Web Development Live

Symantec has opened up a beta program for Norton Safe Web that puts the company on course to challenge a similar offering from security rival McAfee.

According to Symantec, Norton Safe Web is available starting today, July 28, as a plug-in for the beta version of NIS 2009. Safe Web functions as a Web site rating service, providing visual safety ratings of search results from engines such as Google and Yahoo by assessing Web security and leveraging information from members of Norton Community Watch.

For example, if a site that has traditionally been considered safe is suddenly flagged as suspicious, Symantec will go back and reanalyze that quickly, Rosenkrantz said. On the other hand, if it is a known bad site, the priority of going back and reanalyzing it is low, he added.

While Symantec is entering the secure searching fray with Norton Safe Web, its main security rival has already started down this trail. McAfee offers similar capabilities in its SiteAdvisor product, and recently teamed with Yahoo to extend its capabilities to help make Web searching more secure. Google has also made some strides on this front of late, with the development of a Safe Browsing Diagnostic Page for Web masters interested in additional information on sites Google determines are malicious.

Like SiteAdvisor, Safe Web uses the colors green, yellow and red in its site ratings. Safe Web also marks both organic and paid links on search pages and warns users if they attempt to visit rogue sites.

Symantec officials also disclosed other plans they said they felt would take Safe Web a step beyond rival products, but declined to discuss them publicly. In addition to the beta, Symantec has created a free community site where anyone can look up the safety rating of a site and submit Web site reviews.

XMOS Semiconductor Ltd. (Bristol, England) has introduced a development kit for its XS1-G4 programmable device. Designs are created using a C-based software development flow, which the company claims shortens the time required to build electronic products and systems.

The XS1-G development kit features the XS1-G4 target device, a QVGA touch screen display, RJ45 10/100 Ethernet port, a stereo audio interface and XLink connectors for connecting multiple kits together. The XS1-G4 can be booted from JTAG, an SD/MMC card or on-board SPI boot PROM. In addition to the integrated multi-media I/O, designers have access to on-board switches, status LEDs and IDC expansion ports. A set of design examples is accessible on startup through a soft-key menu system.

The XS1-G4 device is programmed using web-based XMOS development tools which include C and XC compilers, simulator and debugger. The kit includes a tutorial on XC, which is the XMOS-originated programming language supporting parallelism, concurrent and real-time programming using channel-based communications, and event-driven control. Programs can be evaluated using the simulator, or loaded into the XDK for hardware verification. A GDB debugger is also provided to simplify program development.

The XS1-G4 programmable chip features four XCore tiles connected by a high-performance switch, with each tile containing an XCore, which is a 400MHz 32-bit event-driven processor. The four XCore tiles together execute up to 32 concurrent real-time tasks, provide 1600-MIPS of performance, and service up to 400 million events per second. Data and code is stored in 256-kbytes of RAM and 32-kbytes of ROM. Tightly coupled to a highly flexible I/O pin structure, the XCore processor can implement a range of hardware and software functions including I/O interfaces, state machines, application programs, DSP and cryptographic algorithms.

XMOS devices are general-purpose programmable chips. The device features and software-based design flow make the XS1-G product family well-suited for applications such as Ethernet audiovisuals and audio, intelligent LED display control, IEEE-1588 network time keeping and chip-level security systems. Additional information on how XMOS technology supports these applications can be found on the XMOS website.

Such constant tweaking called a “perpetual beta” in the Web 2.0 world — is common for companies like Sunnyvale, Calif.-based Flickr that build applications for a consumer market that’s always in flux.

Quick, incremental updates, along with heavy user involvement, are key characteristics of an emerging software development paradigm championed by a new generation of Web 2.0 start-ups.

The new process, which some champions call “application development 2.0,” contrasts markedly with the traditional corporate waterfall process that separates projects into several distinct phases, ranging from requirements to maintenance. Nonetheless, application development 2.0 could significantly cut development costs and improve software quality if managers and developers are willing to make some hard changes.

“Sometimes enterprise organizations tend to look at these [Web 2.0-focused] places and say they are not very disciplined,” said Jeffrey Hammond, an analyst at Forrester Research Inc. “That is not the case. They have built discipline into the process that allows them to be very reactive a [good] lesson for IT organizations.”

Based on interviews with analysts and executives of Web 2.0 firms, Computerworld compiled a list of five ways that corporate IT managers can benefit from Web 2.0 development processes. Here they are:

1. Break the barrier between developers and end users, and involve users in quality assurance processes.

Wesabe Inc., which runs a personal finance Web site, doesn’t have a formal internal quality assurance group. Instead, the San Francisco-based company relies on users and founder and CEO Marc Hedlund.

Wesabe’s developers work with users to come up with new features, and then Hedlund tests them before rolling them out to Wesabe.com.

Hedlund said that before launching Wesabe two years ago, he studied many of the common development techniques put into place by Web 2.0 companies. He said he concluded that applications are inherently built better when developers are not insulated from the people who use their applications. Direct user complaints or compliments are far better motivators for developers than PowerPoint slides with bar charts representing user desires.

William Gribbons, director of the graduate program in human factors at Bentley College in Waltham, Mass., said that large companies can benefit financially by using Web 2.0 techniques to develop applications for employees.

“Companies often think their [internal] applications are different because they’re used by employees [who] are compensated for the pain and suffering they are enduring,” he said. That pain and suffering, however, can lead to increases in training costs and employee turnover and cut productivity all a hit to the corporate bottom line.

Corporate development teams should focus on close interaction with internal users to gather requirements, and to create a controlled, systematic way to observe users interacting with prototypes, Gribbons suggested.

Linux is set to make a major impact in the mobile computing realm, the executive director of the Linux Foundation stressed at a conference Monday morning.

Speaking at the Open Mobile Exchange portion of the O’Reilly Open Source Conference (OSCON) in Portland, Ore., Jim Zemlin, executive director of the foundation, touted the trends and technologies pushing Linux into a leadership position in mobile systems. He was followed by Jason Grigsby, Web strategist at mobile and Web design firm Cloud Four, who emphasized the coming influence of the mobile Web but countered that developers are not ready for it.

“It’s clear that Linux is going to be a leader in the mobile space,” Zemlin said.

Linux, according to Zemlin, offers a unified product platform, flexibility, and a software stack. It also has experienced an increase in the volume of software content, with the lines of Linux handset code doubling every year.

“Really, what’s happening in mobile is instead of having a hardware-up approach, you’re starting to see a software-down approach,” with the software experience driving the mobile marketplace, he said.

By supporting Linux, developers don’t have to contend with compatibility issues of supporting different platforms. The industry wants to get away from that, he said.

“It’s just a nightmare to support all these different OSes and try to maintain some degree of compatibilty,” Zemlin said.

Different middleware packages and application development frameworks are available for Linux. “There’s a huge freedom to mix the core Linux kernel,” he said.

Business drivers for Linux include reduced deployment costs, room to differentiate, and an ecosystem of development around phone platforms. “It’s obviously a royalty-free platform. That’s a huge business driver, Zemlin said.

“Linux really allows device manufacturers and new people to come in and create their own brand,” he said.

Symbian’s move to open source has had a negative impact on Microsoft Corp.’s Windows, leaving it the only royalty-based mobile platform, Zemlin said .

Linux application development is starting to coalesce around initiatives such as Google’s Android and LiMo, he said. Other Linux efforts are afoot such as Openmmoko, to create a smart-phone platform, and Ubuntu Mobile, Zemlin said.

“There really isn’t any major player from a corporate point of view who doesn’t have their foot in some way in the Linux camp,” other than Microsoft, Zemlin said.

Grigsby, meanwhile, emphasized that the mobile Web is coming, but Web developers are not ready yet.

He lauded the capabilities of Apple Inc.’s iPhone and what it has done for mobile computing. “The iPhone is really the Mosaic of the mobile Web,” opening people’s eyes to opportunities on the mobile side the way Mosaic did with browsers, Grigsby said.

But the mobile Web is being held back by UI issues and access to the device characteristics on the phone. Standards and performance also are issues.

Openbravo, the leading developer of web-based open source Enterprise Resource Planning (ERP) and Point-of-Sale (PoS) solutions, has announced today the launch of its updated open source web-based ERP software, Openbravo ERP 2.40.

With the release of Openbravo’s beta version of ERP 2.40, which is available for download from SourceForge.net, Openbravo continues its innovations in user experience. Openbravo ERP 2.40 has updated the product with numerous enhancements focused on two distinct key areas that users care about most: increased user productivity and improved global functionality.

The new release also includes several additional improvements in other areas. The functional scope has been broadened with an enhanced projects and services module, with newly introduced features such as a historical salary category, goods receipt by PO number and purchase requisitions support. Reports have been revamped, including a new payment ageing balancing, budget and Pareto reports with a broadened payments report for more than one business partner at a time. Infrastructure has been upgraded with significantly revised security and more control over user roles, audit to review who created and updated each transaction, additional web services, and better reporting back to Openbravo to help the development process and PostgreSQL 8.3 support.

“The release of Openbravo ERP 2.40 is the product of generous effort from our community to simplify enterprise resource planning,” said Paolo Juvara, Chief Products Officer of Openbravo. “With all the enhancements contained in this update, the fundamental advantage to 2.40 is that it simply makes the end user’s business run more efficiently and effectively. It is with great support and feedback from our community that we have made our best web-based ERP system to date.”

To learn more about Openbravo products and services visit the Openbravo website, and to download and install Openbravo ERP 2.40 beta visit the download page. Openbravo Network 2.40, the commercial subscription service Openbravo offers to clients looking for professional support for a complete solution, is expected to be released in September.

All these languages and their associated tools and frameworks are fine and respectable tools. However, for this article, I’d like to focus on Adobe ColdFusion, an alternative language that actually predates most other web development languages. And, though ColdFusion predates many languages, it is far from being a lumbering dinosaur. In fact, ColdFusion has been whipped mercilessly by the forces of technological change and has evolved into a scrappy and tenacious survivor of a language.

ColdFusion has always focused on making complex and difficult tasks easy. The classic example of this is the ease of querying databases. In most languages you need to have several lines of code to establish a connection to a database server, several lines to build your SQL statement, a couple lines to send the request, more to close the connection and then several more lines of code just to output data from the query into an HTML list However, early versions of ColdFusion consolidated most of this tedious process into one tag that wraps the SQL statement you’re running and one tag that iterates over results.

It did not take long before they recognized limitations in their existing Website. Allianz’s original site had to service clients from all sectors. Every effort was made to make all services available in one place, but things were just not working. Many customers were not able to find what they were looking for. Unfortunately, later attempts to organize the information only made matters worse: Every section of the Web site ended up with its own unique ‘look and feel’, and with inconsistent branding.

The key challenges, therefore, were not just to re-design & develop the website, but also to mirror Bajaj Allianz’s strong offline brand imagery on the Web along with all the ingredients of a Web 2.0 online Insurance Web presence for customers & sales channels alike. So that customers could renew their policies online along with paying their premiums, prospects could search, compare & find the best policy/plan for their families & agents could drive account management all under one interactive roof. eDynamic immediately identified these problems, proposing, designing and implementing a comprehensive solution.

Subir Singh, VP, Sales, eDynamic, credits the success of eDynamic’s efforts to the company’s established expertise in the Insurance industry. “Our deep understanding in insurance..and strategic approach to business help us maintain a strong and comfortable relationship….” eDynamic brought to the table additional experience in financial services, such as lending and loans, credit cards, real estate, and financial services.

By creating a generic, easily customizable template to provide a framework for the design, the information architecture is kept simple, easy to understand and navigate. Simplicity is also key to its versatility –remaining consistent when customized for each service segment. The design has proven so adaptable that, as the online services of Bajaj Allianz have continued to expand, the same recognizable branding and navigational controls have remained.

Says Vishal Karki, Head of Marketing for Bajaj Allianz Insurance, India, “It has been a pleasure to do business with eDynamic. The team at eDynamic holds its customer’s satisfaction as highest priority. They understood our business requirements and have delivered high-quality results on time.”

About eDynamic: eDynamic is a Global IT services, Interactive Marketing Services, Website Design & Development and Consulting Firm focused on delivering integrated business solutions. eDynamic is a rapidly growing, privately held company that delivers on the technology, creativity & marketing needs of enterprises. Through its offices in New York, Portland, Toronto, London, Dubai, and New Delhi, eDynamic is serving customers such as Suncor Energy, UPS, PepsiCo, New York Life, General Electric, Advance America, Preferred Commerce, Intercontinental Hotels, Jet Airways, Samsung, Sony, among many others.

Two months after their Web site was hacked, the organizers of Barack Obama’s presidential campaign are looking for a network security expert to help lock down their Web site.

“Obama for America is looking for a network security expert who wants to play a key role in a historic political campaign,” reads the ad, posted to the Barackobama.com Web site.

Successful candidates will join Obama’s Boston team and should expect to find a new job come November.

Obama’s Web site, built by Facebook cofounder Chris Hughes, has been the model of Web 2.0 campaigning, using social-networking techniques to raise funds and build a broad base of active, Internet-savvy supporters.

But security experts have long warned that powerful Web site features also open new avenues for attack.

With the Internet driving the majority of the campaign’s contributions, Web security is probably more important to Obama than it has been to any other presidential candidate. A Web outage could cost his campaign millions of dollars, and a widely publicized privacy breach could put the brakes on his most important source of cash.

In April, a programming error allowed a Hillary Clinton supporter to redirect part of Obama’s Web site to Clinton’s, but today’s Web attack techniques could lead to much more serious consequences.

“Attacks like SQL injection would be far more of a concern,” said Oliver Friedrichs, a director with Symantec Security Response who has written about computer security and the 2008 presidential election. “If I was able to get access to the database that houses their donor information, that would be very concerning.”

So-called SQL injection attacks take advantage of programming errors and allow attackers to get unauthorized access to parts of a Web site. They can be used to install malicious software or gain access to sensitive information.

Obama’s site isn’t the only one to suffer from Web security bugs. A similar flaw popped up in Mitt Romney’s site in January, and Hillary Clinton’s name was used in a spam campaign that delivered messages laced with malicious Trojan Horse software programs, Friedrichs said.

While Web defacements and denial of service attacks may be the most common security problems, a Web privacy breach could quickly become a major campaign issue, Poole said. “For a big office, things like the reputation of the candidate are really important,” he said.

As an avid Apple afficianado and advocate of all things open source, my stance on Microsoft is usually clear-cut: I don’t care for it.  Everything about Microsoft’s business practices rubs me wrong.  With that said, I was surprised to learn that Microsoft has been toying with its own little pet social network since the beginning of the year.

Well “social” might not be quite the right term for Microsoft’s baby network, which is called TownSquare.  Consider it a more elite community of Microsoft nerds.  Perhaps a better term would be the anti-social network.  Townsquare is an intranet-based social network currently open to all Microsoft employees, and shares many similarities with Facebook.

All the normal social goodies - pictures, bios, updates, feed are included on TownSquare for each user and shared with the Microsoft community.  Additionally, Microsoft employees can see when documents and files on the intranet have been updated  or modified.  The whole thing is designed on enterprise newsfeeds to compile various public information about employees on the network.

Microsoft is also sharing TownSquare with a group of select consumers who are responsible for testing Townsquare.  All the testing and restructuring can’t possibly be for Microsoft’s own good time, though; it wouldn’t surprise me if Microsoft did a revision or two and marketed the intranetwork social structure to businesses.  As one of the main features is updating users on document and data revision on the intranet, many businesses could, no doubt, benefit from such advances.

Which brings me back to my original issue with Microsoft.  What could be a fantastic tool developed by some no-name third party developer will undoubtedly be marketed for sale by Microsoft to small business owners who will buy into the product simply because it has Microsoft’s stamp of approval.  If anything, I would be delighted to see a third party developer replicate the social structure for viewing profiles and updating intranet-public documents as open-source freeware, available to all.

The entire reason I believe that Microsoft will continue to spiral downward is because the who’s who in Microsoft’s management will never be able to adapt to the new, very open style of program sharing and development, and leave behind the monopoly mindset. In the end, Microsoft will have to buy into a little Darwinian theory and adapt and evolve, or go the way of the dinosaurs.

Announced IBM Mashup Center will be hosted as a free trial on the Web with which non-technical business people can use to experiment and build customized mashups following the success of early corporate adopters Boeing Corporation (NYSE: BA) and Carrefour Group (PARIS: CA).

On schedule for mid-year delivery, the IBM Mashup Center allows business people to create situational applications, or mashups, by remixing information from anywhere to gain business insight and do their jobs smarter and more effectively. Using IBM’s mashup technology, even non-technical users will be able to exploit standards and Web-based technology to gain access to myriad information, such as Web sites and feeds, spreadsheets, databases, applications, unstructured text from an email, video, audio and other information on the Web, and make sense of it all in minutes.

In the coming weeks, IBM will offer customers the opportunity to experiment with IBM Mashup Center and gain hands on experience for free through IBM Lotus Greenhouse. Lotus Greenhouse is a Web site where anyone can register and try out IBM Mashup Center, and many other collaborative products, such as IBM Lotus Connections, Lotus Quickr, Lotus Sametime and WebSphere Portal. IBM Mashup Center will be hosted on Greenhouse, giving customers a safe environment to try the technology and evaluate mashup potential without installing anything in their own environment. The hosted version of IBM Mashup Center will include widgets from IBM, and a growing network of IBM Mashup Center Business Partners, like StrikeIron and Kapow Technologies.

This comes at a time in which innovative companies of every size are beginning to realize the possibilities of Web 2.0, but require security, management and governance capabilities to responsibly take advantage of these possibilities. IBM Mashup Center gives users the freedom to create new, light weight applications on the fly and get customized views of disparate information, but with the stability corporations require. IBM’s deep history in open standards, information integration and emerging Internet technologies, make the company an undeniably strong partner in a new technology era.

“As an established innovator, Boeing believes in the power of Web 2.0 and embraces it not only for collaborative work, but also for the heavy lifting of enterprise planning and execution,” said Paul Comitz, Program Manager, NEO Demonstration, Boeing Corp. “The IBM Mashup Center is playing a key role in our visionary approach to strategic asset management. It’s critical to know where your major assets are and how to use them at any given time, situation or condition.”

IBM Mashup Center breaks new ground in ease of use and speed at which business users can solve everyday business problems in any size enterprise. It includes an intuitive browser based tool to easily assemble of new mashups, thus allowing non technical users anyone in a business to literally drag and drop mashup components from personal, enterprise and Web sources to easily create, deploy and share customized Web applications in minutes.

This upcoming offering includes a set of out of the box, business ready widgets, as well as a catalog for finding and sharing widgets and mashups. To create new widgets, IBM Mashup Center includes an easy-to-use development environment to construct new widgets from enterprise systems and the Web. Users can also take advantage of built-in Web 2.0 community features like ratings, tagging and commenting to guide users the to the most valuable and useful widgets.

IBM Mashup Center also provides extensive and powerful capabilities for managing information feeds from enterprise sources. Information from a wide variety of sources can be mixed, filtered and mashed together to create new information sources and output in many different forms, such as RSS, ATOM or XML. With the ability to merge, transform, filter, annotate or publish information in new formats, IBM Mashup Center helps create a single view of disparate sets of information in a highly re-usable manner. Feeds are an easy way to service-enable systems that do not natively provide RESTful interfaces, and thus provide an on-ramp for Service Oriented Architecture (SOA).

As enterprise mashups continue to climb in popularity and deliver more value for business, IBM is working with an ecosystem of Business Partners to help customers get the most out of situational applications. IBM Business Partners such as Jibes, JustSystems, Kapow Technologies and StrikeIron are introducing solutions that, when combined with IBM Mashup Center, enable rapid access to information and new and compelling uses for new types of data.

For example, IBM Mashup Center users can easily connect to data in the StrikeIron Web Services Marketplace to reduce the complexity for developers or business users who want to integrate live data from a number of sources. In addition, by connecting to StrikeIron’s Lite services, users can create demos to show how easily live data can be integrated with a mashup to create powerful Web applications without having to register or purchase the service.

Jibes demonstrates the business value of mashups in the enterprise market by providing industry-specific information fabrics for the semi-conductor, airline and media industries on top of IBM Mashup Center. JustSystems provides a rich presentation layer for information accessed by IBM Mashup Center, allowing users to interact with dynamic, or living, documents that combine static and dynamic information. Together, this enables new uses for enterprise mashups such as the sharing of design and development information across collaborative research, or for use by development teams for reconciling supply and demand among trading partners.

An on-premise version of IBM Mashup Center is expected to be delivered mid-year, and pricing details will be made public at that time.