prostoalex writes "Associated Press runs a nationwide story on Northface University. The school, founded by a pair of venture capitalists and former technology chief found a niche with its highly intensive curriculum and corporate software development specialization. For example, a BSCS degree can be completed in a little over 2 years, and it comes with IBM's WebSphere and Microsoft's MCSD certification. Northface is also promoting its corporate partnerships, which allow current students to feel more secure about future employment. Grady Booch from IBM is quoted to be 'jazzed up' about the program, although there are many who oppose such approaches to college education."

LogError writes "This paper discusses the collaboration between security and development in the enterprise software development lifecycle."

StupidEngineer writes "The C-JDBC is a middleware RAID system for databases written in Java. The 1.0 release is finally ready for download after years of the team's hard work. The system definitely has come a long way and is probably a very viable solution for those of us that can't afford large DB clustering solutions, yet still want good scalability and redundancy."

An anonymous reader writes "Computer Associates, on the heels of their announcement that they were moving to the service and support model, hence open sourcing Ingres, is set to announce a $1 million bounty for Ingres conversion tools [the idea being, obviously, to convert to Ingres, rather than away from it]. The bounty announcement coincides with the official announcement of the downloadability of the new, open-source Ingres. An earlier Information Week article rues the passing of Jasmine, which was a great idea, and, although perhaps a few years [maybe a decade?] ahead of its time, still the sort of thing that people like me could sure benefit from. Hint, hint..."

jefftp writes "CERT announced today that there are several vulnerabilities in libpng, one is a buffer overflow which could potentially cause a PNG image file to execute arbitrary code. Libpng release 1.2.6rc1 addresses the problems covered by this CERT announcement, and can be obtained from the libpng Sourceforge project. A fully tested version is to be released in the next few weeks."

prostoalex writes "The hottest e-commerce trend this year? APIs and opening up databases to outside developers, says Information Week. There are currently 50,000 software developers in Amazon.com Web Services program, while eBay enjoys the presence of 8,000 companies and individual developers in its API program. There are 30 million XML queries performed on eBay servers daily."

Tim 'gk^' Nilimaa writes "A serious security hole has been found in PuTY, version 0.54 and before. Simon Tatham and his fellows released PuTTY 0.55 on 2004-08-03 which solves this bug. The bug may allow servers to use PuTTY to act as a machine that you trust, even beforce you verify the hosts key while connecting using SSH2. An attack could be a fact before you know that you have connected to the wrong machine. I (and they) say: upgrade to PuTTY 0.55 - now."

ajs writes "As you may know, there was a contest between Dan Sugalski and Guido van Rossum over the performance of Parrot running Python byte-code, and the loser was to take a pie in the face. Well, in the end it was between Dan and time and Dan lost... he was unable to get the Python bytecode translator to work sufficiently well for the contest (it was fast, but not complete), but when Dan conceded, Guido was gracious enough to decline to throw a pie, what a sport! The Perl community, however, was not quite so gracious (they wanted to see Dan take a pie for the team), and the final event ended up being a benefit for the Perl Foundation. Meanwhile, see Dan's Blog for details on what sorts of Parrot goodness came of this."

MJ writes "Evan Brown has finally lost his 7 year court battle over ownership of thoughts in his brain. Judge Henderson of the 219th District Court in Collin County, Texas granted DSC Communications Corporation, Inc (now Alcatel, USA) a Final Judgement granting DSC ownership of Mr. Brown's idea of a reverse compiler that Mr. Brown claims to have begun formulating twelve years before his employment at DSC and during his off-time while at DSC. Mr. Brown has received media coverage in print, televion and on the Internet: The John Marshall Journal of Computer & Information Law, Wired, Computerworld. This rings similar to previous Slashdot articles on employer/employee IP rights."

cereal3825 writes "Well Sun Microsystems Looking Glass has been released for testing. The Project can be found here. Though remember this is beta and a quote from the Getting Started Doc says 'This mode is still very much a work in progress. To date, only a few X11 applications run bug-free in this mode.' so dont expect a work of art."

Anonymous Coward writes "With all the press RFID is getting, I was looking for an open source solution to Wal-Mart's RFID compliancy mandate. I stumbled open the RadioActive project. I think these guys have the right idea. Eventually, RFID will be everywhere. Could an open source project like this bring rapid deployment of RFID like Apache did to the net?"

Joe Barr writes "NewsForge [ed. note: part of OSTG along with Slashdot] is running its concluding piece on the week-long Blackhat/DEFCON hackerfest in Las Vegas. Want to know how little our police/intelligence agencies seem to have learned from their failures prior to 9/11? Or how a very large goon known only as Priest prevented outright political violence at a DEFCON presentation on Civil Disobedience? Or which of the two conferences is right for you? It's all here in the Blackhat/Defcon: Final report." Reader M. Curphey writes "The Web Application Security Consortium (WASC) announced at Blackhat the release of a 'Threat Classifications' document. This document attempts to clarify web security terminology such as Cross Site Scripting, Session Fixation, Cookie poisoning, and HTTP response splitting (to name a few)."

the_pooh_experience writes "IBM has announced that it will open up Cloudscape by giving it to the Apache Software Foundation. Cloudscape, a small footprint Java database, is primarily used for small scale websites and point-of-sale systems. Its new, opensource name will be 'Derby.' Cloudscape (originally created by Informix, and purchased by IBM in 2001) has been valued by IBM at $85M."

Michael writes "Too often, hobbyists and open source programmers take on game projects that they can't hope to finish. Freshmeat is rife with games from developers who have bitten off more than they can chew. So I drafted an article which takes a look at the major roadblocks to successfully completing open source and hobbyist game projects."

An anonymous reader writes "Ross Gittins at the Sydney Morning Herald has published an interesting insider view of software patents. This kind of thing is starting to be a hot issue down here with the US-Australia Free Trade deal about to be ratified and bring our intellectual property laws in line with Micros^D^D^D^D^D^D^D America's."

LordNite asks: "Here is the situation. I am maintaining a piece of source code which is written in K&R C. One of the original goals of this code was to be as portable as possible to as many platforms as possible. The code runs on UNIX and its clones as well as OS/2. The code avoids POSIX functions such as mmap(2) since at the time it was initially written (early 1990s) POSIX was not very wide spread. The code is well written, but in need of some serious fixing. As I go around fixing parts of the code I would also like to modernize it a bit. Since it is now 2004, can I rely on ANSI C89 and POSIX routines without sacrificing the portability of this code? (Yes, I do realize that the purpose of POSIX is code portability...) I am not really interested in the OS/2 port at this time. I am just interested in keeping portability with UNIX clones. To put my question another way: Are there any UNIX-like OSes in common use, which are currently developed and supported by some entity either OSS or proprietary, that do not support POSIX and ANSI C89?"

nb caffeine asks: "Having recently graduated, and now working as a developer, I've discovered that after 9 hours of programming at work, I have little interest in coming home and working on my personal programming projects. I've become upset with this fact, because while I was in college, I spent quite a bit of time working on personal projects for my own use. I also noticed this trend during my summer internship, and I have a feeling that it isn't going to get any better. It's not to say that I don't get to work with cool technologies at my job, but they aren't anything that I would pick up in my spare time. So, how do my fellow programming geeks balance work related projects and personal projects? Or, if you've already discovered that after 9 hours of programming, the last thing you want to see is a computer, what hobbies does the Slashdot crowd enjoy after they've ruined their hobby by turning it into a job?"

Milk Toast writes "According to this article one can start with a simple program consisting of 3998 bytes and reduce it down to a mere 45 bytes. Now if they could only reduce the size of my Office install." It involves digging into assembly, naturally, but it's interesting to see the extra code generated not only by the compiler, but by the other steps along the way.

TAG writes "TopCoder just announced rules for this year annual international programming tournament. The 2004 TopCoder Open, Sponsored by Microsoft will set as rivals some of the IT industry's top professionals and international collegiate coders. Software will be designed and developed. Seemingly unsolvable algorithmic problems will be solved. $150,000 will be awarded over the course of 14 weeks. 24 of the world's best programmers will be invited to compete live at the onsite finals in Santa Clara, CA, USA. This competition is 'Free'. Yep. Free as beer. Everybody over the age of 18 is eligible. So? What is your TopCoder rating today?"

Adam K writes "It had to happen eventually. CPAN has finally gotten the sloccount treatment, and the results are interesting. At 15.4 million lines of code, CPAN is starting to approach the size of the entire Redhat 6.2 distribution mentioned in David Wheeler's original paper. Could this help explain perl's relatively low position in the SourceForge.net language numbers?"