Jesse Ezell Blog
<i>.NET and Other Interesting Stuff</i> <div id="ad"><script type="text/javascript"><!-- google_ad_client = "pub-1219444915196145"; /* 468x60, created 1/25/10 */ google_ad_slot = "1898962835"; google_ad_width = 468; google_ad_height = 60; //--> </script> <script type="text/javascript" src="http://pagead2.googlesyndication.com/pagead/show_ads.js"> </script> </div>
-
To MS: Listen to your Customers
Frans and Martin both think this Yukon and Whidbey delay is crap (as does the overwhelming majority of the people that are commenting on their blogs). I agree. MS has been hyping Whidbey, ObjectSpaces, ASP.NET 2.0, etc. for long enough, and now they are telling us that .NET 2.0 won't even come out until the time when we were originally scheduled to recieve .NET 3.0 (Longhorn version). All you MS bloggers out there, NO ONE REALLY WANTS YUKON AND VS.NET INTEGRATION! We want Whitehorse. We want ObjectSpaces. We want ASP.NET 2.0. We want Generics. Save Yukon integration for a minor release in 2005 (like VS.NET 2003).
-
Java Generics are Not that Generic
For example something like this:
-
Unconventional Ways To Avoid SQL Recursion
Ken Robertson asks, “Which is better recursion or temp tables?” I would suggest that you don't have to do either. Given Ken's case (calculating the number of nodes in a tree structure for displaying image counts), it is likely that this query is going to run quite often, which means that you don't want to lock up your server to preform recursive operations every time a node is requested. One option is to cache the data somewhere, which is a pretty good option in some cases, but in this case, we want real time results. An unconventional way to avoid this breaks normalization rules slightly, but probably offers the best overall solution compared to some of the more complex ways you can do this (not to mention that it is a heck of a lot easier to code than the alternatives). Add a "path" column to each node. Now, when you run your queries, you can do something like this:
-
Classic Security Mistake
Jeff mentions that MSN fell victim to a classic security mistake wherein a user's authentication credentials are checked on one page, then they are redirected to a new page, which doesn't check credentials (assuming that the user was redirected from the page that did), which allows a sly user to do all sorts of nasty things. This is a huge mistake that tons of application makes and the funny part about it is that the mistake is not rooted in the authentication checking done by the ASPX pages at all as you might assume. The problem is that the application's business logic layer let the request through, even though it was clearly invalid. If the people who coded this part of the MSN APIs had taken the time to code a proper business logic layer, it would have said something like this:
-
Macromedia and the CLR
You might find the following comments by Macromedia folks to be quite interesting:
-
Macromedia Needs To Get It's .NET Act Together
“Andrew Stopford wants to see Macromedia enhance support for .NET and, personally, I couldn't agree more. I believe there are many .NET / Flash / ColdFusion developers out there that would agree with this statement too. While Flash Remoting may support ASP.NET the implementation is terrible-- thanks to FlashORB there now is an alternative. ColdFusion and .NET can only work together in two ways: COM or WebServices. I don't need to get into the merits, and evils, of either approach. FLEX, being still in beta for J2EE systems, is not even conceivably on the horizon for the CLR anytime soon and this really is a shame.
-
New Longhorn Concept Video
The third Longhorn concept video is up here:
-
Laszlo vs. Flex
There is a pretty interesting post on the Laszlo message boards comparing Laszlo to Flex. Again, the Laszlo guys confirm that they are porting Laszlo to other platforms (Longhorn/CLR is a good bet). Of course, at 20k+ for a server license, the price isn't exactly enticing for the average developer, but the Laszlo guys say that we should hear about some new low price options for smaller shops within the next few weeks.
-
FreeTextBox 2.0 Released
Pascal reports along with Scott that FreeTextBox 2.0 is out, and it includes Mozilla support! They are charing $50 for the source now, if you want to have access to it, but the component itself is still free (and, I might add, $50 for the component would still be a steal, this thing is hot). Highly recommended.
-
Passport is Rediculous
Mike Sax and Chris Kinsman think Passport pricing is lame. This isn't the first time a blogger has commented on this, and once again, I'm going to have to agree. I would use Passport for authentication all the time if it didn't cost $10,000+ to get up and running. What the hell were they thinking? I can implement my own single sign on service in a few hours, why in the world would I pay 10k+ to use someone else's? Like it is really a plus that my customers can seamlessly sign into their hotmail account from my web site. Give me a break.