Skip to main content

Posts

Why Not Signed Password Authentication?

It is now universally acknowledged that basic password authentication does not offer sufficient security. 2-Factor authentication is a major improvement and hopefully would become the standard form of authentication over time. Another approach that might work well would be to use public key cryptography to authenticate with a signed password instead of just the plain password. An application (web or native) would generate the public/private key pair and store the private key locally while storing the public key along with the user's password on the server. This key generation can happen for instance during account sign up when it is clear the owner of the account is the one accessing it. Of course a key rotation mechanism can be devised to allow for a flexible way of rotating keys. This would all be transparent to the end user. Instead of the user submitting just the password, they'll submit both the password and a timestamp based signature, ie plain passwor...

Javascript for Java (ie JVM)

One of the exciting developments in the recent JDK-8 release is the integration of the Nashorn Javascript engine. Vertically integrated Javascript web application development Nashorn allows for the development of applications in the Javascript language on the JVM, what this means in general is that you can build both the frontend and backend of web applications in the same language, ie Javascript. What's in it for you Vertically integrated Javascript development has great appeal as can be attested to by the popularity of NodeJS. For the JVM this offers massive opportunity. Currently a lot of businesses with JVM infrastructure are constrained by their inability to staff for their Java developer needs. With technology such as Nashorn, a JVM shop doesn't need to demand Java skills, instead as a JVM shop you can hire developers already skilled in Javascript and put them to work building your business applications while still taking full advantage of the massive JVM techn...

Installing HiveMind on a Digital Ocean droplet as a cloud IDE

Digital Oceon is the hot cloud hosting provider that makes setting up a cloud box a breeze. Well it gets even easier when you throw HiveMind into the mix. HiveMind gives you a one-box hassle-free web app solution. Assuming you are using a Ubuntu droplet (why would you be using anything else?:)), on the command line do the following: sudo add-apt-repository ppa:webupd8team/java sudo apt-get update sudo apt-get install oracle-java8-installer cd /home wget https://s3.amazonaws.com/crudzilla/hivemind.zip sudo apt-get install unzip unzip hivemind.zip cd hivemind/bin ./jetty.sh start goto: http://your-digitalocean-ipaddress:7000 login with: developer/developer You now have a ready to use web app platform that supports a bunch of languages, you can create new web apps as you need to. Once you are logged in, you can change the login by going to System menu on the upper right and selecting Manage Users .

Introducing HiveMind

The Crudzilla Web Application Builder now has a name: HiveMind. We have released a set updates mostly having to do with the UI builder in our steady move towards building the ultimate web app delivery platform. Users will also now be able to receive automatic updates without having to download the whole distribution.

New CWAB Release (v1.5)

Happy new year! We are pleased to announce the release of version 1.5 of the CWAB platform. This release includes bug fixes and some product improvements. The most important and exciting news in this release is the introduction of visual UI driven development. In the future, using the CWAB platform to build applications would be a process of building by using prebuilt UI components and interacting with customization logic. The possibilities with this approach are quite attractive. This release includes the launch of our UI Parts stores. UI Parts are pre-built UI components that may also have back-end logic attached to them. The components would be built to integrate into CWAB applications and allows users to quickly compose highly sophisticated applications with minimal effort. The UI Parts store is fully integrated into the CWAB environment. Going along with the introduction of the UI Parts store is the UI builder now included in CWAB. This is a drag-n-drop enabled facility...

Better search and data modeling

Today we are releasing another set of important updates to CWAB. The Lucene search engine was previously integrated into CWAB, providing powerful search functionality to users. Lucene indexing is now an automatic process; additionally, the search interface and functionality has been improved and simplified. This update also includes the introduction of tooling for CWAB data modeling. CWAB comes with a unique approach to data modeling but we have been previously reluctant to hi-light it until the tooling was better developed. In the next blog post we'll include a quick video to introduce this very powerful functionality.

Unleashing the power of Lucene on your code

Today we are releasing another important update to CWAB. The Lucene search engine is now integrated into CWAB providing powerful search functionality to users. This is an initial integration of lucene, currently indexing is a manual process done by right-clicking a file/folder and selecting Index. In the future automated indexing would be added. In addition, the app creation process has been significantly improved. It used to take up to two minutes to create an app, that process is now much improved by moving most of the app creation process to the background. We've also added alpha-level integration of the NetRexx language. CWAB uses the excellent CodeMirror editor. For syntax highlighting we used the Go language mode as a starting point and added the NetRexx keywords. Unfortunately...