http://www.jnext.org/sphp501/index.php Copyright 2010, Amnon Amnon en-US SPHPBLOG 0.4.8 http://www.jnext.org/sphp501/index.php?entry=entry081219-003940
The minor versions will include some cool examples of using JavaScript with UDP and perhaps some additional plugins.

In a nutshell, for anyone who is interested - the Web security is achieved using a backend utility that creates a signed file of various dependencies and signed digests of the site that requires real time verification by the JNEXT client. The JNEXT client when accessing this site in real time does not enable any native operation until the current page contents and CSS/script dependencies has been verified to be authentic.

The server backend utility has been completed and what is left is the non-trivial task of building the real-time JNEXT client side security mechanism.

It's quite a challenge, but its also a lot of fun and considering the ease at which site developers will be able to combine JavaScript with TCP,UDP,SQLite,Files and any other extension plugins gives enough motivation to meet the challenges...

]]> http://www.jnext.org/sphp501/index.php?entry=entry081219-003940 Amnon Fri, 19 Dec 2008 00:39:40 GMT http://www.jnext.org/sphp501/comments.php?y=08&m=12&entry=entry081219-003940 http://www.jnext.org/sphp501/index.php?entry=entry081125-214616
The past couple of weeks I've been laying the infrastructure for the PKI based security system for enabling JNEXT to safely run on public Web sites.

Work is currently being done on the JNEXT security backend - the idea being the a Webmaster will be able to run a utility which will automatically pre-process the site being launched and create the necessary signatures that the client JNEXT engine will process at runtime (surftime...) and on which decision will be made of whether to enable JNEXT based on whether the javascript code on the site has been compromised.

Completing the back end and the client side security framework takes quite a bit of work - I expect the new version of JNEXT containing this functionality will be complete sometime in January 2009 - so there will be a bit of silence on this blog until then - but don't get the wrong impression: JNEXT is growing and maturing every day and my ambitions for its use are of megalomanic proportions... :-)



]]> http://www.jnext.org/sphp501/index.php?entry=entry081125-214616 Amnon Tue, 25 Nov 2008 21:46:16 GMT http://www.jnext.org/sphp501/comments.php?y=08&m=11&entry=entry081125-214616 http://www.jnext.org/sphp501/index.php?entry=entry081108-232738
]]> http://www.jnext.org/sphp501/index.php?entry=entry081108-232738 Amnon Sat, 08 Nov 2008 23:27:38 GMT http://www.jnext.org/sphp501/comments.php?y=08&m=11&entry=entry081108-232738 http://www.jnext.org/sphp501/index.php?entry=entry081106-203638
Since at this point, there are not many people actively involved in developing JNEXT, my dilemma is whether to spend more time researching how to make JNEXT's security watertight or to forget about Web deployment for now, define JNEXT as a tool for rapid application development and concentrate on creating cool extensions for it.

Anyone care to comment ? ]]> http://www.jnext.org/sphp501/index.php?entry=entry081106-203638 Amnon Thu, 06 Nov 2008 20:36:38 GMT http://www.jnext.org/sphp501/comments.php?y=08&m=11&entry=entry081106-203638 http://www.jnext.org/sphp501/index.php?entry=entry081023-223552
However, once completed, this framework will have the potential to change the way we think about what Web sites can do.

As always, good technology is never enough, and so the next step (which I intend to start implementing with the next release) is to make sure that installing and using JNEXT by both Web users and Web site developers will be ridiculously simple, extremely appealing and uncompromisingly secure. To this effect, cool sample RIA via JNEXT applications will be added to jnext.org and client and server side installation and management will be much simpler and more user friendly.

There's plenty to do so I'll stop blabbing now and get to work...
]]> http://www.jnext.org/sphp501/index.php?entry=entry081023-223552 Amnon Thu, 23 Oct 2008 22:35:52 GMT http://www.jnext.org/sphp501/comments.php?y=08&m=10&entry=entry081023-223552 http://www.jnext.org/sphp501/index.php?entry=entry081020-192838
The basic idea is as follows: Any Web site that runs JavaScript code that makes use of JNEXT, will have to sign that code with its private key, and make it's corresponding X509 certificate available for download by the JNEXT client. The JNEXT plugin will verify that the JavaScript code matches the signature, using the Web site certificate and the locally stored root certificate of the CA that issued the Web site certificate.

If the root certificate of the Certificate Authority, the Web site certificate, the JavaScript code and the JavaScript code signature are inconsistent, then JNEXT will not allow the JavaScript code from that page access to native code via JNEXT extensions.

]]> http://www.jnext.org/sphp501/index.php?entry=entry081020-192838 Amnon Mon, 20 Oct 2008 19:28:38 GMT http://www.jnext.org/sphp501/comments.php?y=08&m=10&entry=entry081020-192838 http://www.jnext.org/sphp501/index.php?entry=entry080923-230731
I've verified that the new JavaScript TCP/UDP socket samples work on IE,Firefox,Google Chrome and Opera

As always, full sources are available for download as well

Enjoy... :-)


]]> http://www.jnext.org/sphp501/index.php?entry=entry080923-230731 Amnon Tue, 23 Sep 2008 23:07:31 GMT http://www.jnext.org/sphp501/comments.php?y=08&m=09&entry=entry080923-230731 http://www.jnext.org/sphp501/index.php?entry=entry080920-212934
For the impatient, you can compile the latest sources by downloading them via bzr from http://jnext.org/core

I've also added a link so you can view the latest JNEXT development updates (just click the JNEXT commit history link to your right).]]> http://www.jnext.org/sphp501/index.php?entry=entry080920-212934 Amnon Sat, 20 Sep 2008 21:29:34 GMT http://www.jnext.org/sphp501/comments.php?y=08&m=09&entry=entry080920-212934 http://www.jnext.org/sphp501/index.php?entry=entry080918-205250
There's just one more thing I wish to complete before starting this, and that is adding a UdpSocket class to the Sockets library - this way the sample can be extended to show how to use both TCP and UDP sockets from JavaScript. I will be releasing this as an update to 1.0.8 and not as a new JNEXT version.

]]> http://www.jnext.org/sphp501/index.php?entry=entry080918-205250 Amnon Thu, 18 Sep 2008 20:52:50 GMT http://www.jnext.org/sphp501/comments.php?y=08&m=09&entry=entry080918-205250 http://www.jnext.org/sphp501/index.php?entry=entry080906-183205
I hope to release a new setup for JNEXT 1.0.8 this week which will include all the fixes and the new plugin extensions. After that, the next milestone is the PKI infrastructure for securely running JNEXT on public Web sites.]]> http://www.jnext.org/sphp501/index.php?entry=entry080906-183205 Amnon Sat, 06 Sep 2008 18:32:05 GMT http://www.jnext.org/sphp501/comments.php?y=08&m=09&entry=entry080906-183205