Chloe and the Real Time Web
Trotter Cashion introduces and demoes Chloe, a web server that handles real time data streaming between browsers and web applications written in any language and using any framework.
Trotter Cashion introduces and demoes Chloe, a web server that handles real time data streaming between browsers and web applications written in any language and using any framework.
Phusion has released a preview release of their upcoming 3.2 version of Phusion Passenger. Version 3.2 comes with a re-written ApplicationPool, I/O handling is now event-driven and the Python support became a first-class citizen.
Phusion announced that their Ruby 1.8.7 based Enterprise Edition (REE) is nearing its end-of-life. A Ruby 1.9 based version is not planned, instead the team focuses on Phusion Passenger, their solution for running Ruby on Apache and Nginx.
Apache has released the HTTP Server version 2.4 with performance improvements, enhanced concurrency, asynchronous I/O support, lower resource footprint and others.
The Netty 3.3.1 release adds support for SPDY protocol, which has been proposed for inclusion in http/2.0, fixes regression of Android support and reduces memory consumption of ZLib compression.
Last week Microsoft launched HTML5 Labs where they intend to post early prototypes of applications running on unstable web standard specifications for .NET developers. Yet earlier this month, preliminary WebSocket implementations in FireFox 4 and Opera where disabled due to security concerns.
Using a Padding Oracle (PO) attack a malicious user can access encrypted data such as cookies, state, membership password, etc. According to Juliano Rizzo and Thai Duong, two software engineers specialized in security, the security vulnerability affects JavaServer Faces, Ruby on Rails, ASP.NET and other technologies and platforms.
OWASP, an open and free organization focused on evaluating and improving software application security, has released the OWASP Top 10 Application Security Risks – 2010 RC1, a whitepaper documenting the top 10 web application security risks along with details on how threat agents can exploit these possible vulnerabilities, accompanied with examples and advice on what can be done to avoid them.

PostRank Labs released an open source version of their Ruby web server framework powering PostRank. Goliath, is an asynchronous server designed for speed, leveraging key features of Ruby 1.9+. Goliath creates fast web and data services not unlike node.js but sticking with what Ruby developers know..Ruby. Discover how easy it can be to create manageable server-side services with Ruby.

The authors, from Intel, offer a three pronged approach to providing secure transmission of high volume HTML traffic: new CPU instructions to accelerate cryptographic operations; a novel implementation of the RSA algorithm to accelerate public key encryption; and using SMT to balance web server and cryptographic operations. Their approach, they claim, leads to significant cost savings.

In this presentation, recorded at QCon London, Stefan Tilkov introduces the key principles of REST, explaining the differences to other distributed systems architectures and highlighting its benefits. Topics covered include mapping business logic to resource interactions, hypermedia, and documentation.