Skip to main content

The First Crash is the Deepest

Posted by editor on December 21, 2006 at 7:29 AM PST


Let's pretend yesterday never happened

Depending on when you looked at the front page yesterday, you may have seen new content in the center column, or Tuesday's items, or some stuff from June.

Sorry about that.

What happened is that coincident to a CollabNet maintenance window, and apparently unrelated to it, our app server and database had a bad crash. Rebuilding the db left us with no data newer than June. So, the team decided that the best remaining option was to roll back to our last backup, which was from late Tuesday. Unfortunately, this means that some content on the "O'Reilly side" of the site -- forums, blogs, news items, community page content -- posted late Tuesday or before Wednesday's crash, have been lost. We're sorry about that, and we're having a meeting later today to post-mortem the crash.

Today's page re-uses some of the items that were on Wednesday's lost page (which was up for only a few hours before the crash), but the forum messages I had highlighted are gone, so we have different forum postings. Also, I updated the story about the QuickTime for Java security hole with new links about that story.

Check back tomorrow for a fully-refreshed page, including Duke's Holiday Pictures.


In Java Today,
the 1.0 release of Project Looking Glass, the Java-based 3D desktop, has been announced and is available for download as "mega-bundles" (including the JDK and Java3D) for Windows, Solaris, and Linux, and as a standalone install for Ubuntu, general x86 Linux, and Solaris. If you're new to Looking Glass, you can get some guidance from the guides Getting started with the Project Looking Glass Developer's Release or Running the Project Looking Glass Developer's Release on Microsoft Windows.

MacSlash notes Apple's release of Security Update 2006-008 which fixes a vulnerability involving Quartz Composer and QuickTime for Java. "This is a particularly fun bug. Quicktime for java is available to unsigned applets with certain restrictions. Until today, those didn't include restrictions on quartz composer movies. That means that the trick that's been floating around the web which displays live iSight footage in a web page can actually be used to send the user's picture up to the server that hosts the movie" MacSlash links to a demonstration of the flaw, and an O'Reilly Network blog has source for an equivalent exploit.

The article Google Deprecates SOAP Search API reports that "Google has deprecated its SOAP Search API, withdrawing one of the most prominent examples of Web service usage on the Internet. The remaining AJAX Search API is only a partial replacement." The article also points out feedback from some around the web, including Steve Loughran's claim that this represents the beginning of The End of SOAP.


Is everyone switching teams? First it was Joshua Marinacci, now it's David