The Best and Worst Practices Building RIAs

A few weeks ago at the Web 2.0 Expo in NY I co-presented The Best and Worst Practices Building RIAs with Josh Holmes. Some would say that Josh and I evangelize competitive technologies (Silverlight and Flex). So it’s really fun for us to come together and find common ground around building great software - no matter what technology is behind it. Here are the slides from our presentation. Let me know what you think.

Flex Builder on Linux Update

Adobe has posted an update for Flex Builder on Linux which was scheduled to time-out on December 1, 2009. While the Flex SDK has always worked on Linux, development is certainly easier with Eclipse support for coding, compiling, and debugging. This alpha 5 release of Flex Builder for Linux allows us Linux folks to continue building Flex applications in Eclipse for another 401 days. However, Adobe has still not announced any plans to create a full Flex Builder (or Flash Builder) product for Linux. If that is something you want then please go vote for FB-19053. This update still doesn’t support Eclipse 3.5. If you want Eclipse 3.5 support then you will need to apply patches created by Danyul and myself.

Flex At Dreamforce 2009

This week I’m in San Francisco at Dreamforce - Salesforce.com’s yearly conference. It’s amazing to walk around the expo hall and see how much Flex is being used in enterprise products and services. Like last year I’ve been recording some videos of some of the great enterprise Flex apps here. Also Greg Wilson has been tweeting a few pics of some of these apps including right90 (update: now a video instead of a pic) and PivotLink with more to come.

My Upcoming Flex Presentations: Dallas SOA UG, TexFlex, Flex Camp Wall Street, Web 2.0, and Dreamforce

Here are some upcoming Flex presentations I’ll be giving:

I hope to see you somewhere along the way!

How Bad Crossdomain Policies Expose Protected Data to Malicious Applications

The web’s success has been partially due to the sandbox it provides users. Users do not generally have to entirely trust every website they visit because malicious web sites should be sandboxed from doing the user harm. One way that web sites are sandboxed is through a same-origin policy. By default any code that runs inside a web browser can only access data from the domain in which the code originated from. So if code (JavaScript, Flash, etc) loads from the foo.com domain then it can’t access data on the bar.com domain. The code may be able to make requests to bar.com but the code from foo.com shouldn’t be able to read or access the results of those requests.

Ubuntu 9.10 (Karmic Koala) Desktop Edition Review

Today Ubuntu released Karmic Koala 9.10 Desktop Edition. Like Snow Leopard and Windows 7, I find this release underwhelming. It seems that all three major operating systems are running out of room for innovation and the focus has now shifted to core improvements. But the lack of anything really new and exciting in all three recently released operating systems (Snow Leopard, Windows 7, and Ubuntu 9.10) indicates that the OS space has become a commodity market. All OS innovation seems to have shifted to mobile devices while the only significant remaining differentiator between the operating systems is the applications that run natively on them.