Web Info & Tutorials

Sun Labs has released a new Lively Kernel project that takes the Morphic UI framework that Sun developed for Self, and implements it in JavaScript.

This enables you to run the kernel and start interacting with the world. There is one world.

Why did they do it?

The Lively Kernel places a special emphasis on treating web applications as real applications, as opposed to the document-oriented nature of most web applications today. In general, we want to put programming into web development, as opposed to the current weaving of HTML, XML and CSS documents that is also sometimes referred to as programming.

A key difference between the Lively Kernel and other systems in the same area is our focus on uniformity. Our goal is to build a platform using a minimum number of underlying technologies. This is in contrast with many current web technologies that utilize a diverse array of technologies such as HTML, CSS, DOM, JavaScript, PHP, XML, and so on. In the Lively Kernel we attempt to do as much as possible using a single technology: JavaScript. We have chosen JavaScript primarily because of its ubiquitous availability in the web browsers today and because of its syntactic similarity to other highly popular languages such as C, C++ and Java. However, we also want to leverage the dynamic aspects of JavaScript, especially the ability to modify applications at runtime. Such capabilities are an essential ingredient in building a malleable web programming environment that allows applications to be developed interactively and collaboratively.

Boot up Safari 3, and check out the interactive tutorial, and read the FAQ.

It looks like some of the most expensive security scanners can’t handle Ajax code. Information Week reviewed and tested 5 pricey application scanners, including software from IBM & HP, and all, sans IBM’s scanner, failed to pinpoint vulnerabilities with Ajax code:

With the exception of IBM(IBM)’s Watchfire AppScan, automated Web application scanners are simply not yet up to the task of finding security flaws in Ajax code. And it’s not like we made it hard on them: The Ajax applications we used in testing were relatively simple. None of the vulnerabilities we expected our scanners to find was advanced or required complex analysis of client-side code. Rather, they were traditional Web application security vulnerabilities, just exposed through an updated Ajax interface. As long as the scanners being tested could navigate the application, identifying the vulnerabilities should have been a walk in the park.

This doesn’t bode well for companies that are relying on some form of automated testing to provide a baseline for their application security assessment efforts.

The full 5-page review can be found on Information Week’s site.

Johan Franson has developed a solution to access a local GPS through Javascript /
cross-scripting. His library works in all browsers with that dynamically can include
.js script files. Including Firefox, Opera, Opera Mobile and IE.

You need to install a program called GpsGate on the client computer which currently only works for Windows and Pocket PC:

"GPS in browser" uses cross scripting. GpsGate runs a small local web server from which your page can request GPS information. A javascript library is included to make this really simple.

Michel Fortin has created special versions of Safari that earmark you to removed them every on the aforementioned machine. This allows you to effort your Ajax covering in a difference of versions.

Safari ordinarily ingest the Web Kit support institute exclusive Mac OS X to intercommunicate scheme pages and fulfil javascript. This effectuation that if you preserves an older edition of Safari to removed it on a newer edition of Mac OS, it module ingest the newer Web Kit institute in the grouping and you module intend the aforementioned results as with the newer version. Thus, you would ordinarily requirement a removed artefact of Mac OS X for apiece edition of Safari you poverty to effort a website into.

These primary versions of Safari ingest the example Web Kit support that came with them, bundled exclusive the application. They module simulate example Safari performance and javascript behaviours. protocol requests and cookies ease are ease handled by the grouping and haw not impact just the same.