also recorded in the WLS logs. While it doesn't look nice, effectively ADF Security is telling JDOE to get nicked because he doesn't have the ADMIN role. If you wish to handle this in a more graceful way you can make use of the ADF controller's declarative exception handler to route the user to a "friendly" denied-access page, or alternatively we wouldn't have given the user the option to navigate to this page in the first place. Of course this article shows the above for learning purposes.
oracle.adf.controller.ControllerException: ADFC-06000: The ADF Controller caught exception {0} while performing control flow routing. See the stack trace for details.
at oracle.adfinternal.controller.util.Utils.createAndLogControllerException(Utils.java:203)
at oracle.adfinternal.controller.state.SuspendedNavigationState.resume(SuspendedNavigationState.java:54)
at oracle.adfinternal.controller.application.LoginSuccessHandler.resumeNavigation(LoginSuccessHandler.java:117)
at oracle.adfinternal.controller.application.LoginSuccessHandler.doCreateView(LoginSuccessHandler.java:61)
at oracle.adfinternal.controller.application.BaseRequestHandlerImpl.createView(BaseRequestHandlerImpl.java:57)
-snip-
oracle.adf.controller.security.AuthorizationException: ADFC-0619: Authorization check failed: '/ViewBookings.jspx' 'VIEW'.
at oracle.adf.controller.internal.security.AuthorizationEnforcer.handleFailure(AuthorizationEnforcer.java:147)
at oracle.adf.controller.internal.security.AuthorizationEnforcer.checkPermission(AuthorizationEnforcer.java:126)
at oracle.adf.controller.internal.security.AuthorizationEnforcer.checkRead(AuthorizationEnforcer.java:363)
at oracle.adfinternal.controller.activity.ViewActivityLogic.execute(ViewActivityLogic.java:77)
at oracle.adfinternal.controller.engine.ControlFlowEngine.doRouting(ControlFlowEngine.java:876)
-snip-



The ZK framework provides a variety of paradigms to develop Web applications. One the one hand it is always nice to have options, but on the other this can cause un-intentional paradigm disparities when several developers are using the framework to develop an application without a consistent design. By and far, the Model View Controller pattern has been adapted by various Web applications and frameworks (like Apache Struts, Apache Beehive PageFlows) to develop quality Web applications. The following is an illustration of how an MVC based Web application can be developed using ZK and Spring. ZK has introduced a lot of features that enable easy integration with Spring. The source code of example application is available for download here.
I'm a long-time fan of Apple products. I've owned Macs for 20 years and an iPhone for the last 2. I also own a Motorola Droid, and a Google Nexus One phone. Over the years I've seen a lot of people convert to Mac, and even more convert to the iPhone. I've also watched as bloggers and the tech media drank concentrated Apple Kool Aid by the gallon in the last 2 years. These guys, along with the legions of Apple "fans", seem to have lost most measures of objectivity about the the iPhone and the iPad. So I thought I'd give business owners and managers trying to decide whether to buy iPhones or Android phones some of the major reasons to go with each of the platforms.
In this article I discuss the seven most important steps to improve your application performance practices. These simple-to-follow practices will help you to improve the way you deal with application performance. Besides eventually improving the performance of your applications it will help you to avoid playing the classical blame game which normally happens when something goes wrong
A few weeks ago, I was lucky enough to head out to San Francisco, CA for Apple's WWDC and I decided to, in parallel, test one of my recent Tweets (Twitter: @ithain) which posed the question… "Can you rely on an iPad for a business trip?". OK, I did slightly move the goal posts, by adding… "and my iPhone", but that is a necessity that I would even have with my MacBook. My iPad is a 64GB WiFi version and before the trip it was loaded with training videos, apps and my music collection… everything that a fresh faced business traveler could foresee.
Oh no! An iPhone that tells you how to drive. That's all I need. The application is called DriveGain and it gives a range of visual and audio feedback on what changes are required by the driver to burn less fuel. I wonder if it uses my father's voice? It works with any petrol or diesel car with a manual transmission and features a database of over 8,400 European and 8,500 North American cars to choose from.
There is something very disturbing about the success of Apple. Many a management guru has talked about the importance of openness, listening to customer and building partnership in fostering innovation. Here are three strongly held beliefs which Apple had been ignoring with impunity. So … Is their success “because of” or “in spite of” these actions? It depends on what you define as success. Though there is lot of commotion in the internet about Apple overtaking Microsoft on market cap, if you take a dispassionate look their financial success is not really spectacular.
Adobe should cut its losses with Apple and target its flagship Flash Player at telecoms carriers, independent analyst Ovum has claimed in a new report*. With the spat over Apple's refusal to support the Adobe Flash technology on its iPhone, iPad and iPod Touch devices continuing to generate column inches, Ovum believes it is time for Adobe to turn the tables by courting new sponsors of its technology in the shape of telecoms operators. The report states that Adobe and telecoms carriers are faced with similar threats and share similar goals in relation to value-added applications and content, and that carriers should therefore seek an industry-wide partnership with Adobe to use Flash as the basis of their own multi-screen device, development, delivery, and distribution systems.
Red Hat’s desktop virtualization has joined its server virtualization in the 2.2 rev of its standalone KVM hypervisor Red Hat Enterprise Virtualization (RHEV). Like 2.1 seven months ago, 2.2 can host and manage both Red Hat Linux and Windows VMs and now offers a single infrastructure for managing server and desktop virtualization deployments. RHEV for Desktops will deploy Hosted Virtual Desktop (HVD) configurations, a k a Virtual Desktop Infrastructure (VDI). It offers a web-based connection broker for users to access their hosted virtual desktops, coupled with the open source SPICE remote rendering technology for multimedia, including multiple monitors, HD-quality video and bi-directional audio/video for video conferences. Templating, thin provisioning and desktop pooling are also included.
Rich Cannings, Android security lead, blogged about remotely removing an app from people’s Android phones. Recently, we became aware of two free applications built by a security researcher for research purposes. These applications intentionally misrepresented their purpose in order to encourage user downloads, but they were not designed to be used maliciously, and did not have permission to access private data — or system resources beyond permission. As the applications were practically useless, most users uninstalled the applications shortly after downloading them.
Another of the great new features of Xcode is the concept of application archives. In the build menu of Xcode 3.2.3, you should see a new option called "Build and Archive". When you build and archive an application, the application archive will show up in Organizer like you see in the image below:
Unfortunately we can't label or rename the individual archived builds of each application, but I love the fact that I have a nice historical timeline of archived builds. Presumably you would use this feature to archive every time you're going to try and submit something to the AppStore. These archives can be used to match up against crash logs so that you can track down bugs that are being experienced by your users "in the wild" that you might not necessarily be able to reproduce in your lab.
As you can see, there are 3 options available for each of the archived builds: Validate, Share, and Submit. Validate will run your application through a battery of tests and checks. These tests and checks are very similar (don't know if it's identical) to the checks and tests that are run by Apple engineers when your app is actually submitted to the AppStore. This is incredibly helpful in that it can alert you to some potential reasons for rejection immediately without you having to wait a week to find out why the app got rejected. Likewise, once you've validated your application you can submit it to iTunes connect right from here, you don't need to use the application loader tool anymore.
If you click on Validate or Submit without having first gone to iTunes connect and created a new application version and chosen the "upload binary later" option, then these buttons will do ABSOLUTELY NOTHING. These buttons only work when there is an application version defined in iTunes connect that is awaiting a binary!
That said, one of my favorite features of the application archives is that you can now share them easily.
As you can see from the preceding dialog, all you need to do is highlight a particular archive and you can save the app to disk, distribute it to an enterprise (this is HUGE people... HUGE) and you can even e-mail the application to other people for ad hoc distribution so you can involve some beta testers in your application before submitting it to the App Store.
I can't tell you folks how much the features in Xcode 3.2.3 has changed the way I feel when writing iPhone apps. Lately it has become very tedious and cumbersome but with Xcode 3.2.3, I feel like I can finally relax and worry about the code and the features of the app and all the other crap like distribution and certification and AppStore submission is all taken care of.
IBM filed a breach-of-contract / misappropriation of trade secrets suit in New York Supreme Court last week seeking to hold Joanne Olsen to her non-compete and stop her from going to Oracle for a year. It’s gotten a temporary restraining order according to InformationWeek. Olsen, with IBM for 31 years, was a general manager in IBM’s services unit and was hired by Oracle as senior VP of on-demand services, the SaaS versions of its software, reporting to none other than Larry Ellison. IBM alleges that she knows too much about IBM, its operations, its growth strategies and its potential acquisitions to fall into Oracle’s hands. IBM has gone to court a couple of times in the last couple years waving its non-competes around.
Apple’s new iPhone 4 went on sale Thursday in the US, UK, France, Germany and Japan and the punters are expecting hear that a million of them sold and are thinking maybe 10 million by the end of September. Like the old Model T, you can have any color you want so long as it’s black. Apple’s got some production glitch or another with the white one. It’s delayed until the middle of July. AT&T, its sole carrier, won’t be selling the thing until next week because its inventory is already depleted by the pre-orders that crashed its provisioning system. Verizon Wireless is expected to crack AT&T monopoly next year.
So it was only two weeks ago in San Francisco, at Apple's WWDC, that the iPhone 4's launch date of June 24 was set in front of 5,200 Worldwide Developers (from 57 countries) and the World's Press, I was lucky enough to be their and take it from me, there was a very large throng of reporters and camera OB crews. For most of the countries able to launch today, the initial pre-order stock were exhausted in a matter of hours.
Born to peddle pricey proprietary iron built around exotic multi-core chips that ratchet up the scalability of Java apps – a dangerous exercise that has demanded a $200 million investment from its backers – Azul Systems is now going to start selling software that does pretty much the same thing as its fancy appliances but it’s optimized for the latest class of cheap, ubiquitous, increasingly powerful x86 commodity servers. If the stuff clicks in the next year, eight-year-old Azul may be in a position to organize an orderly retreat from its hardware business, which, as it happens, reportedly just saw record Q1 earnings. It may have hundreds of widgets out there, but software’s an easier sell.
The latest Moyea Web Player V2.4.0.8 is released recently supporting JS application in navigation URL and auto-hide control bar in full-screen mode. Shenzhen P.R.C – Jun, 24th, 2010 - Moyea Software Co., Ltd. (http://www.moyeamedia.com): a rising developer of flash applications for the internet and multimedia software, today officially releases Moyea Web Player V2.4.0.8, which is the Moyea Web Player is one of the best flash video player creating and customizing programs for all-level users to make their own web player which can be embedded in multiple platforms like blogs, websites, forums and so on.
AT&T has pre-sold 600,000 iPhone 4 devices - in fact they suspended pre-orders after one day due to overwhelming demand. With the massive interest in the iPhone, we know that new phones will be in enterprises in a matter of weeks. In addition, the number of current iPhone users who already use their devices in the Enterprise, that will upgrade the OS on their current device will be very significant.
Sybase on Tuesday announced the results of a survey gauging consumer opinion on the forthcoming iPhone 4 and iOS 4 software, finding that many of the new features are expected to increase the use of iPhone as a business tool. Over half of respondents who currently own an iPhone said that the new features of iOS 4 will cause them to use their iPhone for work purposes more often. More than a third of respondents who don’t own an iPhone said they would consider purchasing one for work purposes based on the new features of both iOS 4 and iPhone 4. Over 2,000 Americans were polled in the Sybase commissioned study, conducted by Zogby International, that explored increasing demand for iPhones in the workplace, most anticipated iPhone and iOS features for conducting work, and work-related usage habits between iPhone users and non-iPhone users.
In another remarkable surge, Apple said Tuesday that it had sold another million iPads in the last 20 days. That makes three million since the widget went on sale in the US 80 days ago, 375,000 a day. Currently available in America, Australia, Canada, France, Germany, Italy and Japan, iPad sales will expand to another nine countries next month.
Sybase has expanded its support for Apple devices with a full mobile device management and security solution for iOS 4. The release of Sybase Afaria delivers proven, market-leading functionality to empower enterprise IT to effectively manage the proliferation of personally and corporate-liable iPhones, while providing a high degree of security to meet the strictest corporate standards. “The increasing diversity of platforms being incorporated into enterprise environments, such as iPhone 4, have companies scrambling to enable the use of such high user-demand devices while maintaining corporate security policies,” said Jack Gold, President of J.Gold Associates, LLC. “Third party management and security applications like those from Sybase enable companies to augment these devices’ capabilities by keeping corporate data assets safe and separate from the private user sections of these devices. When such enhancements are deployed, these consumer devices can become capable business productivity tools connected to a corporate environment.”
After using the iPad for a few weeks, I am totally and utterly fixated by the device. What I am not 100% happy with are the iPhone Apps that it can run and I think that iPhone Apps just fall short on the iPad. I am no way suggesting that the wealth of iPhone apps already on the App Store are no good. Quite the contrary, I have a number of them on my iPhone and use them all daily, they really make my Mobile Lifestyle easy. The point really comes down to the screen real estate.
Like other desktop-centric technologies such as anti-malware, PC tune-up utilities (disk de-fragmentation, registry cleaners, junk removers, etc) have primarily been a localized technology that relied on the user installing software on the computer to analyze and resolve problems that affect performance. In his session at the 7th International Cloud Expo, Roland Wartenberg, Chief Virtualization Evangelist at SAP, will introduce a new approach that takes PC tune-up and security strategies to a new level utilizing the power of the cloud as a means of delivery. He will also discuss new methodologies for using the intelligence of the community and the power of the cloud to accomplish computer maintenance at a lower total cost of ownership than traditional desktop technologies.
It seems nowadays, that all large companies have an presence on the App Store with their own iPhone Applications. Sybase already has the iAnywhere Mobile Office as well as the SAP Mobile Sales & Workflow Apps, but thanks to Sybase Employee Marcelo Palermo, we will soon have the Sybase Blogs Application, which will allow you to keep in touch with all news from Sybase, the industry leader in delivering mobile solutions.