Eclipse gets Fishy on SOA
446738
Hype hangover The Eclipse Foundation's plan to push ahead with a Services Oriented Architecture (SOA) run-time framework later this year marks an interesting change of direction for the industry group.â¦
312627
A highly critical security hole has been reported in the X Pixmap (libXpm) technology shipped with Solaris and JDS for Linux, which could allow someone to run code on your system if a modified X Pixmmap (.xpm) image is loaded.
620094
roundup Free-roaming source code breeds new Netsky pest. Also: From IE to Opera, browsers are a likely prey.
534407
InfoWorld - Cambridge, Mass. -- IBM and other parties are set to propose an open source systems management initiative for consideration by the Eclipse Foundation, with managing SOA a goal of the plan, an IBM official said at the EclipseWorld 2006 conference on Friday.
68608
Security bugs in Sun Microsystems' telnet service could allow attackers to gain unauthorized access to a user's system.
754508
Hewlett-Packard has entered into mutual agreements with two former directors caught up in theÂ board spying scandalÂ not to file lawsuits over the dispute.ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
624511
My punchline is better than theirs Rich Green, Sun Microsystems' new software chief, thinks his rivals are "hung up" on service oriented architectures (SOA), and are failing to grasp the bigger picture.â¦
83803
(InfoWorld) - Ingres began offering a software bundle on WednesdayÂ to make it easier for developers to build Eclipse-based applications on top of the Ingres 2006 open-source database. The Ingres Eclipse Bundle brings together all the components developers need to create and run Java applications built using the Eclipse Foundation's open-source development framework. Available for download from the Ingres Web site as a single zipped file, the bundle includes a version of the Eclipse framework and the Ingres Eclipse DTP (Data Tools Project) plug-in, said Emma McGrattan, senior vice president of engineering at Ingres. The bundle also contains source code of a demonstration for developers on how to use Eclipse and Ingres and instructions on getting started with Ingres DTP. The Ingres DTP plug-in features enhancements Ingres made to the Eclipse Data Tools Project so that the development environment is more aware of syntax specific to the open-source database, making it easier to run SQLÂ statements and to debug code. Previously, users had to download the Eclipse framework themselves, find the particular plug-ins they needed, and use the Java Database Connectivity specification to link their Eclipse-based applications to Ingres, McGrattan said. Application developers within Ingres found that process time-consuming, and the company realized its users must also be struggling with the complexity. Ingres already offers bundles for the Python, PHP, and Perl scripting languages with support for Ruby coming next, McGrattan said. Ingres definitely plans bundles of its database with third-party software, notably around BI and application servers, McGrattan said. She sees plenty of opportunities for the vendor to "preplumb" or do the necessary integration legwork for customers between Ingres 2006 and other applications. "There are already projects underway at Ingres to build on top of Project Icebreaker as an appliance solution," she added. Expected to ship shortly, Icebreaker is a tight integration of the Ingres database with a version of rPath's Linux distribution. Ingres would also look to offer bundles based on the other operating systems it supports -- Windows and Unix. McGrattan also commented on recent executive departures. Last month, Dave Dargo, the vendor's chief technology officer, revealed in his blog that he'd left his full-time role at Ingres, while Dev Mukherjee, chief marketing officer is set to leave Friday to join Sears. "The timing was unfortunate," McGrattan said. "But it's no secret we hired Dave off the golf course." Dargo retired from Oracle a few years ago after 15 years with the company, where he headed up the vendor's Linux strategy. "We ran him ragged last year with traveling," McGrattan said, leading to Dargo deciding to step back from his day-to-day duties. He remains a key Ingres evangelist and technical advisor, recently representing the company at an open-source conference at Germany and in several customer interactions. "Dev is a loss for Ingres," McGrattan said, but sheÂ notes Mukherjee is leaving a strong marketing team in place, including former Red Hat and VMware executives. The vendor is also hopeful that Mukherjee's new employer, Sears, might become a future Ingres customer. Ingres is looking for a new CMO but has no plans to hire a new CTO, she added. McGrattan doesn't expect any further upset among the company's executive ranks. "I've been with Ingres since 1989, and I'm not going anywhere," she said. McGrattan's tenure predates both the spin-off of Ingres from CA in 2005 and CA's 1994 acquisition of The ASK Group, which had previously purchased Ingres. Â
247561
Ziff Davis - Sun's plans to offer Solaris code to the open-source community leaves some analysts scratching their heads.
694189
Users of Adobe's programs are taking issue with an apparent feature within the company's products that is sending out some type of data to an outside service.
613957
(InfoWorld) - In a little more than a decade, BEA Systems built itself into a top middleware player and one of the leading lights in SOA. Thatâs a good thing. Revenues at BEA are soaring (up 19 percent in the latest quarter) and the companyâs stock price rose around 50 percent in the last year. But playing in a hot space such as SOA is a classic instance of having the tiger by its tail. As CEO Alfred Chuang told InfoWorld Executive Editor at Large Eric Knorr in a recent interview, the company still needs to move aggressively to avoid being left high and dry by rapid shifts in the technology landscape. InfoWorld: What do you think is the future of enterprise software and where does BEA fits into it? Alfred Chuang: You will have vendors like us that will be selling platforms (and) application vendors that will be selling application components, yet they will be assembled on the fly by an end-user. End-users will be using a tool -- or they will be using templates or processes -- that will represent what their environment is. They can always go back to change the process on the fly, yet the components will continue to be usable within those processes. One big advantage: Youâll be able to upgrade component functionality without affecting the process itself. Today, this is a total mess. IW: Where do you think SaaS (software as a service) will fit in to this vision?                                                     AC: Like when you rent a car, you donât really care much about your car. When people drive a rent-a-car, they drive very differently from when they drive their own car. You see the craziest man driving around the hills of San Francisco in a Ford Taurus -- itâs likely to be me -- and Iâm killing the brakes coming down the streets of San Francisco, flying over the hills, because I donât give a crap. Now, if itâs my own car that Iâm driving, itâs very different. Iâll be parking at the corner parking station and making sure nobody can possibly ding me. There will be people who want full flexibility, so all they want is a rental car. There are people who will want ownership so badly ... that they will buy the software. SaaS will be able to attract small groups in large corporations, or small organizations, period. I think a successful company, including ourselves, even at the middleware layer, will have to offer both to people. IW: So youâre not ruling out offering some of what BEA offers now as a service? AC: Not only am I not ruling it out, we have to do it.Â  Iâm saying itâs not going to be 100 percent of the world. IW: What about the effect of the open source model? AC: Open source is the ultimate tool to keep us honest, especially on pricing. Linux is a good example. I spent the first half of my career from the very beginning of Sun until they were several billion dollars in size. For the longest time, Solaris was the reason people would buy a very, very expensive box. All of a sudden, people did not notice -- especially the people at Sun -- that the API was no longer dependent on Solaris. Weâre not calling any of the functions directly on the operating system anymore. They are programming that to things like J2EE. So overnight, what happened is someone came up with a computer running an operating system that J2EE can run on. Literally, thereâs no porting, thereâs no changing, nothing. In fact, the same application is being extended by buying more CPUs running Linux. Linux totally commoditized Unix in the marketplace. Open source serves [another] very important purpose, I think, which is education. SOA [service-oriented architecture] is lifting us to a different level. Look at the application server or integration software. You really want to educate developers? Let them tinker with whatâs inside so they fully understand what theyâre dealing with. A smart vendor will always watch whether their software is being commoditized. And itâs not wrong to be commoditized as long as your volume catches up with it. You must continue to innovate in abstractions at higher and higher levels. The demand is unlimited at this point in time. Look at our appetite for Internet applications. It is absolutely insatiable. We want more and more and more. I want to do everything on the Internet. If Iâm booking an airline ticket -- I just came back from Asia last night -- I did the whole thing in my car on my 3G BlackBerry.
77163
(InfoWorld) - Santa Clara, Calif. -- Eclipse Foundation Executive Director Mike Milinkovich criticized Microsoft on Tuesday for not approaching Eclipse about interoperability between .Net and open source Eclipse technologies. Speaking at the EclipseCon conference, Milinkovich also shined a spotlight on OSGi (Open Services Gateway initiative), which provides the basis of Eclipse's core plug-in model for software development. Commenting on Microsoft, Milinkovich said Microsoft sends representatives to EclipseCon every year. Eclipse and Microsoft officials in attendance then agree that a meeting ought to be set up between the two sides. But afterward, "they never call," Milinkovich said. "Ask your friends at Microsoft what they're doing to interoperate with Eclipse," Milinkovich said during a press conference. Milinkovich said he expects Microsoft to someday join Eclipse and that there are enough points of interaction between these two development "universes" that interoperability is the right thing to do. Currently, there are a few point solutions for interoperability, such as Teamprise providing an Eclipse plug-in enabling Eclipse-based developers to access Microsoft's Visual Studio 2005 Team Foundation Server product for application lifecycle management, Milinkovich said. (Teamprise announced on Tuesday that it has joined the Eclipse Foundation.) But users would benefit from cooperation between the two camps to provide interoperability, Milinkovich said. A company with, for example, developers building in .Net and on the Eclipse Rich Client Platform might want to see resulting applications be easily interoperable, he said. Microsoft, contacted for its response to Milinkovich's plea, declined to comment. But an industry analyst questioned whether Microsoft really needs to do anything about interoperating with Eclipse. "I think there's a lot of people that make a very good living bridging the two [platforms] and SOA makes that less of an issue," said Dana Gardner, principal analyst at Interarbor Solutions. With SOA, the use of mashups and services boosts interoperability, according to Gardner. Eclipse technologies based on OSGi could become the open source alternative to .Net for software development, Milinkovich said. Eclipse began basing its technology on the OSGi component standard with the Eclipse 3.0 platform in 2004. "OSGi I believe is going to be one of those overnight successes that endures eight years or nine years in the making," Milinkovich said. "Itâs a component model for Java and this is something that Java actually has been lacking since its inception," Milinkovich said. The OSGi community is participating in Java Specification Request 291, which would have OSGi become part of the Java component model, Milinkovich said. "One of the great things about [OSGi] is it's supported by a number of vendors and open source communities. Eclipse is not the only implementation of OSGi," Milinkovich said. The universal component model provided by OSGi is being used in embedded devices, rich client applications, and server applications, with support from organizations such as NASA, technology vendors such as IBM and Oracle, and open source communities such as Apache and Spring, Eclipse said. The OSGi Developer Conference is happening concurrently with EclipseCon this week. Also at Eclipse on Tuesday, Milinkovich noted a new project proposal called Maya, which is being led by Cisco and is intended to make it easier to deploy Eclipse and Eclipse Rich Client Platform solutions within large enterprises. Another goal of Maya is making the deployment and update process transparent to end users. Milinkovich also said Eclipse plans its simultaneous release of multiple projects, called Europa, in June. Europa will feature the Eclipse 3.3 platform and 22 projects, including the latest versions of technologies such as the Data Tools Platform, Web Tools Platform and Business Intelligence, and Reporting Tools projects. Last June, Eclipse did its Callisto release as the predecessor to Europa, but that only had 10 projects.
218378
Respond to call EclipseCon Eclipse spent today weathering criticism from developers when it dared ask: "What sucks about Eclipse?"â¦
360830
Suits petrified of covert open-source developers EclipseCon Fear is stalking the corridors of corporate power, as executives sweat over the legal exposure caused by developers using open source software.â¦
271966
DÃ©jÃ  vu Sun has warned of a bug in its Java software platforms stemming from problems involving an update module designed to address the earlier start of Daylight Saving Time in the US this year.â¦
288797
(InfoWorld) - SunÂ is putting millions of Java users at risk by staggering the release of security patches for the software, security vendor eEye Digital Security said Monday. To illustrate the problem, eEye points to a recent flaw in the Java Runtime Environment, used to run programs that are written in Java. In January, eEye discovered a serious bug in the Java Network Launching Protocol, which is used to run Java programs over the Web. Hackers could exploit this flaw by setting up a malicious Web site that could install unauthorized software on any Java-enabled PC that visited it, according to eEye. The flaw was patched in late June, but Sun has yet to push out the fix to its millions of Java users worldwide. Instead, Sun has made a developer release available on its Java.sun.com download page and is holding off on a more widespread release of the fix. The reason? So that developers can make sure that the update itself is bug-free. "There's an additional round of testing that happens before we blast it out to consumers," said Sun Spokeswoman Jacki Decoster. The problem with this approach is that a staggered release schedule gives criminals a window of opportunity to reverse engineer the Java bug and then create attack code that can be targeted at the millions of unpatched users, said Marc Maiffret, CTO with eEye. "Sun has such a horrible update process that they released patches for this flaw a couple weeks ago, and more patches for different versions [after that]," he said. "If people were reverse-engineering the patch a few weeks ago, they have a head start on the good guys." Microsoft releases security patches for all versions of its products simultaneously, but Sun is not the only company to stagger updates. Oracle, for example, habitually releases database patches for some of the less-popular operating system platforms weeks after its initial security updates. Leaving Java users unprotected like this not a good idea, said Cesar Cerrudo, CEO of Argeniss Information Security. But with Sun expecting to push out a fix for the problem later this week, hackers are not getting a lot of time to develop attack code, he said.
396912
InfoWorld - The Eclipse Foundation with its Swordfish project is developing an open source SOA framework intended for applications ranging from enterprise environments to embedded systems.