Thursday Aug 28, 2014

Java and Security at JavaOne

In a Java Magazine interview, Jim Manico (pictured on the right) describes his JavaOne session on security. "I will be speaking about the top coding techniques and essential tools, including several Oracle Open Web Application Security Project (OWASP), Apache, and Google open source Java projects that will help developers build low-risk, high security applications". Jim is an author and educator of developer security-awareness training. You can find more details of his session in JavaOne content catalog

His session is part of a dedicated track about Java and Security, which addresses topics ranging from security tools and coding techniques to innovative products, and includes participation from recognized security leaders discussing policies and best practices. While the value of offensive security techniques is recognized, the focus of this track is primarily on defensive measures. 

Check out all the topics in the Java and Security track 

Wednesday Aug 27, 2014

Tech Article: Exploring Java 8 Profiles

Java 8 introduces the concept of Compact Profiles, which are reduced versions of the Java runtime environment (JRE) that do not contain the usual full contents of rt.jar. In the technical article "Exploring Java 8 Profiles," Java expert Ben Evans explores the advantages of using Compact Profiles and how they point the way toward a modular future for the JDK.

As Evans explains, reducing the size of the Java platform footprint and moving to a modular view of the JDK, can create great benefits:

  • Faster Java Virtual Machine (JVM) startup times
  • Reduced resource consumption
  • Removal of packages that, in hindsight, shouldn’t be in the core
  • Improved security, because removing unused classes reduces the attack surface of the platform
  • Convergence of the Java ME Connected Device Configuration (CDC) with Java SE


Java 8 Compact Profiles represent a significant step toward future goals for the platform—both in terms of embedded (or capability-restricted) development and also for server-side developers. Read "Exploring Java 8 Profiles" to learn more.

Monday Aug 25, 2014

JavaOne Hackergarten (and Others Worldwide)

by guest blogger Andres Almiray

It's with great pleasure that I announce JavaOne will host a Hackergarten this year once more. That's right, you did read it well, the name sticks, we're no longer renaming it to CodeGarten like last time ;-)

At JavaOne 2014, the Hackergarten has a dedicated space at the Java Hub in JavaOne exhibit hall, Hilton Union Square. The space has power, a private Internet network, white boards, and seating for 16. Attendees need to bring their laptops. You may stay as long as they want, from less than an hour to most of the three days. The format remains the same as other Hackergartens. Participants will contribute to open source projects. 

The idea is to gather people around specific topics at the scheduled times. Topics range from Java SE, Java EE, JSRs, pretty much anything Java-related. Contributions can be production code, test cases, documentation, or simply a friendly chat in order to gather feedback. If you want to host a session (help people to work on an open source project), please contact me. The project page is here and will be updated as we fill out the schedule.

We are also running Hackergartens at other conferences. The following ones are already confirmed:

JCrete - Aug 25th (in English)

JavaZone - Sep 9th (in Norsk & English)

JMaghreb - Nov 6th (in French)

Learn more about Hackergartens at

Reprinted from The JavaOne Conference Blog. 

Wednesday Aug 20, 2014

IoT: Wearables!

Wearables are a subset of the Internet of Things that has gained a lot of attention. Wearables can monitor your infant's heartrate, open your front door, or warn you when someone's trying to hack your enterprise network. From Devoxx UK to Oracle OpenWorld to Devoxx4kids, everyone seems to be doing something with wearables. 

In this video, John McLear introduces the NFC Ring. It can be used to unlock doors, mobile phones, transfer information and link people. The software for developers is open source, so get coding!

If you are coming to JavaOne or Oracle OpenWorld, join us for Dress Code 2.0, a wearables meetup. Put on your best wearables gear and come hang out with the Oracle Applications User Experience team and friends at the OTN Lounge. We'll discuss the finer points of use cases, APIs, integrations, UX design, and fashion and style considerations for wearable tech development. There will be gifts for attendees sporting wearable tech, while supplies last.

What: Dress Code 2.0: A Wearables Meetup

When: Tuesday, 30-September-2014, 4-6 PM

Where: OTN Lounge at Oracle OpenWorld

IoT - Wearable Resources

The IoT Community on

Wearables in the World of Enterprise Applications? Yep.

The Paradox of Wearable Technologies

Conference: Wearable Sensors and Electronics (Santa Clara, USA)

Devoxx4Kids Workshop for Youth: Wearable tech! (Mountain View, USA)

Tuesday Aug 19, 2014

Release: Oracle Java Development Kit 8, Update 20

Java Development Kit 8, Update 20 (JDK 8u20) is now available. This latest release of the Java Platform continues to improve upon the significant advances made in the JDK 8 release with new features, security and performance optimizations. These include: new enterprise-focused administration features available in Oracle Java SE Advanced; products offering greater control of Java version compatibility; security updates; and a very useful new feature, the MSI compatible installer.

download Java


Release Notes

Java SE 8 Documentation

New tools, features and enhancements highlighted from JDK 8 Update 20 are:

  • Advanced Management Console
    The Java Advanced Management Console 1.0 (AMC) is available for use with the Oracle Java SE Advanced products. AMC employs the Deployment Rule Set (DRS) security feature, along with other functionality, to give system administrators greater and easier control in managing Java version compatibility and security updates for desktops within their enterprise and for ISVs with Java-based applications and solutions.
  • MSI Enterprise JRE Installer
    Available for Windows 64 and 32 bit systems in the Oracle Java SE Advanced products, the MSI compatible installer enables system administrators to provide automated, consistent installation of the JRE across all desktops in the enterprise, free of user interaction requirements.
  • Performance:
    • String de-duplication resulting in a reduced footprint
    • Improved support in G1 Garbage Collection for long running apps.
  • A new 'force' feature in DRS (Deployment Rule Set) which allows system administrators to specify the JRE with which an applet or Java Web Start application will run. This is useful for legacy applications so end users don't need to approve security exceptions to run. 
  • Java Mission Control 5.4 with new ease-of-use enhancements and launcher integration with Eclipse 4.4
  • JavaFX on ARM
  • Nashorn performance improvement by persisting bytecode after inital compilation

There's much more information to be found in the JDK 8u20 Release Notes.

Thursday Aug 14, 2014

walkmod : A Tool to Apply Coding Conventions

You know that applying coding conventions, specially in big projects, simplifies the project maintenance. And there are custom IDE features to configure a set of saving options to apply automatically a given code style. There are also open QA tools (e.g FindBugs, PMD) to check a set of metaprogramming rules, but these never fix the code. This is the reason why Raquel Pau and her team have been working hard to create walkmod, a metaprogramming framework to establish and share set of open coding conventions.

walkmod is a free, open source tool that allows you to design custom coding conventions and apply them as a chain of coding transformations into source files. walkmod supports 3 kind of transformations: (1)templates, (2)scripts or (3)plugins in Java. 

Learn more in this video from Devoxx UK: 

View Pau's slides from Devoxx UK here.

Thursday Aug 07, 2014

Tech Article: Generics: How They Work and Why They Are Important

In the new OTN tech article "Generics: How They Work and Why They Are Important," developer and book author Josh Juneau helps you gain a solid understanding of generics in Java SE 8.

There has been a lot of excitement in the Java world with the release of Java SE 8. New and updated language features in the release allow developers to be more productive by decreasing the amount of code that needs to be written and by making code easier to use. To fully understand the implementation of some new features, such as lambdas, it is important to understand the core concepts of the language. One such concept that plays an important role in many Java SE 8 features is generics.

The article provides some basic examples of how generics can be used to implement a solution that provides strong type-checking along with type flexibility. It also shows how generics play an important role in algorithms, and such is the case with the Collections API and functional interfaces, which are used for the enablement of lambda expressions. 

Read OTN's "Generics: How They Work and Why They Are Important"

Article author Josh Juneau has written the following books: The Definitive Guide to Jython and PL/SQL Recipes (both Apress, 2010). Josh recently authored Java EE 7 Recipes and Introducing Java EE 7 (both Apress, 2013) and is working on the upcoming Apress book Java 8 Recipes, which will be published later this year.

Wednesday Aug 06, 2014

Check out IoT at JavaOne!

"We are always creating new IoT applications and encouraging others to improve them. Lhings is the networking tool that let us make it very easy. This time we wanted to make something we use in our everyday lives which is traditionally non-technical, as is a table, to be connected to the Internet and then provide new services that could be useful in some applications" explains José Pereda, who is part of the Lhings team. Based in Spain, the team won aJavaOne trip during IoT Developer Challenge.  

"We wanted to show that IoT is useful in real scenarios and it's accessible to anyone. Likewise, we would like to encourage developers to reproduce and improve it!" further explains José. You will get a chance to meet them at JavaOne.  

In the Internet of Things session track at JavaOne, you will learn about Java Embedded and discover great applications. Register today with the Flash Sale code DFS4, you will save US $400   

José is also presenting four talks at JavaOne

  • JavaFX 3D: Advanced Application Development
  • How to Build the Game 2048 with JavaFX and Java 8: Lessons Learned
  • Debugging and Profiling Robots with James Gosling
  • Create the Game 2048 with Java 8 and JavaFX 

Tuesday Aug 05, 2014

Java and Security

Is Java inherently insecure? As a Java developer, what things should you think about in terms of security? How is ECC is better RSA? Is RSA good enough security? Hear what James McGivern, a software engineer in Cisco's Cloud Web Security group, has to say about securing your Java applications.


ECC vs RSA: Battle of the Crypto-Ninjas James' slides from Devoxx UK 2014

Schneier on Security

Using the New JDK 8 Security Features: from JavaOne 2013

Oracle Security Resource Center

Oracle Java Platform Group, Product Management Blog

Security Curmudgeon Blog

A (relatively easy to understand) primer on elliptic curve cryptography

Monday Aug 04, 2014

Three Day Discount!

Here is another chance to save US$400 on registration. Some of you probably missed the Early Bird rate that ended last Friday. Make sure you take advantage of this flash sale and register by Wednesday, August 6. This is your last chance! 

JavaOne is only eight weeks away. Folks, you have nothing to gain by waiting to register and book your trip. Hotels are filling up and are getting more expensive.   

From all continents, Java authors, speakers, leaders, JSR contributors come together once a year for a week in San Francisco. This is THE premier Java conference with all the Java content you could imagine. You name it: Java security, Java 8, JVM languages, the cloud, Internet of Things, methodology, tools and more. Attending the conference will kick off your training for the year! 

Icing on the cake! You get to spend time in one of the best cities in the States and the world.  


Insider News from the Java Team at Oracle!



« August 2014 »