Slashdot Mirror

Keep digging that hole deeper.

Historically, Sun always used the Sun JDK as the RI and made it available under the Binary Code License (BCL). This was very convenient for Sun since it meant that its product implementation was compatible by definition. However, it was also confusing since the Sun JDK contained quite a few features that were not part of the standard, such as the Java Plugin.

After reading the Oracle announcement through three times, I actually checked my calendar to see if April 1st had somehow come around again.

Which is a distinct possibility if Oracle takes over the Gregorian Calendar next.

http://docs.oracle.com/javase/6/docs/api/java/util/GregorianCalendar.html

You're welcome.

The ZFS code is actually very readable and well organized. The choice of an alternate layering model is logical and useful. That said, I would not be surprised if the NTFS source is truly a horror to behold.

I mainly program in Java, so my natural reaction was using BigInteger. I'm pretty sure someone already made something like that for C++ too

Please mod parent informative.

One of the retarded things about btrfs is that you can not see how much disk space is being used by each subvolume. How the hell can you have a filesystem and not know how much space is in use or free ??

The design of ZFS is much more wholistic. That is, when we take a step back and look at both the micro and macro we see that we are really trying to solve 3 problems:

* Volume Management
* File System
* Data Integrity

ZFS solves all of these be leveraging knowledge from ALL the layers as one cohesive whole.
https://blogs.oracle.com/bonwick/en_US/entry/rampant_layering_violation

Why RAID is fundamentally broken
https://blogs.oracle.com/bonwick/entry/raid_z

Another interesting doc
http://www.scribd.com/doc/43973847/5/ZFS-Design-Principles

Please mod parent informative.

One of the retarded things about btrfs is that you can not see how much disk space is being used by each subvolume. How the hell can you have a filesystem and not know how much space is in use or free ??

The design of ZFS is much more wholistic. That is, when we take a step back and look at both the micro and macro we see that we are really trying to solve 3 problems:

* Volume Management
* File System
* Data Integrity

ZFS solves all of these be leveraging knowledge from ALL the layers as one cohesive whole.
https://blogs.oracle.com/bonwick/en_US/entry/rampant_layering_violation

Why RAID is fundamentally broken
https://blogs.oracle.com/bonwick/entry/raid_z

Another interesting doc
http://www.scribd.com/doc/43973847/5/ZFS-Design-Principles

If you use the offline installer option from http://www.oracle.com/technetwork/java/javase/downloads/index.html it doesn't try to install the Ask Toolbar or any other software. I just tried.

It's part performance and part philosophical. Given that wikipedia is a strongly philosophical enterprise, this seems reasonable.

Well, the performance difference didn't seem to be huge - in fact, some stats were slower.... I don't buy for a second that it was for performance reasons.

Philosophy - maybe - however Oracle contribute quite a bit to OSS - more than a lot of companies - See: http://www.oracle.com/technetwork/server-storage/linux/technical-contributions-1689636.html

In a nutshell, they are working on NFS over IPv6, data integrity checks for ext3, they maintain libstdc++, they worked hard on BTRFS, If anything, they have helped open source much more than most other companies.

Again, I don't see the philosophical reasons other than 'because we can'.

As much as I hate Oracle, Guy Steele works there, so they aren't all bad.

https://oss.oracle.com/projects/

"As we all know Oracle is not the biggest friend to the Open Source Community." This is a bit weasely. We all don't know any such thing. For example, Oracle was in the top ten of organisations that contributed code to Linux last year: http://www.linuxfoundation.org/news-media/announcements/2012/04/linux-foundation-releases-annual-linux-development-report Since then it has been very public with Oracle Linux, and made several large contributions from that front. Shucks, it's even got its own OSS portal: https://oss.oracle.com/ I'm happy to agree it's a big bad corporate beast and does a lot of wrong in the world, but if you're going to criticize it, at least be factual.

The Java Dev site has an installer without stupid addon crap.

The Java Dev site has an installer without stupid addon crap.

One issue about anonymous classes is that if the implementation of your anonymous class is very simple, such as an interface that contains only one method, the syntax of anonymous classes may seem too unwieldy and unclear.

It could be argued that if you are manipulating classes that represent some sort of number or mathematical type, using methods like add() or multiply(), instead of using arguably much more intuitive operators is just as unwieldy or unclear (while the only sustainable argument against operator overloading in Java is actually isomorphic to objections about poor naming conventions for identifiers, and has nothing to do with operators, specifically).

So why is it that they figure that they should make actual changes to the language to provide syntactic sugar for what can be accomplished with anonymous classes when they figure it's not appropriate to do the same with classes which happen to represent some sort of mathematical type, the number of actual cases for which are not bounded, since the dimensionality of such types is not restricted, and there may be cases where you want a class to only deal with a specific cases rather than be a more general class (eg, one might want to make use of a specific 3x3 matrix class instead of using a general matrix class, or a tuple of Complex or BigInteger values, instead of a tuple of double values).

The documentation is great in general, you seem to have found one missing link in a relatively obscure class. As a whole, Python's docs are great. They generally explain well and give full examples.

Just compare (not, these are not exactly same thing, just pretty close):

• Qt5 QFile
• Java6+ java.nio.channels.FileChannel
• .NET FileStream
• Python 3 io module

Of these, Python's is least clear and useful in my eyes, by quite a margin. YMMV.

It just took a long time, as no one sane would run ZFS on USB hardware to start with.

Are you attempting to troll? ZFS on FreeBSD has performed superbly on my home NAS using USB hardware. But why take my word for it...

OpenSolaris Home Server: ZFS and USB Disks:
"Together, USB disks and ZFS make a great team. Not enterprise class, but certainly an interesting option for a home server."

Apropos misinformation. The reference implementation of Java 7 is now OpenJDK:
https://blogs.oracle.com/henrik/entry/moving_to_openjdk_as_the
OpenJDK is under the GPLv2. So I don't know how Orcale "own[s]" the reference implementation of the JVM.

Educate yourself: http://www.oracle.com/technetwork/java/javase/compatibility-417013.html

"Why is the price for a MySQL OEM license higher than for Oracle Express?" Widenius asks.

It's hard to be cheaper than free of charge. And Monty's old company was all about selling licenses. I distinctly remember them trying to scare people into thinking that the GPL meant that no program could so much as connect to MySQL without having to become GPL itself. (This was back when the client libraries were LGPL.) Which of course could be avoided if you bought a commercial license from them. Nevermind that the GPL says no such thing.

I wonder how dissimilar the world would be, had Monte and Larry's lives been swapped. Maybe not that much.

Bro, your 1.5-5x is just not true unless the Java was written by idiots (and as we old timers remember the chestnut, "You can write bad FORTRAN in any language"). Even in 2008 Java was beating C++ and approaching FORTRAN for speed, citation follows. Now you can cherry pick whatever benchmark you want and it will show C++ as faster, and I'll choose another benchmark and that will show Java as faster. That means they are about on par with regard to performance (that wasn't true in the past, but is true today).

Here's the citation about the "Current State of Java for High Performance Computing", written in 2008 (the JVM has got *much* faster since then):
http://blogs.oracle.com/jag/entry/current_state_of_java_for
Please note that the report was written by INRIA, the French Scientific Supercomputing outfit - it is not a fluff whitepaper from a vendor (who will lie to make sales). If you can flaw the INRIA paper I'd be very interested to hear why you are right and they are wrong.

When people talk about benchmarks in terms of faster they mean performance not development

If your development time is so long the project stakeholders may cancel it. That is the major cause of software development failure. If you time to develop is long your time to market is also long. That can mean missed opportunity and even business death. So the long development time might be appropriate for the toy QT programs you develop, but it completely blows for large commercial projects where you have a big team and the set of people who start a project may not be the set of people who finish (people get pregnant, get sick, get promoted, all sorts of stuff). Once you start looking past just the purely technical stuff you have quite a different view of technology. That's why few people choose C++ to start a project these days.

In terms of development time, Java gets crushed by much higher level languages.

I find that most of those higher level languages tend to be fairly good at one domain. They are faster to develop in, if you are doing the problem they were designed to solve, and then they suck. The runtime performance of higher-level language blows. eg, Groovy, Ruby, Python are not in the same league as C++/C/Java/C# etc. For most modern applications it simply doesn't matter anymore, because you are waiting for a database, or the network, or user input (**slow**), or the GPU, or the memory bus, etc etc. It is only if you are stuck doing batch operations that it really matters. Now I'm waiting for you to say, "but, but, multimedia!". The reality is that multimedia should be done in hardware. I use Java+JoGL+OpenGL for this. This destroys C++ (or any other software implementation) for performance. Horses for courses my friend. That's why few people use C++ anymore - we understand it well (used it for decades) - but realise that implementing a new commercial application with it is just duh stooopidd.

A Sun Enterprise M3000, which was being sold in late 2010, doesn't run Solaris 11.

Um, yes it does.

Why would "missing patches" be of concern for a Unix machine?

Missing services patches can leave one vulnerable to being hacked. Fortunately, you don't need a reboot to install those. Security related kernel patches do happen and they do require a reboot. However, these are generally of the privilege escalation variety and require specially written code to exploit. If you don't have untrustworthy people logging in to your machine it isn't a major problem if you don't have all the kernel patches.

Of more serious concern is the general lack of patches for Solaris 9. Solaris 9 patches released from November 1, 2011, will have Vintage/Extended access entitlement by default, which means that only customers with an Extended Support contract for Solaris will be able to access them. Updates to the Recommended Solaris 9 OS Patchset will cease at that time.

You mean the JRE that is part of the plugin installation? It cannot be the JRE itself, it must the the installer of the plugin. I don't install JVM this way or Java plugin (at all), I just download the necessary installation package for the JVM/SDK as needed. If I want Oracle SDK I get it from here and when it installs, it does not install any 'ask bar' or anything like that, so I am not even clear as to how people get these things. I download the SDK or JVM for a Linux distro, which is either a binary that will decompress or just a tarball.

What you are saying is that when you are prompted for a browser plugin download, as part of the plugin you get the JRE (which is the Runtime Environment) and you also get some Ask bar or whatever.

But this scheme by Oracle then results in people getting angry with Java of all things and AFAIC this is similar to being angry at (for example) the C / C++ language and the x86 architecture because Microsoft ActiveX platform is sometimes used as a virus vector.

That's why I say there is so much confusion around Java. Java IS a language AND a platform, it's like C and x86 hardware architecture that can run a binary compiled from C. If somebody sells a computer full of Ask bars etc., the average user will not be inclined to believe that the C language and the CPU architecture are horrible (they may or may not be, but that would not be on the mind of a computer user).

But the marketing of Java is so poor (for such a useful platform, AFAIC), that it creates this type of ridiculous notion around it.

Anyway, my point is that RAID-5 isn't the level of data integrity assurance it once was, even ignoring the RAID-5 write hole risk that is inherent to the RAID-5 and RAID-6 concept.

With battery-backed cache, you don't really need to worry about this. With battery-backed cache that dumps to flash (what I use), you really don't need to worry about this.

Even double-parity RAID isn't worth it with consumer drives. You'll find out you lose multiple disks due to point failures too easily. RAID-Z2 or bust IMO.

Right, I decided to select the WD Red drives with TLER even though I am implementing RAID-Z2 and it isn't clear that TLER is necessary for ZFS. Anything to avoid resilvering a 20 TB encrypted array...

As a unexpected bonus, these WD Red drives run far cooler than my WD RE4-GP (which seems ironic, given the marketing).

Anyway, my point is that RAID-5 isn't the level of data integrity assurance it once was, even ignoring the RAID-5 write hole risk that is inherent to the RAID-5 and RAID-6 concept.

(rampant layering violation ftw!)

Just bought? The support lifecycle for Java is public: http://www.oracle.com/technetwork/java/eol-135779.html

Not this one:
http://www.oracle.com/technetwork/java/javase/6u41-relnotes-1907743.html
Keep in mind this update is out of band.

http://www.oracle.com/technetwork/java/javase/6u43-relnotes-1915290.html
After this one you will need to pay for a support contract or upgrade to Java 7.

No production JVM is real time.

I'd agree that the standard JVM / JDK is anything but realtime, but Sun (Oracle now of course) created a JSR specifically tackling the shortcomings w.r.t. real time:

• Sun's real time VM implementation
• JamaicaVM
• IBM's real time VM
• Atego's real time VM

I had to do a sanity check because I remember a) the back of the 4000 series had no vents and b) I really do remember standing on the end of the rack warming my hands.

http://en.wikipedia.org/wiki/Sun_Enterprise - lots of vents on the side of the first picture, and the back of the Enterprise 4000 - no vents.

http://docs.oracle.com/cd/E19095-01/ent55.srvr/805-2632-10/805-2632-10.pdf - b.9 shows the cooling module - definitely takes air in on the side.

http://www.ebay.co.uk/itm/300-1260-03-Sun-300W-Power-Cooling-Module-P-N-PEX69031-/190681693444?pt=LH_DefaultDomain_0&hash=item2c6583bd04 - auction for a cooling module definitely shows air coming in on the side.

I'm aware of Open JDK, but seeing that the code is targeted for Linux, I don't see that as a truly open solution for most users.

Well, that's a shame, because if you don't use the same definition of the word "open" as the rest of us we can't actually answer your question. We have no way of saying "Well, there's FoozleJava 3.X", and you then responding, "No, I'm saying I want it to be truly open", and us saying "But there are ports to every platform in existance, and it's under the GPL", and you saying "Yes, but I'm using my definition of the word open, and that means it has to be compatible with the Microsoft Public License.

And after we go around in circles a few times, we throw our hands up in exasperation.

OpenJDK is free software. It's licensed under a free license. It is built using a community model of development, albeit one steered by Oracle. And to answer your concern, which seems to be more about portability than openness, it's largely POSIX code and has been ported to the BSDs (cite: https://wikis.oracle.com/display/OpenJDK/BSDPort)

You're going to need some bigger power cords:

The Sun Fire V1280 system is supplied with four detachable power cords:
Voltage: 200 to 240 VAC
Circuit breakers - North America (4): 15A to 20A
Inrush Current: 18A after 100 microseconds
Surge Current: After 5ms brown-out short term surge is higher at 75A
Power Consumption: 3300W max

Hope you don't pay much for your electricity, fully populated and busy, that server is going to draw around 3000W of power.

With that power draw, if you're paying $0.12/KWh for electricity, it would cost around $250/month to keep it powered, not including cooling costs.

MySQL is rapidly approaching "who cares?" status. Oracle kills another one.

This is the highest-modded post in the thread? A wholly devoid-of-information nihilistic scoff? MySQL 5.6.10 brings a ton of nice features, like online ALTER TABLE. Wouldn't it be nice if there were some actual informative posts on the new MySQL release?

By the way, even as a scoff, your post is pretty weak.

In fact, it's about 20 years old (development started in 1991, effectively released in 1995).
http://www.oracle.com/technetwork/java/javase/overview/javahistory-index-198355.html

Would it kill you idiots to post a direct link to the update in a story that is about nothing *but* the update?
http://www.oracle.com/technetwork/java/javase/downloads/index.html

Good point. Link added. [-Ed]

Would it kill you idiots to post a direct link to the update in a story that is about nothing *but* the update?
http://www.oracle.com/technetwork/java/javase/downloads/index.html

Because it is not VM that is your application, your VM is the machine that runs your application.

If an applet needs a non-default memory size it can be set by the applet developer unless you don't consider him to be "professional".

I haven't played much with concurrency and multi-threading in Java, but I think Java Futures (sounds like an investment vehicle, but I think it's the feature you want) fit the bill: http://docs.oracle.com/javase/1.5.0/docs/api/java/util/concurrent/Future.html

In terms of other convenient methods for doing lots of concurrent work, there's the Akka project under the Apache 2 license: http://akka.io/ It is supposed to be a pretty decent implementation of the Actor concurrency model for Java and Scala ( https://en.wikipedia.org/wiki/Actor_model )

We have the @Asynchronous annotation in Java 6 that pretty much does the same thing.

http://docs.oracle.com/javaee/6/api/javax/ejb/Asynchronous.html

It is actually pretty nifty.

No-no-no. The only way to write databse-oriented web apps is surely PL/SQL!

Whoops, somehow deleted a " right before I posted.

Public API was supposed to be a link.

It's kind of interesting for academic curiousity that Java's HttpServer class is that awful, but these tests don't tell you anything about real world performance.

Java's HttpServer class is in the "Sun's internal stuff" part of the Java API. In other words, it's not meant for public use and its documentation doesn't appear in the public API.

Besides which, Java has a separate API for web servers.

I am a sysadmin on several web apps and I went and got the official security alert. I have to admit I am a bit confused by the message:

"

Oracle Security Alert for CVE-2013-0422

Description

This Security Alert addresses security issues CVE-2013-0422 (US-CERT Alert TA13-010A - Oracle Java 7 Security Manager Bypass Vulnerability) and another vulnerability affecting Java running in web browsers. These vulnerabilities are not applicable to Java running on servers, standalone Java desktop applications or embedded Java applications. They also do not affect Oracle server-based software.

The fixes in this Alert include a change to the default Java Security Level setting from "Medium" to "High". With the "High" setting, the user is always prompted before any unsigned Java applet or Java Web Start application is run.

These vulnerabilities may be remotely exploitable without authentication, i.e., they may be exploited over a network without the need for a username and password. To be successfully exploited, an unsuspecting user running an affected release in a browser will need to visit a malicious web page that leverages these vulnerabilities. Successful exploits can impact the availability, integrity, and confidentiality of the user's system. "

Yet Oracle released another notice that talks about a critical patch update for several Oracle products (ie.: db, app servers, etc.)

http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html

Does anybody understand why there are cpu's for their products if the zde doesn't affect there products?

What makes you think Oracle is just screwing up Java.

Get this thread about how an update to Solaris 11 broke ISCSI targets:

iSCSI Broken after 11.1 Update .

Geez, you think they cut out all regression testing?

And, of course, the final word:

Moderator Action:
With apologies to the original poster, but this thread has gotten hijacked too often to continue.
Your original question may not have been completely answered but the discussion has wandered far from that inquiry.

Thread locked.

How DARE they actually discuss the bug, possible workarounds, when it'll be fixed, etc.

Why is no one recommending to raise the security level for Java applets from "medium" to "high" or "very high"?

Since Update 10 there is this new control that could be employed exactly right now:
http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/client-security.html

Also, some (almost all?) ODBC and database servers send passwords in the clear.

Many database servers allow encrypted passwords, but there are surely a lot of database installations that don't take advantage of it. In PostgreSQL you can use SSL for the client network connection, which ODBC passes through. Setup SSL as the only way to connect, and encryption has to happen before it hits the wire. MySQL has a similar trick. Both are just using the OpenSSL library under the hood to encrypt the network traffic.

On the commercial side, Oracle does the same thing with ORA_ENCRYPT_LOGIN. SQL Server has client and server settings that enforce encryption. Basically, if your database traffic isn't encrypted, it's more likely because someone didn't think that was important than because it was impossible. It's a simple checkbox to add to database selection requirements, and it's not hard to find a DBMS that has the capability.

I find people who just stuff user passwords into the database (which can be the same passwords as other services) rather than putting password encryption into their application can also leak data. In PostgreSQL using the built-in pgcrypto makes that easy. You also have to be careful to use the same network encryption approach for any replication client, or it's possible to just sniff that instead to get the data. In Postgres those connect with the same encryption possible options as any other client. Most of the tutorials on setting up replication don't cover this though.

Robot is part of the awt package and thus is not supported on Android.

http://docs.oracle.com/javase/1.4.2/docs/api/java/awt/Robot.html

The (better IMHO) Android class would be TouchUtils

(Though it seems to be missing screenshot capability. )

A link/name for the idiom I can pass to our Java people?

I think I would just point them to the Java API documentation and point out these constructors for java.lang.Exception:

Exception(String message, Throwable cause)
Constructs a new exception with the specified detail message and cause.

Exception(Throwable cause)
Constructs a new exception with the specified cause and a detail message of (cause==null ? null : cause.toString()) (which typically contains the class and detail message of cause).

These two additional constructors were added to Java 1.4 (so, a good long time ago) precisely because of the issue of catching and re-throwing exceptions and losing the underlying stack trace. These constructors solve that issue. (It does, however, make the stack trace that much longer, so it's pretty noisy!)

All that being said, I'm not really a fan of exceptions. I like old fashioned return codes myself.

On the sell side, we have this.

Thank you for that reminder AC, but Larry and Oracle are hardly neutral sources on anything related to HP:

Former HP CEO Selected As Oracle Co-President (September 7, 2010)

HP Sues Hurd For Joining Oracle (September 7, 2010)

HP Spent Over $80M To Get Rid of Its CEOs (September 26, 2011)

Ex-HP CEO Hurd Pays $14 Million Oracle Pledge Fee (September 21, 2011)