August 2002 Archives

AddThis Social Bookmark Button

Related link: http://www.jboss.org/mcnealy.jsp

It looks like Steve Anglin weblogged this a few days ago, but I just came across the response Marc Fleury (head of the JBoss group) posted to Scott McNealy’s comments about the conflict between the J2EE licensing model and open source approaches. Still, it’s ground worth treading again.

I’ve been using Java for enterprise applications since well before it was appropriate to use Java for enterprise applications. J2EE is effective because it’s the result of a standardization effort that open source efforts have yet to match. Open source is excellent for creating implementations, but it’s lousy for creating standards. This certainly not to say that the best standards are the proprietary result of a single company. Standards bodies like the W3C produce open standards while maintaining the centralized authority that’s required to keep the standard a standard. It’s worth noting that most of these standards are for protocols, not languages or environments.

In the two decades or so since C++, there have only been two successful new languages: Visual Basic and Java. It’s just plain harder to maintain a language standard than a protocol standard. While other recent languages (Smalltalk, Eiffel, Object Pascal and so forth) have made important contributions to the theory and practice of software engineering, and contributed to the development of not a few real applications, they’ll show up as tiny slivers on a pie chart showing the languages of choice in today’s development environments.

Now that I think about it, Perl might count as the third major language, but however useful it is Perl has been refactored on multiple occasions and is fundamentally controlled via a central source, along the Linux kernel model.

The J2EE specification, particularly the EJB specification, defines a highly complex environment. The specification for the EJB component model is quite detailed, and for good reason. If the EJB environment doesn’t stay consistent that your code just isn’t portable, however many platforms it compiles on. J2EE had the distinction of being the first successful complete, open and multi-vendor platform for enterprise development. This has been made possible because the company that foots the bill for developing the reference implementations also gets to eventually put its foot down on standards issues. I doubt this is the only way to build a complete language and environment, but it’s undeniably an effective approach.

But I digress, and if I don’t get back to Fleury’s remarks soon I never will. Despire what I said above, I agree that J2EE needs Open Source. Sun needs it too. Open source has filled out the Java toolkit. Tools like POI and iText make J2EE even more useful than the core platform. This is an overlooked but very real advantage that J2EE has over .NET, and I suspect that, given the closed nature of the .NET environment, it’s one that will persist for quite a while.

Fleury points out that JBoss provides an affordable way for developers on a budget to use J2EE, and notes that without this alternative they’ll likely switch to .NET. McNeally points out that open source J2EE servers pull the rug out from under Sun’s Java revenue model. The fact is that other than licensing revenue Sun has no way to make real money off of Java. That’s something Sun doesn’t need, and the viability of the Java platform without Sun is a very open question. I don’t think it’s safe to assume that IBM and BEA and the like would be able or willing to take up the load. For Sun, losing the low end (where they can’t sell servers anyway) to .NET would not be the worst thing that could happen. Which theoretically implies that it could lose it to JBoss just as easily, if not for the fact that JBoss will continue creeping up towards the high-end.

The market for commercial J2EE servers is not going away, although costs, volume and margins are all going to have to come down as the market matures. But it’s not out of the question that Sun will have to find other business areas to develop, including entering the services arena more aggressively. Of course, we’ve already seen the reaction from the rest of the J2EE server industry when Sun bundled an application server with Solaris, and I can see this reaction recurring if Sun moves aggressively into consulting. I don’t immediately see a way clear.

I can’t help but wonder if Java will turn out to be another product of dot-com era enthusiasm, funded by a company that thought it had a line on the next big thing and eventually salvaged from the rubble for the equivalent of pennies on the dollar by people grateful that somebody else had taken on all that initial expense.

Can J2EE survive open source? Can Sun survive J2EE?

Ted Neward

AddThis Social Bookmark Button

Related link: http://www.theserverside.com/home/thread.jsp?thread_id=15168

Stop and consider, if you will, what this posting to theserverside.com implies: that somebody not only believes that “alternatives” to EJB are useful and relevant things, but that they could make a business case out of it and stake a company’s fortune on the idea. Even more interesting, notice that three responders (as of this writing, a day later) picked up on this posting, one of whom said, “I was excited about an EJB alternative….”

What’s going on here?

People are starting to recognize some of the frailty implicit in the EJB specification. In particular, the emphasis on vendor-neutrality within the EJB specification leads to a number of inefficient ways of developing enterprise applications. In order to work around these inefficiencies, developers are forced to adopt “design patterns” that create more work for the average developer, arguably more work than if they’d just abandoned EJB altogether and started from a core architecture of just servlets/JSP and JDBC.

Certainly, there are vendor products that offer value-added features that provide easier workarounds than just straight adoptation of the design patterns mentioned above. For example, WebLogic has a proprietary extension that allows the developer to flag the database as “exclusive” to the EJB app, meaning the EJB server can hold data in local memory until it absolutely has to flush data back to the database; this is a proprietary extension, however, and should the developer (a) not know about it, or (b) move the code to a server on which that extension is not offered, or offered in a different way with different semantics, the system as a whole will suffer.

Is Portability Necessary?

A number of EJB developers code their enterprise apps strictly to the specification, citing adherence to the standard as a holy mission, and criticizing those who do not with holy zeal. In all honesty, however, how many EJB applications actually migrate between server products? With relatively few exceptions, every developer who’s actually had to perform such a migration has reported it’s *not* a trivial task, just as any non-trivial database schema faces “issues” when migrating from Oracle to SQLServer, or to DB/2, or to Sybase, or wherever.

What, precisely, do “portable EJB beans” buy us? The ability to migrate seamlessly between server products? For any but the most trivial beans, this is a patently false hope, just as any but the most trivial Java programs are nonportable. “Write Once, Run Anywhere” has long been seen to be a horrible myth perpetuated by the Marketing department at Sun, and yet, the same developers who scoff at WORA bite–HARD–on the idea that EJBs can be portable. The ugly truth is, there are dozens of little ways your EJB application can be bound up in vendor-specific features, in many cases without the developer even realizing it. They religiously cite adherence to the spec even as they flag the database for exclusive use and take advantage of vendor-specific Entity Bean O-R mapping details.

What else? Beyond the ability to select “best of breed” products (whose features you can’t take advantage of anyway, for fear of becoming nonportable), what does a portable EJB component gain? Absolutely zip.

A Simpler Alternative

Developers seek simpler alternatives to EJB for a simple reason: EJB is not only way overkill for most enterprise applications, but it also represents a huge learning curve for the average Java developer. The goal of “making enterprise applications easier” for developers (a stated aim of the EJB Specification) has been sacrificed on the altar of vendor-neutrality.

One such alternative is to look at what EJB provides, and see if those same features are provided elsewhere:

  • Persistence and O-R mappings. Can you say, “JDO”, or “SQLJ”, or “stored procedures”, even “raw JDBC”, anybody? Fact is, SQL was, is, and shall always be a more powerful and better-supported language than EJBQL. Why surrender the expressive power of SQL, particularly when developers have been mastering it for decades and database vendors have been optimizing it for longer, in exchange for a language that’s barely two years old, has varied support from vendors, and doesn’t provide half the functionality of SQL?
  • Remoting. The EJB specification “takes care” of all the underlying remoting details–which is to say, it exports your RMI servant objects (the beans) for use from client VMs. That’s it. Everything else–defining the remote interface, writing the business implementation, ensuring the interface inherits from java.rmi.Remote–all of that is the same level of detail required by doing raw RMI programming yourself.
  • Synchronization. Along the lines of remoting, EJB also provides synchronization policies for your remote objects–by choosing the worst possible synchronization scheme. When a remote call comes in from a client, the entire bean is locked until that client call completes–any other call from any other client is blocked until that call returns. This is like locking the freeway when a car hits the onramp–great for that one car, but certainly less than optimal for others waiting on the onramps. If you take control of your RMI servants directly, you can replicate this behavior if desired, or adopt a finer-grained synchronization policy to boost scalability.
  • Connection pooling. This is probably the most cited reason developers use to persuade managers to adopt EJB…. and probably the least meritous, from a technical perspective. The fact is, a servlet-based application will connection-pool naturally, because all presentation elements are coming through the servlet container anyway. Drop a connection-pooled JDBC driver into the webapp’s WEB-INF/lib directory, and voila! You’re connection pooling with the best of them. In fact, many servlet containers are even providing JNDI contexts from which to discover JDBC DataSources, rather than forcing you to do the Class.forName()/DriverManager thing directly.

The list goes on and on; suffice it to say that there’s very little, in my (and many, many others’) opinion, that the EJB specification really provides.

Don’t Throw the Baby….

For those unfamiliar with the saying, there’s an American proverb that states, “Don’t throw the baby out with the bathwater”–in short, don’t throw the good away with the bad. EJB is not the sum total of J2EE–in fact, it’s probably the one bad apple in the barrel. Servlets, JSP, JMS, RMI, JDBC, all of these are excellent specifications that serve their stated goals quite well. Abandoning EJB doesn’t imply you need to abandon them, either–far from it. Instead, embrace them even more fully, and use them to their fullest capabilities.
In short, next time you’re looking into building an enterprise application in Java, maybe spend less time trying to figure out which EJB server to use, and spend a little more time trying to figure out precisely what you need the EJB server for. I think you might be surprised at the results, and discover that a servlets/JSP->stored procedures/JDBC/JDO/SQLJ scenario might just be all you need.

Good luck.

What, exactly, does EJB offer you?

AddThis Social Bookmark Button

Related link: http://www.theserverside.com/home/thread.jsp?thread_id=15141

From the ServerSide: “Marc Fleury, founder of JBoss has posted an answer on jboss.org to Sun CEO Scott McNealy’s charges that Open Source is destroying the J2EE industry’s revenue model. In the interview, Fleury argues that ‘J2EE needs Open Source in order to remain a stable market and to avoid being eclipsed by .NET’”.

William Grosso

AddThis Social Bookmark Button

Related link: http://www.kurzweilai.net/index.html?flash=1


The year 2000 was a big one for futurists. Not only were the millenial nuts out in full force, prominent sages from the computer industry made a big splash. For example, Bill Joy published his famous article on the Why the Future Doesn’t Need Us. And Ray Kurzeil’s book, The Age of Spiritual Machines, reached bookstores everywhere.


It’s interesting to occasionally follow up on visionaries. In Kurweil’s case, he’s built a pretty intense web site, containing both reprints and original articles that Kurweil thinks are important.


This is one of the most interesting web sites I’ve seen this year. Go and visit. Read. And learn about the future.

Did this site remind you of any others?

AddThis Social Bookmark Button

Related link: http://soldc.sun.com/sunnetwork/

“Think about it: What questions would you ask James Gosling, Whitfield Diffie, or Rob Gingell about Sun’s software — past, present, or future; theoretical or practical; general or specific?” — Solaris Developer Connection

Sun is collecting your questions for three of the top software leaders at Sun Microsystems: James Gosling, the “father of Java technology,” Whitfield Diffie, co-inventor of public key cryptography and renowned security expert, and Rob Gingell, who sets technical and strategic directions for Sun software. All three will be featured speakers at the 2002 SunNetwork Conference in San Francisco next month. While you could press in to meet them up by the stage, you can certainly submit your questions ahead of time so our interviewers can ask them of these three software luminaries.

AddThis Social Bookmark Button

Related link: http://jcp.org/jsr/detail/154.jsp

JCP posts Java Servlet 2.4 final draft and JSP 2.0 proposed final draft. The Java Servlet 2.4 specification defines new Permission classes for satisfying the J2EE role-based authorization model, while the JSP 2.0 includes the ability to write taglibs without java, the addition of an expression language, requirement of J2EE 1.4, JSP fragments, a simpler tag invocation protocol, and more.

AddThis Social Bookmark Button

Related link: http://news.com.com/2100-1001-954958.html?tag=fd_top

According to CNET News.com’s Wylie Wong: “Borland’s suite of tools, code-named Galileo, will be positioned to compete against Microsoft’s popular Visual Studio .NET tool suite, said Ted Shelton, Borland’s chief strategy officer. The Galileo bundle, set to debut early next year, will include a new version of Delphi, Borland’s key development tool, and other languages that have yet to be announced, Shelton said.”

Look for Galileo to also include JBuilder or Java IDE tools, in addition to .NET tools for C#, Visual Basic .NET, ASP.NET, ADO.NET and more.

Some may say that Borland doesn’t have a chance to compete with Microsoft. Remember, though, Borland will also have a partnership with BEA Systems, as announced two weeks ago. And BEA Systems will likely have the backing of HP, given HP’s interest in bundling BEA software and middleware with its servers.

What do you think of Borland’s chances against Microsoft?

William Grosso

AddThis Social Bookmark Button

Related link: http://www.sdforum.org


For about four years now, I’ve been volunteering at SDForum. It’s a nice place. The goal is to educate the developer community, to help everyone keep pace with technology, and, in general, to just foster the community. There are 2,000 members, and 20+ meetings a month; we’ve managed to survive the way Silicon Valley has cratered in the past year (and even thrive).


I’ve been chair of the Java SIG (meets monthly in Palo Alto; see here for details) for a little over 2 years. It’s been a fun run, and I’ve learned a hell of a lot from chairing it.


Anyway. I’m starting a new SIG right now, and that’s actually consuming most of my blogging energy (I’ll start blogging in earnest in another week or so) But, in lieu of blog entries, might I suggest visiting the SDForum website and seeing if anything we’re doing interests you.

I’d love to hear feedback on SDForum. What would make us a better organization?

Ted Neward

AddThis Social Bookmark Button

In a recent article on DevX, Rick Strahl writes on “The Diminishing Importance of HTML”, and that “I am guessing that there will actually be a push back to desktop-driven, forms-based applications once .NET takes hold”.

Truth be told, I’ve been seeing this trend slowly building over the last year or so, evidenced by the release of more and more client-side technologies on both Java and .NET platforms. The problems with HTML, put bluntly, are myriad; in addition to the ones Stahl cites, I’ve run across the following:

  • Portability: Despite the best attempts of the W3C to keep everybody on the straight-and-narrow, HTML still is one of the least-obeyed specifications in the Internet world. Both Microsoft and Netscape routinely do things that violate the spec, and XHTML has been all but forgotten. Now, arguably, with Microsoft’s ever-growing domination of the browser market (last statistic I heard said they owned something like 80% of the browsers out there), one could argue that you could just write to IE and call it a day, but then which version do you pick? How far back? There are literally dozens of different browser combinations a developer has to consider. OR, as a developer you choose to go with a least-common-denominator approach, and come up with a user interface that’s difficult for users to work with.
  • Control: Fact is, HTML just doesn’t offer the same kinds of control that a more powerful client-side tech does. I can’t detect mouse movement or do in-screen updates, for example. Yes, granted, JScript/JavaScript offers that kind of control, but you’re back to the portability problem, since neither of the two big browsers really is source-portable to the other.
  • Presentation: User-interface experts will rant on for days about how a successful user interface has to be painstakingly crafted to best support the user’s requirements: buttons must be placed just so, fonts must look exactly like this, and so on. Drop-down lists must be arranged so that they don’t cover information the user may wish to consult while picking from the list, for example. But HTML was intended from the beginning to allow for platform-specific rendering, which means UI experts can’t control the presentation of the interface as closely as they need to. Cascading Style Sheets was an attempt to solve this, but it can’t change how a browser renders form controls, and there are still some compatibility problems.
  • Performance: Consider what a lot of these big companies are asking of HTML: data entry, data entry, and data entry. Because developers don’t want to use anything but plain-vanilla HTML, however, any validation of that data entry has to wait until the entire form has been submitted, at which point all of the errors will be flagged and sent back to the user for submission. In a rich-client application, however, we can catch those data validation errors up front, and prevent an unnecessary round-trip across the database, not only reducing traffic, but improving the system’s scalability as a result.

HTML was intended as a lightweight, easy way to present a user interface to a remote machine. As we ask more and more of it, however, it’s begun to break down and fray at the edges.

Why did we go to HTML-based interfaces in the first place? For reasons of Zero Deployment: before web apps, we built fat-client front-ends to client-server systems that were installed directly on the end-user’s desktop. When the database or business logic changed at all, we had to reinstall the application on the end-user’s desktop, and that’s a painful process if it’s not automated somehow. (Even when it is, such as using a network share, problems arise.) What we were seeking was a way to change the application without forcing the entire user community to come to a screeching halt waiting for the next revision. Server-based applications, such as those delivered via HTTP using HTML as their front-end, were the answer.

But the fact is, HTML is not the sole server-based presentation approach. Droplets and Sash (an IBM toolkit recently released from Alphaworks) and XUL (XML User-interface Language, which is how Netscape renders its UI in Navigator) offer much of the same advantages of Zero Deployment. Specific to Java, JNLP (Java Network Launch Protocol) offers a standardized way to fire a Swing GUI from within a Web browser, almost like an applet but with a more fine-grained security model (in theory–JNLP hasn’t exactly delivered on this promise quite yet), the ability to do automatic updates of the JDK required, and the ability to run the application locally if it’s not been updated since the last time it was run. Similarly, Chris Sells wrote an article in MSDN Magazine about how to achieve the same thing with .NET WinForms–in his case, a game he calls “Wahoo!”.

The fact of the matter is, users are getting tired of all the problems that creep up with HTML, and are demanding that we achieve “rich client” front-ends, even as we keep the benefits of distributed applications. It’s doable, and it’s up to us to recognize that and embrace it.

AddThis Social Bookmark Button

Related link: http://www.jedit.org/

I’ve been a big fan of open source on the server for quite a while. Part of this is a desire to get the most out of what are often very limited budgets, but most of it is because the tools are suited for the task. Virtually all of the infrastructure at our company runs on Linux or one of the BSD variants. We haven’t switched over to an open source RDBMS yet, but even our Oracle servers have been running on Linux for over four years and several versions.

Despite those largely positive experiences on the server, I’ve never had much open source software on my desktop. Part of this is the same old story: almost everyone I work with uses not just Microsoft Word, but Excel, PowerPoint, Project, Visio and even Access as well. I use every one of these every day, and switching back and forth to Linux doesn’t make a lot of sense. I’ve also been using an integrated IDE since Turbo C back in the late 1980s, and at this point have become totally spoiled, particularly since switching to JDeveloper.

The two longstanding exceptions have been WinCVS and Cygwin, both of which are essential for communicating with all those open source based servers lying around the company. Cygwin lets me do very useful things, like running X Windows applications from my Win2K box, and scp and ssh’ing all over the place. Both have been essential toolkit components for several years.

Recently, though, I’ve begun to explore a bit more. I’m currently working on an enterprise software engineering book for O’Reilly, and my co-author maintains a Microsoft free household. He uses StarOffice, and we’ve found that the interaction between StarOffice and Word, even on the relatively complex O’Reilly template, is very clean. Most importantly, the revision markup features all translate, although information about who made which change gets lost. It also spurred me to download AbiWord and OpenOffice.org 1.0.1. AbiWord’s image handling wasn’t up to my requirements, but OpenOffice, so far, has performed like a champ. As an experiment I’m using it to write an article, and if all goes well I’m going to try switching over for writing work.

My other recent discovery, if by discovery one means something that everybody else has already found, is the JEdit programmer’s editor. I haven’t been using it to actually write much code, since I still prefer the integrated environment in JDeveloper, but I’ve been using it to clean up a lot of existing code. Some of the JEdit plugins, particularly JavaStyle, a code reformatter, are very well thought out. A few lengthy source files that had been mangled almost to unreadability after years of round trips through source control, different editors, tab-to-space conversions, space-to-tab conversions and the like are now much, much easier to understand, and if all the JavaDoc comments aren’t written, at least there’s a nagging space for them now. The tools support the practice, which I approve of wholeheartedly.

It makes sense, of course. Programming tools, in particular, are almost always good, because they’re the only area where the developers have constant, ongoing, easily understood input from the user community. Open source programming tools, where it’s pretty much a given that the authors will be using the products of their effort (else, what’s the point?), benefit from this even more than commercial products.

I clearly need to devote more time to monitoring open source tool sets. Better late than never.

What open source tools do you use to aid the process of programming?

AddThis Social Bookmark Button

Related link: http://onjava.com

Dear O’Reilly Network Reader,

I, Steve Anglin, am the managing editor for ONJava.com. As such, I want to let you know
that ONJava.com has undergone an upgrade to version 2.0.

This Web site upgrade includes the following, new resources:

The Open Source Java Directory includes a listing of many of the major open source Java projects, and it
also lets you submit your own or nominate other open source Java projects for listing. The Java API Map/Directory gives you a relational hierarchy of Java API. By clicking on an API topic, you’ll see all ONJava related
articles and resources for that topic. The newsletter repository lets you see an archive of current and
previously published ONJava.com Newsletters.

Moreover, there’s the ONJava.com
Recipe of the Day
, a daily code recipe from O’Reilly’s Java Cookbook by Ian Darwin. Of course, you
can also find the latest Java weblogs,
Java news in Meerkat,
Java events and
Java jobs.

Enjoy ONJava.com. If you haven’t done so already, please bookmark ONJava.com for future reference. If you have any questions, suggestions and the like for improving the site going forward, please feel free to share your views in our Talk-Back below; otherwise, contact me at
sanglin@oreilly.com. Thanks.

Regards,
Steve Anglin

What more would you like to see on ONJava.com? What features would you like to access here; etc.?

AddThis Social Bookmark Button

According to SD Times’ Steven J. Vaughan-Nichols: “As you know by now, Hewlett-Packard has decided to get out of the middleware business. Specifically, say goodbye to Netaction Application Server, Netaction Web Services Platform and Web Services Registry. They’re toast.” This in conjunction with HP’s announced partnership with BEA in distributing BEA’s WebLogic application server and possibly tools with HP-UX-based servers seems to pave the way for a possible HP acquisition of BEA Systems. If BEA’s stock price per share drops low enough, HP may pull the trigger on such an acquisition. I think it’s only a matter of time.

HP’s server competition, Sun and IBM, already offer complete middleware and developer tools solutions for this server customers. With IBM, it’s WebSphere, WebSphere Studio (a commercial version of Eclipse) and DB2. With Sun, it’s the Sun ONE Web application server (formerly iPlanet and Netscape), Sun ONE Studio (formerly Forte for Java IDE), etc. Why not HP? Their discarded offerings including Bluestone just was not enought to make an impact in the marketplace to add real value to HP’s offerings. But BEA’s WebLogic certainly does, given that WebLogic is still number one in market share.

Also, BEA just announced a partnership with Borland for its JBuilder IDE to be bundled with WebLogic. Given this, HP has to be even more interested. I guess this means the BEA doesn’t have much faith in Cajun or WebLogic Workshop to have enough market impact. However, the Java Web Services (JWS) tags specification as well as perhaps other features in Cajun may find their way into JBuilder. Time will tell.

In other news from around the league, speculation is that Palm is for sale. Certainly, Palm should consider a roll back into 3COM. Currently, Palm partners with IBM, according to ZDNet and Gartner. Palm may be talking to Apple as well. Remember the Newton? Well, Apple does. Anyway, Palm is probably on the block. What about Palm and Sun? Well, Sun is focused on Java 2ME for the cell phone with its strongly established partnerships with Motorola, Ericcson, etc. Sun also has the RIM Blackberry as a cell phone and PDA combo, which may be the long term replacement to the stand-alone PDA. Maybe, Palm and Qualcomm could talk about a partnership/merger. Anyway, time will tell on this as well.

Sun and Dell? Why not. HP and Compaq happened. Given Sun’s server sales are troubling, look for Sun to aggressivly sell its Cobalt Linux servers. The only problem: access to a ripe market. Enter Dell. I guess we’ll see.

During the remainder of this year, look for M&A mania in the Java/Java-related industry.

Please share your thoughts, speculation and more on the Java industry.

AddThis Social Bookmark Button

Related link: http://www.theserverside.com/home/thread.jsp?thread_id=14994

Nitin Bharti on TheServerSide.com posts the following:

“A new Hard Core Tech Talk with Marc Fleury, President of the JBoss Group, has been posted on TheServerSide. In this interview, Marc talks about the current state of JBoss and the open source landscape. He looks at JBoss’ microkernel design, client interceptors, and fault tolerance in JBoss. He describes the open source way of life, how JBoss functions as a business, and gives his take on .NET.”

AddThis Social Bookmark Button

Related link: http://www.theserverside.com/home/thread.jsp?thread_id=14977

Jason McKerr posts the following on TheServerSide.com:

“Sun has announced that they are going to give $3 million to fund open source initiatives for implementing standards that come out of the JCP. Under the new scholarship program, non-profit groups, universities and qualified individuals can apply for scholarships to help defray the costs of Sun’s technical support services while undergoing the Java compatibility tests. This seems to be an interesting reversal, since last week McNealy was saying how he felt open source was hurting J2EE. Maybe this is a chance for JBoss to get certified?”

AddThis Social Bookmark Button

I was an early adopter of Digital Video Recorders. Two years ago I bought a 30 hour, Panasonic branded ReplayTV from an online bulk buying company that has long since departed. Between the incentives offered by the dot-com retailed and by Replay itself they almost paid me to take the thing off their hands.

As a result, I don’t think I’ve watched more than a handful of commercials since the summer of 2000, and my life has improved as a result. I can watch an hour of TV in 40 minutes, without having the experience broken up by advertising. Of course, in doing so I’m rejecting the implicit contract between myself and the TV providers, but it’s only an implicit contract and I’m not really under any obligation to watch the ads. And since I’m just one person, it’s not like my opting out is going to make any difference. Millions of people doing just what I’m doing will, and barring government intervention the TV business model of the 20th century is dead.

However, all is not lost for Viacom, Time Warner and the rest. The ReplayTV has actually increased my direct spending on television. Without it, I’d probably just carry the basic cable package, and that only because I need the infrastructure for my home office broadband connection anyway. I just don’t have the time or flexibility to set up my life around TV schedules. Premium channels would just be a waste of money, since the intersection of when HBO is showing something that I want to see and when I have time to sit in front of the television is vanishingly small.

Instead, I have the extended cable package and recently added six channels worth of HBO for an extra six or seven dollars a month. This would have made no sense before, but with the ReplayTV I can sit down for five minutes every few days and scout ahead on the interesting channels (or even do it from a web browser) and have it record whatever I might want to see. I can then watch them, or not, as time and inclination allows.

The biggest victim of DVRs might turn out to be the video rental industry. Since combining HBO and Replay, I have rented far fewer movies. The new technological mix isn’t quite video on demand, but it’s quite close. It’s one of those technological compromises that so often sits between current practice and the grand vision of the future, a clever way to push existing infrastructure ahead.

So I pay for my cable and time shift the programming, skipping past the advertisements as I go. Since I have the capability to skip the ads, I’m going to do so, but I wouldn’t be averse to a different method of television funding, since widespread DVR use will make the current system untenable.

The UK model is very interesting: a fee of around $185 a year, per household, entitles you to own as many TV sets as you’d like. That fee goes to support, among other things, the BBC. But I do see problems here. Broadcast TV can be a powerful force for social and personal improvement, even if most of it is junk. If a TV fee prevents even a few children from watching PBS then society has probably lost on the deal, although it could simply be argued that TV fees are a highly regressive tax (they are) and leave it at that.

Instead, I’d be more inclined to pay for cable television on a per-channel basis. There are only a few that I actually watch, and even at HBO rates I’d end up paying about the same as I do now for the smaller subset of channels; more than worthwhile if commercials are reduced. I suspect this will happen anyway, as broadcasters or basic cable channels are forced to launch premium versions of their current channels. The free versions will become increasingly intrusive, probably with text crawls on the bottom of the screen at all times and advertising embedded in the programs themselves.

Broadcast flags, such as the one proposed by Hollywood via the FCC, may be the worst of all possible solutions. These flags, embedded in digital cable or broadcasts, would instruct hardware to disable the fast forward button, or even to prevent recording and time-shifting at all, effectively turning new technology into old technology. It’s possible, again, that cable companies will offer an additional service to disable the broadcast flag for those willing to pay an extra fee. Providing this back door, however, would undermine the MPAA’s position that allowing any digital copies at all out the door would open the way for widespread piracy. I would think that the thriving DVD market and the slow retreat from Macrovision copy protection would belie those claims anyway, but as computers get faster and bandwidth becomes more ubiquitous anything is possible.

Whatever the ultimate resolution is (and there will be one) it’s up to the market to decide what it will be. The current situation for consumers with DVRs is a border phenomenon. Individual consumers can take advantage of the turmoil, but not forever.

Where is digital media leading us?

Ted Neward

AddThis Social Bookmark Button

Related link: http://news.com.com/2100-1001-949241.html

This is just too rich–California is to become a “Live Free or Die” software state? Somebody had better warn Larry Ellison that his home state’s about to disown him….

And, of course, the visual of a thousand bespectacled geeks marching on Sacramento holding their penguins and chanting “Live Free, Choose Emacs!” (all the while religiously debating which distribution to use amongst themselves) is just too precious to pass up.

Unlike the author of the article, however, I think this bill has a fighting chance to get through the California Assembly, and if it does, it’s entirely likely that Gov Gray Davis would sign it. After all, it’s Davis’ problems with Oracle (can you say “Ellisongate”?) that have really underwritten his pain in contemplating reelection. By passing this bill, maybe Gray thinks he can put all that behind him and perhaps earn a few poll points?

AddThis Social Bookmark Button

Related link: http://java.sun.com

Sun’s new Java site is live. Actually, it’s still java.sun.com. However, java.sun.com has been upgraded substantially, including the following:

  • Better left-hand side (LHS) navigation
  • Improved overall navigation
  • An A-Z Index of all Java terms — Great for those new to Java!
  • Sample Code Repositories for all the major Java API — Great resource for developers who need solutions and fast!
  • Access to other Java API and code through docs on site
  • Focus is on Java as a technology, not a product
  • Improved Java forums for community dialog and code exchange
  • Java search engine using Google
  • Nice look

This new upgrade debuted online in early July. So, keep in mind that there may still be some bugs as well as additional new features pending.

However, since I know some of the people over there, I would be happy to pass along any advice, issues, suggestions and more you have for java.sun.com.

Share your thoughts about the new and improved java.sun.com. Thanks.

Ted Neward

AddThis Social Bookmark Button

In stunning fashion, Scott McNealy, Fearless Leader of Sun Microsystems, has put his company squarely in the middle of Yet Another Distraction, this time suggesting that Open Source software could be hurting Java in it’s Good Fight against the Evil Empire.

The full interview will be varried in the August issue of Linux Magazine, but an excerpt was posted on www.oetrends.com. If you haven’t yet read this, do so before proceeding.

Hard Questions

After having read the excerpt (after seeing the link show up in a The Server Side newsletter), I had to really stop and think for a bit. Some really interesting questions began to emerge:

  • Is Scott McNealy completely off his rocker, or does he just not think when he speaks?
  • Is Scott McNealy in tune with what Open Source really means?
  • Does Scott McNealy really matter? And, if so,
  • Can Sun survive this man?

Taking these one at a time, then….

Is Scott McNealy completely off his rocker, or does he just not think when he speaks? If we stop and go back and reread the excerpt, a couple of interesting points emerge. First, in classic interview fashion, McNealy never actually answers one of the most interesting questions of the whole lot: is it important to have a certified open source J2EE implementation? He responds by saying “No, we’ve already got one. It’s called Sun ONE app server.” As Floyd Marinescu points out on The Server Side, since when has Sun ONE been open source? More importantly, though, is Scott’s follow-up to this statement: “Do I think it’s important? I don’t know what that means.”

What it means, Scott, is that Sun fully supports the Open Source initiative. That Java is fully in line with the goals and agenda of the Open Source movement, and that Java remains committed to the promise of free software. Now, please, don’t get me wrong–personally, I’m not a strong advocate of Open Source software. Ultimately, while I love the fact that there’s useful software out there that I can love and use (think Ant), I can’t see how this survives in a commercially-driven world. The problem here, though, is that Sun has embraced the Open Source community and claimed that together, they will vanquish the Evil Empire, that Microsoft represents the Dark Side that can only be conquered by collective resurgence of the masses (of developers). Is this Sun suddenly showing their true stripes, that they’re just as commercially-motivated as that Big Software Company in the Pacific Northwest?

Now, another version of this is one that’s near and dear to my own heart: that Scott McNealy just opens his mouth and he has no idea what will come out. It’s unplanned, uncensored, and entirely unpredictable.

Is Scott McNealy in tune with what Open Source really means? I truly don’t believe he is. The brutal truth of the matter is, Sun is a commercial company out to survive in an increasingly dysfunctional economy. Let’s call the spade a spade: every time somebody downloads and uses JBoss, it’s a potential (note the word here, potential) Sun ONE sale out the window.

Again, though, note how McNealy’s mind works: “I actually think we need more revenue in the J2EE space, so that we can do more advertising to get the message out, because right now the world is getting blitzed with Microsoft advertising, and promotion and branding and propaganda, and big lies, that that’s why they’re going, not because it’s a better product.” That is, revenue == market share, and that whole Linux thing is just a fluke. That advertising comes directly from revenue, and word-of-mouth advertising (such as what takes place with open source software) simply can’t keep up.

(Personally, I’m so sick and tired of the Java zealots pooh-poohing the .NET space as “propaganda” and “big lies” that I can’t even stand to be in the same room as somebody who starts down that tired old road.)

On another note, notice how McNealy still refuses to admit there’s anything of worth in .NET; therefore Microsoft is winning purely on strength of its advertising. McNealy does point out that J2EE is getting fragmented in its advertising message, since it’s coming from multiple vendors–a true statement, I think. But what’s the solution? How could these vendors all work together to promote the J2EE message and still compete with one another? It’s really too much to ask.

Does Scott McNealy really matter? This, ultimately, I think is the most important question to ask. Does Scott McNealy really make a difference in the forward motion of Java? This is one I just can’t answer, to be honest. How much of Sun’s movement on Java does he influence? Does he make decisions about technology? Are there projects he’s artificially propping up, bleeding money from the company, in his quest to “Beat Microsoft”? Or has he shut innovative projects down for the same reason? Or is he just a mouthpiece that fires off random shots at Redmond with no real meaning behind them?

What’s perhaps more important, though, is the follow-up to this: if Scott McNealy does, in fact, matter, Can Sun survive this man? It seems, almost, like McNealy is the best PR weapon Microsoft ever invented. Can Sun continue to survive if he keeps alienating Java users with these sorts of caustic comments?

Ted Neward

AddThis Social Bookmark Button

A JVM that gradually tunes its garbage collection heuristics to adapt to the applications being run. Building JVMs in a modular way to support extension and modification. Finding faster implementations for Java bytecode operations. Analysis on where static compilation of the Java language to native code will break in the face of versioning, and solutions to the problem. And a keynote from the enemy.

Greetings, from the USENIX JVM Symposium, 2002!

This conference, perhaps a blip on the radar of most Java developers, deals with that element of the Java environment without which no Java code could ever execute: the Java Virtual Machine itself. Made up of attendees from all over the world, representing both corporate and academic environments, the JVM Symposium rattled off a rather interesting, intriguing, and sometimes intimidating array of topics for the Java developer to consider. Two days of intense, in-depth technical presentation, discussion, and peer-to-peer networking, the old-fashioned way: schmoozing.

If you threw a party, and only the geeks showed up, is it still a party?

This was, without a doubt, one of the most interesting conferences I’ve ever attended. Blatantly research-oriented and academic in nature, the technical sessions were fascinating to watch. Instead of the range of vendors springing to the stage with carefully-choreographed dog-and-pony shows demonstrating how their product does X better than the competitors, the Symposium was a presentation of research papers, where honest evaluation and feedback was desired, given, and appreciated. No better example of this took place than during the keynote Thursday morning, the first day of the conference.

The keynote, “Stop Thinking Outside the Box, There is No Box”, by Robert Berry of IBM, essentially described much of the work he and his compatriots in one of IBM’s research labs have been studying and exploiting in the areas of performance and optimization. His conclusion? “Don’t focus so much on performance–it’s probably not as important as you think.” Said with a chuckle later, “Of course, don’t tell my boss that.”

Smaller and smaller, faster and faster

Much of the focus of the papers and research topics this year was on tiny devices–specifically, optimizing JVMs for use on memory-constrained devices like PDAs and cellphones. Several research topics focused on how the JVM must evolve to better work with handheld devices; in fact, one of the more interesting talks from this perspective was the talk given by G. Chen, M. Kandemir, N. Vijaykrishnan, and M. J. Irwin, of Pennsylvania State, and M. Wolczko, of Sun Microsystems. In their paper, “Adaptive Garbage Collection for Battery-Operated Environments”, they discussed an approach whereby the garbage collector of a VM running on an embedded device could relocate objects in memory, so that particular banks of memory within the device could be shut down, thus creating less power draw on the device’s batteries. As I was listening, I thought about the discussion a few years ago about the debate between different garbage collector approaches, and in particular, the arena-based collector.

In an arena-based collector, objects are allocated out of one of many arenas, small contiguous “chunks” of memory allocated by the memory manager. As objects are freed, they are not recollected until all of the objects allocated from within a particular arena are marked for collection, at which point the collector can release the entire arena and reallocate. It makes compaction simpler, since arenas can be shuffled around instead of the actual objects, at the expense of carrying around dead weight–unreleased-yet-releasable objects–until the arena itself is completely unreleased.

The parallel here, of course, is the idea of either arenas themselves being the banks of memory, or else suballocating arenas within a given bank. When an arena was ready for collection, rather than going through the motions of releasing the memory and then shutting the bank down, the bank could simply be shut down–in essence, collecting memory back via powering down. It certainly would be fast, and preservation of battery life is, of course, all-important on an embedded device.

AIG: Artificially Intelligent Garbagemen?

One talk which blew me away with some of its implcations was “To Collect or Not To Collect? Machine Learning for Memory Management”, presented by Eva Andreasson and Olof Lindholm of BEA/Virtual Machines and Frank Hoffmann of the Royal Institute of Technology. In it, they presented a garbage collection system which used machine-learning techniques to slowly, over time, tune its garbage-collection heuristics when deciding whether to collect or not. The part that truly sent a shot of pure adrenaline into my system was a chart presented towards the end of the talk, comparing their machine-learning GC against JRockit, a high-performance JVM marketed by Appeal Virtual Machines (now owned by BEA).

As would be expected, the JRockit GC performance numbers were pretty flatlined across time–JRockit achieves its garbage collection numbers (which are, in of themselves, impressive) through an advanced, yet static, set of heuristics deciding whether objects are collectable or not, and which ones to collect first. And, as would also be expected, the machine learning GC curve started out far below that of JRockit. But what truly blew me away was that the curve not only approached the JRockit line over time, but eventually surpassed it. (All the way to the end of the chart, anyway, when it took a surprising dip back below the JRockit numbers. When asked why this was so, Ms. Andreasson, presenting, shrugged and said, “We don’t know. In fact, I was counseled to just drop that data off the end of the chart to make it look better.” At which point the room broke out in laughter for a good fifteen seconds.)

If this doesn’t send chills down your spine like it did mine, then the full ramifications of this kind of research hasn’t hit you yet. Consider the purpose to which we are currently putting Java: enterprise systems, running 24×7 for as long as we can keep them up. Consider the curve presented: over time, the GC adaptations simply get better and better. Over time, which a 24×7 process has plenty of. In short, your servlet could achieve better performance, just because the VM underneath it has learned how best to adapt its garbage-collective techniques to the code running on top of it. No need for complex pooling logic, or activation/passivation schemes–the JVM learns as it goes, and it’s got plenty of time in which to do it.

No, Really, I’m the Same Guy You Always Knew

One performance technique which was popular in Java’s early days (that just doesn’t seem to want to go away) is the idea of taking a finite set of Java classes, and rather than running them under the dynamic managed environment of the Java virtual machine, to instead compile the code statically, creating a natively-linked executable. Several vendors, including Microsoft, bundled Java-to-native compilers as part of their Java offerings, and the GNU crowd continues to pursue gcj as we speak. But there are issues involved with this approach, issues which hadn’t occurred to me until I’d heard Dachuan Yu, Zhong Shao and Valery Trifonov of Yale present their paper, “Supporting Binary Compatibility with Static Compilation”.

In essence, the problem is not a new one–normally, under the dynamically-loaded JVM environment, when a Java class wants to call a method on another class, the bytecode “invokevirtual” is emitted with the target being the name and signature of the method to call. When the JVM sees this, either the interpreter or the JIT compiler translates this symbol into an instruction-pointer target within the JVM. When a Java class gets statically compiled, however, for maximum runtime performance, this symbolic lookup is done at compile-time, and these symbolic method lookups turn into fixed offsets into virtual tables embedded inside the code. Now, when the class called is changed, all callers must be recompiled, or else the slot/offset scheme will be off and wrong, and Bad Things will result. Their solution? To follow one of the oldest precepts in Computer Science: “There is no problem that cannot be solved with another layer of indirection”. In short, the static Java compiler doesn’t embed the offset directly, but a pointer to a table in which those offsets are maintained and updated as classes are resolved and loaded in.

Ordinarily, I don’t deal much in statically-compiled Java; in fact, I see one of Java’s greatest strengths is that of its dynamically-loaded nature, allowing it to easily take the component-based container approach that’s been so popular three times now (applets, servlets, and EJB). But again, the paper made me start to think about object layouts, both in terms of binary compatibility as well as JVM implementation of method dispatch–combined, for example, with an adaptive JIT that tried to optimize and inline methods as aggressively as possible, and back out when changes in the environment necessitated a reJIT of a method against a similar-looking yet different class.

Capulets and Montagues, In The Same Room?

But by far and away what was most interesting to me, personally, was the keynote on the second day. David Tarditi presented “Research Opportunities and Research Challenges”, in which he described the Microsoft CLR architecture, and talked about the Shared Source CLI implementation, code-named Rotor. Surprisingly, pleasantly so, there was little in the way of poisonous comments directed at the speaker, a member of Microsoft Research. In fact, at the end of the conference, it was even brought up that the next iteration of this conference might be renamed from the “JVM Symposium” to the “VM Symposium” or “JVM/EE (Execution Engine) Symposium”, to reflect a growing interest in virtual machine technology outside of Java, such as the CLI (or Lisp or other VMs that have come along the way).

Naturally, this peaceful interaction between Java and .NET is near and dear to my own heart: as the author of one Java book (Server-Based Java Programming, Manning Publications, 2000) and another one on the way (Effective Enterprise Java, Addison-Wesley), as well as two .NET books and (C# in a Nutshell, and VB.NET Core Classes in a Nutshell, both OReilly 2002) and another one on the way on Rotor (Shared Source CLI Essentials, OReilly), I see tremendous opportunity for geeks of both camps to learn from one another’s history, experience, and, yes, mistakes. But the only way to find out about them is to look, with clear and unpoliticized eyes, at what the other guys are doing, and see if it’s relevant. Using myself as an example, my interest in writing about Rotor in turn rekindles my desire to dive into the SCSL-licensed JDK source and figure out how Hotspot does JIT, GC, classloading, and so forth.

Same Time Next Year

All in all, the Symposium was a success, I believe; not only were interesting papers presented (admittedly, from a personal perspective, some more than others), but the opportunity to “work the room” and get a chance to talk with academics, researchers, and the odd corporate developer (like myself) was definitely good stuff. Although not necessarily a conference for the faint-of-heart Java programmer, this is definitely a conference to take a look at if you’re a team lead, tech lead, or architect who wants to keep an eye on what might be coming down the highway in a few years.

Now, if you’ll excuse me, I have to finish downloading the JDK source and start building…..

William Grosso

AddThis Social Bookmark Button

Related link: http://www.gamestudies.org/


Game Studies: The International Journal of Computer Game Research. A real, and interesting, new on-line journal about computer games. Highlights include the complete absence of discussions about polygon rendering and the interview with Will Wright (I’m especially happy to see Pinball Construction Set getting its due. That program was amazing).


True, Chris Crawford isn’t involved, but that’s a minor quibble. I really like this journal.

Got a favorite new, on-line only, journal for an emerging discipline? Share it.

William Grosso

AddThis Social Bookmark Button

Related link: http://www.jmilne.org/math/index.html


A long long time ago, I used to be a mathematician. Occasionally I miss it (mostly the mental discipline.
Being management means never being able to focus on
a single problem to the exclusion of everything else).


James Milne has posted some amazing things here. The real value is, of course, not his research (which I’m not
qualified to judge) but his lecture notes. I can’t imagine a greater public service, or a better use of the internet, than a leading scholar sharing expositions of his subject. Freely, to anyone with the bandwidth to download them.

AddThis Social Bookmark Button

Related link: http://www.microsoft.com/downloads/release.asp?releaseid=40934

Microsoft issues the .NET Framework service pack 2.0 (SP2). It’s recommended for all .NET users and developers. According to Microsoft, “…this release is targeted to several customer groups, including developers who are creating Microsoft .NET-based applications and services, Visual Studio .NET users, administrators who want to deploy the update throughout an organization or development team, and end users who want to take advantage of .NET applications and services.”

This SP2 release includes fixes needed in SP1 as well as a focus on security. You can find it by clicking on the link here.

AddThis Social Bookmark Button

Related link: http://www.electricnews.net/news.html?code=8577553

Apparently over 40% of broadband users have participated in some kind of file swapping activities. Doesn’t the UK also people to register their religion as “Jedi” on census forms?

According to the article, the goal of the MP3 party is to bring “simplification” to all aspects of government, based on the theory, in and of itself quite reasonable, that complex systems eventually break down. They’re targeting younger, “apathetic” voters; possibly the same ones who gave Minnesota Governor Jesse Ventura.

The flip side of the systems theory of government is the assumption that societies are self organizing. They are, but they organize themselves by developing rules that the individual can not opt out of. The ideal society will develop a balance between the individual desire for resources and the costs of their production.

I’ve never liked the idea of protecting individual industries from rampaging technology. If Congress can hold off on introducing new legislation to affect the capabilities of technology then the industry will simply have to adapt. Past success no guarantee, and certainly no entitlement, to future success. The government does have an obligation to regulate in the public interest, and if some regulation is required to make a music industry possible, then that’s justified. But as various services (including listen.com are beginning to show, there are other ways.

AddThis Social Bookmark Button

Related link: http://www.oetrends.com/cgi-bin/page_display.cgi?77

According to OpenEnterpriseTrends.com, “A revealing Q&A with Sun CEO Scott McNealy appears in the August issue of Linux Magazine. By special arrangement with the publication, Open Enterprise Trends is the first online venue to bring readers portions of McNealy’s conversation, where he comments on his view of two key Open Source technologies — JBoss and Linux. In one potentially controversial segment, McNealy told the magazine he thinks some Open Source providers in Java may be “screwing up” the profit-making potential of the industry. McNealy’s remarks follow only by a few weeks news that Sun reached agreement with the Apache Software Foundation to open up the Java Community Process to the Apache community and change software licensing on a number of its Apache-related JSRs.”

Without more information, Scott McNealy seems to be indicating that Java, and especially the J2EE, may not be available as open source through Apache and the like. Although Apache and Sun reached an agreement only a few weeks ago, Sun’s stock price fell all the way down to around $ 4.00 per share of late, which may be impacting Sun’s reversal of directon. Instead of reaching out to open source, Sun is closing up to insure revenue from all primary (i.e., server sales) and secondary (i.e., Sun ONE products, JCP membership, J2EE licensing revenue/royalites, etc.) sources. Also, Scott McNeally is concerned about Microsoft and .NET, understandably so. However, sometimes when you focus too much on your competitor, you lose focus on your own endeavors.

Anyway, if it’s not already too late, you should email Sun’s Open Source Diva, Danese Cooper. Send her your views on why open source Java is important to the community and your organization. Make your best case. Only with thousands, tens of thousands of these can Danese use and show Sun executives including Scott the value of open source Java all-around to both Sun and the Java community. Then and only then, we may convince Sun to change its current view on open source, that seems apparent in this interview. Sun should treat Java as a programming language, not a product.

What do you think? Send Danese and O’Reilly views on this as well as your reasons for open source Java.

AddThis Social Bookmark Button

It’s not news, but I just got yet another piece of email generated by a Windows email virus. It’s W32/Klez again.
What’s interesting about this one is the message generated:

Content-Type: text/html;

W32.Elkern is a special dangerous virus that can infect on Win98/Me/2000/XP.
Sophos give you the special W32.Elkern removal tools

For more information,please visit http://www.Sophos.com 

An install.exe file was attached to the email. The idea is presumably that my mother would receive this, assume that it’s legitimate, and run the attachment. (My mother is too smart to fall for something like that, of course.) Sophos is a real antivirus company, of course, and their web site would say as much. They even underwrite National Public Radio and hence my morning commute. One would hope that their grammar would be a bit better than this, of course.

Of course, it’s been a longstanding joke in the IT community that antivirus vendors create their own market. And Sophos (although apparently this variant uses McAffee, Symantec and others as well) has been particularly active in the scare mongering area. It’s interesting to see this turn against them.

AddThis Social Bookmark Button

Related link: http://onjava.com/pub/q/onjava_events

Juice your Java with these events. Although JavaOne and OSCON have passed, you can still find many interesting Java conferences, expos and other learning and networking events. Find them here on the ONJava.com Events page. If you have additional events to add, please submit to events@oreillynet.com for consideration.

AddThis Social Bookmark Button

Related link: http://www.infoworld.com/articles/op/xml/02/07/29/020729opsecurity.xml

P.J. Connolly’s Security Adviser column in InfoWorld this week touches on some of the same Identity Management issues I’ve been talking about. He points out that people have personas, and that they will want to present different identities as they operate in different roles. (Here’s the column: Who are you?).

It seems to me that platform authentication takes care of some of this by both allowing maintenance of multiple user identities on a single system, and by the implict separate of work and personal identities on your work and personal computers.

Several thousand miles away, though, that decision has already been made on behalf of the citizens of Japan, who as of today have a new National ID program in place. Not only does every citizen now have an ID number (stored in MS SQL server, of all places!) they’re going to be issuing Smartcard based National IDs sometime next year. The ID cards, much like the ones the US Department of Defense was showing off at this year’s JavaOne, will incorporate digital signatures and a cryptography co-processor, allowing the user to carry their digital identity around wherever they go.

The really worrisome thing, though, is that many Japanese citizens appear not to have been informed of this project at all.

Privacy issues or no, it will be interesting to see what applications develop to take advantage of this technology.

On a semi-related note, I subscribe to some of InfoWorld’s email newsletters, and got the column mailed to me. When I decided to blog it I had to go on the InfoWorld web site and find the online version, which I eventually did, although it was categorised under Opinions rather than Security. A link in the email itself would certainly have been helpful, and once again the importance of good, user friendly web site design has been underscored. The site was also remarkably slow to respond to my searches, which isn’t really appropriate for a magazine serving the Enterprise IT market.

What do you think?

Advertisement