New critical vulnerability detected in Java

According to the claims of security researchers, a new, critical vulnerability has been detected in Java; and the vulnerability can fully circumvent the security sandbox which has been implemented in a number of Java versions.

read more...

SOASTA launched CloudTest Lite – a free edition of their performance testing solution. Basically, they give it free for up to 100 users. A serious move for sure. It should heat up the load testing tool market.

read more...

RBI don’t want to upset growth momentum by letting inflation go out of control: Gokarn

Reserve Bank of India (RBI) Deputy Governor Subir Gokarn admitted on Tuesday that the central bank is in the clutches of the monetary policy issues due to persistent inflation, and added that it did want to let inflation go out of control.

Speaking to reporters on the sidelines of India Investment Forum on Tuesday, Gokarn said they didn't want to risk upsetting durable sustainable growth by allowing inflation to soar further.

On September 17, the central bank left its main policy rate untouched at 8 per cent, saying any cut in the rate would push inflation higher. The development disappointed those who wanted a cut in rate to boost growth.

Speaking on the topic, Gokarn said, "We want to make sure we don't risk upsetting durable sustainable growth momentum by letting inflation go out of control."

At the same time, he added, that the central bank did not want to take a position on inflation that would weaken the momentum of growth.

On the recently announced policy reforms, he expressed hope that these reforms would ease inflation and strengthen the rupee.

Gokarn also indicated that the recent policy reforms could be critical in helping the RBI in determining its course of action at its next monetary policy meeting on October 30.

Article Source

New critical vulnerability detected in Java

According to the claims of security researchers, a new, critical vulnerability has been detected in Java; and the vulnerability can fully circumvent the security sandbox which has been implemented in a number of Java versions.

Stating the new Java flaw-related claim on the Full Disclosure mailing list, Adam Gowdiak - founder and CEO of Security Explorations, which announced the flaw - said that the newly-detected vulnerability affects "all latest versions of Oracle Java SE software."

With Gowdiak also pointing out the new flaw in Java program allows "a complete Java security sandbox bypass in the environment of Java SE 5, 6 and 7," it is quite evident that the vulnerability is worse than the earlier exploits which only impacted Java 7.

In the wake of Security Explorations' confirmation that the exploited has been tested and it works on a fully-patched 32-bit Windows 7 system, under Firefox, Internet Explorer, Opera, Chrome, and Safari, Gowdiak also said that the new vulnerability makes way for the violation of "a fundamental security constraint of a Java Virtual Machine."

Claiming that the new Java vulnerability puts as many as "one billion users" at risk, Security Explorations said that it has already provided Oracle with a technical description of the issue, along with binaries and source code to exploit the flaw and establish its existence.

Article Source

ITECH CAMPUS TRAINING

What is the speciality of Itech campus Training?

01. This training is meant for final year batch students / graduates, willing to get in to IT field.

02. The time, energy and money invested in this training program by Itech can provide significant career and earning benefits.

03. Our training builds confidence which can helps to develop successful relationships with peers and managers.

04.This training will have the opportunity to take advantage of the large number of career opportunities available in the market with IT companies. This is an excellent facility for students which will open the doors for emerging career opportunities in the IT industry.

05. Rapid changes in technology needs a continuous up gradation. So, through training and certification programs can experience greater career opportunities than those who do not continuously develop their knowledge.

Areas of Training that will be Conducted :

Aptitude

Soft skills

Technical Training

Group Discussion

Resume Preparation

HR Interview

Software Technology:

System Software (C, C++)

Web-based (J2EE, Dot-Net)

Databases (MySQL, Oracle)

Networking (HTTP, SSL, DNS)

UI Designing (PS, DW, FL)

Mobile based (iPhone, Android)

Operating Systems (Windows, Unix, Linux)

Application Software (SAP)

Apple sells over 5 mln iPhone 5, supply constraints loom

While sales were solid, the company said on Monday it had run out of its initial supply and many pre-orders were scheduled to go out in October.

Apple Chief Executive Tim Cook said the company is "working hard to build enough iPhone 5s for everyone."

Expectations for new Apple products were so high - some analysts forecast Apple selling as many as 10 million phone over the weekend - that Wall Street was not wowed by the latest numbers. The stock was down 1.7 percent at $688.64 in afternoon trade.

Given the demand, Apple, the world's most valuable company, is being closely watched for any supplier problems that may slow down the smartphone production.

"We believe that sales could have potentially been much higher if not for supply constraints," William Power, an analyst with Baird Equity Research, wrote in a note.

Supply limitations are likely to weigh on Apple as the iPhone 5 is launched in another 22 countries on Friday.

To complicate matters, Apple's largest contract manufacturer Foxconn Technology closed a factory in the northern Chinese city of Taiyuan after a riot broke out among 2,000 employees.

STRONG DEMAND

The early total for the iPhone 5 topped sales of the iPhone 4S, which sold more than 4 million units in its first weekend after Apple introduced it in October 2011.

The numbers do not include units that have yet to be shipped or delivered to customers as Apple books sales only when online customers sign for the purchase.

"We are not overly concerned with this 'disappointing' number as we believe this is a classic case of near-term expectations getting out of touch with reality," Sterne Agee analyst Shaw Wu said.

He added that he expects Apple to sell a total of 27 million iPhones in the September quarter and 46.5 million units in the December quarter.

The iPhone 5 has been one of Apple's most aggressive international rollouts to date. The phone will be available 31 countries on September 28 and in more than 100 countries by the end of the year.

"Expectations for Apple are always white hot," said Colin Gillis, a research analyst with BGC. "It's not just enough for them to break records but to smash them."

Apple is facing stiff competition from smartphones that run on Google Inc's (GOOG.O) Android software, which has become the most-used mobile operating system in the world. Apple's key supplier as well as rival, Samsung Electronics Co Ltd (005930.KS), has taken the lead in smartphone sales.

Apple signaled last week that pre-orders outstripped initial supply and that many phones would not be available until October.

Article Source

A New Move in the Load Testing Tool Market

SOASTA launched CloudTest Lite – a free edition of their performance testing solution. Basically, they give it free for up to 100 users. A serious move for sure. It should heat up the load testing tool market. It may work indeed – I guess they don’t have many paid customers in that range anyway, looks like CloudTest’s sweet spot is when you need a very large number of users. I am very interested to see how it will turn out.

Several rosy reviews were posted, for example, CloudTest Lite – A Game Changer in the Performance Tool Market by Scott Barber and SOASTA CloudTest Lite Hands-On by Bernard Golden.

As I already mentioned, it indeed is pretty interesting. However, I’d say that we need add some skepticism to be more realistic.

First, it is not the first and absolutely unique move in load testing tools. I recall a few somewhat similar moves before which then quietly disappeared. Well, I don’t remember what limitations were (maybe a little bit more restrictive). And the companies were not the leaders of the market. Moreover, there is a list of 50 open source load testing tools on opensourcetesting.com and some, like JMeter and OpenSTA, are pretty mature. Yes, open source in load testing area was not so successful as in other areas. Especially analysis is weak in most of these tools (if existent at all).

Second, releasing is just the first step. The challenge for SOASTA would be how they support a large number of non-paying users (although, of course, for a promising start-up the number of customers may be important by itself). The community maybe can help with “how-to” questions, but implementing, let’s say, enhancement requests is up to the SOASTA team. And the number of such requests may be pretty high as people start to use it with different applications.

For example, it looks like we can’t specify transactions during recording in CloudTest for the moment. Well, what I am supposed to do with a script with a few hundred identical requests in it (AJAX type, differ by incomprehensible http body content)? Track delays in the scripts and try to correlate them with recording steps? Not exactly my understanding of quick and easy.

Yes, Scott is not easily getting excited. Last time, as far as I remember, Scott got excited about a load testing tool when Microsoft released their tool as part of Visual Studio back in 2005. See, for example, the discussions around my old posts VisualStudio 2005 and Load Testing and Scripting Language in Performance Tools. Well, Microsoft didn’t live up to its promises and I haven’t heard about their load testing tools for a while (my understanding is that it is not dead, but doesn’t play any noticeable role). But who knew that Microsoft was losing its grip?

By the way, returning to this old post about scripting languages, I don’t object the idea of GUI-based load testing tools (I mean when script is represented by a kind of graphical tree or something like this) if we can extend it with code (as in CloudTest with JavaScript) or switch between tree and script view (as in Oracle Application Testing Suite). My concern was (and is) if you can’t extend you recording with code at all – I still believe that it limits the area of application significantly.

Article Source