Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Similar to Flash (Score 1) 451

Qt is awesome. I'm using bouml, a designer that supports UML models. Just curious, but does anyone know what Apple builds Safari in, such that it runs cross-platform? I have researched this a little but haven't found any information. I would imagine that Safari is built with Objective-C and Cocoa libs, so assuming that, there must be some way to talk to Win 32. Any thoughts?

Comment Re:A move by Apple, or Oracle? (Score 1) 451

Just my simple opinion, but Oracle only sees Java as a cow to be milked, not one to be nourished.

Right, sure, but there is certainly a fat profit in that, to use the COBOL example from the previous poster, IBM has been quietly upgrading COBOL & Mainframe technologies for years. Sure it doesn't have the spotlight that things like HTML5 and iOS (iPad, iPhone) have. And one other thing to consider is that Oracle is heavily invested in Java because their apps use a bunch of Java/J2EE technologies, for example Oracle Fusion and Call Center Anywhere. So Java won't get the fame and glory it once did, but they will still be significant investments. It's a little disappointing to see all the stuff that *won't* be in the newer version of Java (1.7? I can't even keep track anymore), but after now starting to use Java 1.5, and being fairly impressed by annotations and seeing the implications (who needs Spring? I can use Guice), I certainly hope I can continue to use Mac OS X as a development platform. Because utlimately making a less than adequate support for stuff like this is not a good idea. what next? Deprecate the Apple gcc?

Comment Re:Way to go, Apple. (Score 1) 451

Mac has a LOT of catching up to do before their package management is as nice as that of Ubuntu et al. Granted, it's better than the one on Windows, but that's not saying much.

Actually, for OS X, there is macports. Personally, I like things like apt-get, but since that steers you towards downloading binaries, and macports compiles the source, you get an application built exactly for your system. Anyway, main point is that, while I do believe that, I think it was Red Hat first with the RPM standard, Linux and other distros (SuSE) have pushed the envelope on making it easier to install software, I would say it's just as easy on the Mac. But golly, with this "deprecated" business, I'm just as cautious as everybody else here. At the very least, Apple should *communicate* things of this nature, so you don't have a bunch of /.s postulating various theories about what they are doing, so we have theories ranging from

This is because they don't want people developing Android apps on OS X

to

No worries, this is just that Apple's work is done, they've contributed everything back to the Sun/Oracle JVM, and we will all happily run the Oracle JVM when it comes out

Comment Re:You Know What They Say? (Score 1) 594

Watch the video - she puts it away immediately after he "asks" her. More correctly, he threatens to arrest her, which seems to happen later anyway. Was the cop looking for any excuse to arrest the people? It seems so. If you watch the other videos, the cops can do pretty much what they want. They were saying things like "That guy has a number on his shirt! Arrest him!". Anyway, it's good to see Canada's finest doing their best to protect the country from bubble blowers. We're all safe, I'm glad that $1 billion dollars was spent wisely, they earned it.
Security

Submission + - ZeuS Talks To Chuck, Targets Schwab Customers (securityweek.com)

wiredmikey writes: Threat researchers have decrypted a yet another variant of the Zeus botnet, one that specifically targets Charles Schwab customers. Built using the newer Zeus 2.0 toolkit, this variant contains updated encryption, and a slightly modified configuration file to evade detection from existing tools that decrypt Zeus v2.0 config files. A researcher was able to decrypt the latest configuration file and was able to disover the intentions and targets for this ZBot attack: banks and investment accounts. With this attack, cybercriminals have expanded their scope, using heavy browser injection to conduct a targeted attack against presumed Charles Schwab clients.
Security

Submission + - Thousands lost in rising VoIP attacks (zdnet.com.au)

mask.of.sanity writes: Australian network companies have told of clients receiving phone bills including $100,000 worth of unauthorised calls placed over compromised VoIP servers. Smaller attacks have netted criminals tens of thousands of dollars worth of calls.

A Perth business was hit with a $120,000 bill after hackers exploited its VoIP server to place some 11,000 calls over 46 hours last year.

VoIP networks are a cash cow for criminals who can earn money from unscrupulous telecommunications carriers profiting from calls placed over victim's networks or to ramp up calls to premium numbers. The genesis of the practise dates back some two decades when phreakers busted into phone companies to make free calls. VoIP attacks are now an established practice but victims are still easy pickings for criminals.

Local network providers and the SANs Institute have reported recent spikes in Session Initiation Protocol (SIP) scanning — a process to identify poorly configured VoIP systems — and brute-force attacks against publicly-accessible SIP systems, notably on UDP port 5060.

Bug

Submission + - Security Firms Scramble for SCADA Talent (threatpost.com) 1

Trailrunner7 writes: Three months after the world first learned of the sophisticated Stuxnet worm, insiders say that there's a scramble to find and hire engineers with knowledge of both security and the industrial control systems that were Stuxnet's intended target.

Anti virus companies admit their research teams were ill prepared for Stuxnet and are still coming up to speed on the functioning of Siemens industrial control systems and programmable logic controllers that Stuxnet infected. At the same time, the companies are searching high and low for technical talent with knowledge of the kinds of systems that run power plants, factories and industrial machinery — preparing for a future in which malicious hackers increasingly put critical infrastructure and an Internet of things in the cross hairs.

"We realize we need new knowledge, but not new skills," Symantec's Liam O' Murchu said. "Its not like Stuxnet changes how AV researchers work, but new fields of expertise are needed. This is an area we're not well equipped for."

Security

Submission + - Iran acknowledges espionage at nuclear facilities (washingtonpost.com)

wiredmikey writes: Iran acknowledged Saturday that some personnel at the country's nuclear facilities were lured by promises of money to pass secrets to the West but insisted increased security and worker privileges have put a stop to the spying.

The stunning admission by Vice President Ali Akbar Salehi provides the clearest government confirmation that Iran has been fighting espionage at its nuclear facilities.

Comment Linux Power Management (Score 1) 403

Maybe, we'll see I guess. Think there are definitely some advantages for Apple to maintain tight control over the licensing, that means Apple is in this case, the company that is more nimble.

One thing you are seeing now is the proliferation of versions of Android out there. In other words, maybe Google is making the same mistakes Microsoft did with "DLL hell", only much worse. This would seem to me to make it difficult for the third party vendors out there. With Apple, I have to test for iOS 4.1, 4.0, 3.2, 3.1, maybe iOS 2.0. With Android, throw in more versions, and more hardware, and you've got some additional complexity.

Another interesting advantage of iOS is that Apple doesn't have to convince Linus, as Google does, to make a change to Linux to support devices vastly different from the typical hardware Linux runs on, from big iron like IBM mainframes, to powerful Unix servers, to laptops. There was a fascinating thread on the Linux Kernel a while back about Linux Power Management, all about sleep mode, etc. Fascinating in that it gives insight into the tremendous amount of thought that goes into what might seem a trivial problem, but then you realize how this might impact other systems, well, it isn't so simple. Is this due to Linux monolithic kernel, vs. the mach kernel used in iOS? Just a thought. Anyway, it occurred to me reading this thread, that Apple has a significant advantage in not having to convince a third party to make a change like this.

Comment Re:iOS first, better for your background (Score 2, Informative) 403

I've been impressed with the Stanford course. The material is quite dense, I find I have to pause the tape every once in a while and take notes, so they move fast. A good background in some other language like C, and even an OO background like C++ would be useful, as concepts carry over well from Java. In fact, Java was influenced by Objective-C.

The course material is very good too, such as the lecture presentations and the assignments. In the '09 semester I believe they did a Twitter-style app, in the Spring 2010 semester, which you can also download from itunes, they do a flickr app. They bring in various speakers, including Apple employees working on the various supporting libraries.

The only minor quibble I would have is that the Xcode app has changed from the version used in the course, so sometimes you can't follow the instructions exactly.

Given the OPs background in C and hardware, I'd agree with the folks on this thread that suggest going the iOS/Android/Flash route vs. using a web application. It would seem to me easier, given that background, of using a GUI framework like Cocoa, than figuring out a web framework. And this gets to the most important point - what are his requirements? The school uses iPads, so he probably has some ideas for some time of application that would benefit the school. This is probably the best way to learn - scratch an itch, and start from the top down, rather than learning every nuance out there, since these frameworks and platforms can be huge and complex.

Comment Re:Yes (Score 1) 403

And even if you do use something like Qt for your app, not a lot of people have the time, money or resources to debug the app across multiple OS's, and a jillion or so phone models, all with slightly different versions of these OS's, with different screens, buttons, and capabilities.

Of course, and that's the whole reason to use something like Qt, or Java (android), or Adobe Flash/Flex,SWT (eclipse.org)etc.

The whole philosophy behind Qt, is that you let TrollTech, or Nokia now I guess, handle all the fun stuff of getting it to work across multiple platforms. Sure, there are bugs, just as if you would be using Adobe Flash, or any other x-platform kit, i.e. same thing with Google's version of Java (Android). Right now I'm using bouml, a UML modeling tool built in Qt. Runs on Linux (I think the author does most of his work in that environment), but also Windows.

Comment Re:Well, the "developer" doesn't get it (Score 1) 338

I agree. I've read the article, and read the summary, and the comments, trying to see if something was out of context. Somehow it seems lost on the guy that by writing a very in depth article, generating 75 comments, and some publicity, controversy, is what OSS is all about. Transparency, openness. So he inadvertently, it seems, is part of the OSS process. The same process that brings us highly secure OS like Open BSD. Do not depend on the OSS community? He's a little ignorant in that regard, that's all I can surmise.
Now, what is a little strange to me is that Diaspora is trying to stick to the hard release date. Again using the example of Linux, they should release it when it's done and no sooner (something to that effect). To me, this application is a hybrid, part OSS, part driven by VCs, i.e. the folks putting up the seed money. Maybe that is behind the author's confusion about OSS in the point above.
I agree with the other posters here, they should scrap it, rewrite it from the ground up following good security principles. I mean, we certainly wouldn't want to switch from the fairly secure fb to totally insecure fb-clone.

Comment Re:Who knew! (Score 1) 156

Ok, .NET fans, keep punting. I guess the next answer will be it's the fault of the testers, for not envisioning this scenario. Which is a decent answer too, but I think the original commenter had it right about checked exceptions.

I'm all for .NET, I love how I can create a web service quickly, and I've been impressed to see how it has been quietly building up to a solid base, and there are folks building good apps around it like Roy Osherove's TypeMock, even though Rails gets all the fanfare. but fall in the middle for checked exceptions, having seen massively stupid apps with 2/3 of the code handling the exception in every method, and other apps turning an exception into an unchecked exception. Use them, with care.

The argument, way back when, against checked was, "we are good, smart programmers, don't treat us stupid, we will document the exceptions so if you should trap it (or turn off dev mode, or whatever the latest excuse is), you can, otherwise leave us alone." But then you have other folks out there, the lean developers, saying forget about documentation, just code it. (As an aside, I think the future will be massively un-maintainable web apps being tossed because the original developers have long gone, and unless you have an deep understanding like DHH, forget about figuring out the code, meanwhile well-document but dull C code will carry on)

The counter-argument, as proven by this very very very costly example is, a little reminder doesn't hurt.

Slashdot Top Deals

"A car is just a big purse on wheels." -- Johanna Reynolds

Working...