Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / General / March 2006

Tip: Looking for answers? Try searching our database.

Ajax ?

Thread view: 
surfunbear@yahoo.com - 20 Mar 2006 18:27 GMT
I have started studying an Ajax book I bought. It occured to me to ask
if Ajax could have found a niche that Java doesn't have and if that
could develop into a new technology or paradigm ? I have studied java
and applets a bit, but it seems to me that Ajax is doing something that
java never was designed to do (except with a plug in etc) and that Ajax
is possibly moving twards a new web technology. Will Java also move in
that direction ?
Might future versions of IE allow applets without a plug in or would
Micros Soft try to prevent that ?
dingbat@codesmiths.com - 20 Mar 2006 18:49 GMT
> It occured to me to ask
> if Ajax could have found a niche that Java doesn't have and if that
> could develop into a new technology or paradigm ?

Ajax doesn't do anything that can't be done with Java, but it's clear
that Ajax _is_ doing things that were never widely done with Java
applets.  Ajax has a relatively lightweight footprint on the client,
particularly for download and first-execution times. It seems that the
marketplace out there prefers one large heavyweight control installed
once, then a very thin scripting language, rather than a medium-weight
Java applet each time.

Java applets also typically provided a different user interface, where
they took over a rectangle of browser window and operated within it
with AWT, whereas Ajax apps are typically light on "GUI features" and
instead work much more with the browser's HTML DOM.  Again there's no
hard and fast rule about one or the other, but popularity seems to
align with practicality more closely for Ajax than for Java applets.

Java applets are also basically unfashionable. A technology of the late
'90s that peaked before the platform could really cope (JVM or network
bandwidth). As a result they've always been regarded as slow, unwieldy
and ugly.  Ajax is almost as old (it really began in '99) but stayed
hidden for some years before it was noticeable. By the time Ajax
emerged into public view, it was already a powerful and well-developed
technology.
Thomas Weidenfeller - 20 Mar 2006 18:54 GMT
>  I have started studying an Ajax book I bought. It occured to me to ask
> if Ajax could have found a niche that Java doesn't have

No, it doesn't. AJAX is a rehearsal of a very, very old theme:

Client/Server computing

The idea is even much older than the web. With the added twist that the
client code is loaded from remote. But that added twist is also not
exactly new. It is only that the New Bubble 2.0 guys need to find some
poster child "breakthrough technology" to start to pump up the bubble
again.

Regarding Java, Java could do that right from the beginning, and of
course still can do it. The Java technology to deliver and execute
client software in a web-based client/server setup is called Applets.

Applets didn't catch up due to a number of reasons (to early, to slow
for the networks at that time, horrible VM implementations in browsers,
incompatible VMs in browsers, to long startup times, too much nonsense
demo applications (dancing whatever stuff), very few experienced
programmers, to much hype, etc.).

> and if that
> could develop into a new technology or paradigm ?

People who want to get rich quick on the 2.0 thing will of course agree.
From a technical point of view it is stone age (in computer terms). It
already smells.

> I have studied java
> and applets a bit, but it seems to me that Ajax is doing something that
> java never was designed to do (except with a plug in etc)

Applets were right from the beginning designed to do client/server
computing the way AJAX does.

The need for a plug-in is an implementation detail. Just like JavaScript
(the lanaguage for AJAX) today is build-in into all mainstream browsers,
there once was a time when a Java VM was build into them.

> Might future versions of IE allow applets without a plug in or would
> Micros Soft try to prevent that ?

MS flighted very hard and paid a lot of money in compensation to Sun to
keep Java out of the Windows world and make the Java experience on IE as
painful as possible. The plugin-solution is probably here to stay for a
long time.

/Thomas
Signature

The comp.lang.java.gui FAQ:
ftp://ftp.cs.uu.nl/pub/NEWS.ANSWERS/computer-lang/java/gui/faq
http://www.uni-giessen.de/faq/archiv/computer-lang.java.gui.faq/

Roedy Green - 20 Mar 2006 20:06 GMT
> I have started studying an Ajax book I bought. It occured to me to ask
>if Ajax could have found a niche that Java doesn't have and if that
[quoted text clipped - 5 lines]
>Might future versions of IE allow applets without a plug in or would
>Micros Soft try to prevent that ?

Personally I think Ajax is a piece of bailing wire and chewing gum
trying to handle problems that Java or some other secure client side
technology should be doing. However, Microsoft has at every
opportunity done all it could to derail Java. They can't very well
deliberately derail their own piece of garbage, now dignified as
ECMASCRIPT.

It is only a matter of time until a big security scare pulls
JavaScript from corporate desktops.  Then where will everyone be who
built their houses on the JavaScript sand?

Signature

Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.

Daniel Dyer - 20 Mar 2006 20:29 GMT
>> I have started studying an Ajax book I bought. It occured to me to ask
>> if Ajax could have found a niche that Java doesn't have and if that
[quoted text clipped - 12 lines]
> deliberately derail their own piece of garbage, now dignified as
> ECMASCRIPT.

I agree with the first point, but for historical accuracy, it was Netscape  
Corp. that first forced JavaScript upon us.  Microsoft was pushing its own  
VBScript.  When Microsoft implemented JavaScript-work-alike JScript in IE  
the choice became one of using VBScript and only having your script work  
in IE, or use JavaScript and have it work in Netscape and IE.  I vaguely  
recall that there was also a PerlScript language that worked in at least  
one of the major browsers.

> It is only a matter of time until a big security scare pulls
> JavaScript from corporate desktops.  Then where will everyone be who
> built their houses on the JavaScript sand?

Extremely unlikely.  If security problems exist they will be patched  
somehow.  There are far too many sites that rely on JavaScript in order to  
work properly for it to be practical for any corporate IT department to  
banish it.

Dan.

Signature

Daniel Dyer
http://www.dandyer.co.uk

Roedy Green - 20 Mar 2006 22:39 GMT
On Mon, 20 Mar 2006 19:29:36 -0000, "Daniel Dyer"
<dan@dannospamformepleasedyer.co.uk> wrote, quoted or indirectly
quoted someone who said :

>Extremely unlikely.  If security problems exist they will be patched  
>somehow.  There are far too many sites that rely on JavaScript in order to  
>work properly for it to be practical for any corporate IT department to  
>banish it.

JavaScript installs software.  If you take that away from it, a lot
will stop working.
Signature

Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.

David Segall - 21 Mar 2006 16:36 GMT
>It is only a matter of time until a big security scare pulls
>JavaScript from corporate desktops.  Then where will everyone be who
>built their houses on the JavaScript sand?
How do you justify this assertion? JavaScript does not provide any way
to alter the file system or gain net access which are the most likely
causes of trouble.

It has not yet happened and I don't doubt that many clever people have
worked on it. Meanwhile, browsers have been hardened against several
other attacks on privacy and security.

JavaScript may be involved in a "big security scare" for the same
reasons of convenience and responsiveness that makes it used in other
applications. I can't see how it will be the cause of the problem.
Roedy Green - 21 Mar 2006 18:56 GMT
>JavaScript does not provide any way
>to alter the file system or gain net access which are the most likely
>causes of trouble.

You are saying that JavaScript has a sandbox like Java?  How then do
so many programs install themselves with it?
Signature

Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.

Timo Stamm - 21 Mar 2006 21:27 GMT
Roedy Green schrieb:

>> JavaScript does not provide any way
>> to alter the file system or gain net access which are the most likely
>> causes of trouble.
>
> You are saying that JavaScript has a sandbox like Java?  How then do
> so many programs install themselves with it?

JavaScript is ECMA262 + DOM. These specs do not define any methods for
file system access.

You can't install anything using JavaScript on a web site.

Timo
Lasse Reichstein Nielsen - 21 Mar 2006 22:57 GMT
>>JavaScript does not provide any way
>>to alter the file system or gain net access which are the most likely
>>causes of trouble.
>
> You are saying that JavaScript has a sandbox like Java?

Not really. The language has no security model at all, mostly because
there is nothing in the language that can be unsafe.

JavaScript/ECMAScript is a "pure" language with no standard library or
expected runtime environment. It has no I/O facilities.

When an ECMAScript implementation (like JavaScript, JScript or the
script engine in Opera) runs in a browser, the runtime environment
is populated with a suite of host objects, e.g., the W3C DOM
and the so-called DOM 0 (which includes methods like setTimeout
and alert).

If the host objects allow access to abusable resources, they must
have their own security model to prevent abuse. Since security
is hard, this sometimes fails.

Javascript running in the scope of a PDF document would have a
different runtime environment, with different objects and methods
available.

> How then do so many programs install themselves with it?

Not understood. Are you referring to malicious code abusing
flaws in the security of a browser to install malware?

/L
Signature

Lasse Reichstein Nielsen  -  lrn@hotpop.com
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleDOM.html>
 'Faith without judgement merely degrades the spirit divine.'

David Segall - 22 Mar 2006 17:21 GMT
>You are saying that JavaScript has a sandbox like Java?
I suppose it does although I would not have looked at it that way.
From that view point the interpreter in the browser is the virtual
machine and the JavaScript downloaded from the web can only perform
operations that are permitted by the browsers "VM". There are no
instructions in the JavaScript language, and hence in the VM, to alter
the local file system or gain Internet access. Modern browsers also
impose additional restrictions. e.g. the interpreter will not permit
the script to close a window it did not open or create a window the
user can't see.
>  How then do
>so many programs install themselves with it?
I don't understand this question. The JavaScript that is downloaded
from a web site by a browser is not installed (i.e. written to the
user's file system).

If a program is installed by the user then it can install almost
anything it likes "with it". However, I assumed we were discussing the
potential risks of JavaScript embedded in web pages and interpreted by
web browsers.
Roedy Green - 22 Mar 2006 22:04 GMT
>>  How then do
>>so many programs install themselves with it?
>I don't understand this question. The JavaScript that is downloaded
>from a web site by a browser is not installed (i.e. written to the
>user's file system).

I have always blamed the holes in JavaScript for abortions like Comet
Cursor that simply by visiting a website suddenly your cursor turns
into Nelson Mandela's head. They somehow installed software on my
machine without my permission.

JavaScript most certainly sends data to servers without my permission
and does all kinds of downloading of JavaScript texts I cannot follow.
It also generates HTML pages it refuses to show me.

There is also the matter of websites tormenting you opening a million
windows.  Like the Hydra of Greek mythology,  every time you close
one, two more spring in its place.

It seems to me turning JavaScript off goes a long way to protecting
you from malicious websites. If JavaScript is as blameless as you
claim, why would that be? What components are causing the trouble?

JavaScript seems to be able to take over your entire browser, not just
the display from a single site.

Signature

Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.

Gordon Beaton - 22 Mar 2006 22:40 GMT
> It seems to me turning JavaScript off goes a long way to protecting
> you from malicious websites. If JavaScript is as blameless as you
> claim, why would that be? What components are causing the trouble?
>
> JavaScript seems to be able to take over your entire browser, not
> just the display from a single site.

I think your *browser* is to blame for allowing these things to
happen, not the language per se.

/gordon

Signature

[  do not email me copies of your followups  ]
g o r d o n + n e w s @  b a l d e r 1 3 . s e

David Segall - 21 Mar 2006 17:06 GMT
> I have started studying an Ajax book I bought. It occured to me to ask
>if Ajax could have found a niche that Java doesn't have and if that
[quoted text clipped - 5 lines]
>Might future versions of IE allow applets without a plug in or would
>Micros Soft try to prevent that ?
Microsoft are fully supporting Ajax. So much so that they have renamed
it Atlas <http://atlas.asp.net/> and, no doubt, are working on ways to
make it totally incompatible with J2EE Application Servers. Meanwhile,
they claim it is "Based on existing standards – DHTML, JScript,
XMLHttp, CSS, etc.".  


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.