JavaOne 2013 with Markus Eisele: Sins and Security in Java EE
By Janice J. Heiss on Sep 06, 2013
Markus Eisele is a principal technology consultant working for msg
systems ag in Germany. He is a software architect, developer, and
consultant and also writes for IT magazines. Eisele joined msg in 2002
and was a member of the Center of Competence IT–Architecture for nine
years. After that, he moved on to the IT–Strategy and Architecture
group. He is currently part of the Applied Technology Research group,
which supports customers and projects dealing with enterprise-level Java
and infrastructures. This includes the Java platform and several
web-related technologies on a variety of platforms using products from
different vendors. Eisele’s main area of expertise is Java EE servers.
Eisele is also part of the Java EE 7 Expert Group, and speaks at
international conferences about his favorite topics. Find his thoughts
on blog.eisele.net and follow him on Twitter at @myfear.
His JavaOne 2013 sessions include:
CON1924 "Seven Deadly Sins"
CON2570 "Don't be that guy!"
UGF10369 “Cool Netbeans Tips and Tricks for Java EE 7 Development”
Q: Tell us about your JavaOne sessions.
Eisele: This year will be a busy JavaOne for me. I have two sessions and a panel on user-groups Sunday. Both sessions are about best practices and lessons learned from my daily work. In the "Seven Deadly Sins" (CON1924) I elaborate on some big issues I have encountered with projects which either stalled or almost stalled.
In the second session, I will talk about security aspects during development. The title "Don't be that guy!" (CON2570) implies that we should pay attention to both technical and personal issues. Besides covering some concrete issues, I hope to more generally transport the interesting aspects of IT-Security into developers’ minds. Everybody in software development needs to take security seriously -- and not only when it is too late but up front. It has to be part of everybody's mindset to think about securely implementing features.
The "Cool Netbeans Tips and Tricks for Java EE 7 Development" panel on Sunday kicks everything off. A couple of nice guys try to elaborate on their excitement about NetBeans. That will be fun!
Q: Aside from your sessions, what do you have planned for JavaOne 2013?
Eisele: I am an Oracle ACE Director and beside Java EE technologies I also have a hobbyhorse named WebLogic. So I am also presenting another session at Oracle OpenWorld titled "Oracle Java Cloud Service for Java EE Developer (CON1926) where I explain how Java EE developers can leverage the service and how it fits into their daily development environment. Together with some well-known names from the Oracle ecosystem I will be on another Sunday panel about "Software Development in the Oracle Ecosystem" (UGF9932, UGF9948) where we more generally talk about development and tools for the Oracle Software Stack.
I'm really looking forward to catching up with the many awesome community members who I only get to meet in person a couple of times a year -- the JUG Leaders, the Community Leaders, the Java EE EG Members and of course my Oracle contacts. I like working remotely with them but I'm that kind of person who needs to shake hands and have a beer or coffee with you from time to time if we're working together. And the new German community conference led by the German JUG Umbrella iJUG e.V. and the German Oracle User Group DOAG e.V. called JavaLand (http://www.JavaLand.eu), which we recently announced, also will keep me busy.
Q: What have you been working on lately?
Eisele: Most of the stuff I am working on is customer confidential. My official role at the msg systems ag is "Principle Architect" and I am working in a cross department called "Applied Technology Research". We're responsible for software development methodologies and technologies used in the many projects we build year by year. I'm stepping in and out of individual projects as a technology coach or expert. I do troubleshooting, project setup, team leadership, architecture and design and things like that for up to 30 different projects a year. I tend to be pulled into all the "special missions" which really helps keep my life exciting. The common ground is enterprise-level Java. This includes Java EE, OSGi and a couple of other frameworks. I work with nearly all available Java EE servers and technologies -- even the ones which should be EOL'ed by now.
Q: What are your expectations for Java EE 7? For Java SE 8?
Eisele: Java EE 7 is finally out and I am quite happy with the result. I have been part of the Expert Group and followed along with blog posts and articles. At the moment, I am waiting for the first arrangements around Java EE 8 to be made. It would be a pleasure to continue my work in the EG and bring in my view as an individual. Java SE 8 is a slightly different story. 55 new features is an impressive number. Basically it all comes down to lambdas, The Date and Time API, removed Permanent Generation and Nashorn for me.
Q: How do you assess the state of Java today?
Eisele: Are there any other programming languages around? Java has been the most important part of my work from the beginning. Even if I see and work with other languages it feels most comfortable programming in Java. Most customers I encounter use it for the same reasons -- plenty of workforce available, established processes, all set. It has become a commodity for many. Some confuse that with legacy which isn't true. The language and the complete ecosystem are evolving and reacting to today's needs. This, combined with positioning the JVM as a polyglot runtime for many languages, means that Java is going to be a success story for years to come.
Q: What should Java developers understand about unit testing?
Eisele: A quote from one of Dan Allan's presentation: "You can’t develop what you can’t test." That nails it for me. I'm personally not a test-driven person but if you've ever had to fix things in a comparably short time frame you learn to value any kind of regression. Unit tests are fine-grained, simple, fast, and executed easily from your favorite IDE. You're not doing it? You're doing it wrong. And don't forget that this is only a small part of the test universe. If you're looking for easy integration tests, have a look at Arquillian.