今天在升级 Azureus 的时候,注意到在项目首页致谢处有 Fortify 的链接,点击过去看到了这个 Java Open Review (JOR)项目。
JOR 项目是由 Fortify 与 FindBugs 联袂举办,旨在提高 Java 开源软件的安全性,现在有很多开源软件已经加入到评测当中。列表中包括 Azureus、Lucene、Nutch、Tomcat 等知名开源软件。
此前看过 Foritify 与 Oracle 合作的新闻,我的 Blog 上也提过这个事儿,Fortify 这个公司给我留下了很深印象。很多大软件公司都是他的客户,包括微软、Oracle、Symantec、Amazon 等。
FindBugs 这个开源项目其实也是 Fortify 赞助的(Google 也是该项目支持者之一),在 Lesser GPL 版权下发布。使用起来并不复杂(参考文档),并且,该工具有针对 Eclipse 的插件(参考文档)。
在安全问题日益严重的今天(如:"网银大盗"横行),或许这些代码安全分析工具会让开发人员少遇到一些麻烦。
--EOF--
a collection of art pieces by Kelly Sherman who seems to be inspired by the art of visualizing data. the 'house series' is comprised of floor plans for the home in which her parents lived & where she grew up, which visually traces the movement of furniture over the course of 6 months during the divorce. another piece within the series maps phone conversations over the same period. the 'sentence diagrams' series diagrams many samples of her writing, such as lines of poetry, or thrown out sentences from various text. the 'wedding series' are based on charts for wedding seatings.
[links: kellysherman.net & kellysherman.net (sentence diagrams)|also bigredandshiny.com & nytimes.com]
a visual interface that allows users to read, interact & exchange stories of lives in apartment buildings, revealing complex connections between characters & places occuring in apartment buildings.
the stories are linked by author names & by CAPITALIZED words. gray blocks in the background hold more stories. by typing specific words in CAPITALS, a user can link stories to other stories that use that word.
if you like this, also see apartment.
[link: turbulence.org|via turbulence.org]
\path\to\firefox.exe -P buffy -no-remote
$ export MOZ_NO_REMOTE=1 && /path/to/firefox -P Buffy
set MOZ_NO_REMOTE=1
“C:\Program Files (x86)\Mozilla Firefox\firefox.exe” -P blogging
Firefox.exe -install-global-extension “\extname.xpi”