Author: Immanuel Sims
-
Use Cases for Formal Architecture Verification
by
in diga, Digitale Gesundheitsanwendung, ePA, ePA für alle, formal architecture verification, formal verification, formale Architekturverifikation, gematik, Gesundheit, gesundheitsanwendung, Gesundheitswesen, health care, HIS, LIS, Medizinprodukt, Proof, QA, Qualitätssicherung, quality assurance, TLA+We have discovered Formal Architecture Verification as an affordable quality assurance (QA) measure that is suitable for a wide variety of applications. TLA+ is one of the most widespread technology in this context. Don’t let the dated looking project website fool you. For example Amazon reported using it for DynamoDB and other major players have…
-
What Perfect Forward Secrecy means
by
Let’s say you had an encrypted conversation with Bob yesterday. Today Bob accidentally posts his secret key on the internet. You still want your conversation to be private, right? So what can you do? You can use a cryptographic protocol with perfect forward secrecy (PFS). That will protect you against similar blunders by your conversation…
-
Postgres Performance Troubleshooting – An Example
by
Recently we encountered some severe performance problems in one of our projects. Some SQL queries were very slow. A certain query took over 6 seconds to finish in Azure’s Postgres service and about 350ms locally on my laptop. Both are unacceptable. I don’t know much more than the postgres basics and the project was in…
-
Developers Adopt Kotlin! Addressing your fears and Kotlin’s gains.
by
Every time I have used Kotlin instead of Java I enjoyed it and did not regret it. But somehow I still meet some reservations regarding Kotlin with both managers and sometimes developers. This Post will address your fears as a (Java) developer regarding the use of Kotlin and elaborate a bit on what Kotlin will…
-
Managers adopt Kotlin! Addressing your fears and Kotlin’s gains.
by
Every time I have used Kotlin instead of Java I enjoyed it and did not regret it. But somehow I still meet some reservations regarding Kotlin with both managers and sometimes developers. This post will address your fears as a manager regarding the use of Kotlin and elaborate a bit on what Kotlin will gain…
-
Angular & OpenId: a real world example
by
In theory it appears pretty easy to build the browser side of an application using OpenId Connect. Actually implementing it in a real world application has usually proven to be more difficult than that. I would like to show you how to solve some of the real world problems beside the basic setup. First let…
-
WildFly 8-10 and JBoss EAP 7 verbose HTTP headers
As a developer I am really happy to have an easy way to determine which version of a software I’m running. But I do not like it if my software tells everyone its name and version, as this gives important fingerprinting information to possible attackers. If you use WildFly versions 8 through 10 or JBoss…
-
commons-fileupload 1.3.3 resolves deserialisation vulnerability CVE-2016-1000031
CVE-2016-1000031 is a vulnerabilty in the extremely widely used Apache Commons library commons-fileupload – you might not even know you’re having it on your class path. It has a very nasty Remote Code Execution vulnerability with easy to use exploits publicly available up to version 1.3.2. What makes it even worse is that you do not even…
-
ActiveMQ Confusion and What comes with your JBoss EAP / WildFly
Oftentimes people talk to each other about using ActiveMQ, but they’re actually referring to different brokers. That is because there are 3 different message brokers with ‘ActiveMQ’ in their name and this turns out to be pretty confusing when a project as big as WildFly starts to use a broker with ‘ActiveMQ’ in its name that is…
-
Exposing a web service via https with JBoss FUSE
by
Exposing a JAX-WS web service via https in JBoss FUSE using OSGI-blueprint was not as obvious to me as I expected. This post presents a way to do it.
You must be logged in to post a comment.