CWmike writes "Google built a 'clean room' version of Java and did not use Sun's intellectual property, Google's executive chairman, Eric Schmidt, testified in court Tuesday. Schmidt said its use of Java in Android was 'legally correct.' On this day seven of the trial, Schmidt gave the jury a brief history of Java, describing its release as 'an almost religious moment.' He told the jury that Google had once hoped to partner with Sun to develop Android using Java, but that negotiations broke off because Google wanted Android to be open source, and Sun was unwilling to give up that much control over Java. Instead, Schmidt said, Google created the 'clean room' version of Java that didn't use Sun's protected code. Its engineers invented 'a completely different approach' to the way Java worked internally, Schmidt testified."

Drethon writes "On this day in 2008, a submission was posted that C/C++ was losing ground so I decided to check out its current state. It seems that C has returned to the top while Java has dropped by the same amount, VB and PHP have dropped drastically, C++ is holding fast but now in third place and Objective-C and C# have climbed quite a bit. 2008 data thanks to SatanicPuppy: 1. Java (20.5%); 2. C (.14.7%); 3. VB (11.6%); 4. PHP (10.3%); 5. C++ (9.9%); 6. Perl (5.9%); 7. Python (4.5%); 8. C# (.3.8%); 9. Ruby(2.9%); 10. Delphi (2.7%). The other 10 in the top 20 are: JavaScript, D, PL/SQL, SAS, Pascal, Lisp/Scheme, FoxPro/xBase, COBOL, Ada, and ColdFusion."

benfrog writes with a piece that appeared in yesterday's Wall Street Journal about the in-progress legal battle between Oracle and Google over Java: "Ex-Sun and current Google employee Tim Lindholm testified that it was "not what he meant" when asked about the smoking gun email (included here (PDF)) that essentially said that Google needed to get a license for Java because all the alternatives 'suck[ed].' He went on in 'brief but tense testimony' to claim that his day-to-day involvement with Android was limited."

eldavojohn writes "So you're commenting on your highly visible blog about patent case after patent case that deal with corporations battling over open source stuff, what does it matter if you're taking money from one and not the other? If you don't see any ethical problems with that, you might be Florian Mueller. Groklaw's PJ (who has been suspicious of Florian's ties to other giants like Microsoft for quite sometime) has noticed that Florian Mueller has decided to go full disclosure and admit that all his commentary on the Oracle v Google case might be tainted by his employment by Oracle. It seems he's got a bunch of consulting money coming his way from Oracle but I'm sure that won't undermine any of his assessments like Android licenses violate the GPL or that Oracle will win $6 billion from Google and Google was "at risk" of not settling despite the outcome that the charges later dropped to a small fraction of the $6 billion. Like so many other times, PJ's hunch was right."

New submitter Emacs.Cmode sends this excerpt from CNet: "Among the highlights emanating from U.S. District Court in San Francisco courtroom 8 today was Oracle CEO Larry Ellison's response to a question regarding the status of the Java programming language, which his company acquired when it bought Sun Microsystems in 2010. Asked by Google's lead attorney, Robert Van Nest, if the Java language is free, Ellison was slow to respond. Judge William Alsup pushed Ellison to answer with a yes or no. As ZDNet reporter Rachel King observed in the courtroom, Ellison resisted and huffed, 'I don't know.'" Groklaw has a good write-up about what happened during day one of the trial and a briefer summary of what happened on day two.

Fluffeh writes "After around 900 motions and filings, not to mention a timeline of two years, Google and Oracle are finally putting their case before a jury which will be selected on Monday. While Oracle originally sued for billions, the possible damages have come down to a more reasonable $30-something million (the details vary depending on if you ask Google or Oracle). However, the sides are still far apart. Oracle's proposal was a minimum, not a maximum, and Oracle has asked for a tripling of damages because of the 'willful and deliberate nature of Google's infringement.' For ongoing royalties from future sales, Google has proposed payment of just over one-half of one percent of revenue if patent infringement is proven, but Oracle wants more. Beyond financial damages, Oracle has asked for a permanent order preventing Google from continuing to infringe the patents and copyrights. The case is planned to start on Monday afternoon, after jury selection or Tuesday at the latest."

An anonymous reader writes "Another Mac OS X Trojan has been spotted in the wild; this one exploits Java vulnerabilities just like the Flashback Trojan. Also just like Flashback, this new Trojan requires no user interaction to infect your Apple Mac. Kaspersky refers to it as 'Backdoor.OSX.SabPub.a' while Sophos calls it at 'SX/Sabpab-A.'"

pcritter writes "With the Oracle v. Google trial date set for next Monday, the Judge has asked Google and Oracle to take a position on whether a programming language is copyrightable. This presumably relates to whether Google violated copyright by using a variant of the Java language and its APIs in the Android framework. Oracle, who thinks it can be, has used J.R.R. Tolkein's Elvish language as an examples (PDF) of a language that can be copyrighted. Google disagrees (PDF)."

Trailrunner7 writes "Mozilla is developing a feature in Firefox that would require some user interaction in order for Flash ads, Java scripts and other content that uses plugins to play. In addition to easing system slowdowns, the opt-in for Web plugins is expected to reduce threats posed by exploiting security vulnerabilities in plugins, including zero-day attacks. 'Whether you hate them or love them, content accessed through plugins is still a sizable chunk of the web. So much so, that over 99% of internet users have Flash installed on their browser,' writes Mozilla's Jared Wein, the lead software engineer on the project, in a blog post."

Fluffeh writes "In the third update to Java that Apple has released this week, the update now identifies and removes the most common variants of the Flashback malware that has infected over half a million Apple machines. 'This Java security update removes the most common variants of the Flashback malware,' Apple wrote in the support document for the update. 'This update also configures the Java web plug-in to disable the automatic execution of Java applets. Users may re-enable automatic execution of Java applets using the Java Preferences application. If the Java web plug-in detects that no applets have been run for an extended period of time it will again disable Java applets.'"

An anonymous reader writes "Last year Slashdot ran a story on scientists from the Max-Planck-Institute for Physics of Complex Systems in Dresden, Germany developing a novel method to improve password security. A strong long password is split in two parts; the first part is memorized by a human, and the second part is stored as a CAPTCHA-like image of a chaotic lattice system. Today, after a year of work, the same group at Max Planck Institute released a working prototype online, where everybody can try this technology to encrypt files (Java plugin required)."

twoheadedboy writes "A Flashback variant dubbed Backdoor.Flashback.39 has infected over 600,000 Macs, according to Russian security firm Dr Web. The virulent Flashback trojan infecting Apple machines sparked interest earlier this week after it was seen exploiting a Java vulnerability, although it was actually first discovered back in September last year. The Trojan has a global reach after Dr Web found infected Macs in most countries. More than half of the Macs infected are in the US (56.6 percent), while another 19.8 percent are in Canada. The UK has 12.8 percent of infected Macs."

Trailrunner7 writes with this excerpt from Threatpost: "Mozilla has made a change in Firefox that will block all of the older versions of Java that contain a critical vulnerability that's being actively exploited. The decision to add these vulnerable versions of Java to the browser's blocklist is designed to protect users who may not be aware of the flaw and attacks. 'This vulnerability — present in the older versions of the JDK and JRE — is actively being exploited, and is a potential risk to users. To mitigate this risk, we have added affected versions of the Java plugin for Windows (Version 6 Update 30 and below as well as Version 7 Update 2 and below) to Firefox's blocklist. A blocklist entry for the Java plugin on OS X may be added at a future date. Mozilla strongly encourages anyone who requires the JDK and JRE to update to the current version as soon as possible on all platforms,' Mozilla's Kev Needham said."

Fluffeh writes "Recently, a Judge ordered Oracle and Google to have yet another sit down and chat, but these talks have come to an impasse: 'Despite their diligent efforts and those of their able counsel, the parties have reached an irreconcilable impasse in their settlement discussions,' Judge Paul Grewal of US District Court for the Northern California wrote Monday. 'No further conferences shall be convened. The parties should instead direct their entire attention to the preparation of their trial presentations. Good luck.'"

Reader Fluffeh snips from and links to Ars Technica with the latest chapter in the ongoing Google vs. Oracle fight involving patents, Java, and Android, writing that executives at both companies were "'ordered to hold one last round of settlement talks no later than April 9th, with the trial over Google's alleged use of Java technology in Android set to begin April 16,' though '[t]he last-ditch effort to avoid a trial seems unlikely to succeed. ... Oracle initially accused Google of violating seven patents, but has since dropped most of them. This is due to the U.S. Patent and Trademark Office ruling the patents described technology that was not patentable. Two patents assigned to the Oracle-owned Sun Microsystems remain: #6,061,520 which covers "an improvement over conventional systems for initializing static arrays by reducing the amount of code executed by the virtual machine to statically initialize an array," and #RE38,104 which covers a type of compiler and interpreter."

New submitter LordDCLXVI writes with a review at Tom's Hardware that starts out with some loaded questions about GNOME 3, as included in the newest version of Red Hat's Fedora: "While most other distros are passing up or postponing GNOME Shell, Fedora is full steam ahead. Does Red Hat know something the rest of us don't? Or is GNOME 3 really as bad as everyone says?" Writes LordDCLVXI: "This massive article amounts to a full-blown guide to Fedora 16 'Verne' and complete dissection of GNOME Shell. It begins with an installation guide, with instructions for enabling third-party repos, proprietary graphics drivers, Wi-Fi, Flash, Java, multimedia codecs, and 32-bit libs. Next up is a GNOME Shell tear-down, including customization options and methods to 'fix' the Shell or mimic GNOME 2. Finally, Fedora is benchmarked against Ubuntu 11.10 and Windows 7. [While the author] adds to the voices criticizing GNOME Shell, he also points out that the extensions can empower distributors to create unique, yet compatible layouts. One of the most fair and constructive critiques of GNOME 3 — definitely worth the read, and even makes GNOME 3 worth a second look."

snydeq writes "A hard-to-detect piece of malware that doesn't create any files on the affected systems was dropped onto the computers of visitors to popular news sites in Russia in a drive-by download attack, according to Kaspersky Lab. 'What's interesting about this particular attack is the type of malware that was installed in cases of successful exploitation: one that only lives in the computer's memory. ... It's ideal to stop the infection in its early stages, because once this type of "fileless" malware gets loaded into memory and attaches itself to a trusted process, it's much harder to detect by antivirus programs.'"

eldavojohn writes "A very lengthy and somewhat meandering essay from Crista Videira Lopes has sparked off some discussion of where new programming languages come from. She's writing from the viewpoint of academia, under the premise that new languages don't come from academia. And they've been steadily progressing outside of large companies (with the exception of Java and .NET) into the bedrooms and hobbies of people she identifies as 'designers' or 'lone programmers' instead of groups of 'researchers.' Examples include PHP by Rasmus Lerdorf, JavaScript by Brenden Eich, Python by Guido van Rossum and — of course — Ruby by Yukihiro Matsumoto. The author notes that, as we escape our computational and memory bounds that once plagued programming languages in the past and marred them with ultra efficient syntax in the name of hardware, our new languages are coming from designers with seemingly little worry about the budget CPU being able to handle a large project in the new language. The piece is littered with interesting assertions like 'one striking commonality in all modern programming languages, especially the popular ones, is how little innovation there is in them!' and 'We require scientific evidence for the claimed value of experimental drugs. Should we require scientific evidence for the value of experimental software?' Is she right? Is the answer to studying modern programming languages to quantify their design as she attempts in this post? Given the response of Slashdot to Google's Dart it would appear that something is indeed missing in coercing developers that a modern language has valid offerings worthy of their time."

New submitter mkwan writes "The open-source X Server for Android has hit beta and is now available for download through the Android Market. On Australian networks at least, smartphones are assigned publicly-accessible IP addresses, so it should be possible to display many Linux applications on an Android smartphone simply by setting the DISPLAY environment variable to the phone's IP address followed by :0" The source is available under the MIT license (or Apache; the project page and story disagree) over at Google Code. It doesn't support all of the X protocol and there's no Xlib implementation (i.e. no X11 apps on the device yet except via the NDK if you're lucky), but it is a reimplementation of the X server in Java for Android. You can run remote applications at least.

wiredmikey writes with this extract from Security Week: "On Friday, researchers from security firm Intego reported that a new variant of Flashback is targeting passwords and as a byproduct of infection, Flashback is crashing several notable applications. Flashback was first discovered by Intego in September of 2011. It targets Java vulnerabilities on OS X, two of them to be exact, in order to infect the system. Should Flashback find that Java is fully updated, it will attempt to social engineer the malware's installation, by presenting an applet with a self-signed certificate. The certificate claims to be signed by Apple, but is clearly marked as invalid. However, users are known to skip such warnings, thus allowing the malware to be installed. ... The newest variant will render programs such as Safari and Skype unstable, causing them to crash. Interestingly enough, normally these are stable programs, so if they start suddenly crashing might be a sign of larger issues."