Guenter Wildmann | 4 Apr 2007 10:52
Picon
Picon

Re: Count records

Hello Anthony,

Berglas, Anthony <aberglas <at> rsasecurity.com> writes:

> 
> Direct SQL, all in one query, evaluated on the server.  (Could actually
> be two queries with little overhead in this case.)

Ok, so it is best to use a direct SQL query, thank you.

 
> It will be a bit of a query though.  Something like
> 
> DELETE FROM MYTAB X
>   WHERE ID < 
>     (SELECT ID FROM MYTAB Y 
>       WHERE (SELECT COUNT(*) FROM MYTAB Z
>           WHERE ID < Y.ID)
>         < 500) )

As i would like to keep the 500 newest records the query-part will look
like this:

SELECT last_access FROM location_cache main
  WHERE (SELECT COUNT(*) FROM location_cache sub
    WHERE sub.last_access > main.last_access) > 500;

Ciao, Guenter

 
(Continue reading)

Christoph Hintermueller | 10 Apr 2007 09:45
Picon
Favicon

Examples, Manuals, Hints on serializing SimpleORM objects

Hi
I have to adopt our Web and Applet based Measurement Management Systen to 
new security measurements beeing right now established. As a consequence 
system including the applets havte to be usable from within three zones:
1) the outer Zone (internet) to allow collaborators to upload meta data, 
extract measurement results and for cooperative planing of further 
measurements
2) The office Zone, from within this zone alle the maintenance is done
3) The Research Facility Zone: Where the Measurements take place including 
experiments form external groups. As a consequence for this zone the 
Security measurements are higest. 

The only protocol which can be used to access our server Directly (via 
proxy) is the http/https. The problem herewith is that i have neither used 
java nor simple ORM nor serialisation, nor apples or other stuff yet. All 
parts of the system have been developed and maintained by somebody else. 
Thus in Order to keep downtime required for adoption low id do have the 
follwing question.

- Are there any code examples related to serialization of simpleORM objects 
(client and server side part): eg. sources of other (hopefully open source) 
projects sucessuflly using serialization. (*)
- Where can i find literature, manual pages, online documentation, PDF. 
related to the topic? In ideal case covering simpleORM objects too. (*)

(*) links to related pages, newsgroups and mailing lists, small examples 
dealing with tips and tricks, notes and pitfalls not  noted elsewhere and 
hints on keywords producing most promising hits in google and google groups 
shall be sufficient; no need for elaborate examples bloating emails.

(Continue reading)

Berglas, Anthony | 11 Apr 2007 07:50

RE: Examples, Manuals, Hints on serializing SimpleORM objects

There is an example of detaching and serialization in the examples.
Just uses java serialization.

Be aware that if you are using applets outside the firewall then your
server could be talking to a malicious applet, not yours.  I would do
all communication manually and conservatively for that.

And do you really need an applet?  A lot can be done with plain HTML.
There is also Flash if you really need it.

Have fun,

Anthony

> -----Original Message-----
> From: SimpleORM <at> yahoogroups.com [mailto:SimpleORM <at> yahoogroups.com] On
> Behalf Of Christoph Hintermueller
> Sent: Tuesday, April 10, 2007 5:45 PM
> To: SimpleORM <at> yahoogroups.com
> Subject: [SimpleORM] Examples, Manuals, Hints on serializing SimpleORM
> objects
> 
> Hi
> I have to adopt our Web and Applet based Measurement Management Systen
to
> new security measurements beeing right now established. As a
consequence
> system including the applets havte to be usable from within three
zones:
> 1) the outer Zone (internet) to allow collaborators to upload meta
(Continue reading)

Christoph Hintermueller | 11 Apr 2007 11:20
Picon
Favicon

RE: Examples, Manuals, Hints on serializing SimpleORM objects

Hi Anthony
Am Mittwoch, 11. April 2007 07.50 schrieb Berglas, Anthony:
> There is an example of detaching and serialization in the examples.
> Just uses java serialization.
I've to admit till now i managed to not be required to use java for all my 
developments (+). Thus do you know asside from the examples, good online 
documentation and examples on java  serialization.

(+) Till now could stick to, c/c++, .... most of them rather archaic, 
ancinent or considered by some crazy and braindead: 
*** Off topic *** Regular Expessions and sed rulez B-) *** Off topic off***
>
> Be aware that if you are using applets outside the firewall then your
> server could be talking to a malicious applet, not yours.  I would do
> all communication manually and conservatively for that.
>
The one who developed the applet sugested and used java webstart and signed 
jars to reduce this risk. How successfull this approach really can be on 
preventing malicious applets I can't tell. I'm not an expert in that.
> And do you really need an applet?  A lot can be done with plain HTML.
> There is also Flash if you really need it.
>
The design was done by sombeody else who left. In a first go I have to adopt 
the system to the new right now imposed security measures. And i shall have 
done that on year ago (*) (**) in order to keep downtime at zero ;-( 

(*) i started to work here half a year ago
(**) just as allways

> Have fun,
(Continue reading)


Gmane