Slashdot Deals: Get The Fastest VPN For Your Internet Security Lifetime Subscription Of PureVPN at 88% off. ×

Book Review: Puppet 3 Beginner's Guide 81

sagecreek writes "If you are in charge of a small network with just a few servers, you may still be doing configuration management primarily by hand. And you may take particular pride in maintaining that 'artisan' role. After all, it's mostly up to you to set up new users and their machines, fix current problems, manage the servers and their software, create databases and their user accounts, and try to keep the network and user configurations as uniform as possible despite running several different brands--and vintages--of hardware and software. However, warns infrastructure consultant John Arundel, '[b]eyond ten or so servers, there simply isn't a choice. You can't manage an infrastructure like this by hand. If you're using a cloud computing architecture, where servers are created and destroyed minute-by-minute in response to changing demand, the artisan approach to server crafting just won't work.' In his new book, Puppet 3 Beginner's Guide, Arundel emphasizes: 'Manual configuration management is tedious and repetitive, it's error-prone, and it doesn't scale well. Puppet is a tool for automating this process.'" Read below for the rest of sagecreek's review.

The Security Risks of HTML5 Development 275

CowboyRobot writes "Local storage is a big change from HTML of the past, where browsers could only use cookies to store small bits of information, such as session tokens, for managing identity. HTML5 changes this with sessionStorage, localStorage, and client-side databases to allow developers to store vast amounts of data in the browser that is all accessible from JavaScript. An attacker could retrieve this data or manipulate the data, which would then get used again later by the application and may be uploaded back to the server to attack others, as well. Another risk comes from using 3rd-party code. Until HTML5, JavaScript was limited to requesting resources from the domain from which it was loaded, but with the addition of cross-origin resource sharing (CORS), this has been changed to allow JavaScript to request resources from different domains. This offers increased functionality but requires strict usage policies or risks being abused."

Oracle and Microsoft To Announce Cloud Partnership Monday 82

symbolset writes "While some might liken the deal to the Empire joining up with the Trade Federation, there may be some interesting outcomes for this one. On Monday Microsoft and Oracle are expected to announce a 'cloud" partnership'. Although the two companies often seem to be at odds, two of their founders — Bill Gates and Larry Ellison — are partners in charity in the 'giving pledge.' Is this the beginning of a beautiful friendship? 'Oracle is battling an image not of growing up, but of growing old. On Thursday the company announced lower than expected earnings, which it ascribed to a tough economy overseas. Cloud-based software grew well, but remains a small part of its overall revenue. The company also said it would raise its dividend and announced a big stock buyback, behaviors usually undertaken by tech companies when they begin to grow more slowly.'"

PHP 5.5.0 Released 219

New submitter irventu writes "The long-awaited PHP 5.5.0 has finally been released, bringing many new features and integrating Zend's recently open-sourced OPcache. With the new Laravel PHP framework winning RoRs and CodeIgnitor converts by the thousands, Google recently announcing support for PHP in its App Engine and the current PHP renaissance is well underway. This is great news for the web's most popular scripting language." The full list of new features is available at the Change Log, and the source code is at the download page.

Foxconn Betting Big On Firefox OS 94

jfruh writes "Foxconn is firmly identified in the public mind as the company that manufactures iPhones and iPads. But the company is looking to forge its own identity, and sees Firefox OS as the means to do so. To that end, Foxconn is hiring thousands of developers to help work on the open source phone OS and Foxconn's own suite of cloud services."

Java 6 EOL'd By Oracle 115

Tmack writes "Not completely unexpected, Java6 has reached EOL. This tidbit shows up in Oracle's Java6 FAQ page, recommending everyone update to Java7: 'Oracle no longer posts updates of Java SE 6 to its public download sites. All Java 6 releases up to and including 6u45 have been moved to the Java Archive on the Oracle Technology Network, where they will remain available but not receive further updates. Oracle recommends that users migrate to Java 7 in order to continue receiving public updates and security enhancements.' Apple just pushed its update 16 which is Java6u51, likely to be one of their last Java6 updates."
Open Source

Are You Sure This Is the Source Code? 311

oever writes "Software freedom is an interesting concept, but being able to study the source code is useless unless you are certain that the binary you are running corresponds to the alleged source code. It should be possible to recreate the exact binary from the source code. A simple analysis shows that this is very hard in practice, severely limiting the whole point of running free software."
United Kingdom

Fixing Over a Decade of Missing Computer Programming Education In the UK 117

For around a decade programming was not part of the computer curriculum in the U.K.. Through a lot of hard work from advocates and the industry this will soon change, but a large skills gap still exists. Tim Gurney is just one of many working on closing that gap. His Coding in Schools initiative aims to "work with schools and students and inspire the next generation of computer programmers and software engineers by creating and spearheading schools based programming clubs." I recently sat down with Tim to talk about who's working on the problem and what yet needs to be done. Read below to see what he's doing to change the state of things.

Java API and Microsoft's .NET API: a Comparison 319

Nerval's Lobster writes "Previously, developer Jeff Cogswell focused on the respective performances of C# and Java. Now he's looking at yet another aspect of the languages: the runtime libraries—what exactly the libraries are, how they are called, and what features the languages provide for calling into them. Examining the official Java API (now owned by Oracle) and the official .NET API owned by Microsoft, he finds both pretty complete and pretty much a 'tie' with regard to ease-of-use and functionality, especially since Java version 7 release 6 allows for automatic resource management. Read on and see if you agree."

Millions At Risk From Critical Vulnerabilities From WordPress Plugins 145

First time accepted submitter dougkfresh writes "Checkmarx's research lab identified that more than 20% of the 50 most popular WordPress plugins are vulnerable to common Web attacks, such as SQL Injection. Furthermore, a concentrated research into e-commerce plugins revealed that 7 out of the 10 most popular e-commerce plugins contain vulnerabilities. This is the first time that such a comprehensive survey was prepared to test the state of security of the leading plugins." It does seem that Wordpress continues to be a particularly perilous piece of software to run. When popularity and unsafe languages collide.

Subversion 1.8 Released But Will You Still Use Git? 378

darthcamaro writes "Remember back in the day when we all used CVS? Then we moved to SVN (subversion) but in the last three yrs or so everyone and their brother seems to have moved to Git, right? Well truth is Subversion is still going strong and just released version 1.8. While Git is still faster for some things, Greg Stein, the former chair of the Apache Software Foundation, figures SVN is better than Git at lots of things. From the article: '"With Subversion, you can have a 1T repository and check out just a small portion of it, The developers don't need full copies," Stein explained. "Git shops typically have many, smaller repositories, while svn shops typically have a single repository, which eases administration, backup, etc."'" Major new features of 1.8 include switching to a new metadata storage engine by default instead of using Berkeley DB, first-class renames (instead of the CVS-era holdover of deleting and recreating with a new name) which will make merges involving renamed files saner, and a slightly simplified branch merging interface.

PDP-11 Still Working In Nuclear Plants - For 37 More Years 336

Taco Cowboy writes "Most of the younger /. readers never heard of the PDP-11, while we geezers have to retrieve bits and pieces of our affairs with PDP-11 from the vast warehouse inside our memory lanes." From the article: "HP might have nuked OpenVMS, but its parent, PDP-11, is still spry and powering GE nuclear power-plant robots and will do for another 37 years. That's right: PDP-11 assembler programmers are hard to find, but the nuclear industry is planning on keeping them until 2050 — long enough for a couple of generations of programmers to come and go." Not sure about the OpenVMS vs PDP comparison, but it's still amusing that a PDP might outlast all of the VAX machines.

Revisiting Amdahl's Law 54

An anonymous reader writes "A German computer scientist is taking a fresh look at the 46-year old Amdahl's law, which took a first look at limitations in parallel computing with respect to serial computing. The fresh look considers software development models as a way to overcome parallel computing limitations. 'DEEP keeps the code parts of a simulation that can only be parallelized up to a concurrency of p = L on a Cluster Computer equipped with fast general purpose processors. The highly parallelizable parts of the simulation are run on a massively parallel Booster-system with a concurrency of p = H, H >> L. The booster is equipped with many-core Xeon Phi processors and connected by a 3D-torus network of sub-microsecond latency based on EXTOLL technology. The DEEP system software allows to dynamically distribute the tasks to the most appropriate parts of the hardware in order to achieve highest computational efficiency.' Amdahl's law has been revisited many times, most notably by John Gustafson."
GNU is Not Unix

MySQL Man Pages Silently Relicensed Away From GPL 243

An anonymous reader writes "The MariaDB blog is reporting a small change to the license covering the man pages to MySQL. Until recently, the governing license was GPLv2. Now the license reads, 'This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.'"
Open Source

Ask Slashdot: How To Start Reading Other's Code? 254

BorgeStrand writes "I'm reviving an open source project and need to read up on a lot of existing code written by others. What are your tricks for quickly getting to grips with code written by others? The project is written in C++ using several APIs which are unknown to me. I know embedded C pretty well, so both the syntax, the APIs and the general functionality are things I wish to explore before I can contribute to the project."

NY and SF Mayors Announce Joint Tech Summits 27

First time accepted submitter Clarklteveno writes "New York Mayor Michael Bloomberg and his San Francisco counterpart, Ed Lee, said at a news conference Friday that they are sponsoring a pair of technology summits over the next year. The mayors said the 'digital cities' summits — one in New York in September and another in San Francisco early next year — will seek to find ways to use technology to solve problems the cities face. The mayors made the announcement after touring the office of San Francisco-based mobile payment company Square with co-founder Jack Dorsey, who also helped found Twitter. Bloomberg pointed to power outages and dangerous winds and flooding from Hurricane Sandy as examples of issues the summits would seek to address."

Larry Ellison Rejuvenating Hawaii's Sixth-Largest Island (Which He Owns) 297

McGruber writes "In June of 2012, we discussed news that Larry Ellison, co-founder and chief executive of Oracle, purchased the Hawaiian island Lanai for $300 million. Ellison now owns nearly everything on the island, including many of the candy-colored plantation-style homes and apartments, one of the two grocery stores, the two Four Seasons hotels and golf courses, the community center and pool, water company, movie theater, half the roads and some 88,000 acres of land. (2% of the island is owned by the government or by longtime Lanai families.) Now Ellison is attempting to win over the island's small, but wary, local population, one whose economic future is heavily dependent on his decisions. He and his team have met with experts in desalination and solar energy to change the way water and electricity are generated, collected, stored and delivered on the island. They are refurbishing residential housing intended for workers (Mr. Ellison's Lanai Resorts owns and manages 400 of the more than 1,500 housing units on the island). They've tackled infrastructure, such as lengthening airport runways and paving county roads. And to improve access to Lanai, Mr. Ellison bought Island Air earlier this year and is closing a deal to buy another airline."

Transgendered Folks Encountering Document/Database ID Hassles 814

An anonymous reader writes "Most of us hear the equivalent of 'let me bring up your record' several times a week or month when dealing with businesses and government agencies; sometimes there's a problem, but clerks are accustomed to dealing with changes in street address, phone numbers, company affiliation, and even personal names (after marriage). But what about gender? Transgendered folks are encountering embarrassing moments when they have to explain that their gender has changed from 'M' to 'F' or vice versa. While there are many issues involved in discrimination against transgendered individuals, I have to confess that the first thing that came to my mind was the impact on database design and maintenance."

POTI, Creators of the Songbird Media Player, Call It Quits 67

ilikenwf writes "Pioneers of the Inevitable has announced on their blog that they will be folding on June 28. Started in 2007, the company went on to create the Songbird Desktop and mobile players, as well as the Facebook app. Their legacy lives on in Nightingale, an open source fork of the Songbird Desktop player that runs on Linux, Windows and Mac. No word yet on whether or not their currently closed source code will be opened up or not, but their contributions to the world of open source software are appreciated, and won't be forgotten."