poniedziałek, marca 07, 2005

Jak to się robi w Google...

A Glimpse Of Google

By Charles Babcock Courtesy of InformationWeek

Google Inc. owes its success in part to the unique computing architecture it invented to suit its business--serving up searches of the Web to millions of users with lightning-fast speed.

Attendees at the EclipseCon conference in Burlingame, Calif., Wednesday were treated to a glimpse of how that technology was developed in Google's early days and how that technology operates today, courtesy of a speech by Urs Hoelzle, Google's VP of engineering.

EclipseCon is the second annual meeting of users of the Eclipse open-source programmer's workbench, a platform that helps unrelated software-development tools work together.

To invent Google's technology, developers had to throw out assumptions previously used in large data centers and implant new ones, Hoelzle told attendees. And because exactly what will be searched for on any given day is never predictable, keeping the 10 billion pages of the Web close at hand is a daunting challenge.

Hoelzle, a man with a short black beard and quick wit, told audience members that a Google search on "Eclipse" produced more results for solar events and the Mitsubishi car than their favorite development environment. "So everyone here, get back to work," he admonished his listeners, who chuckled in response.

Hoelzle showed pictures of the early Google hardware data center, which consisted of two desktop machines "that no one else was using" in a cluttered setting at Stanford University in 1997. By 1999, it was a large set of thin, rack-mounted Intel servers with a maze of cables coming out the back. By 2000, it was a much cleaner set of 1,000 dual-processor servers in racks that incorporated switching to eliminate the cables.

"The underlying hardware is pretty darn cheap, but achieving scalability has many different aspects," Hoelzle said.

Ensuring reliability was another concern. With so many commodity hardware servers, "expect to lose one a day," he said. Google decided to "try to deal with that in an automated way. Otherwise, you will have lots of people running around trying to restart servers."

Hoelzle then flashed a picture on the screen of six fire trucks at a Google data center. "I can't tell you what happened, but it's not about one machine going down," he said. He didn't disclose when the incident occurred. "No users were harmed in this picture," he added.

To cope with outages of a variable nature, Google built the Google File System, which was closely geared to Google's search computing tasks and had a high tolerance for server failures.

Google operations are built around large files that are broken down into 64-Mbyte chunks and scattered across multiple "chunk servers." A description of each file, its number of chunks, and chunk locations are kept on a master server. Each 64-Mbyte chunk is also replicated on two other servers, so a total of three copies are kept with the path to each retained by the master server.

By scattering its files across many Red Hat Linux servers, Google gains reliability at a low cost. The master server regularly polls chunk servers with a heartbeat message, asking if they're alive. If it fails to get an answer, or if a quick check of the contents on a server indicates that its data has been corrupted, the master server sets about creating a new 64-Mbyte chunk on another server, "usually in a matter of minutes," Hoelzle explained.

Google suffers the loss of a file only if all three copies of the chunk, each on a different server, are lost simultaneously, Hoelzle said. Such a loss would require a lengthy rebuilding process by collecting replacement data off the Web.

Google has indexed the Web through its many Web crawlers that send back summaries of the Web sites they find. Building an index of the Web is a large task that "takes several days on hundreds of machines," he said. The index is renewed constantly.

To search the index quickly, Google breaks it "into pieces called shards," scattered across servers so they may be searched in parallel, each server coming up with part of the answer to a question and feeding it back for aggregated results.

Google's file system, indexing technology, and grid of commodity servers allow it to achieve search times of a quarter of a second on a typical query. The replication and constant heartbeat messaging built into the file system gives it high reliability and availability, he noted.

In addition, as Google servers parse queries, they break them down into smaller tasks and make one trip to the database for a result that may satisfy many users. The process is called "map reduction." Hoelzle said Google once "lost 1,800 of 2,000 map-reduction machines in a large-scale maintenance incident." Because of the load balancing built into the system, Google still completed all queries by steering uncompleted tasks to the machines that showed they had processing power.

"You want to split that huge task into many small tasks, spread across many machines," Hoelzle said. This architecture "makes failure recovery easy. If worker W dies, re-execute the tasks done by that worker elsewhere."

PC World | Internet: Visual appeal

Site of the month

Getting the right graphics for your pages often makes or breaks a site. And for this column, there's not so much one site of the month as several that come highly recommended.

While sites such as www.freeimages.co.uk provide some useful graphics, top-quality photography usually requires some payment. With that in mind, I suggest visiting the big-name stock image agencies like Getty Images (www.gettyimages.com), Corbis (www.corbis.com) and Image 100 (www.image100.com). Getty and Image 100 offer some graphics royalty-free for personal use

Osiołkowi w żłoby dano...(SVG vs. Flash)

SVG And Flash As The Same Species


By Maricon Williams

We can name several technologies for displaying 2D interactive vector graphics on the web however, two names rises among other contenders.

These are the Macromedia's Shock Wave Flash (SWF) and the World Wide Web Consortium's (W3C) Scalable Vector Graphics (SVG). Unlike Flash SVG is not for sale.

Adobe's SVG browser plug-in has achieved barely around 10% penetration, compared to Macromedia's 90% for the Flash plug-in. Flash has already established an outstanding standard nevertheless, this did not make SVG an inferior technology.

In the past Flash was considered a de-facto standard under control of one single vendor. For this reason, W3C proposed a recommendation to achieve standardized 2D interactive vector graphics on the web. This resulted to the birth of SVG. Its first version was Recommendation 1.0 which was introduced in 2001. The current version though is 1.1 which was released on January 2003.

Some people asserts that SVG is as powerful as Flash. Some say it is superior. But still there are others who think it's the other way around. Which is which really?! To help you decide here are some vital facts:

Use Flash in the following instances:

1. You must use Flash if you want to make a Flash-like website. To replicate it using SVG is hard to do.

2. If you want to create complex animations or games you can use any of the two. However, you must be aware that SVG's built-in SMIL animation engine is very processor exhaustive. Conversely, good results can be achieved using JavaScript animations.

3. If your users are not that computer literate like for example children for a children's site or a site appealing to a broad audience, you must use Flash.

4. SVG supports sound. Nonetheless, if sound involves important intricate details, use Flash.

5. Use Flash if you prefer WYSIWYG to script.

SVG is advantageous in the following instances:

1. Use SVG if your task is fully scriptable. You can try DOM1 (part DOM2) interface and JavaScript. It means that you can build your empty SVG image using JavaScript.

2. SVG can effortlessly be created by ASP, PHP, Perl and extracted from a database. Be cautious though in setting mime-types on the server.

3. It is XML meaning it can be read by anything that can read XML. Flash can use XML but it has to be converted first.

4. You need not apply Flash's action-script because SVG does not code per browser. It has a built-in ECMA-script engine.

5. SVG runs on IE/NS4+NS6/Mozilla and on PC/MAC/Linux.

6. SVG can be transformed through an XSLT style-sheet or parser. It also supports standard CSS1 style-sheets.

7. Texts used remains selectable and searchable. Graphic "objects" can be grouped, styled, transformed or composited and embedded text can be searched or indexed.

8. Features of the specification include nested transformations, clipping paths, alpha masks, filter effects, template objects and, of course, extensibility

9. You need not buy Flash since only texteditor is needed to create SVG.

By now, I know you already have a choice. Take your pick and enjoy the features of your chosen technology

JDO 2, too little, too late

Nowa (2-ga) specyfikacja JDO to tylko draft (4-8 miesiecy potrwa proces approval), skrytykowana przez uczestników JCP poniewaz specyfikacja EJB 3.0 znacznie ja przewyzsza funkcjonalnie jezeli chodzi o zapewnienie trwalosci (persistant) - stad powyzszy tytul.

Java object spec set for open source Apache licensing
Paul Krill, InfoWorld

07/03/2005 08:02:16

Java Data Objects (JDO) 2.0, a specification for Java object persistence that has been controversial of late, is to be offered under Apache open source licensing, said a Sun Microsystems architect at the TheServerSide Java Symposium event on Friday.

The more liberal Apache licensing will allow users to do what they wish with the technology, said Sun architect Craig Russell. Version 1.0 of JDO had been offered under the more-restrictive Sun Community Source License, Russell said.

JDO 2.0 features improvements in areas such as query functionality.

JDO was recently the subject of a petition drive after an initial vote within the JCP (Java Community Process) rejected the specification. A new vote announced this week approved a public draft. But JDO 2.0 still must be subjected to a four- to eight-month final approval process by the JCP Executive Committee, Russell said.

The EJB 3.0 specification is expected to supersede JDO as a method of Java persistence, although Russell noted users can still deploy JDO.

"JDO will live on as an Apache project, no question about it," Russell said.

"The future evolution of JDO will depend on the needs of the Java community," Russell added.Â

The petition drive last month in support of JDO 2.0 drew more than 1,000 signatures after the JCP's initial tally on approval fell short, 10 votes to five. JCP member JBoss, in voting no, said JDO 2.0 constituted more than a maintenance release and would cause confusion with EJB 3.0.

Also at the TheServerSide event, an Oracle executive said the company plans to upgrade its portal-development technology by adding the ability to do portal development via the company's JDeveloper development tool. Currently, development is browser-based.

"(The improvements) will allow a more rich design time because you can do more in a desktop tool (like JDeveloper) than a browser," said the official, Ted Farrell, chief architect for the Application Development Tools Division at Oracle.

The new functionality is enabled via support of JavaServer Faces technology for building Java-based Web applications.

piątek, marca 04, 2005

Install AD\AM, the Secure Windows LDAP Service

Install AD\AM, the Secure Windows LDAP Service

AD\AM is a very simple, yet powerful, LDAP service you can use to handle authentication for your online applications, without requiring a full-blown NOS directory. Get a step-by-step demonstration of the AD\AM installation process.
by Rob Hawthorne
ust about everyone implements a roll-your-own security mechanism for his or her software applications. I've done it, many software companies have done it, and I am sure you have as well. But guess what: you don't have to! With the release of Windows Server 2003, Microsoft introduced a portable, scalable, and secure Lightweight Directory Access Protocol (LDAP) database based on their Network Operating System (NOS) Active Directory (AD). This service is called Active Directory [surprise, surprise] Application Mode, or AD\AM for short.

Although AD\AM and AD share the same code base (and general purposes) and even are developed by the same MS development team, a couple of major differences allow AD\AM the flexibility to be used in online architectures that just can't be afforded to a full blown NOS.

This article demonstrates the AD\AM installation process. It isn't intended to be a features list or sales pitch for AD\AM, but without an understanding of the reasons to implement it, you wouldn't have much incentive to go any further. So it begins with a brief—and I mean brief—introduction to AD\AM.

Why Use AD\AM?
AD\AM is a LDAP database that is primarily used to store users, groups, and other objects that represent organizations or other associations. It allows you to easily implement security within your applications, without having to write a huge amount of validation or user management code.

AD\AM provides the following capabilities, which separate it from AD:

* Simple backup and recovery – AD\AM uses a single .dit file, which contains all the database information.
* Easy installation and clean uninstall – It doesn't require you to have DNS working nor to install additional components on a server.
* Extended support for X.500 directory naming rather than just DNS directory-style naming.
* Effortless schema extensions without impacting on production Active Directory environments.
* Free download from Microsoft – AD\AM itself does not have a license cost associated with it.
* Can run multiple instances on the same machine (similar in concept to multiple instances of SQL Server 2000).

AD\AM has a number of great features that make it perfect for an online authentication system:

* Password Policies – AD\AM provides the ability to ensure that a user's password meets certain complexity requirements (e.g., number of characters, case, alpha-numeric, etc.). Have you ever tried to write that code? What a pain!
* Encrypted password store – AD\AM uses the same password encryption store as Active Directory, and as such, passwords cannot be reverse-engineered (unless you store them in reversible encryption).
* Ability to use Active Directory authentication for internal users – AD\AM can pass off the authentication to Active Directory, allowing AD to authorize internal users to use the online application.

AD\AM has the ability to scale out in proportions similar to Active Directory. So given all the great things about AD\AM, what are its limitations?

* AD\AM installs only on Windows XP (SP1 or above), Windows Server 2003 Standard, Enterprise, and Data Center Editions, but not on Windows 2000 (any edition) or Windows Server 2003 Web Edition.
* For Windows XP, the AD\AM install is a limited release. You are limited to 10,000 objects within the AD\AM instance.
* AD\AM currently does not have complete integration with Microsoft's Authentication Manager (nick-named AZMan). However, this is reportedly cleaned up in SP1 for Windows 2003 (no promises though!).
* AD\AM has no capabilities for Kerberos. If you wish to use Kerberos, you need to implement Active Directory (and probably not over the Web!).
* Pass-through (or user-proxy) authentication requires domain membership.

Which Version of AD\AM?
AD\AM comes in six different flavors. When you download AD\AM, be sure to select the correct version for your requirements.

AD\AM provides support for both 32- and 64-bit Windows platforms, as well as providing the following specific download versions:

* Retail: This is the most common version for use within a business environment. It is subject to the standard Retail End User Licence Agreement (EULA). Use the ADAMretailIA64.exe and ADAMretailX86.exe files.
* Redistributable: Application developers use this version to package AD\AM with their applications for redistribution to their users. These versions are subject to the Redistribution EULA. Use the ADAMredistIA64.exe and ADAMredistX86.exe files.
* MUI: The Multilingual User Interface (MUI) pack for AD\AM allows for multiple-language support. Before installing the AD\AM MUI pack, the Windows MUI pack and a retail or redistributable version of AD\AM must be installed on the computer. Additionally, Hotfix 828745 must be installed. Use the AdamMUIia64.msi and AdamMUIx86.msi files.

Table 1 shows the file packages that are available for download.

File Name Platform Download Link File Size (Bytes)
AdamMUIia64.msi 64-bit AdamMUIia64.msi 3,574
AdamMUIx86.msi 32-bit AdamMUIx86.msi 9,880
ADAMredistIA64.exe 64-bit ADAMredistIA64.exe 10,895
ADAMredistX86.exe 32-bit ADAMredistX86.exe 8,467
ADAMretailIA64.exe 64-bit ADAMretailIA64.exe 10,891
ADAMretailX86.exe 32-bit ADAMretailX86.exe 8,463
Table 1. AD\AM Comes in Six Different Flavors

You can review the information about the individual downloads from the Microsoft AD\AM download site.

This article does not demonstrate redistributing an application and uses the ADAMretailX86.exe version. Ensure that you select the correct version for the OS you are running.

Coś dla ludożercóww - czas na tłustego...(klienta)

Wzbogacony kilent (Rich client) - fragment aplikacji uruchamianej na komputerze klienta, który wykorzystuje i agreguje zdalne usługi sieciowe (remote Web services) oraz dane lokalne i zdalne pozwalając na nie spojrzeć przez pryzmat jednej, spójnej aplikacji funkcjonalnie i wizualmnie nie różniącej się od natywnej (lokalnej). Znaczenie RC jest coraz większe w dobie upowszechnienia się architektury SOA (service oriented arch.). Tradycyjne interfejsy webowe nigdy nie były w zamyśle porjektowane pod kątem aplikacji interaktywnych. Internet był źródłem serwowania dokumentów a nie jak to wymaga SOA serwerem usług dynamicznych. W tym rozumieniu interakcja (symulacja dynamiki) aplikacji polegała na ciągłum przeładowywaniu dokumentów i wymagała ciągłej komunikacji z serwerem aby uzyskać nową zawartość. Bardzo mało działo się na stacji kilenta a jeżeli zabrakło połączenia z serwerem aplikacja była martwa. Takie uzależnienie aplikacji od połączenie nie jest optymalnym sposobem na obsługę klienta. Wymagane są zmiany w zakresie:
  • uczynienia interfejsu bardziej dynamicznym (podobnie jak grubi klienci - thick clients) wykorzystujący możliwości okienkowe środowiska w któym jest on uruchomniony.
  • luźnego powiązania warstwy prezentacyjnej z logiczną - dzięki czemu można zmienić interfejs użytkownika lub usługi na serwerze bez obawy o działanie aplikacji
  • lepszej integracji danych lokalnych ze zdalymi - możliwość dostępu do danych przechowywanych zdalnie jak i lokalnie.
Takie aplikacje już istnieją np. MS Excel potrafi pobrać poprzez WS dane giełdowe z Internetu.
Ważne jest utrzymanie swych rozwiązań w zgodzie ze standardami takimi jak np. WSRP:

The OASIS Web Services for Remote Portlets (WSRP) standard exists to simplify integration of remote applications (services and information) into portals. This standard's goal is to provide a mechanism where portal administrators choose from a selection of remote content and services, and aggregate them in their portal, typically without programming. Thus, just as you create composite applications using remote Web services, you create portals using the same paradigm. WSRP defines standard Web services at the presentation layer and exists on top of the existing Web services stack. The WSRP interfaces define themselves by using Web Services Description Language (WSDL). Also, WSRP defines metadata (self-describing) for publishing and locating WSRP services that exist in registries. WSRP services are necessary to implement some SOAP bindings. The WSRP standard defines interface-oriented Web services along with a well-defined interface and protocol for processing rich client user interactions. Moreover, WSRP provides presentation fragments for mediation and aggregation by remote portals. WSRP also offers conventions for publishing, finding, and binding such services. The objective is to have all Web services that implement WSRP plug into all WSRP-compliant portals, and do so without additional programming. WSRP defines how this is done without service-specific adapters and instead uses a service-independent adapter on the portal. The idea of WSRP is to create rich clients from prebuilt interface-oriented Web services and define standard interfaces and protocols that fit into the existing Web services stack. The success of WSRP is dependent on the adoption rate, or how useful the existing portal and application server vendors will find WSRP, as well as the movement to rich clients and interest in more dynamic interfaces for portals.

Wchodzi RSS, co z RDF?

FEATURE: Review: FeedForAll 1.0

RSS technology is really taking off. According to a recent study, 5% of Internet users
say they use RSS. That's almost 46,700,000 users! As a Web developer, part of your job
may be to create RSS feeds or develop a method that a client can use directly. In the 
past, this was usually done manually or through the use of Perl scripts, but now there
are several software applications that make the creation process much easier.
FeedForAll is one of those programs.
http://nl.internet.com/ct.html?rtr=on&s=1,1fi4,1,f982,7kd8,48gk,84du

Cytat dnia

"Time will bring to light whatever is hidden;
it will cover up and conceal what is now shining in splendor."
Quintus Horatius Flaccus (65 BC-8 BC); Roman poet.

Największy sekret G - jak poradzic sobie z psujacymi się PC-tami?

Google's secret of success? Dealing with failure

By Martin LaMonica
http://news.com.com/Googles+secret+of+success+Dealing+with+failure/2100-1032_3-5596811.html

Story last modified Thu Mar 03 04:00:00 PST 2005

BURLINGAME, Calif.--The technical wizardry behind Google's successful search engine may come down to a blindingly obvious insight: PCs crash.

On Wednesday, Urs Hoelzle, a vice president of engineering and of operations at the search giant, shed some light on how Google's data centers operate. Many people consider the company's operations expertise more valuable than the actual search algorithms that launched the enterprise.

Hoelzle spoke at EclipseCon, a conference for application programmers that's going on till Thursday here.

What's new:
At EclipseCon, Urs Hoelzle, a vice president of engineering and of operations at the search giant, shed some light on how Google's data centers operate.

Bottom line:
According to Hoelzle, Google has inexpensively built out its computing infrastructure by using thousands of "commodity" servers, instead of fewer high-end, and high-priced, machines. The trick is to make these racks of hardware work together and to ensure that the failure of one machine doesn't derail an operation.

The way Google has been able to build out its computing infrastructure for millions, rather than tens of millions, of dollars is by buying relatively cheap machines. Looking at hardware costs, company engineers saw that purchasing a few high-end servers, with eight or more powerful processors, costs significantly more than dozens of simpler "commodity" servers. The trick is to make these racks of hardware operate in tandem and to ensure that the failure of one machine does not derail an operation, such as returning a search query or serving up an ad. Consider a home PC, Hoelzle said. Optimistically, a consumer PC might crash once in three years from a software glitch or hardware problem. "At Google scale...if you have thousands of PCs, you can expect one (failure) a day," he said. "So you better deal with that in an automated way, or you will have service outages." Google, known for its rigorous hiring practices aimed at attracting the brightest minds in computer science, has created a number of software tools to handle its computing installation. The company wrote its own file system, called Google File System, which is optimized for handling large, 64 megabyte blocks of data. Significantly, the file system was designed to assume that a failure, such as a failed disk or unplugged network cable, can happen at any time. Data is replicated in three places, and there is a "master" machine that can locate copies of a piece of data, such as a keyword index, if the original is out of commission. "You make the software tolerate failures. If you can expect failures, then this is what makes cheap commodity PCs viable for Internet services," Hoelzle said. Google's PC servers, which number in the thousands, run a stripped-down version of Linux, which is based on the Red Hat distribution but is really just the operating system kernel modified for Google, he added. The company has also devised a system for handling massive amounts of data and returning rapid responses to queries. Google splits the Web into millions of pieces, or "shards" in Google tech speak, which are replicated in case of failure. Not surprisingly, the company creates an index of words that appear on the Web, which it stores as an array of large files. But it also has document servers, which hold copies of Web pages that Google crawls and downloads. Another important engineering feat done by Google is to make writing programs that run across thousands of servers very straightforward, according to Hoelzle. Normally, building applications to run in a "parallel" configuration of servers requires specialized tools and skills. Google's programming tool, called MapReduce, which automates the task of recovering a program in case of a failure, is critical to keeping the company's costs down. "Cost is really the sum of what the equipment you need to do the work costs and how much programming time you need to put into getting something useful," Hoelzle said, adding that Google has started using MapReduce more widely over the past year. Finally, Google has created "batch" job scheduling software that acts as a sort of taskmaster for millions of operations. Called the Global Work Queue, it breaks up computing jobs into many smaller tasks and distributes them across machines. For all its built-in redundancy in case of failure, the system doesn't address all problems, Hoelzle revealed. During the presentation, he showed a photo of six fire trucks responding to an emergency at a Google data center in an undisclosed location. He would not reveal any specific details on the mishap except to say that "it wasn't about one machine going down." In a follow-up interview with CNET News.com, Hoelzle said the cost of power is another important factor in Google's data center designs. "The physical cost of operations, excluding people, is directly proportional to power costs," he said. "(Power) becomes a factor in running cheaper operations in a data center. It's not just buying cheaper components but you also have to have an operating expense that makes sense."

Microsoft Nets BI Vendor ActiveViews

Microsoft Corp. announced Monday that it has acquired ActiveViews, a small, privately held maker of a business-intelligence platform based in Provo, Utah. The announcement, made at Gartner Business Intelligence Summit 2004 in Chicago, did not include information on how much money traded hands.

According to Tom Rizzo, Microsoft's director of product management for SQL Server, the motivation behind the sale was to satisfy enterprise demand for getting a simple-to-use reporting tool into the hands of end users.

This is only the latest in a series of bold moves into the field of business intelligence on Microsoft's part. The company has been adding BI functionality to its SQL Server relational database since Version 7.0.

It continued in the SQL Server 2000 version, and since January, the company has been making its SQL Server Reporting Services BI tool available for free download to customers who have either the standard or the enterprise level of the SQL Server license.

PointerClick here to read Microsoft's partners' take on how Reporting Services will cut costs.

During the past three months, downloads of Reporting Services have been in the "tens of thousands," Rizzo said. Customer response has been that the tool is "a great, robust developer environment for enterprise reporting, [but] they also wanted the ability for the end user to develop very rich reports," he said.

With ActiveViews, end users will be able to employ simple drag-and-drop editing to tweak and customize reports originally created by developers. Rizzo said. The skills required to use the tool will be similar to those needed to understand Microsoft applications such as Outlook or Excel, he said. Administrators will set up data sources, for example, so that end users won't need to know what the name of a given database is.

PointerThe BI sector has been shrinking ever since Microsoft entered the ring. Read all about the vendor shakeup in eWEEK.com's special report on business intelligence.

End users also will be able to publish reports to share with colleagues or to send back to administrators who, in turn, can further tweak the reports.

As part of the deal, Microsoft also acquired two ActiveViews developers from a company staff that was "around five people overall," Rizzo said.

Microsoft is not disclosing details about a product-shipping schedule, licensing or pricing.

Adobe releases open-source interface software | CNET News.com

Adobe releases open-source interface software | CNET News.com: "Adobe releases open-source interface software
Published: March 2, 2005, 3:48 PM PST
By Stephen Shankland
Adobe releases open-source interface software
Published: March 2, 2005, 3:48 PM PST
By Stephen Shankland
Staff Writer, CNET News.com

Graphics software giant Adobe Systems has released some components of its commercial products as open-source software, a move intended to help others ease a tedious but important part of programming.

The San Jose, Calif.-based company released two packages, Adam and Eve, that it uses for the creation of the interface people use to control software. The packages were posted last week on the company's Web site.

Adobe said it released Adam and Eve "to give back to the wonderful open-source community which gives us so much" and to enlist the help of others in improving the packages.

The majority of Adobe's products are proprietary, but the company is edging closer to the open-source realm. Its flagship products run only on Windows and the Mac OS today, but in 2004 Adobe started evaluating Linux more seriously. And a beta version of its latest Adobe Reader, a program for viewing Portable Document Format, or PDF, files, runs on Linux.

Adam and Eve are libraries that can be used by other software packages. Eve eases creation of interface elements such as dialog boxes and lets the computer manage their placement on a display. Adam automates how interface elements are modified according to changing circumstances.

"Ask nearly any software engineer what they hate doing most and the answer will be, 'Building the human interface,' and even with Eve, that work is onerous," Adobe said in an overview of the technology. "The code associated with the human interface accounts for nearly one-third of the code necessary to implement a feature within Adobe applications."

Eve first debuted in prototype form in Adobe's Photoshop 5 and now is being updated as Eve2, Adobe said. Adam is being added to several Adobe programs. Both can be used with any operating system.

Adam and Eve are part of a larger software effort called the Adobe Source Libraries, or ASL, underway at the Adobe Software Technology Lab. The ASL software is covered by a liberal open-source license, the MIT License.

In addition, Adobe indicated that it would release software related to the XMP standard, which lets "metadata" describing a file be incorporated directly into that file.

Adobe representatives weren't immediately available for comment.

PHP developer app to go open source - ZDNet UK News

PHP developer app to go open source - ZDNet UK News: "
News > Software > Developer

Friday 4th March 2005

PHP developer app to go open source
Matt Loney
Builder UK
March 02, 2005, 15:45 GMT

Talkback
Tell us your opinion
Builder: Maguma says it will make its integrated developer environment available under an open source licence later this month




An Italian developer of PHP tools plans to make its entry-level application open source.

Maguma, based in Bolzano, will make the source code of Maguma Studio available for free download and for 'community participation' according to marketing director Alexander Comploj.

Comploj said Maguma will continue to make money from sales of its Workbench software, which is marketed as a more heavyweight development environment with a number of customisable plug-ins. Maguma Studio comes with a CVS Manager, FTP handler, project management component and coding aids for PHP and HTML. The open source version of Studio will be called, simply, OpenStudio.

Maguma currently licenses its studio software on a per-workstation basis, using MAC addresses to identify distinct machines.

OpenStudio is part of Maguma's strategy to move towards open source, said Comploj, though he did not say if or when Workbench would be made open source, and if so how Maguma would then make money.

Maguma has its roots in open source: co-founder Tobias Ratschiller previously worked on PHPMyadmin, the MySQL admin tool"

BetaNews | Windows Veteran Jumps Ship to Google

BetaNews | Windows Veteran Jumps Ship to Google: "Windows Veteran Jumps Ship to Google
By Nate Mook, BetaNews
March 3, 2005, 10:51 AM

Windows Veteran Jumps Ship to Google
By Nate Mook, BetaNews
March 3, 2005, 10:51 AM

A top Windows architect has left his Redmond home to join the ranks at Google, although it's not clear what his new position will involve. Marc Lucovsky, a 16-year Microsoft veteran, joins a number of high profile developers hired by the search giant, including Mozilla programmers Ben Goodger and Darin Fisher.

According to the Microsoft Watch newsletter, Lucovsky voluntarily left his Microsoft position last November. Coming from a post at Digital Equipment Corporation, he was involved in the creation of Windows NT and the Win32 kernel. Most recently, Lucovsky was named chief software architect for the now-defunct Microsoft's .NET My Services, or "Hailstorm," project.

Google's recent hiring blitz has sparked a wave of speculation regarding the company's closely held future plans. Rumors range from Google developing a Web browser to topple Internet Explorer, all the way to a Google operating system. In his new Web log, Lucovsky offers no hints, but has lambasted his former employer.

"Being a 16 year Microsoft veteran, a Distinguished Engineer, key architect and code writer for windows, architect of the largest source code control and build system ever attempted, I deeply believed that Microsoft knows how to ship software," Lucovsky wrote. "I am not sure I believe anymore."

"When a Microsoft engineer fixes a minor defect, makes something faster or better, makes an API more functional and complete, how do they "ship" that software to me? I know the answer and so do you," said Lucovsky. "The software sits in a source code control system for a minimum of two years (significantly longer for some of the early Longhorn code)."

Beyond the criticism, Lucovsky's words offer insight into possible reasons he abandoned Microsoft for a young, fast-moving company such as Google.

"I would argue that Microsoft used to know how to ship software, but the world has changed," he added. "The companies that "know how to ship software" are the ones to watch. They have embraced the network, deeply understand the concept of "software as a service", and know how to deliver incredible value to their customers efficiently and quickly."

FileForum | Netscape Browser

FileForum | Netscape Browser: "Netscape Browser 8.0 Beta beta
Publisher's Description:

Netscape Browser provides more security options, streamlines more standard browsing tasks and arms internet users with more timesaving solutions to their browsing needs than any other browser. Netscape Browser includes two separate layout engines, so you can choose to view a web site like Netscape Browser or like Internet Explorer. Tabbed browsing is included, along with advanced privacy features. You can also set Netscape Browser to block popups, cookies, images, java, and other behaviors that you would rather not allow. Also, you can easily over-ride and save custom settings for individual web-sites.
Latest Changes:

* The deficiencies noted in Firefox 1.0 are inherited in Netscape 8 Beta in most cases. Patches to the Firefox code base will be imported into Netscape 8 Beta as they become available and are tested for compatibility"

czwartek, marca 03, 2005

Open Source CMS

Open Source CMS
Blogs
Aaron Skonnard http://skonnard.com/
Anil Dash
Bruce Prochnau
Dan Gilmor http://weblog.siliconvalley.com/column/dangillmor/
David Galbraith
Ideas in Tech
Jeremy Allaire
Joi Ito
Jon Udell http://weblog.infoworld.com/udell/
Joseph Martins
Kevin Lynch
Lou Rosenfeld
Mark Harrison
Mark Pilgrim http://diveintomark.org/
Movable Type
Nick Aster (646)
Nick Denton
Noam Chomsky http://blog.zmag.org/ttt/
Paul Everitt
Sam Ruby
Sig Weber
Stefan Goßner http://blogs.msdn.com/stefan_gossner
Steve Krug
Steve Rubel
Tanya Rabourn
Tim Bray http://www.tbray.org/ongoing/
Tim O'Reilly http://www.oreillynet.com/weblogs/author/27
by BlogRolling http://www.blogrolling.com/

środa, marca 02, 2005

SharePoint

Technikalia SharePointa

Strony microsoft.com dla deweloperów prezentują materiały techniczne dotyczące Windows SharePoint Services i SharePoint Portal Server. Oprócz przedstawienia technologii i produktów Microsoft SharePoint, omówiona została intergracja pakietu Office z usługami Windows SharePoint Services dostępnymi w systemie Windows Server 2003 oraz wykorzystanie SharePoint Portal Server 2003 w zadaniach. Zapraszamy do lektury:

Link Platforma Microsoft SharePoint Products and Technologies: Przegląd techniczny
Link Integracja Windows SharePoint Services z Microsoft Office
Link Przewodnik po integracji środowiska Windows SharePoint Services z aplikacjami pakietu Microsoft Office 2003
Link Microsoft Office SharePoint Portal Server 2003 w zadaniach

Data publikacji: 14-01-2005 :: Autor: Jacek Kolonko :: Źródło: Microsoft Polska :: Komentarze (0)
Ocena informacji: 57,14% Interesująca 42,86% Mało ciekawa (głosów: 63)

Sir Bill Gates? Chyba nie.

Bill Gates to be Knighted by Queen
By David Worthington, BetaNews
March 1, 2005, 9:29 PM
The world's wealthiest man is about to obtain a new honor commemorating his contribution to private enterprise and efforts to reduce poverty around the world. Microsoft Chairman and co-founder Bill Gates will soon be knighted by Queen Elizabeth at Buckingham Palace in the United Kingdom.
Gates will join the Most Excellent Order of the British Empire as a Knight Commander, but will not be granted the title "Sir," which is reserved exclusively for the Queen's subjects.
News of the impending knighthood was first announced last year and resulted in Microsoft saying that Gates was, "absolutely delighted." Gates will also be honored in public by British Foreign Secretary Jack Straw who had consulted with The Queen to knight Gates.
"Finally someone found something appropriate to give to the world's richest man. After all, a knighthood is something money can't buy," quipped Jupiter Research senior analyst Joe Wilcox. "What is the proper etiquette? Will Microsoft employees now call him Sir Bill, or Sir BillG?"
Other Americans have received Britain's top honor including Nobel prize-winning scientist James Watson, George Bush Senior, former Mayor of New York Rudolph Giuliani, and Hollywood director Steven Spielberg.

Computerworld | IBM, Zend lift PHP in development deal

Computerworld | IBM, Zend lift PHP in development deal: "BM, Zend lift PHP in development deal

Ed Scannell, InfoWorld

28/02/2005 08:31:51

BM, Zend lift PHP in development deal

Ed Scannell, InfoWorld

28/02/2005 08:31:51

Hoping to spur its open source development strategies, IBM has announced a deal with Zend Technologies to create what it believes is the first integrated programming solution using the Web-based PHP language. IBM also committed to delivering at least 30 existing software projects to open source developers.

The agreement with Zend calls for the integration of two open source technologies, namely IBM's Cloudscape database and Zend's PHP development environment. The combined technologies will create Zend Core for IBM, which will serve as an "out-of-the-box" PHP development and production environment that allows corporate users to develop, deploy, and manage open source applications.

Officials from both companies also announced they will work jointly to include database integration frameworks and improved PHP Web services standards.

IBM officials hope their endorsement of PHP will serve to drum up support among developers for Cloudscape. They contend that PHP now accounts for more than 40 percent of the overall Web programming language market and about 70 percent of the Unix-based Apache Web platform market.

"As we see now where the PHP community can take 5.0 with its addition of Web services and XML support, it is one more community we want to embrace. It has been successful among professional Web site developers and the SMB market, and as we look at where SOAs and On Demand are going, this gives us one more technology that helps link solutions together," said Rod Smith, IBM vice president in charge of Internet-based emerging technologies.

Some open source developers appeared heartened by the alliance.

"We think having out-of-the-box solutions for database application development and deployment is tremendously significant. We see this partnership as a solid commitment to organizations that have built their business around PHP," said Chris Stephens, lead developer with The Selling Source.

Based on PHP 5.0, Zend Core for IBM integrates the Cloudscape Server, DB2, and adds native support for XML and Web services. This combination could help encourage corporate and third-party developers to gravitate toward the adoption of SOAs (Service-Oriented Architectures), as well as laying down a foundation for database-driven applications and services, IBM officials said.

Zend Core for IBM is expected to be available as a free download sometime during this year's second quarter from DB2 and Cloudscape product sites.

The 30 or so software projects that IBM will contribute to the open source development community will be moved to SourceForge.net. One project includes IBM's Jikes, a Java-based reference compiler that speeds development time, and another is the Life Science Identifier, which helps programmers specializing in health care to build applications for that industry, company officials said.

wtorek, marca 01, 2005

Wraca WS jak bumerang

Web Service Integration with MS Office

Up until now, Office Automation mainly involved writing macros that took information between Office applications and solved business problems across a LAN.

Not surprisingly, Microsoft is targeting its Web services as the next area where Office Automation should make an impact. Databases in Access or Excel will be able to seamlessly (a favorite Microsoft word) integrate with Web services created with Visual Studio. An entire conference pretty much dedicated to this concept is taking place in Redmond in February.

So far, I've been ecstatic if I could automate a chart in Excel appearing in PowerPoint; I am not really a programmer, and Web services are a bit beyond my area of expertise. But I have a feeling that that may change, because the proliferation of applications that run on the Web, not just on a Microsoft network, is exploding. For example, MSN is offering a free version of Outlook 2003 for business users who want to share calendars and contacts online, without MS Exchange, called Outlook Live. That program is currently in beta and expected early next year.

To me, that's probably the mother of all Web services: Outlook and MSN together, based on one of the original Web services (Exchange).

Look for ways to implement similar solutions by using macros in Office and connecting to server-based applications created in-house, and not just at Microsoft.

poniedziałek, lutego 28, 2005

SitePoint Blogs : Stylish Scripting

SitePoint Blogs : Stylish Scripting: "2005: The year of the DOM
Jan 5th, 2005

Jeffrey Zeldman popularised the concept of the 'three legged stool' approach to web design in his book, Designing with Web Standards. The three legged stool consists of XHTML for content and structure, CSS for presentation and JavaScript and the DOM for 'behaviour'. CSS and XHTML have had an excellent couple of years in 2003 and 2004, but what of JavaScript and the DOM?

I think that 2005 will be the year that proper use of the DOM really takes off. Most JavaScript on the web still hails from the late '90s, but change is in the air. Netscape 4 is practically dead and gone, and the current crop of browsers all offer excellent DOM support (even Opera has caught up). There are very few reasons not to take the DOM seriously, and a great deal of effort is being invested in exploring new, effective ways of taking advantage of client-side scripting technology.

The challenge, of course, is accessibility: while JavaScript technologies allow for much improved interactivity they remain unavailable to a significant portion of user agents. The solution is to treat JavaScript as a tool for enhancing the user experience for those who can benefit from it, while avoiding cutting off access to others. A classic example is Google Suggest - it's great if you have JavaScript turned on, but you can still use Google's primary search function without it.

Google Suggest also demonstrates what I think will be a key theme for 2005: XMLHttpRequest. Loading additional data interactively from the server has been a dream of client-side developers for years, and XMLHttpRequest finally provides an 'official' method for doing exactly that (previous remote scripting efforts had revolved around ingenious hacks). GMail and Google Suggest have sparked a huge interest in this technique and it's certain that we'll see a lot more of it over the next 12 months. The ObjectGraph Dictionary is another example.

Joel Spolsk"

HTML Utopia! Design Websites Without Tables - Parts 1 and 2 [CSS Tutorials]

HTML Utopia! Design Websites Without Tables - Parts 1 and 2 [CSS Tutorials]: "Good luck and May The Source Be With You.
Resources:

A List Apart:

http://www.alistapart.com


The List Apart article that inspired this article:

http://www.alistapart.com/stories/tohell/

WaSP - The Web Standards Project:

http://www.webstandards.org

WaSP Tips for including an upgrade message:

http://www.webstandards.org/upgrade/tips.html

Some more great css tips and tricks:

http://www.bluerobot.com/web/layouts/

A very comprehensive collection of this subject matter:

http://glish.com/css/
Browser Stats

http://www.upsdell.com/BrowserNews/stat.htm

http://www.w3schools.com/browsers/browsers_stats.asp"

piątek, lutego 25, 2005

IE Security Zones

IE Security Zones
IE Security Zones
Greetings. My name is Mike Friedman. I’m on the Internet Explorer Security Test Team. In IE, the different areas of the Web are partitioned into a set of security zones. The topic I would like to talk about is programmatically adding sites to those zones. Zones were introduced in IE4 as a way to give users and admins more control, to strike a balance between user experience and gradations of risk. If you have a high degree of trust in a site, placing it in a lower-security zone can reduce the number of warnings and prompts the user will encounter. Conversely, placing a site you are concerned about into a higher-security zone can provide additional protection. For security management or as part of a product installation, it’s sometimes useful to be able to add some sites to a security zone programmatically. Of course a website can't manipulate which sites are in which security zones; it can only be done by code running on the user's machine. I am going to show you how to write a C# application to place sites into security zones.

First, some background: IE, WebBrowser applications, and other participating applications use the Internet Security Manager to determine what zone an URL is in and what actions can be performed in that zone. The security zones are:

*

Local Intranet Zone—content located on an organization's intranet. Because the servers and information is within an organization's firewall, a user or organization can assign a higher trust level to the content on the intranet.

*

Trusted Sites Zone—content located on Web sites that are considered more reputable or trustworthy than other sites on the Internet. Users can use this zone to assign a higher trust level to these sites to minimize the number of authentication requests.

*

Internet Zone—Web sites on the Internet that do not belong to another zone. This default setting causes IE to prompt the user whenever potentially unsafe content is ready to download. Web sites that are not mapped into other zones automatically fall into this zone.

*

Restricted Sites Zone—Web sites that contain content that can cause, or may have previously caused, problems when downloaded. Users can use this zone to cause Internet Explorer to alert them whenever potentially unsafe content is about to download, or to prevent that content from downloading

*

Local Machine Zone—The Local Machine zone is an implicit zone for content that exists on the local computer. The content found on the user's computer, except for content that IE caches on the local system, is treated with a high level of trust. However, in XPSP2 the Local Machine Zone Lockdown feature causes IE to apply additional security that is even more restrictive than the default Internet Zone settings.

Each zone is assigned an equal level of permissions and starts out with a default security level (template) of High, Medium, Medium-High, or Low. The user can change the security level of each zone through the Security tab of the Internet Options UI, available in Internet Explorer by selecting Tools | Internet Options and accessible from the Control Panel as well. Starting with IE5, a Medium-Low template is available as well. The user can also use the UI to customize zone security settings except for the Local Machine Zone. A user can assign Web sites to some of the security zones. Besides the Internet Options UI, sites can be added to zones using the Internet Explorer Administration Kit (IEAK).

When adding sites to a zone, the user specifies an URL pattern. An URL pattern can be a fully specified site URL like http://www.microsoft.com, or it can contain asterisks as wildcards, for example http://*.msn.com . While browsing, users can tell what security zone a site is in by looking at the bottom right-hand corner of the IE window.

Each zone has an associated set of URL action policies. An example of an URL action is "Access data sources across domains." The possible policies for this URL action are "Disable," "Enable," and "Prompt." Ultimately, each zone's URL patterns and URL action policies reside in the registry. Theoretically, an application can use the registry to query or manipulate the URL-to-zone mappings or the per-zone URL action policies. However, this is not a good idea, as the location and format of this information can change. The proper way to work with this information is through interfaces that the Internet Security Manager exposes. If you write your own control or web application, you'll want to make use of the Internet Security Manager to conform your software's security policies with IE's.

The IInternetSecurityManager interface enables client applications to modify the security settings. This interface is part of the URL Security Zones API, which allows developers to manage URL security zones and create custom URL security zone managers. If an application wants to place a pattern into a specified security zone, it would use the method IInternetSecurityManager::SetZoneMapping(). The syntax for the method looks like this:

HRESULT SetZoneMapping(DWORD dwZone, LPCWSTR lpszPattern, DWORD dwFlags)

The dwZone parameter specifies the security zone; lpszPattern specifies the pattern, and dwFlags indicates whether to create or delete the mapping.

For further information, see the MSDN reference for this method. (Note that in Windows Server 2003 and higher there is a regular and Enhanced Security Configuration version of each zone and you need to set a flag if you're addressing the Enhanced Security Configuration version.)

I have written a simple C# application that illustrates the use of SetZoneMapping(). Here is a screen shot of the application:



In the “Site Pattern” field you enter an URL containing possible wildcards. You choose one of the radio buttons to designate the zone you want to place the pattern into. Then you push the “Add” button. A message box will come up saying whether the pattern was successfully added to the zone or not. You can repeat this however many times you wish. Push the Close button to end the application.

The complete Visual C# project is available to download here: SetZoneMappingDemo.zip.

To see how the app works, let’s zero in on two code snippets that contain the meat of the program:

The constructor for the form creates the Internet Security Manager COM object and obtains a reference to the IInternetSecurityManager interface:

Type t = Type.GetTypeFromCLSID(CLSID_InternetSecurityManager);
_securityManager = Activator.CreateInstance(t);
_ism = (IInternetSecurityManager) _securityManager;

The handler for the Add button calls SetZoneMapping() and pronounces the result:

int result = _ism.SetZoneMapping((UInt32)_ctrl.Tag, txtPattern.Text, SZM_CREATE);
if (S_OK==result)
{
MessageBox.Show("Pattern \""+txtPattern.Text+"\" successfully added to " + _ctrl.Text + " zone.");
}
else
{
MessageBox.Show("Could not add pattern \""+txtPattern.Text+"\" to " + _ctrl.Text + " zone.");
}

An obvious extension to this application would be a Delete button. The handler for that button would look very similar, except you’d pass SZM_DELETE to SetZoneMapping() instead of SZM_CREATE.

Adding an URL pattern to a security zone is only effective for the particular user that runs the application. You can learn more about security zones and how to work with them programmatically in the MSDN topic URL Security Zones .
This posting is provided "AS IS" with no warranties, and confers no rights. Use of included code samples is subject to the terms specified at http://www.microsoft.com/info/cpyright.htm .

Table Rendering

Table Rendering
Table Rendering

A comment from Dave P on this blog touched on the interesting aspect of table rendering.

Dave said “IE renders pages differently from, say firefox. One of the noticeable differences is that IE waits for the entire page before displaying it.“ Actually this is not true and you can se from going to many pages that Internet Explorer does support progressive rendering of content as it arrives. This is true however for table rendering. When Internet Explorer encounters a table it measures all the content of the table before rendering so that it knows what the widths of the columns are to render the content correctly. On the other hand Firefox uses a different algorithm in that it renders the table contents progressively before it has all been passed. There are pros and cons to both approaches. In the case of progressive rendering a table it can result in an experience where content is initially displayed and then moved as the browser progresses creating a clunky and poor quality feel. On the other hand if we parse the entire table content first then it can take some time to display in the case of heavily nested tables. I’ve heard user feedback supporting both arguments and more than a few people have mentioned that they find Firefox’s rendering a little off putting in this regard.

There is actually a solution that should improve the performance of browsers whichever table parsing algorithm they use and that is for web developers to make use of the table-layout attribute in CSS. This was first introduced with Internet Explorer 5 and is now part of CSS2 and CSS2.1. This attribute will force the table to honor the declared widths of columns rather than size to fit. I’m assuming that Firefox does support this attribute but there is a lack of documentation on exactly what is supported in that particular browser.

Now you may be asking why tables didn’t just honor the specified widths to start with and the answer is our old friend compatibility. When developing Internet Explorer 4 there was another browser called Netscape Navigator 3 that was the most used browser in the world. We knew then that if people were to adopt a different browser then we had to render content exactly as they were used to. So we spent a great deal of time in IE4 emulating the parsing and rendering of tables that Netscape had implemented. That was some time ago but we continue to be able to render pages that make use of this rendering functionality. In recent years many people have moved to using CSS for layout in preference to tables and there are certainly advantages to that although there has also been some interesting debate about the benefits of a purely CSS based approach.

Tables have been used to position content on a page for many years but the truth is that they were never originally intended for that purpose. The wonderful thing about the web is that people will make use of functionality in new and interesting ways, they become reliant on bugs and strange behavior. As a result it becomes difficult to change without breaking existing content. The consideration of compatibility goes back to almost any platform, for example there was a great deal of work undertaken in Windows 95 before its launch to ensure that programs written for Windows 3.1 continued to work. As we move forward we need to be careful to ensure that existing web content continues to function. That doesn’t mean we cannot move forward though. In Internet Explorer 6 we introduced support for the strict doctype to allow us to improve our CSS support without breaking existing content. We expect to use this same technique in the future to allow us to make further improvements.

Thanks

IE content-type logic

IE content-type logic

IE content-type logic

This being my first post on the IE blog, I should introduce myself quickly. My name is Vishu Gupta; I am a developer on the IE team.

There have been several posts in the recent past asking for more information on how does Internet Explorer sniff the content-type of a downloaded file. The whole thing looks totally inconsistent or should I say...non-compliant! Before reaching any conclusions here, let’s dig just a little bit deeper.

During XPSP2, we gave a real hard look at the IE's content-type handling code path and how to make it more secure and reasonable. The whole idea of the mime-sniffing logic was to make it easier for an average Joe to put up a personal website without worrying about mimetype details even when web servers and ISPs have random default configurations. IE does mime-sniffing only if either the server doesn't specify a content-type or if the server claims that the file is something that IE knows about. For example, if there is a new mimetype abc/xyz and the server reports that to IE, IE will consider the mimetype of the file to be abc/xyz only. In addition to the content-type sniffing, IE also does clsid sniffing, which actually decides which component handles the file within IE. The clsid can be either sniffed from the document itself or it can be obtained from the mimetype (decided previously with or without sniffing) or can be obtained from the extension. For example, if the mimetype abc/xyz doesn't have a clsid corresponding to itself in the registry, IE will try to obtain the clsid from the extension or from the document itself, and use that to host the file. If it cannot find the clsid, the file will be Shell Executed and shell will use the extension to determine the application to handle the file.

Now comes:
The question: "Do we really need to sniff a file if the server says it is text/plain?"
Short answer: No.
Long answer: Probably, we do.

During XPSP2 betas, we had the mimesniffing mitigation enabled in all zones by default. We tested the waters with applying the "server knows best, so treat the server-suggested mimetype as authoritative" concept for text/plain mimetype. This led to an outcry on the newsgroups about different file types being rendered as text on XPSP2, and we had to disable the mitigation in the internet zone. One can only imagine the app-compat backlash if we stopped sniffing for all reported mimetypes. Yes, instead of handling that by sniffing in the browser, we could go about asking everybody to fix their servers but not everyone can do that easily. In addition to this, several apps depend on IE to launch them after sniffing the correct clsid from their compound file (OLE structured storage). Its one thing to ask new apps to do the right thing, but a whole different ball-game if you want to switch the entire installed base.

Mimesniffing doesn't mean that there is no way for a server to control how a file is handled. header enables a server to do precisely that. With this however, IE makes sure that the user gets prompted with the file type information (based on the extension specified by the server here) before the file is opened/saved.

-Vishu

posted on Tuesday, February 01, 2005 7:22 AM

wtorek, lutego 22, 2005

BetaNews | MS: No Updates for Virtualized Windows

BetaNews | MS: No Updates for Virtualized Windows: "Microsoft's Windows Genuine Advantage (WGA) validation initiative has set off a firestorm of protest throughout the open source community after programmers uncovered a special function in the software dedicated to detecting Wine, a compatibility layer for running Windows programs in non-Windows environments.

WGA authentication is set to become mandatory for all non-critical Windows updates starting in the second half of 2005. Customers must run a program that verifies their Windows license, or they will not have access to Windows Update or the Microsoft Download Center."

piątek, lutego 18, 2005

Kolejny indeks TIOBE

TIOBE Programming Community Index for February 2005
February Headline: Fourth increase in a row for both Java and C#

The TIOBE Programming Community index gives an indication of the popularity of programming languages. The index is updated once a month. The ratings are based on the world-wide availability of skilled engineers, courses and third party vendors. The popular search engines Google, MSN, and Yahoo! are used to calculate the ratings. Observe that the TPC index is not about the best programming language or the language in which most lines of code have been written.

The index can be used to check whether your programming skills are still up to date or to make a strategic decision about what programming language should be adopted when starting to build a new software system.
Position (Position) Programming Language Ratings (Ratings) Status
1 C 19.820% +1.63% A
2 Java 18.340% -4.22% A
3 C++ 11.337% -4.37% A
4 PHP 10.278% +3.02% A
5 Perl 8.861% -0.61% A
6 (Visual) Basic 7.102% -2.04% A
7 SQL 3.373% -0.14% A
8 Python 2.506% +1.50% A
9 C# 2.363% +0.19% A
10 Delphi/Kylix 1.895% +1.17% A
11 JavaScript 1.779% -0.36% A
12 SAS 1.378% +0.66% A
13 COBOL 0.874% +0.13% A
14 IDL 0.686% +0.31% A--
15 ABAP 0.678% +0.51% A--
16 Lisp 0.656% +0.20% B
17 Pascal 0.556% +0.06% B
18 Fortran 0.518% +0.03% B
19 Ada 0.462% -0.04% B
20 MATLAB 0.402% +0.17% B
Legend

Some columns need extra explanation:

*

(Position). This column indicates the difference in position with respect to last year.
*

Ratings. The search query '+" programming" -tv' is used to calculate the TPC Index. This query is executed for the regular Google, MSN, and Yahoo! web search and the Google newsgroups for the last 12 months. The formula that is applied is #(normalized Google web hits) + #(normalized MSN web hits) + #(normalized Yahoo! web hits) + #(normalized Google newsgroup hits). The term "normalized" means that the sum of all web hits of the first 50 languages for a query is taken and evenly distributed.
*

(Ratings). This column indicates the changes in ratings for the last 12 months.
*

Status. Programming languages that have status "A" are considered to be mainstream languages. Status "A-" and "A--" indicate that a programming language is inbetween status "A" and "B". From a supportability point of view, it is strongly advised to stick to mainstream languages for industrial, mission-critical software systems. If a programming language has a rating that is higher than 0.7% for at least 3 months it is rewarded status "A". The first two months the programming language will receive status "A--" and "A-" respectively. The opposite holds for languages that go from status "A" to status "B".

Sending us artefacts or ideas how to improve the way the TPC index is calculated are very appreciated

Nowa wersja StarOffice ma nowy format zgodny z wymaganiami OASIS


StarOffice 8 Learns From MS Office
By David Worthington, BetaNews
February 17, 2005, 8:10 PM

Basking in the limelight of LinuxWorld, Sun used the occasion to show off a working mock-up of the next version of its StarOffice productivity software. In many ways, StarOffice 8 represents the suite's continued maturation.

Built-in usability enhancements conform to the look and feel of industry standard functionality, configuration options and language support is enhanced, and interoperability with Microsoft Office is more comprehensive. Sun has also has thrown in a newly redesigned database engine and software development kit (SDK).

In its quest to produce a substitute for MS Office, Sun has taken care to soften the transition. Usability enhancements are intended to make the software easier to learn and use, reducing migration and training cost. Features such as toolbars and menus, down to headers and footers, resemble Office and have adopted Office terminology.

For instance, "AutoPilot" has been renamed "Wizard." Notable changes were made to mail merge and a new feature named "Format Paintbrushes" preserves copy and paste styles like Microsoft Office Smart Tags.

What's more, StarOffice has been programmed to behave as a native application -- with native widget rendering -- for every supported operating system such as Solaris, Linux and Windows.

No matter how successful it is at erasing any observable differences between StarOffice and Microsoft Office, Sun must labor to ensure seamless compatibility under the hood. The 8.0 release of StarOffice now has the same set of AutoShapes that Microsoft provides in PowerPoint, and has vastly improved handling of Excel spreadsheet files.

Despite it emphasis on Office, Sun has not forgotten third parties. StarOffice 8.0 has improved PDF support, which for the first time allows quality selection for images, as well as well PDF exports. Some new formats such as Xforms are also supported.

Under Sun's guidance, StarOffice has continued to adhere to open standards. The default file extension for StarOffice files has been changed to the OASIS (Organization for the Advancement of Structured Information Standards) Open Document Format (.odx). Sun maintains backward compatibility to StarOffice 7.0 and previous versions.

In addition, Sun has updated its database engine to HSQLDB, which is open source and Java driven, and has moved to a new front end. Sun claims that it is now much easier to create forms, queries and reports. The software supports most major database types and connectors.

In an appeal to the enterprise, a configuration manager will be bundled with the Java Desktop Configuration Manager. This tool helps manage user settings such as profiles, policies, security and authentication, and access controls.

Since StarOffice fares well overseas and has a broad base of supported languages, the software also has a multi-language installation feature that can be selected during installation.

Lastly, Sun has continued its push -- which began with StarOffice 6.1 -- to court the enterprise sector with extended customization that allows customers to include more functionality or change interface elements. The updated SDK has included API concepts and sample code written in several popular 3G languages.

StarOffice 8 is a free public download.

czwartek, lutego 17, 2005

środa, lutego 09, 2005

Drukowanie ...

Today's focus: Printing from a Linux client via a Windows
server

By Steve Blass

Our 2003 Windows terminal client server can connect with any
Windows client via the Internet - it provides connection, sound
and printing services back to the client. We have a Linux client
that we can connect to the server and do everything except
print. Any help?

Printer redirection through remote desktop is a feature of
Version 5 of the Remote Desktop Protocol (RDP). The Unix
rdesktop client distribution release package (rdesktop 1.3.1)
supports only Version 4 of RDP, so you would need to set up your
local Linux printer as a network printer on your terminal server
to print to it.

The good news is the development version of rdesktop, available
through the Concurrent Versions Systems (CVS) repository on
SourceForge, does support Version 5, including printer
redirection (instructions are at the
).

After downloading the source with CVS you can build rdesktop
with the standard GNU build command sequence 'configure'
followed by 'make' and then 'make install.'

If you aren't familiar with building from CVS, rdesktop is a
straightforward project to get started with.

wtorek, lutego 08, 2005

Nowa przeglądarka AOL wraz z wyszukiwarką

AOL Opens Browser, PC Search Beta
By Nate Mook, BetaNews
February 7, 2005, 2:26 PM

Furthering efforts to attract fresh users to its services, America Online has opened beta testing for its standalone AOL Browser and Desktop Search to anyone with an AOL or AIM screen name.

Initially available only to internal testers, the AOL Browser beta utilizes Microsoft's Internet Explorer engine, but packs on additional features such as tabbed browsing and advanced pop-up blocking. The browser also integrates AOL's Desktop Search to scour local files, including Microsoft Office, PDF, HTML, and WordPerfect documents. BetaNews has learned that AOL plans to expand its search to index previously viewed Web pages and AIM chat logs saved as text.

AOL joins a growing list of companies investing in desktop search as a way to increase brand reach beyond the Web. Rivals Microsoft and Google have launched beta desktop search products, along with Yahoo and Ask Jeeves. For its own software, AOL partnered with third party desktop search developer Copernic.

AOL has shifted its focus to attracting consumers with free Web services in the face of increasing competition and a declining AOL subscriber base. As first reported by BetaNews, AOL beta tested its AMP media player as a standalone release in December, with sources citing plans for a public preview.

Both AMP and AOL Browser were components of AOL's Fanfare suite, an alternative client for broadband users that has since been disbanded. But despite reviving Netscape in November with the help of Mozilla Firefox, AOL has continued to make progress on its own IE-based Web browser.

AOL Browser takes many features from current browsers, but also includes some innovations of its own, such as "tear-off tabs." Tear-off tabs can be rearranged or pulled away from their original window and spun off into a new window. Additionally, AOL has added thumbnail preview images of Web pages that pop-up when the mouse cursor hovers over a tab, or the Back and Forward buttons.

Part of its "Power Browsing" feature, AOL includes added privacy options to remove any "footprints" left while browsing the Web, including cookies and cached files. Page zooming, high contrast viewing and enhanced information tools are also included in the Power Browsing menu.

AOL has not offered a final release timeframe for AOL Browser or Desktop Search. However, a company spokesperson told BetaNews last year, "This beta test is part of our continual efforts to test concepts and technologies."

AOL Browser with integrated Desktop Search is available for download via FileForum.

Narzędzie webowe do Linux'a

Pojawiło się świetne narzędzie do administrowania systemami Linuxo-podobnymi webadmin autorstwa Jamie Cameron.

Błąd w przeglądarkach innych od IE

Błąd polega na niewłaściwych kodowaniu i wyświetlaniu znaków diakrytycznych różnych języków. Skutkiem tego wizualny adres strony nie jest zgodny z adresem pod który wejdzie przeglądarka. O zgrozę przyprawia fakt, że nie można tego sprawdzić (do tej pory taka sytuacja miała miejsce w IE, ale ktoś czujny mógł sobie sprawdzić czy jest zgodność adresów (w polu URL i we właściwościach strony) adresy są takie same ponieważ są w obu przypadkach źle wyświetlane - mogą totalnie zmylić u żytkownika i uśpić jego czujność. Błąd tkwi w złej implementacji IDN (internet domian name), której nie implementuje IE. Twórcy innych przeglądarek na razie proponują wyłączyć IDN. Opera twierdzi, że ten błąd jej nie dotyczy.

MS się otwiera ku deweloperom

Microsoft explores opening up to developers

08/02/2005 13:41:20

Seeking to be more transparent to developers, Microsoft is weighing plans to make available more early versions of its software and share more source code, company representatives said Monday.

Speaking to an audience of developers at the VSLive conference in San Francisco, Soma Somasegar, corporate vice president of the Developer Division at Microsoft, said he wants to work closely with external developers for the benefit of the end user.

"I really want to think about you as an extension to my product development organization so that together you and us, as a product group, can combine forces and help develop and deliver the right products for our customers," he said in a keynote address on Monday.

Somasegar wants to make available every software build that Microsoft compiles and involve developers in just about all decisions he makes regarding products that come out of the developer division, such as Visual Studio and the .Net Framework.

"Last year, with the release of community technology previews, we took a huge step forward in transparency, and that was only the first step," Somasegar said. "Every build that comes (out) of the main build lab, I want to be able share with you; every spec or specific document that I like, I want to be able to share with you; every feature decision that I make, I want to be able to get your input and involve you in the process."

Additionally, Microsoft is debating whether it should make the source code to Windows Forms available to developers. Windows Forms is part of Microsoft's .NET Framework, and developers use it to build client applications. The source code can help developers resolve problems when building applications. Uwaga gdzieś przeczytałem, że w Longhorn zachęca się aby aplikacje pisać z wykorzystaniem WF a nie Forms-ów internetowych.

Shawn Burke, a manager on the Windows Forms team, wrote in a posting on his Web log last week that he wanted to make the code available but there were issues to resolve. These issues include intellectual property rights and scrubbing the code of inappropriate comments. Also, not everybody at Microsoft backs the idea, he wrote.

Many developers commenting on Burke's Web log said they are eager to see the code. However, it is far from certain that the Windows Forms code will be made available, said Christopher Flores, a lead product manager in Microsoft's Developer Division, in an interview on Monday at VSLive.

"Shawn started a lively discussion. Certainly there are people inside of Microsoft discussing the pros and cons of doing this, but as far as I know, today, we have no plans to share the Windows Forms code," Flores said

sobota, lutego 05, 2005

Nowe slogany Gates'a

Gates Promises Interoperable Software

By Nate Mook, BetaNews

In a letter to customers this week, Microsoft Chairman Bill Gates made a promise to design software that is interoperable with other systems. Although Redmond is traditionally known for its closed formats and code, Gates said communication between applications is critical for business.

He also took a swipe at open source, saying such development hinders interoperability.

E-mails directly from Gates usually signify the start to major initiatives within Microsoft. His letters have previously focused on security issues and changes to Redmond development policies to better protect customers. But now, Gates has shifted his attention toward industry standards.

"Microsoft has been working with the industry to advance a new generation of software that is interoperable by design, reducing the need for custom development and cumbersome testing and certification," said Gates. "These efforts are centered on using XML, which makes information self-describing - and thus more easily understood by different systems."

Gates cited the use of XML in Office 2003 as one example of how Microsoft is pushing interoperability. "Office documents, spreadsheets and forms can be saved in an XML file format that is freely available for anyone to license and use. Office also supports customer-defined XML schema beyond the existing Office document types," he said.

However, the company's Office formats have become a point of contention, as although Microsoft makes use of the open XML architecture, its formats are closed and encumbered by licensing restrictions. The state of Massachusetts recently found itself unsure of how to classify Microsoft's Office formats under its new "Open Standards" policy.

"I think Microsoft is premature trumpeting the open-format messaging. And to be clear, by any definition typically applied to file formats, Office isn't open," Jupiter Research senior analyst Joe Wilcox told BetaNews.

But Gates made clear in his letter that interoperability does not equate to open source. He said that interoperability is about how different software systems work together, regardless of licensing and development. Gates claimed that open source could actually have a detrimental effect on making software interoperable.

"The open source development approach encourages the creation of many permutations of the same type of software application, which could add implementation and testing overhead to interoperability efforts," Gates argued.

środa, stycznia 26, 2005

Ciekawe linki

Strony dla developerów:
  • www.nonags.com
  • www.jumbo.com
  • www.sqljunkies.com/HowTo/B197B9E7-EF3D-4D70-9B5E-47B74E57EF38.scuk
  • mcpmag.com/columns/article.asp?editorialsid=883
  • www.aspobjects.com/ASP_Components/Utilities/
  • www.sqldts.com/?302
  • www.dameware.com/products/dexp/

Narzędzia do administracji serwerami SQL

Pod tym adresem zanjdują się odwołania do narzędzi.

Jak można sprzedawać złe wiadomości

Vulnerability alerting services - ten termin jest określany na usługi związane z udostępnieniem informacji na temat zagrożeń bezpieczeństwa związanych z wykorzystaniem internetu oraz oprogramowania. Zawiera informacje na temat kiedy powstało zagrożenie, jakeigo produktu dotyczy, czym jest to zagrożenie oraz jak można je obejść. Niby proste ale jak uwzględnić ilość takich raportów w ciągu roku (w roku 2004 było ich 889) to może być kłopot z terminową obsługą i reakcją na te zagrożenia. Dlatego wiele firm udostępnia płatny serwis informujący o tych zagrożeniach. Najlepszą z firm okazał się Symantec z produktem "DeepSight Alert Service". Inni to: Co-Logic Security, Cybertrust, PivX Solutions, SecurityMob, SecurityGlobal.net, Secunia. Ciekawe, że firmy autorskie danego oprogramowania udostępniają te raporty bezpłatnie np.: Microsoft, Cisco, IBM. Wadą tych rozwiązań jest to, że mimo ich statusu bezpłatności ograniczają się do swoich tylko produktów. No z wyjątkiem Microsoft, który pokrywa znacznie więcej produktów i ma dodatkowo KB. Więcej na ten temat można znaleźć tu.

MS zaciska pętlę na piratach

Od 7 lutego rusza program blokowania dostęu do aktualizacji MS Windows dla uzytkowników nielegalnych kopii zwany - Genuine Advantage program. Dodatkowo, posiadacze legalnego systemu MS Windows mogą uzyskać rabaty oraz dostęp do atrakcyjnych programów.

wtorek, stycznia 25, 2005

IBM dalej rozwija usługę biurową Workplace

IBM's Lotus unit on Monday updated Workplace, its collaborative software line, with enhanced development tools and a hosted document-management service offering. The announcements were timed to coincide with the Lotusphere conference taking place this week in Orlando, Fla.

The company introduced Workplace Collaborative Service, a set of Web-delivered collaborative programs, including e-mail, calendering and electronic learning tools, which IBM will sell as a single bundle. Workplace is IBM's line of Java-based productivity applications that run with the company's WebSphere Portal software. To help the transition from its current Notes and Domino to Workplace, the company released tools aimed at simplifying Workplace application development. It also added a hosted service to manage and collect reports required by Section 404 of the Sarbanes-Oxley Act. In a release, IBM said that version 7 of Notes and Domino will be available this summer.

Kody AIX do przejrzenia przez SCO

BM ordered to reveal source code to SCO
IBM has been ordered to hand over source code of its AIX and Dynix operating systems to SCO, in the latest installment of the long-running Linux intellectual property rights legal case between the pair.
A federal court in Utah has ordered that IBM must supply the code by 11 February after a successful application from SCO, which wants to examine it to see if any of its code was used in IBM products.
The legal feud started in spring 2003 when SCO claimed its code had been used to develop various commercial Linux products, and IBM was the subject of a multibillion-dollar lawsuit.
Other firms supplying Linux products are also being threatened by SCO. SCO claims parts of its Unix System V operating system have been used by other companies to develop Linux and other types of software products.
IBM denies any infringement to SCO’s intellectual property, and the outcome of the case will have a huge impact on the Linux open-source market.
Many users of Linux products are now seeking indemnity from their suppliers against prosecution from SCO.
The full trial is not expected to begin until the end of the year.

Usługi sieciowe (WS) i MS SQL Server

At the formal release of the Microsoft .NET Framework, Bill Gates promoted Web services by demonstrating the SQL Server 2000 Web Services Toolkit, which comes with XML for SQL Server 2000's third Web release (SQLXML 3.0). The Web Services Toolkit is a jewel, letting you graphically create a Web service that exposes database objects such as stored procedures and user-defined functions (UDFs). If you're handy at T-SQL and stored procedures, SQLXML 3.0 turns you into a Web services wizard with practically no learning curve.
SQL Server Magazine has chronicled SQLXML 3.0 since its inception. Brian Moran, for example, described how to get started creating Web services with the initial release of SQLXML 3.0 in his February 21, 2002, SQL Server Perspectives column, "Use the SQL Server 2000 Web Services Toolkit to Get Started with .NET" (InstantDoc ID 24206). Since then, Microsoft has released two service-pack updates to SQLXML 3.0. You can find the latest update, Service Pack 2 (SP2), as a free download at http://www.microsoft.com /downloads/details.aspx?familyid=4c8033a9-cf10-4e22-8004-477098a407ac&displaylang=en. In this article, I take you beyond the basics of building a Web service. The sample telephone-directory Web service application demonstrates how to invoke stored procedures and UDFs by passing parameters and capturing return values. Learning how to build the sample application will equip you to create flexible Web services solutions that expand the uses for existing SQL Server database objects. In addition, some organizations might find the sample application a quick and easy solution for an online telephone directory that runs behind a firewall

czwartek, stycznia 13, 2005

Usługi w Windows XP są po to aby je wyłączyć

Services You Can Disable
Updated 10/30/03
There are quite a few services you can disable from starting automatically. This would be to speed up your boot time and free resources.They are only suggestions so I suggestion you read the description of each one when you run Servicesand that you turn them off one at a time.Some possibilities are:
Alerter - Sends alert messages to specified users that are connected to the server computer.
Application Management - Allows software to tap directly into the Add/Remove Programs feature via the Windows Installer technology.
Background Intelligent Transfer Service - The Background Intelligent Transfer service is used by programs (such as Windows AutoUpdate) to download files by using spare bandwidth.
Clipbook - ClipBook permits you to cut and paste text and graphics over the network.
Error Reporting Service - Allows applications to send error reports to Microsoft in the event of an application fault.
Fast User Switching - Windows XP allows users to switch quickly between accounts, without requiring them to log off.
Help and Support - Allows the XP Built-in Help and Support Center to run.
IMAPI CD-Burning COM Service - You don't need this if you have other software to create CDs.
Indexing Service - Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language.
IP SEC - Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. If you are not on a domain, you likely don't need this running.
Messenger - Transmits net send and Alerter service messages between clients and servers. This is how a lot of pop-up windows start appearing on your desktop.
Net Logon - Supports pass-through authentication of account logon events for computers in a domain. If you are not on a domain, you don't need this running
Network DDE - Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers.
NT LM Security Support Provider - Provides security to remote procedure call (RPC) programs that use transports other than named pipes.
Performance Logs and Alerts - Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If you don't need to monitor your performance logs, then you don't need this service.
Portable Media Serial Number - Retrieves the serial number of any portable music player connected to your computer
QOS RSVP - Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets.
Remote Desktop Help Session Manager - Manages and controls Remote Assistance. If you are not using Remote Desktop you don't need this service.
Remote Registry - Enables remote users to modify registry settings on this computer.
Routing & Remote Access - Offers routing services to businesses in local area and wide area network environments. Allows dial-in access.
Secondary Login - Enables starting processes under alternate credentials. This is what allows you to run an application as another user.
Smart Card - Manages access to smart cards read by this computer.
Smart Card Helper - Enables support for legacy non-plug and play smart-card readers used by this computer.
SSDP Discovery Service - Enables discovery of UPnP devices on your home network.
TCP/IP NetBIOS Helper - Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. This should not be needed in today's network environment.
Telnet - Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients.
Uninterruptible Power Supply Service - Manages an uninterruptible power supply (UPS) connected to the computer.
Universal Plug and Play Device Host - Provides support to host Universal Plug and Play devices
Upload Manager - Manages synchronous and asynchronous file transfers between clients and servers on the network.
Volume Shadow Copy Service - Manages and implements Volume Shadow Copies used for backup and other purposes.
Web Client - Enables Windows-based programs to create, access, and modify non-local files across the Internet.
Wireless Zero Configuration - Provides automatic configuration for the 802.11 adapters
WMI Performance Adapter - Provides performance library information from WMI HiPerf providers.

Zmiana twarzy w OpenOffice

The latest OpenOffice.org Snapshot reveals an office suite that includes a personal DBMS (database management system), similar to Microsoft Access. OSDir takes us for a quick tour of OpenOffice.org 1.9.69 Base. Yahoo reports - Microsoft Office, with which OpenOffice is often compared, comes with the Access database. Starting with 2.0, however, OpenOffice will include the open-source HSQL database engine. HSQL is a Java-based database. It is an SQL (structured query language) DBMS engine that's also designed for use with JDBC (Java DataBase Connect). As such, it's a database designer tool, not an office-worker tool.