Domino Interface

Time and time again developers create cool applications that users love.  Whether it is a web or mobile application their primary focus is on the UI and user interaction.  From the design and user-ability perspective that it is important.  However, majority of these applications are designed and built  without the consideration of data security or whether it compiles to government compliance and regulations.  Including security and following government dictated regulations seems to be an after thought.  Data security and compliance should not be an after thought, but part of your core design.  So as part of MWLUG/CollabSphere 2018, we have an entire track focused to Security and Compliance.   We hope to see everyone there at CollabSphere 2018 at the Sheraton Hotel in Ann Arbor, MI from July 23 to 25, 2018. To register go to  http://collabsphere.org/ug/collabsphere2018.nsf/register.html. Here is a list of Security and Com...

Now that we have defined our design requirements, we needed to determine the tools and approach that we would use to create our framework. We had created previous versions of iPhora Touch using Dojo and wanted to start from scratch on what tools we would use to create our framework. Everyone that I talked to asked me why I was using Dojo since it is big and slow.  So we started looking at different options.  Do we take one of the existing more bare bones MVC framework like Backbone and take components from them to create our framework or do we start totally from scratch using JavaScript or jQuery. There are so many frameworks out there it is amazing. You can find many examples of MVC frameworks in action at todomvc.com. It was very difficult reading up on each framework, understanding them, and experimenting with them to see if they would work for us. Since we were already familiar with Dojo, we decide to start from there.  We found a couple of articles and frameworks...

As I was writing this series, it cause me to rethink some approaches and redesign part of our MVC framework. Therefore, it took me a bit longer to start this series than I thought. But here goes. Introduction The concept of Model-View-Controller MVC can be implemented in two ways, using a server-side component framework that generates the Web application interface/view or as a JavaScript framework that gets data from the server and generates the Web application interface/view . In this series, we will be discussing how we created and implemented a JavaScript MVC framework. If you a Java developer and would like to implement a server-side MVC framework, Vaadin is a good server-side MVC framework to look into.  For developers in the XPages community, Ulrich Krause and Paul Withers has been blogging about Vaadin. Each approach has its advantages and which approach you use is based on your development skills, tools, and architecture of your web application. If you are a XPages ...

One of the "Next Big Things" these days is the use an MVC framework for developing Web applications. There are a number of MVC frameworks out there including Backbone, Ember, and the rapidly growing Angular.  Ideally these MVC frameworks are great, hook things together and any changes to the model (data) and all the views are updated based on the controller code. If there is changes to the model, the data is automatically updated on the server. This is the ideal case. However, it assumes one critical thing, you have the access rights to CRUD data on the server. This is an extremely dangerous assumption. In our iPhora security model, we assume the opposite and you do not have access rights to any data on the server. We do not trust anything and any request. We assume that you are trying to hack and inject. Your authorization is checked during each request. We looked at using Angular since it is the hot ...

Someone in India has hijacked my site feed. I am in the process of trying to reset it. I am rethinking the use of Feedburner and Google Blogger. After resetting it, it is still point to this advertisement garbage.

During the Black Hat security conference, Moxie Marlinspike, announced a major security issue with the implementation of https and SSL. The link to the Information Week article is below. Therefore, I ask how secure is the Domino https implementation. For you security experts, are there best practices that are published for implementing a Domino web site with https? Bombshell From Black Hat: Almost All Implementations Of SSL Are Configured To Give Up Everything