Solving big business problems in our little toolbox application. A use case for Project Distributor.Project Distributor: Introduction to our distributed web service model
So Darren and I have put in about a month now on the Project Distributor website. We are starting to reach that critical point where the site is pretty cool, we have plenty of users, we are thinking about running out of the allowable bandwidth for the demo site, and all sorts of other things that tend to happen all at once. Now, there are some problems you can design yourself out of, and others that you really have to throw some money at. Our latest enhancements can be summed up in a short list.
- Buy a domain name and start hosting in two places. Project Distributor.com should be up fairly soon to accompany MarkItUp.ASPXConnection.com
- Have people host their own versions of the application. And that means a big source release is in the future. At this juncture risk fragmentation.
- Design away fragmentation with a series of ingenious features that will make everyone want to use the application at hand.
I'm here to talk about the last two, since Darren already bought some additional hosting for us. The concept will be to release a fairly stable version of the application so that groups can host tools, code snippets and other source/binary releases for their teams to share. The application is very lightweight and easy to set-up, so it won't require a bunch of hand holding and configuration to get up and running initially. From our standpoint we solve a number of issues at this juncture. The most obvious problem is what we classify the Lutz Roeder use case. .NET Reflector is the key type of application we'd love to get hosted because it makes it a bit easier to find, not that Google does a bad job, we'd just like to get a bunch of tools in one place, with some features for feedback, new releases, and some cool client tools for publishing.
Now, Lutz would put his application up and he'd whack our bandwidth. He is the prime example of someone that should be hosting their own tools, but possibly using our interface. He doesn't have to, we haven't even asked him yet in fact, but if he decides to do so, then all the better for the web application moving forward. Users such as Lutz probably want a certain level of control over their own sites as well in terms of branding and controlling access. This will only come from hosting the application yourself (and maybe some other features we'll see later).
From a security standpoint many teams will also want to host their own servers. In this manner they get control over the hardware their sources and binaries are stored on. They can accept tools up to any maximum (instead of our imposed limits) and provide unlimited download bandwidth if they choose. Or they can take advantage of our gating mechanisms to make sure their server doesn't get overloaded with downloads and open their tools up to the public.
The only major problem from this source release is that the initial problem we were trying to solve, promoting the visibility of tools, starts to erode. You see, the more sites that host their own tools the harder it is to find the right site with the right tools. We are trying to solve this in a number of ways. The first is allowing users of a site to store bookmarks to other projects and external resources. This is only a temporary fix, because it still doesn't allow a mass search and categorization infrastructure required to truly promote the visibility of the tools being hosted. We have to come up with a solution that brings all of the sites, but we don't want to create just another portal or gateway site. That is boring. Now you have the background, so how will we solve the fragmentation issue?
Designing away Fragmentation
I won't lie to you, I've implemented this model several times, but have never had a project that was capable of really showing off the feature set we are about to talk about. The concept is to unify all of the sites, by allowing them to easily manage views of data from all of the sites combined. Each site owns their own content, maintains their own users, but in turn peers with other sites to obtain additional content.
Web services provide a dual feature set in this model. At the current level they allow us to generate really great client-side tools for managing, well, your tools! We have a drop-client target right now so you can drag and drop new releases to existing projects in just a few seconds. Some new tools for working with build systems to promote the source code up to the server are in the works. We natively integrate with your RSS reader and will have our own alert services in the drop client just in case you don't have one. There aren't any search or local caching features, but those are also planned for the drop client so you can background download new releases, just like Windows Update.
That doesn't solve fragmentation though, that just makes me realize how much work I have left to do. The second feature of web services lies in the ability for each site to aggregate data from the many other sites that are out there hosting the application. Remember, everything we make available at the service layer can also now be remoted. The more caching we put into the data layer, the more performant the entire process will be, and we can even tune the caching depending on whether the data layer is merging off-site contents or database contents.
Peer Sites
I'm sure there is another name out there somewhere, but for the past 2 years I've called these peer sites. Each instance of the project distributor will have a number of options allowing for adding peers that will be aggregated and added to the local collection while users traverse the site. The first step is to get the peer sites running in a read-only mode. And set up some really great options so the entire process can be controlled. This solves a number of use case scenarios for us including the following.
- Fragmentation can be mitigated through proper configuration. If everyone aggregates 5 or 6 sites into their peers, then we have a huge network now of interconnected peers and users can pick and choose which one they use for purposes of searching the tool network.
- Peer connections are unidirectional or bidirectional. Access is configurable. Teams can include tools from external sites while keeping their own tools completely private. They can exist behind a DMZ or a private network.
- Users can host their own personal tool sites in the same manner as the team sites. They can configure statically which projects to make available even. In this way you can build a collection of personal tools that you love, and have the latest information automatically update on your machine for your perusal.
Peer sites solve plenty of visibility issues, but that is pretty much all they solve for now. We still want to enable all of the features available to the client tools. After all, the web service methods and proxy infrastructure is in place to do so much more.
Master Sites
Well, we want to solve another problem. That is where you edit your data. A master site is where the users, groups, projects, etc... are all hosted, but thankfully, you'll be able to log in through any site (assuming it is peered with your master site) and then edit your own projects and such. This is a remote principal context and is actually one of the cooler features associated with the peering functionality of project distributor. We'll be fully secure in our login and credentials region, but unfortunately we'll still be transferring data in open text in the short term. Maybe we'll fix that with enough push back.
Clone Sites
A clone site is where we empower a site to act on behalf of a master site. For me, my local project distributor is currently cloned to the main project distributor site. What does this mean? Right now it means I get all of the data from PD, and that users who trust my site can log-in to their project distributor accounts and cross edit data. Pretty nice if you ask me. It basically means you can fully host a project distributor installation and never, ever have to install a database server. Users can just act on behalf of a remote server.
Configuration
This isn't a super reusable model like some of those you read about in the popular software architecture books, and it probably accounts for why master/peer/clone sites don't exist very often. The considerations for every option are heavily customized to the problem being solved, and I'm sure we'll be making modifications or updating the configuration context for a while. Right now you can independently configure your primary server type, whether master or clone, whether or not users can use you for a pass-through authentication and edit server, whether or not web services are enabled so peers can enable unidirectional only communications, setting up asymmetric security credentials. Man, you name it and it is in there
For the peer section we have full and selective modes. A full peer pulls all of the data on the remote peer locally for display (in a delay caching manner, just like you'd expect, unless you set up a scheduled pull which is also possible). I expect most people to configure full peers because they really are really easy to set up and maintain. A selective peer is where you specify the groups/projects that you want to display. This is best for a user setting up their own personal toolbox who wants to select a couple of items from many different peers.
We have an extensively exhaustive configuration module already and we'll be continuously adding more to it. The concept is to easily modify your toolbox to your own designs without having to touch the code. If we haven't given you enough options to satisfy your need then we'll have to make something up, because I'm just about running out ;-)
These are the basics of the model ideas I have for project distributor. That doesn't mean Darren doesn't have other great ideas happening as well. He has some pretty extensive UI enhancements, but I'll let him talk about those. We even have another product idea that is kind of a bolt-on for project distributor, but that is probably a couple of months out putting it into next year. Unfortunately we have too many ideas for our own good right now. Better than not having any ideas I guess. I'll try to drop some code with some of the ideas above, that way you can get a look at how the entire system is implemented. I have some diagrams as well, but I'm far too tired right now to add the img tags to the HTML view.
Occupational Health and Safety Laws TodayThe state and the government, as we understand, are responsible for the safety security of the citizens.
Honnecker, Matthiasread more: PayPal Fixes URL Used for FraudAccording to Internet-monitoring company Netcraft, a security flaw on PayPal's site allowed hackers to steal credit card information from PayPal users. But the flaw has reportedly been fixed.
read more: McAfee Launches Total Protection BetaMcAfee has launched the beta version of a new all-in-one security platform that is designed to compete with Microsoft's recently introduced Windows Live OneCare.
read more: No quick fix for government data securityZDNet Jul 14 2006 10:48PM GMT
read more: Ian Turner found and wellIan lost his passport, was arrested in Atlanta, Homeland security, etc... brrr Great that all went fine! full story here more comments...
read more: MessageLabs upgrades hosted security servicesMessageLabs Ltd. has launched a new version of Web Security Services, its hosted Web security services, with an emphasis on speed and improved threat detection.

read more: Achieving QualityTechnology: Can You Automate Software Quality? "A lot of the debate has been focused on testing. Total Quality, however, would suggest that although testing is necessary, it's not sufficient. Testing focuses on inspection, not on prevention. To over-simplify, you test in hopes of demonstrating that the software has no defects (because you have a good high-quality development process), not to detect the defects that are present, but should not be there (because you don't have a good high quality development process). After several years of significant effort, the code my client was developing (and testing) still isn't of the high quality they are looking for. So we decided to go back, start from some basics, and look again at the issue of software quality."
Goes through the processes to ensure quality software: code quality (using TDD), functional quality (giving the customer what they want), non-functional quality (security, privacy, compliance, etc), deployment and production quality, and maintenance.
"This probably seems like a lot of additional work for the development organization. And it is. But the costs of defective code in the production environment (both direct, in terms of sustaining engineering, and indirect, in terms of lost revenue and reputation) was becoming significant. Management felt it had no choice but to focus on improved quality, and turn to the productivity issues later. So far, despite the added burden of all these quality?related activities (many of which already took place, but simply weren't very effective) we have not seen a slowdown in software availability. Some teams are actually moving faster than before, despite the new work they have to perform, because they spend much less time and effort on remediation and last-minute adjustments to code to fix issues that only show up as the code is transitioned to production."
read more: Big Medium 1.3.5 Security UpdateDecember 1, 2004: Big Medium 1.3.5 is an important security update that is recommended for all customers of the
Big Medium web content management system. This update addresses a flaw that could allow authorized users (people with Big Medium accounts) to upload malicious scripts to the web directory. The software also addresses a handful of minor bug fixes.
read more: Firms offered free advice on net securityEDINBURGH Chamber of Commerce is hosting a free seminar next week where experts will provide advice about improving internet security.
read more: Chips in the Kitchen
From dishwashers to food mixers to even the simple electric kettle, kitchens have long benefitted from labour-saving devices. Now Microsoft are upping the ante even further with their fully-automated cyber-kitchen. The fridge door boasts a central "family information" screen, barcode scanners automatically program correct cooking settings, and the whole room is packed with RFID chips (the radio technology currently being implemented in areas as diverse as pet identification and retail security), so should you pop a mixing bowl and flour on the work surface the kitchen will start offering recipe suggestions, projecting them onto the worktop (see picture). This all sounds fantastic, however how it will hold up in the real world is in doubt. Its going to be hard to read a bread recipe projected on a worktop if said worktop is covered in flour. And LCD screens may look ultra cool dotted around the kitchen at first, the sure as heck won't look so good by the time the touch screens are covered with sticky finger marks, or spattered with cooking oil from the nearby frying pan..
read more: Security: SARA Secuity Scanner by Anthony LawrenceI installed and tested SARA on Linux and Mac OS X. It compiled easily and cleanly on both platforms:./configure;make; sudo make install.
read more: Security: Fake blacklists? by Anthony LawrenceA customer had momentary trouble sending mail to someone. The first attempt failed, but the second went through. An examination of the logs revealed a couple of interesting things.
read more: Upgrade to Leading Student Information System Solution Now AvailableKEYSTONE 4.0 features flexible grade reporting, teacher access module, broadcast email integration and enhanced security. (PRWEB Jul 17, 2006) Trackback URL: http://www.prweb.com/chachingpr.php/U3VtbS1Ib3JyLVRoaXItU3F1YS1JbnNlLVplcm8=
read more: Fighting the Evil-Doers: A Database Security Workshop on Tuesday, July 113 horror stories and how to be victorious in the battle to protect your customer database and your network. (PRWEB Jul 9, 2006)
read more: Commercial Real Estate Investment Bank ? Pacific Security Capital - Opens Seattle OfficeCommercial Real Estate Investment Bank, Pacific Security Capital is expanding its commitment to the Seattle marketplace with the opening of a Washington office. [PRWEB Nov 14, 2005]
read more: Pacific Security Capital ? Commercial Real Estate Investment Bank - Discusses Corporate Hiring Strategies at NYC Executive SummitMike Myatt, Executive Managing Director of Pacific Security Capital, speaks about ?Recruitment & Retention Strategies? at the Commercial Property News Executive Summit in New York City. [PRWEB Nov 10, 2005]
read more: Pacific Security Capital Addresses Future of Capital Markets at RealShare NetLease West ConferenceSteve Otos, Senior Director of commercial real estate investment bank, Pacific Security Capital, has been invited to participate in a panel on ?Capital Markets: Will The Bounty Continue?? at RealShare NetLease West in Los Angeles. [PRWEB Nov 8, 2005]
read more: Reynolds Mountain Partners With Homeland Security and WeatherBug.comWeather Tracking Station On Reynolds Mountain Delivers Live Local Weather Conditions to First Responders, Consumers and EducatorsReliable weather allows for better planning and action to be taken in the event of severe weather. [PRWEB Nov 13, 2005]
read more: Lumtron Announces Release of New AccuraImage 2006? Document Management and Control SolutionNew document management and control solution features bulletproof security to comply with HIPAA, Sarbanes-Oxley and Gramm-Leach-Bliley legislation. All new .NET programming and customizable workflow process, document retention and OCR search modules make AccuraImage one of the most robust document management system available. [PRWEB Nov 10, 2005]
read more: Business Continuity Group Educates Businesses About Digital Disaster RecoveryKL Security Enterprises provides small and big business with the knowledge and solutions they need to survive fires, floods and other data disasters. They are an official Government Vendor and approved GSA Supplier of fireproof safes and filing cabinets designed to protect critical data and computer media for networks and direct server backup. [PRWEB Nov 10, 2005]
read more: Futurex Announce the First Fully Universal Interface to Host Security SoftwareFuturex Announce the First Fully Universal Interface to Host Security Software [PRWEB Nov 11, 2005]
read more: InternetPerils? John S. Quarterman to Address Royal Society of New ZealandTopic: Internet security as risk management: beyond firewalls to crime and force majeure [PRWEB Nov 14, 2005]
read more: Move Over Twain, Faulkner; The South has Done it AgainWhy is Homeland Security concerned about horses? In 'That's No Miracle...Nettles, Thistles, Humor, and Stories by a Scotch American', R.K. Ferguson provides comic relief in the story 'Hay Would Eat It' for those who are overly security minded... or sends them over the edge. [PRWEB Nov 10, 2005]
read more: Dr. Michael Kelley to Meet with Head CxO Advisory Board MembersDr. Michael Kelley has agreed to meet with head CxO Advisory Board member to discuss specific Mitigating Risk and Planning/Architecture Issues regarding National Information Security. [PRWEB Nov 13, 2005]
read more: Dr. Michael Kelley to meet with head CxO Advisory Board members.Dr. Michael Kelley has agreed to meet with head CxO Advisory Board member to discuss specific Mitigating Risk and Planning/Architecture Issues regarding National Information Security. [PRWEB Nov 13, 2005]
read more: Security Agreements for Business LoansAlthough there is no specific language or terminology that must be included in a Security Agreement, the following is a list of key provisions to consider: Identity of parties;debtor and secured party ...
read more: Alert: New HIPAA Rules Could Affect Your OrganizationOn April 21, 2005 (just over three weeks from today), a new Health Insurance Portability and Accountability Act (HIPAA) security rule goes into effect. The requirements of this rule, which are basically information security best practices, focus on the three cornerstones of a solid information security infrastructure: confidentiality, integrity and availability of information.The imminent HIPAA regulatory requirements encompass transmission, storage and discoverability of Protected Health Information (PHI). Given the widespread use and mission-critical nature of email, enforcement of HIPAA encryption policies and the growing demand for secure email solutions, email security has never been more important to the healthcare industry than it is right now.
read more: GLBA: Raising Email Security AwarenessJust a few weeks ago, one of the worlds largest banks announced that it had lost computer data containing the personal information of an estimated 1.2 million federal employees, including some members of the U.S. Senate. The missing information includes Social Security numbers and account data for government employees who use the banks charge cards for travel and expenses. In the aftermath of these revelations, the ability of banks and other financial institutions to safeguard our personal information has been called into question by consumers and government alike. Predictably, we are beginning to hear the rumblings of additional legislation, but there have been laws protecting consumer financial information on the books for years laws such as the Gramm-Leach-Bliley Act (GLBA).
read more: Maximizing E-mail Security ROI - Part V – A New Twist to an Old Problem: Email EncryptionWhile email has become a mission-critical application, it also raises important privacy and security concerns. Sensitive personal and business communications are vulnerable to the prying eyes of hackers, industrial spies and others who would love to have access to information not intended for them. Learn what you need to know about Email Encryption.
read more: Maximizing E-mail Security ROI - Part IV – The Digital Monsters under Your Bed: E-Mail IntrudersThere are very real dangers posed by network intrusions. Keep these monsters from stealing the digital lifeblood of your enterprise and ensure that your investment in network security is handsomely rewarded.
read more: Your Reputation Precedes You - A Look at the Past, Present and Future of Email Reputation SystemsMany enterprises rely on an email security solution based solely on message content; identifying the source of a particular message never enters the equation. The next generation of reputation-based spam filters are more accurate and efficient than ever by making intelligent use of a sender's historical behavior.
read more: Maximizing Email Security ROI: Part III - No More Mr. Nice Guy: Enforcing E-Mail PolicyAn effective email policy should be all-encompassing, helping organizations comply with federal regulations, protect intellectual property and prevent offensive materials from being transmitted across their networks. This article details the issues involved in corporate email policy enforcement, and provides real-world examples of compliance issues faced by corporations every day.
read more: Maximizing Email Security ROI: Part II - Stop Viruses Before They Stop YouAcross the spectrum of information security risks, most casual users understand the dangers posed by viruses and worms. Network administrators have even more reason to fear a virus attack, as a successful assault can cripple corporate networks for days. This article details the hard and soft costs associated with virus attacks on an organization's network.
read more: Maximizing Email Security ROI: Stop Spam and Save!This article details the issues involved in calculating the actual cost of spam to an organization including the harder to measure catastrophic costs incurred through legal liabilities and damage to an organization's reputation that can be caused by an ineffective spam filtering technology.
read more: Increase Efficiency with Intelligent Email Traffic ControlThe email security challenges for enterprises today do not stop at identifying and blocking spam. With spam volumes continuing to increase at an incredible rate, the new challenge is to more efficiently handle the huge volumes of mail, without increasing costs. This article explains in-depth how organizations are using IronMail's new Connection Control capabilities to more efficiently handle large volumes of spam.
read more: Email Security Governance: Email Encryption and AuthenticationWhile recent government regulations vary in scope and purpose, the need to protect and ensure the integrity of information is universal. Much of the information germane to business today is assimilated and communicated over messaging platforms such as email. As a result, the need for a comprehensive approach to the secure delivery of email affects almost all organizations, regardless of industry or size. As with many management challenges, the unknown is the most significant cause for concern. In the case of email and messaging security, the most ominous threat is often the lack of ability to measure information flowing in and out of the corporate email network.
read more: How HIPAA Security Policies Affect Corporate E-mail SystemsCollaboration between healthcare professionals, their colleagues, their patients, and employers has grown progressively more digital, and e-mail has played an ever-increasing role in this communication. Although many consider HIPAA security policies to be the sole concern of health care providers, they also affect corporate email systems as Human Resources departments become increasingly involved in transmitting employee information electronically. This article explains what you need to know to bring your email security programs into compliance with HIPAA regulations.
read more: Device Security Manager Powertoy for Windows Mobile 5.0 Released!Device Security Manager Powertoy for Windows Mobile 5.0 Released!
This test tool helps developers of Windows Mobile applications test various security policies for Windows Mobile devices.
Overview: It is designed as a desktop application that ships with a preset list of ?security configurations?. A security configuration can be thought of as a template, which contains a collection of individual policies and settings. For example, a security configuration could define policies such as whether unsigned applications are allowed to execute, whether RAPI is disabled etc. Using this tool, the developer can provision a Windows Mobile device with different configurations, and then test the application?s behavior under these configurations. This tool can be used either on an emulator or an unlocked Windows Mobile device.
Check it out here
read more:
You Searched for avi security
Click avi security to go to MMK Technologies
SEARCH RSS NEWS USING THE WORDS BELOW
avi security |
Windows Media Security |
protect video |
secure web cam |
webcam security |
video piracy |
media piracy |
windows media player security |
secure media |
protect audio |
video stream protection |
MMKTechnologies |
MMK Technologies |
prevent audio theft |
prevent video theft |
web page design |
ecommerce shopping cart |
shopping store ASP |
sell online |
sell products |
products to sell online |
web technology |
website builders |
web site builder |
bradenton web design |
florida web design |
bradenton website design |
protect MP3 |
keep video from being copied |
sarasota web design |
secure upload video |
web programming |
cgi programming |
net hosting |
net development |
flash design |
flash programming |
cool flash |
action script |
flash database programming |
flash graphics |
graphics design |
graphics disign |
flash disign |
web disign |
web design |
website design |
internet marketing |
web marketing |
web site marketing |
programming |
web sites designer |
web designs |
internet design |
programming developer |
website marketing |
web development |
marketing internet |
web sites designing |
site designs |
sites designs |
internet designer |
internet designs |
e-commerce store |
web development |
web site development |
design webs |
internet site marketing |
internet hosting |
internet host |
web hosting |
web host |
sell on the internet |
sell on the web |
e-commerce store |
internet development |
webdesign |
florida web site design |
website development |
ecommerce store |
sell online |
affiliate program |
asp web store |
marketing program |
marketing software |
submission software |
asp programmer |
cgi store |
perl store |
internet store |
database programmer |
internet database |
online marketing |
ecommerce software |
streaming media |
video streaming |
secure video streams |
media streams |
audio streaming |
MP3 security |
avi security |
Lattitude Galleries Art Gallery Sculpture garden blown glass wood art wood artwork glass artwork glass vas
Web Design Hosting and internet marketing by MMK Technologies
(c) Copyright 2005 MMK Technologies.