×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Comments

top

Google Sells Motorola Mobility To Lenovo For $2.91 Billion

jonabbey That explains the Samsung deal (172 comments)

Well, that nicely explains why Samsung announced that they were willing to work more closely with Google to make Samsung phones cohere to Google's direction with Android.

about 3 months ago
top

Google Brings AmigaOS to Chrome Via Native Client Emulation

jonabbey Re:Only on Windows Apparently (157 comments)

No, it loads and runs on Linux with the latest stable release of Chrome as well.

It doesn't run _well_.. it failed to capture the mouse and it locked up the browser, but it does run. I got to see Workbench and everything.

about 4 months ago
top

If Java Is Dying, It Sure Looks Awfully Healthy

jonabbey Re:Android is not always Java (577 comments)

Yes, I have too - IntelliJ itself is written using Swing and it's quite appealing on all the platforms I've used it on. But I guess that they had to develop custom themes for it and be very careful to achieve that.

JFX8 looks great out of the box

Agree about the difficulty with Swing. Swing permits different look and feels to differ too much in essentials like ordering of operations, focus, and etc. It makes it very hard to adjust the styling of individual components and expect it to do anything reasonable in different look and feels.

JavaFX sounds really good, but I've not yet developed against it. Thanks for the link to SceneBuilder, I look forward to playing with it.

about 6 months ago
top

Will New Red-Text Warnings Kill Casual Use of Java?

jonabbey Re:Apparently, applets only (282 comments)

Yes, you could do that, but then you'd have to distribute the updated cacerts to all desktops that need to run your app, and keep it updated whenever a new JVM comes out.

Oracle did implement a runtime configuration file that could be used to whitelist certain hosts, but the distribution problem remains.

about 7 months ago
top

Will New Red-Text Warnings Kill Casual Use of Java?

jonabbey Re:Apparently, applets only (282 comments)

This would not affect Eclipse, no, but it does affect locally produced applications that are distributed from an intranet web server with Java Web Start / Java Network Launch Protocol.

Previously, we could just self-sign our app and users could choose to accept the app once and for all and not be bothered so long as the signing cert didn't change. Now, all of our users running Java 1.7.0_40 are given the threatening dialog each and every time they run our internal app, and they can't get rid of it.

We're going to pony up for a code signing cert from a (Java-recognized) certificate authority to make the dialog go away. It's a hassle, but probably still the right thing for Oracle to do at this point.

about 7 months ago
top

Australian Tax Office Stores Passwords In Clear Text

jonabbey No, not SHA-256 (84 comments)

You don't want to use SHA-256 by itself, because that's a high speed unsalted hash algorithm.

Ulrich Drepper created a good password crypt algorithm which incorporates SHA-256 or SHA-512, but the features that make it resistant to dictionary attack are the salt and the massive iterations over SHA to slow down the algorithm.

BCrypt uses the same techniques to slow down dictionary attacks.

about a year ago
top

Australian Tax Office Stores Passwords In Clear Text

jonabbey BCrypt or SHACrypt256/SHACrypt512 (84 comments)

The OP is right that there's no point in using a high speed naked hash algorithm, but BCrypt isn't the only good alternative.

There's also SHACrypt-256 and SHACrypt-512, which have been supported in GNU LibC since October 2007.

Wikipedia has a pretty thorough discussion of the various password hash routines that are in use on Unix/Linux systems, for that matter.

about a year ago
top

Oracle Open Sourcing JavaFX, Including iOS and Android Ports

jonabbey Re:NOT (105 comments)

I do know the difference between a Java stack trace and a VM which crashes with a dump of the CPU registers. Platform was Ubuntu 10 LTS and the Oracle JVM.

I also checked the PDF parser. I does not use any native stuff.

Well, I took you at your word about crashing the VM. I was just curious how long ago it was, whose VM you were using, etc.

about a year ago
top

Oracle Open Sourcing JavaFX, Including iOS and Android Ports

jonabbey Re:JavaFX replaces Swing? (105 comments)

Huh, who knew. Last I checked, JavaFX was built on top of Swing. Apparently that may have changed with 2.0.

Or maybe not. I can't tell.

But one thing seems pretty clear from screenshots: your JavaFX applications will fit in with the native desktop just about as well as your Swing applications did. Which is to say, "not at all."

JavaFX is its own thing, but they've made it possible to include JavaFX panels in Swing apps.

about a year ago
top

Oracle Open Sourcing JavaFX, Including iOS and Android Ports

jonabbey Re:NOT (105 comments)

I've gone 15 years developing on the JVM and never seen it crash. What JVM were you using? Were you using JNI and native libraries alongside it?

about a year ago
top

Oracle Open Sourcing JavaFX, Including iOS and Android Ports

jonabbey Re:JavaFX 2 nice evolution for Swing (105 comments)

Swing is definitely functional, and Nimbus doesn't make me want to gouge my eyes out, but it's legacy as a cancerous outgrowth of AWT hurts it too much. It's amazing what they were able to do with that kind of foundation, but it's past time for something better.

about a year ago
top

Why You'll Pay For Netflix — Even If You Don't Subscribe To Netflix

jonabbey Re:Net Neutrality (292 comments)

Yep. The submitter is astroturfing for the telcos.

about a year ago
top

Hit Game Makes £52 In First Week On Windows RT

jonabbey Looks like a nice game, though (308 comments)

I just bought myself a copy for my Android tablet. Thanks, MS!

about a year ago
top

Paid Media Must Be Disclosed In Oracle v. Google

jonabbey Congress *must* pass the Rob Enderle act! (165 comments)

Congress should pass the Rob Enderle act immediately to prevent out of control judges from assaulting the good name of IT industry analysts everywhere!

about a year and a half ago
top

Surfacestations: NOAA Has Overestimated Land Surface Temperature Trends

jonabbey Re:First Problem (474 comments)

Watts is, in fact, claiming that the new Leroy (2012) method invalidates his 2011 paper.

about a year and a half ago
top

Online Loneliness At Google+

jonabbey Study brought to you by.. (456 comments)

I wonder who funded this particular study. ;-)

I switched from Facebook to Google+, and I use it almost exclusively now. The population is smaller, but the discussions are better. On Facebook, I'm linked to personal friends, on Google+, I'm linked to people all over based on common interests. I like G+ better.

about a year ago
top

Ask Slashdot: Writing Hardened Web Applications?

jonabbey BCrypt is great, but so is Drepper's SHA2 Crypt (333 comments)

These days, you do have a quite reasonable alternative to BCrypt available as well, which is Ulrich Drepper's SHA2 based Crypt scheme. It's functionally the same as BCrypt but with the use of a different basic cryptographic operation. Like BCrypt, Drepper's sha-crypt is designed to be as slow as molasses, with the ability to make the operation even slower if you like by explicitly specifying the number of SHA256 or SHA512 passes to perform.

Drepper's SHA256 and SHA512 based Crypt routines are now standard in glibc on Linux, as well as on Solaris and HP-UX, and are likely to natively be supported by PHP and the like on those platforms. If you're looking for an implementation in Java, we have one at ftp://ftp.arlut.utexas.edu/java_hashes/.

more than 2 years ago
top

Customers Gleefully Mock Best Buy's $1,095.99 HDMI

jonabbey Check out their price list PDF (369 comments)

The first page of AudioQuest's North America November 2011 pricelist has a beautiful painting of a bunch of wolves staring right at you. A bit on the nose metaphor for AudioQuest's intent to wear you down and consume every last dollar on your carcass.

This company has to be a put-on, right? "Air-Tube Dielectric"?

more than 2 years ago
top

Michael Mann Vindicated (Again) Over Climategate

jonabbey Re:AGW (961 comments)

Squeee, science love!

more than 2 years ago

Submissions

jonabbey hasn't submitted any stories.

Journals

jonabbey has no journal entries.

Slashdot Account

Need an Account?

Forgot your password?

Don't worry, we never post anything without your permission.

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>
Sign up for Slashdot Newsletters
Create a Slashdot Account

Loading...