Problems getting started with GWT and Eclipse
Hi, I'm running Eclipse 3.4 and used the built-in add software capability to download and install toolkit plugin and app engine. Following the steps in the Getting Started tutorial, I created the StockWatcher application. Then following the instructions to test the default project components, I selected it in the Package Explorer and then from the toolbar clicked run and selected run as a web application. The Eclipse console flickered a bit, but no text appeared and the little bar at the to of the console howed that the program had terminated. No browser ever displayed anything (or even tried to), yet from the tutorial I should have seen 2 browser windows. Any ideas why things aren't working right at step 1 in the tutorial? Thanks, Rob --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to google-web-toolkit+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~--~~~~--~~--~--~---
Re: Integrating GWT and Hibernate without Gilead?
Bruno, Arthur likes to send his whole object model from the server to the client ;) Users should be careful taking advise from Arthur. He *loves* giving advise. The only problem is that they are terrible and on subjects that he has little or no knowledge. Make sure you take a second opinion before following Arthurs advise. Rob On Feb 27, 9:10 am, Arthur Kalmenson arthur.k...@gmail.com wrote: PS : using Dozer for Hibernate and GWT is a pain. Really. That's just the first reason why I develop Hibernate4GWT (now Gilead) ! How is it pain? It's one line of code: (SomeDomainObject) dozerMapper.map(retrievedFromHibernate, SomeDomainObject.class) -- Arthur Kalmenson On Fri, Feb 27, 2009 at 4:50 AM, noon bruno.marches...@gmail.com wrote: Hello, Just one question : if you app works with Gilead, why do you want to work without it ? Would you plan to work without Hibernate even if JDBC is faster ?? (ok, that's 2 questions ;-)...) Just to know... Regards Bruno PS : using Dozer for Hibernate and GWT is a pain. Really. That's just the first reason why I develop Hibernate4GWT (now Gilead) ! On 26 fév, 22:47, Arthur Kalmenson arthur.k...@gmail.com wrote: You don't necessarily have to use JSON, XML or DTOs. We reuse our Hibernate entities on the client side. However, you need to keep in mind that all types of collections (Lists, Maps, Sets, etc) are turned into a Hibernate specific Persistent* object when you get the object from the database. An easy way to remove these Hibernate specific classes is to use Dozer to map the domain object to itself. This recreates the object and copies all the collection elements to regular java.util classes. -- Arthur Kalmenson On Thu, Feb 26, 2009 at 7:33 AM, Felipe Cypriano fmcypri...@gmail.com wrote: Maybe what you're looking for is JSON, XML or DTO (Data Transfer Object). In those cases you will do the bridge between the hibernate model and the data sent to GWT client, not Gilead anymore. Regards, --- Felipe Marin Cypriano Vitória - ES http://www.linkedin.com/in/felipecypriano On Wed, Feb 25, 2009 at 2:27 PM, hezjing hezj...@gmail.com wrote: Hi I'm tried Gilead, and it works great when integrating GWT and Hibernate. I also read from the forum that we can integrate GWT and Hibernate without Gilead (and it is faster?). I'm wondering, how should we handle the lazy loading without using library like Gilead? I'm still googling for the example of GWT and Hibernate integration without Gilead :-( -- Hez- Hide quoted text - - Show quoted text - --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to google-web-toolkit+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~--~~~~--~~--~--~---
Re: 3rd party widget libraries
The GWT 1.6 event API is not an API breaking change, and besides the gwt-ext event mechanism is separate and unaffected by changes in the GWT 1.6 event mechanism. At one point I tried the 1.6 branch with GWT- Ext and things ran fine. On Jan 29, 2:37 pm, Flemming Boller flemming.bol...@gmail.com wrote: Hi Do any of you guys know what will happen with GWT-EXT when 1.6 comes out? I could imagine a lot of fixes would be needed, because of the changed event system. Anyway to answer to this thread, I have used gwt-ext, in a project. benefit: we could quickly produce a very nice looking and feeling application. drawback: slow hosted mode!, hard to really customize and create your own widgets. We also had bad experience with mixing native gwt widgets and gwt-ext widgets. (which was really diapointing, cause with native gwt we can create custom widgets /Flemming On Thu, Jan 29, 2009 at 2:57 PM, alex.d alex.dukhov...@googlemail.comwrote: There were a lot of wars about using/not using ExtGWT/GWT-Ext. Just use search in this group... On 29 Jan., 09:30, Nisse dh.vanuyt...@gmail.com wrote: Hello all. We (small start-up company) are currently considering to adopt ExtGWT as a library to extend the functionality of GWT's standard UI library, with respect to functionalities as more control over layout, drag and drop etc. Have you had any good/bad experiences with ExtGWT? Are there possibly better alternatives? Thanks in advance for sharing your suggestions. --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to google-web-toolkit+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~--~~~~--~~--~--~---
Re: GWTx - anyone with experience?
And you have taken a close look at their implementation to pass the judgment that it is slow? What about gwt-ext? Does it also have a binding mechanism that is slow since you mention it as well. Methinks its just your attempt to appear intelligent. On Jan 17, 3:51 pm, Arthur Kalmenson arthur.k...@gmail.com wrote: Ooops, my mistake. GXT also offers a binding mechanism, I thought he was talking about that. -- Arthur Kalmenson On Fri, Jan 16, 2009 at 9:20 AM, Rob Smith scubacarri...@gmail.com wrote: You're such a broken record :) You see GWT and 'x' and copy paste your complaint post. The user is referring toGWTx. Please read his original post carefully. http://code.google.com/p/gwtx/ On Jan 16, 8:29 am, Arthur Kalmenson arthur.k...@gmail.com wrote: That's one of the caveat of using GXT, it's rather slow compared to vanilla GWT. You can search around the group for opinions regarding GXT and GWT-ext. -- Arthur Kalmenson On Wed, Jan 14, 2009 at 5:22 PM, Glamdring bozhidar.bozha...@gmail.com wrote: Hello, I plan to useGWTxIntrospector and BeanInfo in order to make a simple binding mechanism. I however, have doubts about its efficiency - has anyone tried them in a real project? (They seem fantastic for a Hello World, but I don't want to redesign my application when at some point the CPU reached 60%). Thanks in advance. --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to google-web-toolkit+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~--~~~~--~~--~--~---
Re: GWTx - anyone with experience?
You're such a broken record :) You see GWT and 'x' and copy paste your complaint post. The user is referring to GWTx. Please read his original post carefully. http://code.google.com/p/gwtx/ On Jan 16, 8:29 am, Arthur Kalmenson arthur.k...@gmail.com wrote: That's one of the caveat of using GXT, it's rather slow compared to vanilla GWT. You can search around the group for opinions regarding GXT and GWT-ext. -- Arthur Kalmenson On Wed, Jan 14, 2009 at 5:22 PM, Glamdring bozhidar.bozha...@gmail.com wrote: Hello, I plan to use GWTx Introspector and BeanInfo in order to make a simple binding mechanism. I however, have doubts about its efficiency - has anyone tried them in a real project? (They seem fantastic for a Hello World, but I don't want to redesign my application when at some point the CPU reached 60%). Thanks in advance. --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to google-web-toolkit+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~--~~~~--~~--~--~---
Re: GWT RIA s ?
There you go again sounding like a broken record. You really are quite thick headed aren't you? If you take pleasure in constantly dissing other libraries, I'll do the same and reply to your every post saying that you are full of it. Deal? You might make yourself more useful if you try to answer real questions on the group instead of increasing your post count with cruft. 90% of your posts are really just pointing people to the gwt- ext, ext-gwt forums and dissing these libraries at every single opportunity. Rob On Dec 19, 9:04 am, Arthur Kalmenson arthur.k...@gmail.com wrote: So you've assumed responsibility for being the GWT saviour by educating these developers and saving their project? I'm not really assuming any responsibility, I'm just mentioning that there are draw backs to using these libraries. What makes you so qualified? I've had to abandon and rewrite a GWT-ext project because of the said drawbacks. I've talked with many other people who had to rewrite ExtGWT and GWT-ext projects. You've expressed your opinion (more than once) so why not leave it at that. How would it appear if someone posted in response to your every post saying that Arthur is clueless? I don't believe I was insulting anyone. And while I've expressed my opinion (which many here hold), many people are new and don't know the downside of using these libraries. Or the ZK guys saying that GWT sucks in their ads that are all over the place. Everyone is entitled to an opinion by going overboard is really not necessary. You know what they say about opinions and wanting to give them... And you've gone out of your way to voice your opinion even no one asked for it. How am I going overboard? Dave Ford's comment is indicative that people appreciate hearing what the down sides are. In order for a developer to make an informed decision, they need to hear all sides and try it for themselves. Try to take a deep breath and relax when these libraries are mentioned and ignore them instead of assuming the role of GWT gatekeeper. There have been stray email questions on various third party libraries like GChart and DnD. I don't see you jump in on those threads pointing to the appropriate forum. That's the thing, if I ignore the posts that tell people to use ExtGWT, gwt-ext or SmartGWT, and no one bothers to warn them, they might end up committing substantial resources to these projects and then have to rewrite them or have them turn out poorly. For example, see this posthttp://groups.google.com/group/Google-Web-Toolkit/msg/7e3ad4486d103b94 where the developer says load times are slow (it's even slow on my new MacBook Pro). Had the developer used vanilla GWT, I doubt they would have run into those problems. The biggest problem IMHO is that people use these third party libraries and think they're using GWT. They find that it's slow and buggy and attribute it to GWT. Then GWT ends up getting a bad reputation. People who come to this mailing list need to understand that ExtGWT, gwt-ext or SmartGWT have almost nothing to do with GWT and everything to do with the JS libraries they either wrap or attempt to mimic. That way, if they decide to use these libraries, they'll understand that they're using that toolkit, and not GWT. If I see questions about other third party libraries that go unanswered, I'll point them to the appropriate mailing list (if one exists). I can't catch and respond to every post. Anyway, I'm tired of arguing this point. If you like and use gwt-ext, that's up to you. Try not to get so upset when someone points out its flaws. -- Arthur Kalmenson On Thu, Dec 18, 2008 at 9:46 AM, Rob Smith scubacarri...@gmail.com wrote: Arthur, So you've assumed responsibility for being the GWT saviour by educating these developers and saving their project? What makes you so qualified? You've expressed your opinion (more than once) so why not leave it at that. How would it appear if someone posted in response to your every post saying that Arthur is clueless? Or the ZK guys saying that GWT sucks in their ads that are all over the place. Everyone is entitled to an opinion by going overboard is really not necessary. You know what they say about opinions and wanting to give them... And you've gone out of your way to voice your opinion even no one asked for it. Try to take a deep breath and relax when these libraries are mentioned and ignore them instead of assuming the role of GWT gatekeeper. There have been stray email questions on various third party libraries like GChart and DnD. I don't see you jump in on those threads pointing to the appropriate forum. Rob Full disclosure : I am a contributor to gwt-ext by mostly participating in their forums. On Dec 18, 8:54 am, Arthur Kalmenson arthur.k...@gmail.com wrote: Hi Rob, Judging from cloudcity's response, not everyone is aware of the draw backs
Re: GWT RIA s ?
Pointing users to the appropriate mailing list is absolutely the right thing to do. Sumit already does a good job with this. It's when you add your own unsolicited and biased spin when pointing to the forum that I take issue with. Like library X has nothing to do with GWT and I think they are really bad. The question was about usage of a certain API and not what you think of the library. Do you get it now? If you don't like it, don't use it. If you find them slow, don't use it. Slow is a relative term. The gwt-ext demo run fast IMO and users evaluating it can see it for themselves. Do you have any concrete numbers from performance tests when you say they perform poorly? If so please post your test case and specifically point out what is slow and by what margin. Until then making generalized statements like the performance is really poor is just FUD. Rob On Dec 19, 10:51 am, Arthur Kalmenson arthur.k...@gmail.com wrote: Rob, I forgot to mention, are you going to attack GWT developers like Sumit Chandel that point GWT-ext and ExtGWT questions to those project's respective mailing lists? -- Arthur Kalmenson On Fri, Dec 19, 2008 at 10:48 AM, Arthur Kalmenson arthur.k...@gmail.com wrote: Rob, There you go again sounding like a broken record. You really are quite thick headed aren't you? Perhaps instead of attacking _me_, you can point out where I'm wrong? However, AFAIK they're still JSNI bindings and still don't work well with regular GWT widgets or use the GWT event model. If you take pleasure in constantly dissing other libraries, I'll do the same and reply to your every post saying that you are full of it. Deal? I'm not dissing other libraries. I'm not in grade school. This mailing list is here to discuss GWT and surrounding technologies on a technical level, not for personal attacks or dissing libraries. You might make yourself more useful if you try to answer real questions on the group instead of increasing your post count with cruft. 90% of your posts are really just pointing people to the gwt- ext, ext-gwt forums and dissing these libraries at every single opportunity. I answer the redirecting questions because they take a few seconds to answer and because those posts go days without being answered. I'd prefer to at least point them in the right direction rather then leave them hanging. If you take a look, I also answer other questions too. A lot of them get answered before I get a chance to get to them. Anyway, this is growing tiresome. You need to stop taking this personally, it has nothing to do with you. If you believe I'm wrong, please point out the inaccuracies, otherwise, don't bother responding. -- Arthur Kalmenson On Fri, Dec 19, 2008 at 9:47 AM,RobSmith scubacarri...@gmail.com wrote: There you go again sounding like a broken record. You really are quite thick headed aren't you? If you take pleasure in constantly dissing other libraries, I'll do the same and reply to your every post saying that you are full of it. Deal? You might make yourself more useful if you try to answer real questions on the group instead of increasing your post count with cruft. 90% of your posts are really just pointing people to the gwt- ext, ext-gwt forums and dissing these libraries at every single opportunity. Rob On Dec 19, 9:04 am, Arthur Kalmenson arthur.k...@gmail.com wrote: So you've assumed responsibility for being the GWT saviour by educating these developers and saving their project? I'm not really assuming any responsibility, I'm just mentioning that there are draw backs to using these libraries. What makes you so qualified? I've had to abandon and rewrite a GWT-ext project because of the said drawbacks. I've talked with many other people who had to rewrite ExtGWT and GWT-ext projects. You've expressed your opinion (more than once) so why not leave it at that. How would it appear if someone posted in response to your every post saying that Arthur is clueless? I don't believe I was insulting anyone. And while I've expressed my opinion (which many here hold), many people are new and don't know the downside of using these libraries. Or the ZK guys saying that GWT sucks in their ads that are all over the place. Everyone is entitled to an opinion by going overboard is really not necessary. You know what they say about opinions and wanting to give them... And you've gone out of your way to voice your opinion even no one asked for it. How am I going overboard? Dave Ford's comment is indicative that people appreciate hearing what the down sides are. In order for a developer to make an informed decision, they need to hear all sides and try it for themselves. Try to take a deep breath and relax when these libraries are mentioned and ignore them instead of assuming the role of GWT gatekeeper. There have been stray email questions
Re: GWT RIA s ?
Arthur, So you've assumed responsibility for being the GWT saviour by educating these developers and saving their project? What makes you so qualified? You've expressed your opinion (more than once) so why not leave it at that. How would it appear if someone posted in response to your every post saying that Arthur is clueless? Or the ZK guys saying that GWT sucks in their ads that are all over the place. Everyone is entitled to an opinion by going overboard is really not necessary. You know what they say about opinions and wanting to give them... And you've gone out of your way to voice your opinion even no one asked for it. Try to take a deep breath and relax when these libraries are mentioned and ignore them instead of assuming the role of GWT gatekeeper. There have been stray email questions on various third party libraries like GChart and DnD. I don't see you jump in on those threads pointing to the appropriate forum. Rob Full disclosure : I am a contributor to gwt-ext by mostly participating in their forums. On Dec 18, 8:54 am, Arthur Kalmenson arthur.k...@gmail.com wrote: Hi Rob, Judging from cloudcity's response, not everyone is aware of the draw backs of these libraries (or, as you put it, my position on them). Ignoring an issue is not going to make it go away. I'm letting people know what the draw backs of using these libraries are, because a lot of people are impressed by the shininess but are unaware of the numerous problems. Anyway, I'm not here to start a flame war, I'm just trying to warn people before they commit all their resources to these libraries. -- Arthur Kalmenson On Wed, Dec 17, 2008 at 4:36 PM, Rob Smith scubacarri...@gmail.com wrote: Did anyone ask you opinion on use of third part libs in this thread. We know what your position is on using 3rd party libs and you have made it clear numerous times. Repeating the same thing again and again is just adding noise to this group. Gmail has a wonderful filter option and you can set yours to ignore any thread that mentions any lib that you don't care about :) On Dec 17, 3:34 pm, Arthur Kalmenson arthur.k...@gmail.com wrote: I'm hoping that a lot of those things will be added to the incubator in the near future. I've mentioned the request for simpler security similar to Spring Security's @Secured(ROLE_USER) annotations. Data binding and validation frameworks are on their way as well, in the near future. I would stay away from ExtGWT or SmartGWT though. -- Arthur Kalmenson On Wed, Dec 17, 2008 at 9:54 AM, mikedshaf...@gmail.com mikedshaf...@gmail.com wrote: This does bring up a good point and something that is sourly missing. We have cobbled together some very generic type stuff patterned (albeit very low in quality) what we used extensively in Eclipse Rich Client. Maybe the ExtGWT guys or SmartGWT will come up with something. Or if the Eclipse Web Client guys would do GWT Or if I could find a spare moment or two, I'd take it on. The whole UI framework beyond widgets, like editors, views, menus, actions etc. is a sweet spot to be sure that is missing from any of the web frameworks, IMHO. On Dec 17, 6:54 am, Arthur Kalmenson arthur.k...@gmail.com wrote: There are some things in the incubator for status bars and logging. The rest you would have to do yourself. -- Arthur Kalmenson On Wed, Dec 17, 2008 at 2:17 AM, Riyaz Mansoor riyaz.mans...@gmail.com wrote: I'm not looking for rich widget sets (Ext, Smart, etc) but rather is there a GWT framework that provides basics for a RIA. One that handles the grunt work such as providing; status bar, xml or other configurable menu, error logging report, authentication, security etc This maybe reaching for the sky but kinda like what Eclipse or Netbeans provides as the core platform when developing on those platforms.- Hide quoted text - - Show quoted text - --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to google-web-toolkit+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~--~~~~--~~--~--~---
Re: GWT RIA s ?
Did anyone ask you opinion on use of third part libs in this thread. We know what your position is on using 3rd party libs and you have made it clear numerous times. Repeating the same thing again and again is just adding noise to this group. Gmail has a wonderful filter option and you can set yours to ignore any thread that mentions any lib that you don't care about :) On Dec 17, 3:34 pm, Arthur Kalmenson arthur.k...@gmail.com wrote: I'm hoping that a lot of those things will be added to the incubator in the near future. I've mentioned the request for simpler security similar to Spring Security's @Secured(ROLE_USER) annotations. Data binding and validation frameworks are on their way as well, in the near future. I would stay away from ExtGWT or SmartGWT though. -- Arthur Kalmenson On Wed, Dec 17, 2008 at 9:54 AM, mikedshaf...@gmail.com mikedshaf...@gmail.com wrote: This does bring up a good point and something that is sourly missing. We have cobbled together some very generic type stuff patterned (albeit very low in quality) what we used extensively in Eclipse Rich Client. Maybe the ExtGWT guys or SmartGWT will come up with something. Or if the Eclipse Web Client guys would do GWT Or if I could find a spare moment or two, I'd take it on. The whole UI framework beyond widgets, like editors, views, menus, actions etc. is a sweet spot to be sure that is missing from any of the web frameworks, IMHO. On Dec 17, 6:54 am, Arthur Kalmenson arthur.k...@gmail.com wrote: There are some things in the incubator for status bars and logging. The rest you would have to do yourself. -- Arthur Kalmenson On Wed, Dec 17, 2008 at 2:17 AM, Riyaz Mansoor riyaz.mans...@gmail.com wrote: I'm not looking for rich widget sets (Ext, Smart, etc) but rather is there a GWT framework that provides basics for a RIA. One that handles the grunt work such as providing; status bar, xml or other configurable menu, error logging report, authentication, security etc This maybe reaching for the sky but kinda like what Eclipse or Netbeans provides as the core platform when developing on those platforms.- Hide quoted text - - Show quoted text - --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to google-web-toolkit+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~--~~~~--~~--~--~---
Re: GWTExt chart on GWT widgets
Arthur might be able to help you.
On Dec 18, 12:08 am, Sanj sunil.ban...@daffodildb.com wrote:
Hi All,
I am facing a problem in rendering of GWT-EXT charts on GWT widgets in
IE. When i am trying to render Chart panel on RootPanel then charts do
not render properly in Hosted mode. But if i am adding same panel on
viewPort then it's working fine.
I have also updated the version of Flash i.e. Adobe 10. SO i think
that problem is not occurring because of Flash.
I am using this code for rendering the chartPanel :-
public class SrisureHome extends EntryPoint {
public void onModuleLoad() {
MemoryProxy proxy = new MemoryProxy(getData());
RecordDef recordDef = new RecordDef(new FieldDef[] { new
IntegerFieldDef(year), new IntegerFieldDef(revenue), new
IntegerFieldDef(expense), new IntegerFieldDef(income) });
ArrayReader reader = new ArrayReader(recordDef);
final Store store = new Store(proxy, reader);
store.load();
SeriesDefX incomeSeries = new SeriesDefX(Income, income);
incomeSeries.setType(ChartType.LINE);
SeriesDef[] seriesDef = new SeriesDef[] {
new SeriesDefX(Revenue, revenue), new
SeriesDefX(Expense,
expense), incomeSeries };
NumericAxis currencyAxis = new NumericAxis();
final BarChart chart = new BarChart();
chart.setTitle(Income Chart);
chart.setStore(store);
chart.setSeries(seriesDef);
chart.setYField(year);
chart.setXAxis(currencyAxis);
chart.setWidth(100%);
chart.setHeight(100%);
RootPanel.get().add(chart);
}
public static Object[][] getData() {
return new Object[][] { new Object[] { new Integer(2003), new
Integer
(1246852), new Integer(1123359), new Integer(123493) }, new Object[]
{ new Integer(2004), new Integer(2451876), new Integer(2084952), new
Integer(366920) }, new Object[] { new Integer(2005), new Integer
(2917246), new Integer(2587151), new Integer(330095) }, new Object[]
{ new Integer(2006), new Integer(3318185), new Integer(3087456), new
Integer(230729) } };
}
}
If anybody has an idea about this problem then please suggest me where
i am wrong or how can i solve this problem.
Thanks regards,
Sanj.
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
Google Web Toolkit group.
To post to this group, send email to Google-Web-Toolkit@googlegroups.com
To unsubscribe from this group, send email to
google-web-toolkit+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/Google-Web-Toolkit?hl=en
-~--~~~~--~~--~--~---
Re: Server Side Byte Code Obfuscation
On Tue, Dec 9, 2008 at 5:17 PM, Allahbaksh [EMAIL PROTECTED] wrote: Hi, We are distributing an application. We want to obfuscate the server side code to the client so that they should not reverse engineer the code. Is it works fine? What will happend to servlets? Whether they work fine? Regards, Allahbaksh Hi Allahbaksh, Obfuscating code is not going to stop any determined person from reverse engineering your code, it might make it slightly more difficult but that is about it. The code should still work otherwise the obfuscation failed and you simply broke your own code. In the end any and all code you write can be reversed engineered regardless of obfuscation or any other technique used to make it harder to do so. So in that respect you will have to look at the cost you make obfuscating your code as opposed to the risk you run with someone actually taking the trouble of reverse engineering your code. How much will you loose if someone reverse engineers your code in a week and how much will you loose if it takes them a month... you might very well find that the cost of hiding you code is not worth the money. Regards, Rob --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~--~~~~--~~--~--~---
Re: GWT SITE? (example)
On Fri, Oct 3, 2008 at 10:42 AM, rov.ciso [EMAIL PROTECTED] wrote: Good day! Do anybody know sites based on GWT? What is big project write with GWT? Please, give me url. Thanks. Try gpokr.com it is a nice example of a none business application written in GWT, showing you that a lot more can be done with it then just a fancy way to present a form. Regards, Rob --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~--~~~~--~~--~--~---
Re: questions on Login Security FAQ
Always fun to read a Reinier comment to pretty much anyone.
Seriously Reinier though you usualy are quite correct with your facts and
knowledge you might try to leave the baseball bat on the filed and not bash
someonce head in for a change. I would not be surprized if people are scared
to post here for they fear the wrath of the ever present Reinier.
On the other hand I am still looking forward to the day when fingers will
automaticaly be broken every time a developer codes a well known and
described security flaw into their application.
On Thu, Sep 18, 2008 at 4:50 PM, Reinier Zwitserloot [EMAIL PROTECTED]wrote:
JasonG: Thanks for being a nice example of the cluelessness of your
average programmer. You've got it all, totally, 100% backwards. Don't
feel too insulted, you're like almost everyone else out there.
However, you should most definitely stop handing out security advice.
Seriously.
A) J2EE doesn't magically work without session keys. It just handles
them for you; they are still stuck in a cookie someplace. HTTP is
stateless. A session is by necessity involved.
B) BCrypt (and you should use BCrypt, or you Fail Security. Seriously.
Don't think about it, you failed the test. Use tools written by the
experts) - is a better take on a technique called 'salt hashing',
invented a few decades ago. With salt hashing, two people with the
same password do not have the same hash in the database. The fact that
you don't even know the principle of salt hashing means you're a few
decades behind the times.
C) You don't check HASH(username+password), because BCrypting 'abc123'
and BCrypting 'abc123' again does NOT result in the same hash value!
That's the whole point. You BCrypt('abc123') exactly once, and then
later, you get the hash from the db and ask BCrypt to verify that
'abc123' was used to generate that hash. Even if you somehow solved
this problem (by removing the salting from the equation which is very
stupid), then there's still the birthday paradox (wikipedia that) to
ensure that there are actual serious odds of a collision. In case of a
collision, some random user will log in as someone else, or if you add
a unique constraint, some user will someday pick/change his password
and get a persistent server error. Big whoops.
On Sep 18, 3:48 pm, JasonG [EMAIL PROTECTED] wrote:
Hi Cresteb,
I have a couple of things to add to what others have said.
1 - I presume all of the session talk in this thread is in regards to
non-Java languages for the server-side. If you are using a J2EE
application on the back end you don't need to worry so much about
passing session IDs since the app server will pretty much handle that
for you once authentication has been established. In fact, you are
encouraged not to.
2 - When generating a password hash to store in a DB, regardless of
what hash algorithm is used I will typically hash the (username
+password) and place that in the password field. This offers a couple
of advantages. a) you get a single ticket by which a user can be
looked up if both values are known. b) if your data gets compromised,
even the passwords of users who stupidly use the same common password
(i.e. password, secret, etc...) won't show up the same in the
database. To make it even better you can add another element to the
mix (secret+username+password) so that the same username+password in
different applications shows up differently in the database.
On Aug 19, 10:11 pm, cresteb [EMAIL PROTECTED] wrote:
Hello!
I have some basic questions on the Register + Login + Keep session
alive process described on the Login Security FAQ.
I know this is a little bit offtopic, but it would be really helpful
for me and other newbies if anyone can clarify some issues.
This is how I see the process with some questions attached, please
correct it where necessary!
Register:
1) Send username and password from client to server.
Q: I guess all the sites make this step over https so anyone can sniff
the password, right?
2) Store in the DB the username and the hash of the password.
Login:
1) Send username and password from client to server (again over SSL).
2) Calculate the pasword's hash and look for a register in the DB that
contains that username and hash combination.
3) Return a session ID from server to client.
Q: Is this also done through https? If not, can't it be this session
id intercepted and used later to make a query as if you were other
user?
During the session:
1) For every request from the client, include the session id, so the
server knows which user is sending the request and it is able to check
if the session is still active.
Q: Is secure enough just sending the session ID in order to identify
the user?
Q: The same as above...should it be sent through https?
2) Check if the session ID is valid or not. If its valid,
Re: Referencing external source (netbeans project dependency)
[bump] ;-) --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~--~~~~--~~--~--~---
