The Open Web Application Security Project (OWASP) is a 501c3 not-for-profit worldwide charitable organization focused on improving the security of application software. Their mission is to make application security visible, so that people and organizations can make informed decisions about true application security risks. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license.
The local Belgium chapter is lead by Sebastien Deleersnyder and their next chapter meeting is on September 21st in Leuven.
September 21st 2010 18h-20h
Distrinet Research Group (K.U.Leuven).
Department of Computer Science (auditorium 00.225)
Celestijnenlaan 200 A
3001 Heverlee
After the event, we will certainly find a nice bar near the ULB to have a drink. So please don’t be shy and join the group after the session for a chat.
——————————————————————————————————————
Event Sponsor:
Conference Place:
Scientia vincere tenebras
(Conquering darkness with knowledge)
Speaker’s travel and accommodation costs:
—————————————————————————————————————–
Speaker, Talk & Lab:
Sébastien Stormacq
Sébastien is a Senior Software Architect at Oracle (Sun Microsystems). He uses his 15 years of professional experience to design large scale, secured and highly transactional architectures based on Sun’s middleware solutions. He also speaks at various high level Java conferences, like JavaOne 2009 and 2010, and he is one of the JUG Leaders of the Luxembourg JUG.
Build a RESTful Client-Server Rich Internet Application with JavaFX Technology and Jersey (JSR 310)
Rich Internet Applications (RIA) do require a strong service access and data access layer located on the back-end, just as traditional or web based applications. It is therefore essential to combine desktop technologies and server technologies in order to provide fast, efficient and secure access to your data. This talk will teach how to combine desktop technologies, such as JavaFX technologies, and back-end technologies, like web services and REST based services to build state of the art desktop applications. We will use the following technologies: RESTful web service and JSR 310 (Jersey) API on the server side, JavaFX on the client side. The JavaFX application will asynchronously poll RESTful web services to collect data that will be used to dynamically update the client rich UI.
Hands-On Training
After the 1st halftime, Sébastien proposes a hands-on training. Everyone is invited to bring long a laptop with Netbeans 6.91, Glassfish and JavaFX SDK installed (see wiki). If wished, we can make teams of 2-3 persons. Every team will develop simple application doing JavaFX – REST – Java EE. Sébastien will walk around, help and discuss.
So please don’t forget your laptop, and if you have a multi-outlet power strip at hand, we don’t mind neither :)
Let’s do JavaFX from the zero to hero in one evening :)
More information about the event, the talks and the speakers are available in our Wiki Space.
The session will be celebrated in the FORUM F of the auditoria of the PLAINE campus. The campus is easy to access by public transport and parking places are available as well.
The address is: Université Libre de Bruxelles, Campus de la Plaine, Boulevard du Triomphe, B-1050 Bruxelles
Public transport arriving at or near the campus: buses 71, 72, 95 – trams 23, 24, 25 – Metro, line 1A, station Delta.
While playing around with Eclipse (Helios) SVN plug-ins, I just run into the following ‘strange’ error: “Cannot map the project with svn provider”.
I figured out that when installing and removing plug-ins, especially when doing it manually (deleting stuff from the ‘plugins’ & ‘features’ directory), the configuration files located in the workspace directory have to be cleaned-up as well. The plug-ins re-write them in a clean version later. Doing this got rid of the error message and SVN worked fine.
This time, the ULB provided us with a nice conference room – 120 seats and a projector – so everybody had much room to feel comfortable :)
Before the session started, John Rizzo pulled some strings and managed to provide refreshments of Belgian style from the Cercle Informatique. The conference officially took-off with John telling us the history of the Black Belt Factory: Once upon a time… Nicolas, present as surprise guest, completed the story with occasional ‘tool tips’. The session ended, much later than initially planned, in an animated discussion about the technologies used to implement the factory (cf. Vaadin}>).
John Rizzo about Java Black Belt (and a bit of Vaadin)
Next on stage: Enterprise Content Management (in the Java World) by Christophe Lombart.
Christophe started the session introducing the general concepts of ECM, presenting goals and risks and giving a brief market overview. Next, Christophe launched the more technical part of his presentation by exposing the different standards. After introducing the Java JCR API, the session ended with a very (inter-)active discussion and a demonstration of the Java JCR API using (and as drive-by the OSGi integration of) Apache Sling.
Christophe Lombart on ECM – 'Everything is Content'
John and Christophe were both very passionate and managed greatly to pass this passion to the public. The result was a familiar ambiance, a lot of questions and much vivid discussions with an audience that proved having already a very high level knowledge of today’s ECM technologies.
In order to conclude to evening in glory, a part of the group continued the business celebrating the 3rd Halftime, enjoying the warm summer night having a beer and a snack.
(Copy of my post on the Brussels JUG blog, brujug.be).
On Nov. 13th 2006, Sun announced that Duke would become Free Graphics, just as the implementations of Java ME and SE became Free Software.
What does “Open Source Duke” mean? It means all you Duke fans have the original mascot for Java technology to play with. With your creative designs, you can give Duke a personal touch. See how Duke fares trying new pastimes such as hiking, base-jumping, skiing, Sudoku, or scuba-diving – or get Duke nationalized by adding your favorite flag.
Duke was originally created Joe Palrang to be the “agent” for the Green Project at Sun. Duke became the Java mascot when Java technology was first announced, right around the same time that the first Java cup logo was commissioned.
Unfortunately, there are no handy 3D models for FOSS applications available on the project site, so we decided to convert them into a format that was easier to use. We chooseArt Of Illusion as renderer and, as the original files, the AoI meshes are free to use (BSD license, see Duke project page).
So here are 3 different AoI Scenes that you can use as base for new creations:
Quick start: Install AoI, open one of the files, CTRL+R, Enter, enjoy your first picture :)
The Duke mesh coloring is realized via the “body_mapping” (Procedural 3D) texture. The mesh and the texture are linked using three Texture Parameters (‘white’, ‘red’, ‘black’ – default). When you remove the texture from the mesh, the parameter values are reset within the mesh object. By this, when you re-select the same texture, all values are 0 and the Duke appears in black. In this case, you need to re-select points and attribute the respective color by setting one of the parameters to 1.
You just did a PreUpgrade to upgrade your Fedora installation to version 13, successfully fighting the “Not enough space in /boot” thing?
Then you found yourself after a reboot with “networking disabled” and no chance to activate the adapters via the GUI since all buttons of the “Network Configuration” panel are greyed?
Of course you tried “ifup wlan0″ that failed with “Device not managed by NetworkManager“?
Then, just do a “vi /var/lib/NetworkManager/NetworkManager.state“, put the SomethingEnabled=true (NetworkingEnabled=false, etc.), restart the system and here we are…
BTW, if you need to re-add your wireless connection… just make the file read-only (kiss :)
(PS. Not my invention, just puzzled this from various googleations)
Max Bonbhel, Congo JUG Leader and the current JUG-AFRICA President, and his team organize the JCertif 2010, the major JAVA event for the Central Africa IT community.
JCertif 2010 will be one of the first conferences in the Central Africa to teach developers the Java programming and the basics of developing for mobile platforms. Speakers will include many of the local and world’s renowned experts – both developers of the technology, and applications and systems users.
The event will be held from 26th to 29th of August, in Brazzaville, Congo!
The JCertif team is currently looking for speakers.
If you are interested to present a subject to the Java community during an event other than the “classic” ones, this is the place to be! If you feel like living a bit of an adventure, get acquainted with a different culture and meet great people like Max Bonbhel and Ahmed Hashim, Java Champion and Egypt JUG leader, then this is for you!
Ready to go? Send me an e-mail and i’ll will forward you to the right people…
“The Art of Community” is a great book originally edited by O’Reilly. In September last year, Jono Bacon, the author decided to make the book available as free e-book.
O’Reilly were supportive of the project the book is now available as free download under the Attribution-Noncommercial-Share Alike license.
A great read not to miss.
On Tuesday, May 26th, we had our first official BruJUG event and guess what… IT WAS A HUUUUGE SUCCESS! We sold out our first event. How awesome is that? 39 Java passionates gathered in GooglePlex Brussels to share, meet, rebuild the world, try to find solutions to this damn “OutOfMemoryError: PermGen Space” thingy… Actually not that one, but you get my point.
Before the place was litterally crowded with Java enthusiasts
And of course, everyone was there to learn from our 2 first speakers, Anna Haberko and Alex Snaps, who were brave enough to cope with teething troubles and talk to us about Content Strategy and EhCache. Great presentations, great content.
Anna Haberko on Content Strategy
Alex Snaps on EhCache
And of course, since good traditions are better copy/pasted, everyone… well… almost everyone gathered in a pub for third half time.
Third Halftime (till 2 o’clock in the night for some courageous)
Now that this great event is over, it’s your turn to work a little bit. As we said at the end, this BruJUG is not our BruJUG, it’s yours. Your feedback and ideas are invaluable to us, so we have prepared a little feedback survey for you to help us set up an even better event next time. But there’s a catch: the survey is on our forum! So you will have to register there and wander around, and who knows… you might like it! We can’t wait to read what you thought about the venue, the speakers and their content. And more importantly we can’t wait for your great ideas and propositions for future events.
In the meantime, and thanks to your feedback, we will try to set up another event before we all go spread our toes in the sun… Uh! Sorry… sun creates bad reflections, can’t read my stack trace anymore! Anyway, you get my point. So stay tuned to our Google Group, our LinkedIn group, our wiki, our blog, our Twitter and open your windows for our travelling pidgins because news will follow soon.
Thanks everyone (and big up to Tasha!) for making this first BruJUG event an awesome success. Bring it on!
Curious to see where JUGs can be found all over the world?
The complete listing with geographic location, leaders and web site information for JUGs from around the world can be found in the Java User Groups International directory. For convenience, they are grouped by continent and country. Have fun discovering the JUG world…
The idea of creating a JUG in Brussels was born out of the conclusion that despite of the fact that Brussels shelters thousands of Java developers, the city lacks what we would consider a “community”.
In our time, communication is of top priority. It’s all about staying on the edge of technology, continuous learning and sharing experiences, getting impulses and inspirations, keeping our minds open for alternative ways.
Building a local community not only facilitates the exchange of ideas and knowledge, but helps opening to the external world and encourages the introduction of professional knowledge from external sources. That’s the general idea behind JUGs: share and give access to information.
We plan to organize different types of activities in the Brussels area which every Java, Groovy and Scala developer could easily attend after work. Moreover, we would like to organize group trips to external events like BeJUG sessions, DEVOXX, FOSDEM, Hackerspace meetings and other conferences or JUGs.
We have many ideas and we are working hard to make them possible. We invite you to join our Google group and follow us on Twitter in order to stay updated and give us your feedback. Moreover, please spread the word to your friends, colleagues and all people that might be interested. The more people we can gather, the easier it is to organize cool events and to find high quality speakers.
(This post is not related to JAVA. It’s just something I figured out and I would like to share).
Etape 1: Enregistrer votre domaine GANDI dans les serveurs DNS OVH
Cette étape permet de créer une entrée dans le registre DNS d’OVH pour votre domaine GANDI.
Entrez dans l’interface de gestion “OVH MANAGER“. L’écran “Bienvenue sur Manager v3” apparaît, affichant la liste de vos hébergements et domaines. Cliquez sur l’icône “Administration” en bas de cette page.
Ceci ouvre l’écran “Récapitulatif – Administration“. Dans la rubrique “Commander/Etendre vos services“, choisissez “Nouveau domaine“. Il vous est proposé d’ “Ajouter un domaine sur votre manager“. Précisez votre domaine GANDI, par exemple “www.mongandidom.be“, puis cliquez sur “Valider“.
Des “Informations sur le domaine” vous sont proposées. Sélectionnez “Ajouter aux DNS (configuration avancée)“, puis “Redirections (par défaut)” et “Redirections (aucune protection)“. Confirmez par “Valider“.
Veuillez maintenant patienter le temps que la procédure OVH s’exécute. Cela prend quelques minutes.
.
Etape 2: Rediriger le domaine GANDI dans le DNS OVH sur l’adresse IP de l’hébergement OVH de destination
Entre-temps, votre nouveau domaine devrait s’afficher dans la liste de vos services OVH de l’interface de gestion OVH, sous la rubrique “Hébergements seuls“. Si ce n’est pas le cas, faites un logout/login de l’interface de gestion.
Sélectionnez votre domaine GANDI (mongandidom.be), puis “Domaines & DNS“, et “Zone DNS“. Dans la liste des entrées “Zone DNS“, localisez l’adresse IP de destination: “.mongandidom.be A 111.111.111.111“.
Modifiez cette entrée en cliquant sur la petite icône. Dans l’écran “Modification d’une entrée DNS“, choisissez “Hébergement Mutualisé“, votre hébergement de destination, et (probablement) “Hébergement sur une IP française“. Confirmez avec “Valider“.
Remarque : si cette opération ne fonctionne pas (ex. : erreur du type “mauvais plan”), vous pouvez alternativement choisir “Destination personnalisée” et entrez l’adresse IP de votre hébergement OVH de destination. Cette adresse peut être obtenue en faisant un PING vers votre domaine de destination ou en la lisant dans la “Zone DNS” de cet hébergement.
Après confirmation, la liste des entrées “Zone DNS” est affichée, avec l’adresse IP corrigée.
Ensuite, notez les deux serveurs DNS sur lesquels ce domaine est enregistré. Cherchez les lignes ressemblant à “.mongandidom.be NS ns16.ovh.net” et “. mongandidom.be NS dns16.ovh.net“, et notez respectivement “dns16.ovh.net” et “ns16.ovh.net“.
.
Etape 3: Lier l’hébergement OVH de destination avec le domaine GANDI sur le serveur DNS d’OVH
Dans la gestion d’OVH, choisissez l’hébergement de destination, puis “Domaines & DNS“. Sur cet écran, ouvrez la page “Multi-Domaines” dans la rubrique “Raccourcis vers Hébergement“.
Créez deux nouvelles entrées: une pour “www.mongandidom.be” et une pour “mongandidom.be” dans le champ “Multi-domaine“. Sélectionnez le dossier cible de l’hébergement ou laissez “www/” pour atterrir dans le répertoire racine.
.
Etape 4: Adapter les serveurs DNS chez GANDI.
Cas 1:
Ouvrez l’interface de gestion de GANDI et sélectionnez votre domaine “mongandidom.be”. En bas de l’écran se trouve la liste des serveurs DNS actuels, sous la rubrique “DNS Name servers“. Cliquez sur le lien “modifier les serveurs“.
Dans la liste des serveurs DNS, remplacez les 3 serveurs DNS GANDI par les 2 d’OVH notés dans l’étape 2 (le 3ème DNS restant vide). Validez, puis confirmez une seconde fois l’écran suivant. That’s it!
Notez que la mise à jour des serveurs DNS peut prendre quelques heures.
Cas 2:
Si vous rencontrez des problèmes avec la configuration d’autres serveurs DNS chez GANDI (si, par exemple, la redirection de domaine est interrompue occasionellement), il est également possible d’ajouter la redirection directement dans les serveurs DNS de GANDI.
Pour cela, conservez les serveurs DNS proposés par GANDI et utilisez l’interface de gestion des zones via le lien “Gérer les zones“. En mode d’opération “normal“, ajoutez 3 lignes du type “A” via le bouton “Ajouter un enregistrement” : pour chacune, saisissez respectivement les noms “*”, “@” et “www“, les trois ayant la valeur de l’adresse IP de votre hébergement OVH (pas l’adresse IP du serveur DNS OVH).
Pour tester, vous pouvez choisir un TTL de 10 minutes, mais il est conseillé de le replacer à 3 heures après installation. Les données ne changeant plus et il n’est plus nécessaire d’envoyer des notifications de mises à jour toutes les 10 minutes.
Pensez à bien valider tout changement suite au message “Attention : des modifications ont été effectuées sur ce fichier de zone mais ne sont pas encore validées…” via le bouton “Valider les modifications“.
La mise à jour des serveurs DNS peut prendre, encore une fois, quelques heures.
Il faut également savoir que les données DNS sont mises en cache à plusieurs niveaux et que cela peut conduire à l’affichage de pages non désirées, le temps que la propagation soit effectuée. Pensez également à enlever toute autre redirection GANDI éventuellement existante, ceci de préférence AVANT de faire les manipulations des données DNS.
The second BruCON security event will be held from 22th to 25th September 2010 in Brussels, Belgium. The happening is divided into two parts: a security training session is organised the 22th and 23th and a conference with talks and workshops takes place the 24th and 25th of September.
The topics of the training sessions are quite attractive: Pentesting High Security Environments, A crash course in pentesting and securing VOIP networks, Social engineering, Assessing and Exploiting Web Applications with Samurai-WTF and Advanced Vulnerability Scanning Techniques Using Nessus. More training session will be organised in the days prior to BruCON by internationally renowned trainers. Due to the registration price (and probably the content :), the training days are more reserved to professionals in the security domain.
The schedule of the conference itself is not yet available and the Call for Papers is still open till end of April. The registration for the conference (excluding the two day training) is now possible as well and fair “early bird” prices are available until 30th of June. Only 400 places are accepted, so don’t wait too long.
If you would like to experience the event without paying, you might apply as volunteer, which is a quite hard job. BruCON is organized as a non-profit event by and for the security community. This event wouldn’t be possible without the help of volunteers.
After the message from Oracle about the shutdown of the Kenai realm (the plans changed in the meantime), I moved my projects to Google Code, and since I’m now part of the “Family”, I would like to congratulate Google Code for its 5th year of existence.
Google Code has become an interactive place to share ideas. Not only can developers prototype their work in a Code Playground, they can also use Project Hosting on Google Code to host all kinds of open source projects. Today, there are more than 240,000 projects registered, with commits coming in at about 17,000 per day. Google also hosts 800 of its own open source projects there.
“SQLJet is an independent pure Java implementation of a popular SQLite database management system. SQLJet is a software library that provides API that enables Java application to read and modify SQLite databases. SQLJet does not support SQL queries; there is an API to work with the database on a lower level.”
“SQLJet is Open Source and can be freely used in Open Source applications under the terms GNU General Public License (GPL). We also provide commercial licensing option for closed source applications or so called Dual Licensing.”
Major Features:
Fine-grained API to create, read and modify SQLite databases.
Database format is fully compatible with SQLite 3.6.
(A Tool Tweet is a short note about a project, product or library that is worth being known by the community. Checking out other projects, even when not of direct interest, can be a great source of inspiration and an opportunity to learn. Please go to the project web sites for more information.)
“Duchessis a global network of women who work with or are interested in Java technology. Our primary focus is to support and get a voice to women in the Java industry. Duchess provides a platform for women to connect and organize themselves online and offline for real life networking. Our short term goals include arranging technical sessions, study groups, social outings, and discounts for external events and courses. Our long term goals include establishing local branches all over the world and outreach programs in schools and universities. We believe that women belong in and can contribute a lot to the computer industry. Please help us spread the word!”
This is the presentation of the as far as I know only existing women-in-java community: jDuchess. Created by the Dutch girls Linda van der Pal and Clara Ko, the project counts already hundreds of Java women from around the world – and it’s growing…
Last month, the community made a glamorous comeback. Web site redesign, Twitter feed (#jduchess), and creation of regional groups: France (that just made a presentation at the famous Paris JUG), Brazil, Netherlands (and more to come).
If you are a woman in Java technology and not yet a member, don’t hesitate to join :)
The organisers of the JAZOON conference announced the keynote speakers for this year’s edition of the event that will be held from 1st to 3rd June 2010 in Zurich, Switzerland.
On the list this year are Danny Coward, (Sun)Oracle’s JCP representative, Kevlin Henney, independent consultant, columnist and author, Ken Schwaber, founder of the Agile Alliance and the Scrum Alliance andHans-Willem van Vliet, Managing Director for Research & Development at Otto Bock Healthcare Products GmbH in Vienna.
The complete schedule is expected to be published at the beginning of April and proposals for Jazoon Rookie talks (short 20 minutes speaks) can be submitted until 4th of April.
If you like to know more about this renowned Java event, you can find them in the classic Web 2.0 corners: Flickr, Facebook and Twitter. Many videos from the previous conferences are available on Parleys.
The “Early Bird” registration ends 15th of April and I’m seriously considering to participate. So if some nice people from Belgium or the nord of France is fancy to join, let’s organise something :)
“Spock is a testing and specification framework for Java and Groovy applications. What makes it stand out from the crowd is its beautiful and highly expressive specification language. Thanks to its JUnit runner, Spock is compatible with most IDEs, build tools, and continuous integration servers. Spock is inspired from JUnit, jMock, RSpec, Groovy, Scala, Vulcans, and other fascinating life forms.” (Citation from the official site)
Code example:
def"subscribers receive published events at least once"(){when: publisher.send(event)then:(1.._)* subscriber.receive(event)where:event<<["started","paused","stopped"]}
The details about the Groovy unit test library can be found here:
(A Tool Tweet is a short note about a project, product or library that is worth being known by the community. Checking out other projects, even when not of direct interest, can be a great source of inspiration and an opportunity to learn. Please go to the project web sites for more information.)
“op4j is a developer happiness tool. It is a Java library aimed at improving quality, semantics, cleanness and readability of Java code, especially auxiliary code like data conversion, structure iteration, filtering, mapping, etc.”
“op4j allows you to create chained expressions which apply both predefined or user-defined functions to your objects in a fluid and readable way. This improves the way your code looks and greatly reduces the complexity of executing auxiliary low-level tasks in the highly bureaucratic, statically -and strongly- typed language that Java is.”
Example:
Calendar now = Calendar.getInstance();
Set<Calendar> set = Op.on(list).toSet().
map(FnString.toCalendar("dd/MM/yyyy")).
removeAllNullOrTrue(FnCalendar.after(now)).get();
(A Tool Tweet is a short note about a project, product or library that is worth being known by the community. Checking out other projects, even when not of direct interest, can be a great source of inspiration and an opportunity to learn. Please go to the project web sites for more information.)
Calendar now = Calendar.getInstance();
Set<Calendar> set =
Op.on(list).toSet().map(FnString.toCalendar("dd/MM/yyyy")).removeAllNullOrTrue(FnCalendar.after(now)).get();
The 26th Chaos Communication Congress (26C3) is the annual four-day conference organized by the Chaos Computer Club (CCC). It took place from December 27th to December 30th 2009 at the bcc Berliner Congress Center in Berlin, Germany.
The Congress offers lectures and workshops on a multitude of topics and attracts a diverse audience of thousands of hackers, scientists, artists, and utopians from all around the world. The 26C3s slogan is “Here Be Dragons“.
The recordings of almost all the 26C3 talks are available by now. Topics: Hacking, Bot-Nets, Reverse-Engineering, Privacy & Stylometry, Debugging, Tor and much more – you should definitively take a look!
“JDepend is a Java class file dependency analyzer. It has a multi document GUI for Windows that displays class file information such as inheritance hierarchy, Constant pool , method bytecode, fields and all referred classes.
JDepend traverses Java class file directories and generates design quality metrics for each Java package. JDepend allows you to automatically measure the quality of a design in terms of its extensibility, reusability, and maintainability to manage package dependencies effectively.”
(A Tool Tweet is a short note about a project, product or library that is worth being known by the community. Checking-out other projects, even when not of direct interest, can be a great source of inspiration and opportunity to learn. Please go to the project web sites for more information.)
JDuchess is a community that connects female Java developers from around the world. The JUG has been launched by Clara Ko in the Netherlands. Last year, I wrote already last year about the group.
Now, a new star is born in the Java sky: the French JDuchess spin-off. Created by Ellene Dijou and friends after meeting Clara, the newly created JUG will work in close co-operation with the famous Paris JUG. The basic ideas of the French branch remain the same: build a community of female Java developers allowing them to meet and exchange ideas, and enhance the visibility of women in the IT world.
The latest Hanselminutes podcast was a very interesting one. Not only because it’s about women in technology, but also because it’s about women in the Muslim World. It answered to many questions I had about this subject.
“Scott’s in Egypt today and he had the opportunity to sit down with Lamees and Abeer, two successful women in IT. Lamees is a programmer transitioning to Systems Analysis, and Abeer is a veteran Senior Systems Analyst and Agile Project Manager at Dashsoft. Nearly 50% of the people at Cairo Code Camp are women. What is Egypt doing right to encourage so many women to choose technology as their career?“
Scientia vincere tenebras
—————————————————————————————————————–
