Interview with Brian Chess from Fortify Software

Fully formatted shownotes can always be found at http://javaposse.com

Brian is Chief Scientist and co-founder of Fortify Software and gave us an interview all about internet security, and the possibility of using static analysis to catch security problems only.

• Fortify Software homepage
• http://www.fortifysoftware.com/
• http://www.fortifysoftware.com/products/
• Brian's personal homepage
• http://www.vantuyl.com/chess/
• The book - Secure Programming with Static Analysis
• http://www.amazon.com/dp/0321424778
• Static Analysis
• http://en.wikipedia.org/wiki/Static_code_analysis
• Findbugs
• http://findbugs.sourceforge.net/
• Other static analysis tools
• http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
• Buffer Overflow exploit
• http://en.wikipedia.org/wiki/Buffer_overflow
• Cross Site Scripting (XSS)
• http://en.wikipedia.org/wiki/Cross_site_scripting
• SQL Injection
• http://en.wikipedia.org/wiki/SQL_injection
• Wikipedia list of common vulnerabilities
• http://en.wikipedia.org/wiki/Security_vulnerability

Thanks

• Libsyn.com - http://www.libsyn.com - for hosting and bandwidth
• Brice Ruth and Webprojkt.com - http://webprojkt.com - for our archives site - http://archives.javaposse.com
• Feedburner.com - http://www.feedburner.com - for feed redirect
• Kirsty Doherty, Oliver Widder and Amy Ehmann for Java Posse artwork
• Brian Ehmann - the Java Posse intern
• Craig Muth for maintaining the Java Posse Memorizable site - http://memorizable.org/Java_Posse
• Theme Music:
  • Opening - "Java" the parody song Copyright 1997 Broken Records and Marjorie Music Publ. (BMI), written and performed by Loose Bruce Kerr of the Dr. Demento Show and Sun Microsystems attorney. Based on the WWI popular song, "Ja-da." Ukelele style on the recording taught to Bruce by his dad. Re-produced with kind permission from "Loose" Bruce Kerr - http://loosebrucekerr.libsyn.com
  • Closing - Juan Carlos Jimenez - In the House (Intro No. 1)
    

• To contact us:
  • Visit our homepage - http://javaposse.com
  • Post on our Google Group - http://groups.google.com/group/javaposse
  • Or send us email - javaposse@gmail.com

Newscast for September 21st 2007

Fully formatted shownotes can always be found at http://javaposse.com

• Glassfish v2 and NetBeans 6.0 Beta 1 have been released
• http://blogs.sun.com/pelegri/entry/overview_of_glassfish_v2
• http://weblogs.java.net/blog/ludo/archive/
  2007/09/glassfish_v2_in.html
• http://weblogs.java.net/blog/jfarcand/archive/
  2007/09/whats_really_co_1.html
• http://weblogs.java.net/blog/sdo/archive/
  2007/09/sun_ships_glass.html
• http://www.netbeans.org/servlets/NewsItemView?
  newsItemID=1109
• And, netbeans has just won a Bossie award from InfoWorld
• http://www.infoworld.com/archives/t.jsp?N=s&V=91650
• http://www.eclipsezone.com/eclipse/forums/t101384.html

• OpenOffice.org 2.3 has been released
• http://www.openoffice.org/
• http://extensions.services.openoffice.org/project
• http://download.openoffice.org/2.3.0/index.html
• http://developers.slashdot.org/article.pl?
  sid=07/09/19/1455240&from=rss

• Jens Eckels asks "Do we need an IDE 2.0 revolution"
• http://www.theserverside.com/news/thread.tss?
  thread_id=46941

• SCO declares Chapter 11 bankruptcy
• http://yro.slashdot.org/article.pl?
  sid=07/09/14/1948257&from=rss
• http://yro.slashdot.org/article.pl?
  sid=07/09/18/175259

• Java application of the week jIRCii
• Use it on our new Java Posse IRC channel - #javaposse on irc.freenode.net
  
• http://jirc.hick.org/

• Java Site of the Week: Mint
• http://www.mint.com

Quick News Items

• The eclipse project has released eclipse PHP development tools 1.0
  
• http://www.news.com/8301-10784_3-9780700-7.html
• http://www.eclipse.org/pdt/
• http://www.zend.com

• The Nimbus Look and Feel is nearing completion
  
• http://www.breakitdownblog.com/
  2007/09/07/nimbus-lnf-almost-done/
• http://www.jasperpotts.com/blog/
  2007/09/nimbus-almost-done/

• Chet Haase and the timing framework project have announced version 1.0 of the timing framework
•  https://timingframework.dev.java.net/
• http://weblogs.java.net/blog/chet/archive/
  2007/09/aversion_10_its.html

• Version 1.0 of JSR 295 - the Beans Binding API, is now available for download
  
• http://weblogs.java.net/blog/shan_man/archive/
  2007/09/beans_binding_1.html
• http://forums.java.net/jive/thread.jspa?
  messageID=234190&tstart=0#234190

• iced-tea.org is the home of the IcedTea project providing a completely unencumbered open source Java
• http://iced-tea.org/wiki/Main_Page

• Microsoft have released version 1.0 of Silverlight
• http://developers.slashdot.org/article.pl?
  sid=07/09/05/1442254&from=rss

• Adobe has released the first public beta of Flex 3.0
  
• http://labs.adobe.com/technologies/flex/
• http://flexwiki.adobe.com/confluence/display/
  ADOBE/Home

• Kirill Grouchnikov has announced version 4.0 of the Substance look and feel for Java
• https://substance.dev.java.net/

• A Ccomparison between the Java and .NET way of handling generics
• http://www.jprl.com/Blog/archive/development/
  2007/Aug-31.html

• The Aquarium has a guide to the ReST initiatives for Java
  
• http://blogs.sun.com/alexismp/entry/
  restful_sun_putting_it_all
• http://blogs.sun.com/teera/entry/
  jaxb_for_simple_java_xml

• Apache Tuscany version 0.99 has been released
• http://www.theserverside.com/news/
  thread.tss?thread_id=46746

• The open source Java server Glassfish now has a wiki/user faq site
  
• http://wiki.glassfish.java.net/Wiki.jsp?
  page=GlassFishUserFAQ

• J/Invoke 1.0 has been released
• http://www.jinvoke.com/

• IBM developerworks has a new article describing how to invoke dynamic languages
• http://www.ibm.com/developerworks/java/
  library/j-javascripting1/?ca=dgr-btw01javaapi
  &S_TACT=105AGX59&S_CMP=GR

• The new Cajo java.net project provides a simple and very small library to enable distributed computing using just three simple methods in the API: export, lookup and proxy
• https://cajo.dev.java.net/
• http://weblogs.java.net/blog/cajo/
  archive/2007/09/simple_interjvm.html

• NetBeans has a new module integrating the Google Checkout API through a new open source Google Checkout Java SDK project
  
• http://code.google.com/p/google-checkout-java-sdk/
• http://weblogs.java.net/blog/inder/archive/
  2007/08/netbeans_module.html

• Netbeans.tv now has Tor's video interview about and demo of the new NetBeans 6 rails features for constructing web applications
• http://www.netbeans.tv/interviews/Tor-Norbye-mixes-
  Ruby-and-Java-development-using-NetBeans-151/

• Version 1.6 of project Grizzly has been released
• http://weblogs.java.net/blog/jfarcand/archive/
  2007/08/project_grizzly_3.html

• Lance Anderson blogs that JDBC 4.0 is catching on with ever more companies and organizations offering JDBC 4.0 compliant drivers for their database
• http://weblogs.java.net/blog/lancea/archive/
  2007/09/updated_list_of.html

• If you do a lot of JNI development you may be interested in the Intel integrated Java/JNI debugger
• http://softwarecommunity.intel.com/
  articles/eng/1435.htm

• EclipseZone reports that a new milestone of the Whole Platform, 1.0.0.v20070912-1454
• http://whole.sourceforge.net/Overview.html
• http://www.eclipsezone.com/eclipse/
  forums/t101496.rhtml

• Hudson continuous build engine continues to go from strength to strength
• http://weblogs.java.net/blog/kohsuke/archive/
  2007/09/more_hudson_ado.html
• http://blogs.sun.com/theaquarium/entry/
  hudson_plugins_for_net

• Azul systems, makers of the very scalable Java hardware solutions with the ability to run hundreds of concurrent Java threads is in trouble
• http://www.theserverside.com/news/
  thread.tss?thread_id=46884
• http://www.theregister.co.uk/2007/
  09/12/azul_hurt/

• IBM DeveloperWorks has made another handy little developer tool available. The Lock Analyzer allows you to examine how Java locks are performing in a live application
  
• http://www.alphaworks.ibm.com/tech/jla?
  open&S_TACT=105AGX59&S_CMP=GRsite-
  jw22&ca=dgr-jw22awjla

Thanks

• Libsyn.com - http://www.libsyn.com - for hosting and bandwidth
• Brice Ruth and Webprojkt.com - http://webprojkt.com - for our archives site - http://archives.javaposse.com
• Feedburner.com - http://www.feedburner.com - for feed redirect
• Kirsty Doherty, Oliver Widder and Amy Ehmann for Java Posse artwork
• Brian Ehmann - the Java Posse intern
• Craig Muth for maintaining the Java Posse Memorizable site - http://memorizable.org/Java_Posse
• Theme Music:
  • Opening - "Java" the parody song Copyright 1997 Broken Records and Marjorie Music Publ. (BMI), written and performed by Loose Bruce Kerr of the Dr. Demento Show and Sun Microsystems attorney. Based on the WWI popular song, "Ja-da." Ukelele style on the recording taught to Bruce by his dad. Re-produced with kind permission from "Loose" Bruce Kerr - http://loosebrucekerr.libsyn.com
  • Closing - Juan Carlos Jimenez - In the House (Intro No. 1)
    

• To contact us:
  • Visit our homepage - http://javaposse.com
  • Post on our Google Group - http://groups.google.com/group/javaposse
  • Or send us email - javaposse@gmail.com

Meet up details for Oslo and Amsterdam

If anyone is interested, Carl and Dick will be in front of the Spektrum in Oslo (where the JavaZone conference was held) at the entrance where the rocket ship was (still is?) tonight (Friday 14th) at 8pm local time. We are intending to go looking for beer and possibly lutefisk. Anyone who wants to is welcome to meet up with us.

Also, tomorrow (Saturday 15th) Dick is aiming to be in Molly Malone's Irish Pub close to the Amsterdam Centraal station at around 8.30pm to 9pm (very roughly - depends on flight, time to find baggage, etc.) so if anyone would like to meet me there, please do.

Molly Malones Irish Pub
Oudezijds Kolk 9
1012 AL Amsterdam, Netherlands

Java Posse Episode 142 - Special from JavaZone 2007

Velkommen til Episode 142 av Java Posse - Ekstrasending fra JavaZone 2007!

Top reasons indicating you might be on a Broken Project:

• It takes three months to add one checkbox to a web UI
• Everything starts to look like it would be quicker to rewrite
• Everyone on the project has "Architect" on their business card, and yet they never agree on anything!
• Conversations start with "Oh, that, that's really simple, you just...." followed by a 30 minute description on what to do
• You time your life around "the build"
• The GUI is written in AWT... or HTML 3.2
• Or! The GUI is written in something you wrote yourself
• The project .... is a home grown web framework
• Someone just added 5 more hours of meetings to your work week because "it's late"
• The guy who is supposed to train you, throws a folder of notes at you and runs away cackling gleefully
• The lines of XML outnumber the lines of Java 10:1
• You ask about unit tests and get blank stares from everyone, or a "yeah, we should do that really"

• Silicon Valley Code camp - October 27-28
• http://www.siliconvalley-codecamp.com/SubmitSession.aspx

• NetBeans 6.0 Beta 1 getting close...
• http://wiki.netbeans.info/wiki/view/NewAndNoteWorthy#
  section-NewAndNoteWorthy-Beta1

• Java Applet of the week - Frozen bubble in an applet
• http://www.public.sytes.net/hoefs/games/frozenb.php?lang=en

• Mobile Java App of the week: Opera mini beta 2
• http://my.opera.com/operamini/blog/opera-mini-4-beta-2
• http://www.operamini.com/beta/simulator/

• Java Library of the Week: Quaere by Anders Noras
  
• http://quaere.org/
• http://andersnoras.com/
• http://andersnoras.com/blogs/anoras/archive/
  2007/09/04/next-wednesday.aspx

Thanks

• Libsyn.com - http://www.libsyn.com - for hosting and bandwidth
• Brice Ruth and Webprojkt.com - http://webprojkt.com - for our archives site - http://archives.javaposse.com
• Feedburner.com - http://www.feedburner.com - for feed redirect
• Kirsty Doherty, Oliver Widder and Amy Ehmann for Java Posse artwork
• Brian Ehmann - the Java Posse intern
• Craig Muth for maintaining the Java Posse Memorizable site - http://memorizable.org/Java_Posse
• Theme Music:
  • Opening - "Java" the parody song Copyright 1997 Broken Records and Marjorie Music Publ. (BMI), written and performed by Loose Bruce Kerr of the Dr. Demento Show and Sun Microsystems attorney. Based on the WWI popular song, "Ja-da." Ukelele style on the recording taught to Bruce by his dad. Re-produced with kind permission from "Loose" Bruce Kerr - http://loosebrucekerr.libsyn.com
  • Closing - Juan Carlos Jimenez - In the House (Intro No. 1)
    

• To contact us:
  • Visit our homepage - http://javaposse.com
  • Post on our Google Group - http://groups.google.com/group/javaposse
  • Or send us email - javaposse@gmail.com