ColdFusion Developer in Australia http://www.coldfusiondeveloper.com.au/ Sun, 05 Jul 2009 11:53:00 EST Please read this post by the Adobe Product Security Incident Response Team regarding a security issue caused by the FCKEditor included with ColdFusion 8. http://forta.com/blog/index.cfm/2009/7/4/Potential-ColdFusion-FCKEditor-Security-Issue http://forta.com/blog/index.cfm/2009/7/4/Potential-ColdFusion-FCKEditor-Security-Issue Sun, 05 Jul 2009 11:53:00 EST If you are using cfImage anywhere in s web application, I highly recommend you read the following three articles to save you a lot of headaches: Certain JPGs Can Crash Your ColdFusion 8 Server Errors with CFIMAGE and CF8 image functions Are you aware of the MIME File Upload Security Issue If you do nothing else, make sure you read the last one! http://www.succor.co.uk/index.cfm/2009/7/4/3-MUST-read-articles-if-you-use-CFImage http://www.succor.co.uk/index.cfm/2009/7/4/3-MUST-read-articles-if-you-use-CFImage Sun, 05 Jul 2009 08:06:00 EST Our July CFUG meeting is coming up shortly, and by popular demand we have once again arranged to have Kalen Gibbons (Flex Guru) lead another hands-on workshop on Flex. For those who missed it, his first Flex workshop back in November of last year was a fantastic session, and served as a great introduction to RIA development using the Flex framework. This time around Kalen will be covering connecting to a ColdFusion back end from a Flex application. Please see here the iecfug press release- http://www.iecfug.com At this point we are intending to hold the meeting next Thursday, July 9th, at the regular time of 7:00 pm. It is possible that this may change, as our sponsor at Cal Poly will be on vacation, so we are currently trying to nail down the details of when a substitute will be available. For the same reason, the room location for the meeting is still undecided -- we will post the final details once they are available. We will have the usual pizza, soft drinks and our book raffles!! http://www.luismajano.com/blog/index.cfm/2009/7/4/Flex-Workshop-at-the-IECFUG-with-Kalen-Gibbons http://www.luismajano.com/blog/index.cfm/2009/7/4/Flex-Workshop-at-the-IECFUG-with-Kalen-Gibbons Sun, 05 Jul 2009 04:17:00 EST Would you have guessed that blowing the crap out of things would be fun? Yeah, probably so, and it's been done before, but wow, does Red Faction Guerrilla (RF) make it a heck of a lot of fun. I never played the first game, so this was my first introduction to the series. The story is pretty simple. A while ago, the Earth Defense Force came to Mars to kick some bad guys butts. They did just that. But apparently things have not turned out so well on Mars. The EDF are generally a bunch of pricks and have turned the red planet into a police state. (Are you seeing any real life corollaries yet? Don't worry - it gets more obvious later.) Your character lands on Mars and about 5 minutes later is embroiled in the local rebellion against the EDF. The story though is secondary really. It's not bad, but the game play is what I really want to talk about. Just about every single structure in the game is destructible. Ok, by itself, that doesn't sound terribly interesting. But wait - it gets better. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/3rMF0ji3dZU/Review-Red-Faction-Guerrilla-XBOX-360 http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/3rMF0ji3dZU/Review-Red-Faction-Guerrilla-XBOX-360 Sun, 05 Jul 2009 02:43:00 EST If you browse my site with Google Chrome, FireFox and Safari4, it shows the alert at every single link in my site. <img src="/enclosures/GoogleSafeWarning.jpg" border="0"> <img src="/enclosures/GoogleSafeWarning2.jpg" border="0"> With IE, it doesn't show the alert. What a wonderful browser is it... How provoking is this! I already requested an re-inspection of my site. No more injection, CrystalTech and Adobe!! http://shigeru-nakagaki.com/index.cfm/2009/7/4/20090704-Google-Safe-Browsing-shows-the-alert http://shigeru-nakagaki.com/index.cfm/2009/7/4/20090704-Google-Safe-Browsing-shows-the-alert Sat, 04 Jul 2009 22:46:00 EST I didn't! Thanks to Hemant for pointing this out to me. You can find this blog here: http://blogs.adobe.com/psirt/. I've pinged Adobe to find out a bit more about how and why content shows up here. You won't see anything about the MIME issue, but as that is a coder thing not a product thing (imho), it may not make sense here. Either way - one more blog to monitor I suppose. It's not ColdFusion specific, but I'm adding it to ColdFusionBloggers.org now. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/NgTI21-7IwA/Did-you-know-Adobe-had-a-Product-Security-Incident-Response-blog http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/NgTI21-7IwA/Did-you-know-Adobe-had-a-Product-Security-Incident-Response-blog Sat, 04 Jul 2009 22:09:00 EST Please read this post by the Adobe Product Security Incident Response Team regarding a security issue caused by the FCKEditor included with ColdFusion 8. http://www.rakshith.net/blog/?p=66 http://www.rakshith.net/blog/?p=66 Sat, 04 Jul 2009 18:27:39 EST My site had been altered TWICE by recent injection attacks. I'm using a shared hosting and it's CF7. I believe the user of ColdFusion instance is same as other users. I don't believe only my site was altered by the injection attack. <a href="http://blogs.adobe.com/psirt/2009/07/potential_coldfusion_security.html" target="_blank">Potential ColdFusion security issu</a> And I restore my site from backup TWICE. Then they charged $10 as each restoration fee. The total is $20. I couldn't approve this charge. So I replied to the email, "Why should I pay for your service issue". Then they said "contact our Billing department" for this "dispute". I don't believe this. If you were me, do you pay for this? http://shigeru-nakagaki.com/index.cfm/2009/7/4/20090704-Charge-for-restoring-site http://shigeru-nakagaki.com/index.cfm/2009/7/4/20090704-Charge-for-restoring-site Sat, 04 Jul 2009 16:39:00 EST There have been a few stories about a vulnerability in FCKeditor that is bundled with ColdFusion 8, first on SANS and now on The Register. The FCKeditor ColdFusion connector isn't enabled on all CF installations, I think if you installed a fresh 8.0.1 it is enabled, older versions may have had it disabled by default. Either way you need to make sure it is disabled, and remove the file manager. John Mason has put together a blog entry detailing how to do this here. If you aren't using cftextarea you might as well go ahead and delete (or move outside the web root) /CFIDE/scripts/ajax/FCKeditor/ all together. Also if you use FCKeditor (on any version of CF) outside of cftextarea make sure you are not at risk. I haven't had a chance yet to review the vulnerability itself, but I will do so, and post details, in the mean time just make sure your server is not vulnerable. http://www.petefreitag.com/item/704.cfm http://www.petefreitag.com/item/704.cfm Sat, 04 Jul 2009 01:34:00 EST Many blogs are reporting this, and frankly I don't have more to add to the already good reports out there, but be sure you read and respond to this new issue involving FCKEditor. Details: CF8 and FCKEditor Security Threat ColdFusion 8 FCKeditor Vulnerability Please help spread the word. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/bzOZO8aIfRE/ColdFusion-Security-Issue--FCKEditor http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/bzOZO8aIfRE/ColdFusion-Security-Issue--FCKEditor Sat, 04 Jul 2009 01:08:00 EST Not trying to be contradictive here (maybe a little bit) or rain on anyones parade, but I've been hearing and seeing loads of fuss from people who are "just waiting" for ColdFusion 9 ORM to be released, or some people who have projects where ColdFusion 9 ORM "would suit just perfectly". Whilst I find it to be perfectly normal and very exciting, I can also predict some deception is to come. Obviously this doesn't apply to everybody, but to some people who are expecting too much of it. When I say expecting too much of it, I mean people who think it will be a life saver, and everything that is ugly will become pretty. ORM is no big news for us ColdFusion developers, as we've been using it for a while with Reactor and Transfer. But I still feel the need of explaining a few things in here to avoid people being mislead by the hype that is to come. http://www.placona.co.uk/blog/post.cfm/coldfusion-9-orm-and-why-i-see-deception http://www.placona.co.uk/blog/post.cfm/coldfusion-9-orm-and-why-i-see-deception Sat, 04 Jul 2009 00:06:08 EST Ajax Same Origin Policy No More with Firefox 3.5 Should be… interesting. http://feedproxy.google.com/~r/AaronJohnson/~3/WspZribrfnk/ http://feedproxy.google.com/~r/AaronJohnson/~3/WspZribrfnk/ Fri, 03 Jul 2009 18:47:32 EST I was thinking about how to be answer a new ColdFusion-based " Ask Ben " question about a rating system when I thought about creating numeric averages. All my life, when creating an average, I followed the simple formula of dividing the sum of a collection by the number of its entries: Average = Sum / N This, of course, requires you to have both the sum and the count of a ... http://www.bennadel.com/index.cfm?dax=blog:1627.view http://www.bennadel.com/index.cfm?dax=blog:1627.view Fri, 03 Jul 2009 13:48:00 EST Kerrie asks: A couple of weeks ago, I read a post you wrote on jQuery and form validation... really peaked my interest so I've been taking a look at not only the validation plugin, but many of the other great jQuery plugins... I found this one last night, and its perfect for an app I'm working on, but I cannot figure out how to return the output of a query to populate the list. In the demo they are returning the results of tvshows.php. I noticed a number of other folks were having the same problem but no solution. Might you have a few spare moments to take a look?? Kerrie, don't feel alone. I've noticed this in a few other jQuery plugins. The author will give you an example of the JSON they want, but they don't describe the JSON in pure data forms. So for example, if the JSON string is an array of strings, they don't say that. They just show it and assume you know that is how arrays are represented in JSON. JSON may be easy, but I definitely can't parse it in my head quite yet. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/y0NgEYTXCFg/Converting-ColdFusion-data-for-jQuery-Plugins--An-example http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/y0NgEYTXCFg/Converting-ColdFusion-data-for-jQuery-Plugins--An-example Fri, 03 Jul 2009 12:06:00 EST The inaugural meeting of the newly formed Bangalore ColdFusion Usergroup will take place July 09, 2009, at the Adobe Bangalore office. ColdFusion engineering team members will present ColdFusion Centaur and Bolt. Details posted online. http://forta.com/blog/index.cfm/2009/7/2/First-Bangalore-ColdFusion-Usergroup http://forta.com/blog/index.cfm/2009/7/2/First-Bangalore-ColdFusion-Usergroup Fri, 03 Jul 2009 11:16:00 EST With the exception of new ColdFusion tag definitions, we all know that there hasn't been any active development on HomeSite in a long time. Dreamweaver, CFEclipse, and now Adobe Bolt have long since taken over that product path. But still, it made me a bit sad to find out earlier this week on Twitter that Adobe officially announced the death of HomeSite as a product as of May 26, 2009, not only in development but also in s ... http://www.bennadel.com/index.cfm?dax=blog:1626.view http://www.bennadel.com/index.cfm?dax=blog:1626.view Fri, 03 Jul 2009 09:56:00 EST Yeah.... CrystalTech CF server had been attacked.... And all JavaScript files, HTML files and Application.cfm on <B>MY SITE</B> had been altered. It added JavaScript code which loads virus. I sent emails to CrystalTech support. Then they restored files from backup of the time point on June 30th. The attack details <a href="http://isc.sans.org/diary.html?storyid=6715" target="_blank">Cold Fusion web sites getting compromised</a> <a href="http://www.codfusion.com/blog/post.cfm/cf8-and-fckeditor-security-threat" target="_blank">CF8 and FCKEditor Security threat</a> The fundamental cause is ColdFusion (= Adobe) default setting!! ....... http://shigeru-nakagaki.com/index.cfm/2009/7/3/20090703-CrystalTech-server-was-attacked http://shigeru-nakagaki.com/index.cfm/2009/7/3/20090703-CrystalTech-server-was-attacked Fri, 03 Jul 2009 07:31:00 EST A user reported this to me earlier in the week. I was sure he was wrong until I confirmed it myself. Imagine you have 2 queries you want to join using a query of query. Here is a quick sample. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/Q9Erhg2ISpY/Query-of-query-issue-with-where-clausejoins http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/Q9Erhg2ISpY/Query-of-query-issue-with-where-clausejoins Fri, 03 Jul 2009 05:38:00 EST stamen design | Oakland Crimespotting update: the pie of time Another novel way of slicing data / content: time of day. (categories: interaction timeline ui infoviz stamen time ) The Hacker Chick Blog: Plane Crashes, Software Failures, and other Human Errors Quote: [... http://feedproxy.google.com/~r/AaronJohnson/~3/7oyphIw0J_s/ http://feedproxy.google.com/~r/AaronJohnson/~3/7oyphIw0J_s/ Thu, 02 Jul 2009 18:47:27 EST Earlier this week a reader asked if there was a way to read FLV Metadata via ColdFusion. There isn't anything built in (that I know of!) so I did a quick search for a Java solution. I think people forget how easy it is to use Java via ColdFusion. Even if you have no intent, or care, to read FLV Metadata, please read on as the general technique is something I've done many times in ColdFusion, and could be helpful to anyone looking to do something not directly supported via CFML. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/yOYU-fpO3wY/Quick-example-of-Java-via-ColdFusion--Reading-FLV-Metadata http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/yOYU-fpO3wY/Quick-example-of-Java-via-ColdFusion--Reading-FLV-Metadata Thu, 02 Jul 2009 02:28:00 EST For those readers who didn't see my previous post regarding my conversation with Glen, Glen is a technical trainer who treated me to the usual "ColdFusion is dying" mantra we normally hear from other programmers. The big question I had after that first encounter was why, as a trainer rather than a programmer, he had developed that opinion about ColdFusion. So when I ran into him again at the gym the other day, I asked him about that. Turns out his belief that ColdFusion is dying is based on the job market for ColdFusion jobs. He told me he works/interacts with a dozen recruiting firms in the Washington D.C. area, firms looking to fill positions for government contractors like Lockheed, and that the number of ColdFusion positions compared to the number of positions programming in Java or Ruby is just so small. http://www.swartzfager.org/blog/index.cfm/2009/7/1/My-Encounter-With-a-ColdFusion-Detractor-Part-2 http://www.swartzfager.org/blog/index.cfm/2009/7/1/My-Encounter-With-a-ColdFusion-Detractor-Part-2 Wed, 01 Jul 2009 21:15:00 EST Real-time systems hurting long-term knowledge? Quote: "The other night Jeremiah Owyang told me that thought leaders should avoid spending a lot of time in Twitter or FriendFeed because that time will be mostly wasted. If you want to reach normal people, he argued, they know how to use Google. And if [... http://feedproxy.google.com/~r/AaronJohnson/~3/meMHWwQtV9Q/ http://feedproxy.google.com/~r/AaronJohnson/~3/meMHWwQtV9Q/ Wed, 01 Jul 2009 18:47:28 EST If you haven’t heard by now, there is a huge security vulnerability using cffile to upload files. This effects every CF application out there and is being exploited as we speak. There is a ton of information out there about what causes and how to perform the exploit, however noone is doing anything about it [... http://rip747.wordpress.com/2009/06/30/coldfusion-mimefile-upload-security-issue-workaround/ http://rip747.wordpress.com/2009/06/30/coldfusion-mimefile-upload-security-issue-workaround/ Wed, 01 Jul 2009 12:49:32 EST My post on "Are there really ColdFusion jobs?" got a comment which was echoed by Sean Corfield on his blog (ColdFusion Jobs? Really?). It seems that I didn't answer my own question. In truth, I was using it as a jump off point but looking over the ... http://www.blogoffusion.com/063009-examining-my-coldfusion-job-search.cfm http://www.blogoffusion.com/063009-examining-my-coldfusion-job-search.cfm Wed, 01 Jul 2009 12:24:00 EST A few months ago I got so fed up with dealing with spam on the ColdFire RIAForge site that I disabled comments for all blog entries and completely disabled the forums. However, rather than admit defeat, I talked with Ray Camden to see if I could help get Akismet support in RIAForge. Ray took me up on my offer and today he released a couple of updates that I think project authors will really appreciate. The biggest update is that under the hood RIAForge is now using Brandon Harper's cfAkismet library to validate blog comments and forum posts. Blog comments flagged as spam by Akismet are moderated so that blog authors can choose to delete them or approve them as "ham." Due to some limitations with the way Galleon Forums are integrated into the RIAForge site, forum posts are just blocked outright if flagged as spam. Anyway, I hope this will help other RIAForge authors as much as it will help me, and please let Ray or me know if you have any questions about the Akismet integration. http://www.mischefamily.com/nathan/index.cfm/2009/6/30/RIAForge-Now-Protected-by-Akismet http://www.mischefamily.com/nathan/index.cfm/2009/6/30/RIAForge-Now-Protected-by-Akismet Wed, 01 Jul 2009 11:27:00 EST I have always like FF. Today even more, since Firefox 3.5 is out.�� Get it here One thing that has impressed me over the last few majorish upgrade is how much faster the Plugins / Add-ons are updated to work with the newest version. It seems that in the past I had to wait or to disable the compatabuility checks. About 90% of the plugins I use had new versions. The others had late betas. I'm just waiting for cold fire to come out of beta with the FF 3.5 version. http://www.dervishmoose.com/post.cfm/the-fox-is-out-firefox-3-5-has-been-released-plugins-work http://www.dervishmoose.com/post.cfm/the-fox-is-out-firefox-3-5-has-been-released-plugins-work Wed, 01 Jul 2009 11:14:43 EST When ColdFusion 8 came out, I never really paid any attention to Application.cfc's new OnMissingTemplate() event handler. This method allows you to handle 404 errors at the application level rather than the server level. At a glance, it seems like an awesome new feature until you realize that it has one glaring issue: it only works for non-existing CFM templates. Meaning, that if you request a .GIF or .ZIP file that doesn't exist, the OnMissingTemplate() event handler does not get triggered. ... http://www.bennadel.com/index.cfm?dax=blog:1625.view http://www.bennadel.com/index.cfm?dax=blog:1625.view Wed, 01 Jul 2009 10:23:00 EST Today I released two important updates to RIAForge, both thanks to Nathan Mische. The first change is the addition of Akismet spam protection to the blogs and forums. RIAForge gets hit pretty hard by spammers, so the hope is that this will reduce some of that traffic. Yes, there is an add for Wordpress at the bottom, but for a free Akismet license, I think this is a fair trade and it will really help out project owners. On the flip side, I've heard time and time again from visitors that we need a way to flag/rate/etc projects to help signify active projects from abandoned sites. I've said that I refuse to do this manually. We are currently at 724 released projects and there is no way I'm going to spend my time going through them and chastising project owners to update their work. (Especially when I have some 'dusty' projects myself.) Today we added a simple little modification that I think will help out. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/B_uqDEK_Hp4/Important-RIAForge-Updates http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/B_uqDEK_Hp4/Important-RIAForge-Updates Wed, 01 Jul 2009 09:58:00 EST Four new projects and four updates this week. Today is the last day to get the early bird discount for CFUnited. If you are interested in ColdFusion open source, there will be plenty of discussions about some important open-source projects there and, I am sure, no shortage of announcements. I'll be there speaking about the Mate Flex framework. So, after you read this week's open source update, go get yourself registered. New Releases and Updates New Project: CFLogger CFLogger Tim Blair posted this project which he says is loosely based off Log4J. New Project: CFTracker CFTracker: Memory, Apps, Sessions Dave releases this new project that gets ColdFusion application and session data for all running applications. New Project: CFup CFup build 090624 - now on github Jules Gravinese released this Ajax file-progress uploader on GitHub. New Project: iContact.cfc API iContact.cfc API Peter Farrell released this component to work with iContact (in Subversion only at the moment). http://www.remotesynthesis.com/post.cfm/coldfusion-open-source-update-june-30-2009 http://www.remotesynthesis.com/post.cfm/coldfusion-open-source-update-june-30-2009 Wed, 01 Jul 2009 05:23:45 EST Michael Dinowitz poses a very interesting question over on Blog of Fusion: are there really ColdFusion jobs out there? What he's mostly talking about are those open reqs that you keep seeing, month on month, that never seem to get filled, but he is also asking why well-qualified people have a hard time getting hired. He doesn't really answer his own question but he gives some good advice about applying for jobs... http://corfield.org/entry/ColdFusion_Jobs_Really http://corfield.org/entry/ColdFusion_Jobs_Really Wed, 01 Jul 2009 02:42:00 EST As you will see elsewhere on my blog, I have recently setup windows 2008 server 64bit as my new desktop. For the most part everything has worked ok, but there have been a few interesting quirks.   One of these quirks was that any new site I setup in IIS7 resulted in a "500 internal server error" identifying the AboMapperCustom wildcard application mapping for ColdFusion as the cause.   Now my Default Web Site from where I run the CFADMIN was working fine, so I was rather perplexed as to why other sites did not work when they seemed to be setup exactly the same. Now I am actually using DotNotPanel on my local machine to setup and manage sites, so this may be a contributing factor, but still the cause of the problems may affect others, so hopefully the solutions may help. http://russ.michaels.me.uk/index.cfm/2009/6/30/CF-on-IIS7-ndash-internal-server-error http://russ.michaels.me.uk/index.cfm/2009/6/30/CF-on-IIS7-ndash-internal-server-error Wed, 01 Jul 2009 02:04:00 EST I had heard a few rumblings of this recently but had not really paid it much attention. Mike emailed me today and described how he was hacked pretty badly by it. I'll share his email and then add some notes to the end. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/aUDkc_OcmyA/Are-you-aware-of-the-MIMEFile-Upload-Security-Issue http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/aUDkc_OcmyA/Are-you-aware-of-the-MIMEFile-Upload-Security-Issue Wed, 01 Jul 2009 00:59:00 EST Yaron asks: I'd like to know what your preference is for using cfajaxproxy. In JavaScript, do you create one global proxy object and reuse it throughout your script? Or do you create a new proxy object within every function that generates a proxy call? The reason I'm asking is I had multiple concurrent proxy calls that had their callback functions mixed up. Meaning, one functions makes 2 async calls with two separately defined callback functions. Unfortunately, one callback function received the input from another. Weird. Ah, asynchronous network calls. Life would be a heck of a lot easier if everything was synchronous. Let's dig a bit into what Yaron found in case it doesn't make sense. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/7YSMpyLhLFI/Ask-a-Jedi-CFAJAXPROXY-and-Managing-Callbacks http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/7YSMpyLhLFI/Ask-a-Jedi-CFAJAXPROXY-and-Managing-Callbacks Tue, 30 Jun 2009 10:30:00 EST Ever want to run a script that does an OPTIMIZE of all tables in your database? First off, you can do this with a shell script or cron job with something like: "mysqlcheck -u root -p --auto-repair --check --optimize --all-databases" But what if you, say, don't have a full-time DBA on staff, and want to run these on a schedule which you can easily control with ColdFusion? That was our situation, and so here's what I came up with. We ran it last weekend during our scheduled "maintenance window" and it took about 90 minutes with no downtime on a MySQL 5.1 18G database (disclaimer: the speed of this process may vary, depending on numerous variables such as hardware, memory, version of MySQL, etc.) <!--- set these according to your database size: 14400 and 1800 were used after extensive testing on a system with 8G ram and quad core in 2009 for an 18G database; you can easily try different values here by trying them in the URL (ex: /OPTIMIZE_ALL_DB_tables.cfm? http://cfzen.instantspot.com/blog/2009/06/29/OPTIMIZE-all-MySQL-database-tables-via-ColdFusion http://cfzen.instantspot.com/blog/2009/06/29/OPTIMIZE-all-MySQL-database-tables-via-ColdFusion Tue, 30 Jun 2009 06:46:00 EST Have you registered for CFUnited yet?  If not, why not? The 'early bird' discount ends tomorrow.  So, go register.  Go ahead...I'll wait.... OK, now that we got that out of the way, we can talk about the real important stuff. How many of you knew that one of the amenities if you stay in the hotel was that you get a free round of golf at the resort?  I am sure it will come as no surprise to anyone that I think this is way cool. I love golf, and take any opportunity to play new courses. I have heard great things about the courses at Lansdowne, but have not played there yet (even though its only about 45 minutes from home). I was planning on getting a group of people together for a little outing. I was thinking Wednesday Tuesday would be the best day.  I would make any arrangements with the golf course and we can kind of play as one big group.  There is one caveat though, if you sign up to play in this little outing, you will be randomly placed in groups with other CFUnited attendees/speakers. http://www.boyzoid.com/blog/index.cfm/2009/6/29/Golf-at-CFUnited http://www.boyzoid.com/blog/index.cfm/2009/6/29/Golf-at-CFUnited Tue, 30 Jun 2009 05:46:00 EST   I won't go on again waxing too lyrically about the O'Reilly Velocity conference but I fully recommend all who read this post to go and attend the conference, if it occurs again next year.  What I thought might be of use is to go through some of the products and services we were exposed to over the three days of the conference.  What it seems like to me is that web technologies are evolving and morphing so fast that those of us interested in maintaining and furthering our careers need to keep tabs on what Web 2.0 is pushing us into.   I will add a pre-note before going into more detail, Adobe were not evident at all at this conference, of course my focus is ColdFusion-JRun-J2EE but obviously there are many other Adobe technologies aimed squarley at the web and I really think Abobe could have made an impact in an environment which featured the current movers and shakers in all things web.   CouchDB - This is a verbatim quote from the Apache CouchDB documentation... http://www.cfwhisperer.com/post.cfm/a-really-great-conference-o-reilly-velocity-want-performance http://www.cfwhisperer.com/post.cfm/a-really-great-conference-o-reilly-velocity-want-performance Tue, 30 Jun 2009 05:42:13 EST MAX is still a few months away (and I've yet to finish my presentations for CFUNITED), but it's time to begin early planning for the ColdFusion Unconference. Last year I think things went well, but there are some changes I'd like to make. First - I booked every single possible hour (except for 2-3) with sessions. While I think this was good, it didn't leave much time for ad hoc sessions or just general bull sessions. What I'd like to do this year is leave something like 30% of the time open. This will be for any possible topic, and could be a good way to hash out ColdFusion 9 stuff that I assume will be fresh on people's minds. I'm also a big fan of show and tell. I'd like to offer some opportunities for folks to just plug in a laptop and show what they have been working on. Again, if ColdFusion 9 is out by then, or in public beta, this could be a great way to show the new shiny stuff off. Thoughts on this? Should I leave even more time open? Less? Second - last year I was mistaken about lunch. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/AOVSjfuUC-s/MAX-2009-ColdFusion-Unconference--Call-for-SpeakersComments http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/AOVSjfuUC-s/MAX-2009-ColdFusion-Unconference--Call-for-SpeakersComments Tue, 30 Jun 2009 05:25:00 EST Comment spam on my blog has increased immensely over the last four to six weeks. I'm getting, on average, 150 spam comments per week. In order to help combat the scum of the earth I have implemented both Akismet and Project Honeypot by way of activating these two features in CFFormProtect (which ships with BlogCFC). http://www.trajiklyhip.com/blog/index.cfm/2009/6/29/Adding-Akismet-and-Project-Honeypot-to-BlogCFC http://www.trajiklyhip.com/blog/index.cfm/2009/6/29/Adding-Akismet-and-Project-Honeypot-to-BlogCFC Tue, 30 Jun 2009 03:30:00 EST I'm happy to announce that the new and improved SlideSix is now live. This new look and feel is a complete overhaul compared to the original design of the site. The new design uses a lot of gray, blue and black in order to make the site more closely resemble the Flex pieces that were already in place. There are also a lot of rounded corners to take the edge off of the deep colors so they hopefully don't overwhelm. Thanks to some feedback there is also a shiny new logo. http://cfsilence.com/blog/client/index.cfm/2009/6/29/Check-Out-The-New-SlideSix http://cfsilence.com/blog/client/index.cfm/2009/6/29/Check-Out-The-New-SlideSix Tue, 30 Jun 2009 00:04:00 EST The Nike Experiment: How the Shoe Giant Unleashed the Power of Personal Metrics Quote: "The gist of the idea is that people change their behavior—often for the better—when they are being observed (which is why it’s sometimes called the observer effect). Those workers at Western Electric didn’t build more relays [... http://feedproxy.google.com/~r/AaronJohnson/~3/kUz8SB0zXuE/ http://feedproxy.google.com/~r/AaronJohnson/~3/kUz8SB0zXuE/ Mon, 29 Jun 2009 18:47:31 EST CFC serialization is a feature that came out in ColdFusion 8. With this feature it is now possible to serialize a cfc, i.e. it is possible to write an instance of a cfc to an outputstream. In simple words, it is possible to write cfc instances to a file and read them back. CFCs stored in the session now get replicated across the servers in the cluster as well because of CFC Serialization. But there were issues with what came out in ColdFusion 8. If the CFC had an array or a query or a data object or a java object, CFC serialization used to fail. The issue is now fixed! Here’s the technote for the fix : http://kb2.adobe.com/cps/496/cpsid_49620.html I can now take a deep breath and relax for a while because there were a lot of people on my blog waiting for this fix. Here’s the hotfix. http://www.rakshith.net/blog/?p=64 http://www.rakshith.net/blog/?p=64 Mon, 29 Jun 2009 17:52:57 EST This weekend I got a package in the post, with an awesome t-shirt from the NYCFUG! I want to thank Clark Valberg and Ben Nadel from Epicenter Consulting for sending me such an awesome item as well as for the fantastic reception I had at the NYCFUG in May! http://www.markdrew.co.uk/blog/post.cfm/a-big-thanks-to-the-nycfug http://www.markdrew.co.uk/blog/post.cfm/a-big-thanks-to-the-nycfug Mon, 29 Jun 2009 15:48:30 EST Just a quick note to let folks know that I've updated the ColdFusion Resource Portal. I don't think folks visit this site very often. I created it mainly because I had trouble finding things on the Adobe site. I noticed how well Flex.org organized important links for Flex dev so I created a similar set of links for the CF portal. In this update I switched over the Spry tabs to jQuery UI tabs. I didn't remove Spry completely though - it is still being used to load the RSS feeds in the right hand column. I also removed a lot of content that can be found elsewhere. So for example, I no longer list blogs, but rather tell people about ColdFusionBloggers. Ditto fur User Groups - most groups are now listed at Adobe Groups, so I simply let folks know where to go. I hope people still find this little site useful! http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/yUwxz0QEP9c/ColdFusion-Portal-Update http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/yUwxz0QEP9c/ColdFusion-Portal-Update Mon, 29 Jun 2009 11:52:00 EST Are there really ColdFusion jobs out there or are they teasing us? As of today, I'm married 14 years. This means that I've been using ColdFusion for 14 years and 1 week. In those years I've done everything from create some of what is considered ... http://www.blogoffusion.com/062809-are-there-really-coldfusion-jobs.cfm http://www.blogoffusion.com/062809-are-there-really-coldfusion-jobs.cfm Mon, 29 Jun 2009 08:44:00 EST I wanted to give folks a quick update on my experience with the new iPhone 3GS. With the expensive (for some) upgrade price, I know people aren't sure if it is worth the upgrade. Here is what I've found so far. First though - note that I had a first generation iPhone. What seems really great for me may not be so great for folks already on a 3G phone. 1) Network Speed I guess I shouldn't be too surprised, but, I had heard that 3G wasn't "too big" of a jump over Edge. Maybe it isn't, but it certainly feels a heck of a lot zippier. The main applications I use with a lot of network activity are Twitterific, Maps, and Safari. All of them run much faster now. I was particularly surprised by Maps. I had it tracking my car and it updated our position in real time. (I wasn't driving. :) I was also impressed by the directions. I hadn't used it before, but I can see using it a lot more now that I know how it works. Unfortunately, the main site I use for mail, GMail, has recently taken a step back in functionality. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/6tivlbNxEM4/iPhone-3GS--So-far-so-good http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/6tivlbNxEM4/iPhone-3GS--So-far-so-good Mon, 29 Jun 2009 00:20:00 EST I pushed up LighthousePro to RIAForge. This isn't a major update in functionality (although it has a few updates and some jQuery-lovin' added) but it is now a Model-Glue 3 sample application. It will ship with Model-Glue 3 and hopefully serve as a good example of what can be done with the framework. Of course, even if you don't give two hoots about Model-Glue 3, this is still a good update for you and will help improve the product overall. Please post any bug reports to the LHP issues page. Thanks! http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/Vpc9VWdgfyM/LighthousePro-26 http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/Vpc9VWdgfyM/LighthousePro-26 Sun, 28 Jun 2009 05:13:00 EST Gary asked me an interesting question relating to AIR applications. He wanted to know if there was a way for an AIR application to know the username of the current user. I would have guessed that this would be part of the AIR API, but after a bit of searching and asking around, it turns out that this is not the case. While there isn't a direct API, there is a nice workaround that I found on Stack Overflow (Get the current logged in OS user in Adobe Air). The solution simply assumes that all users have a base directory that includes their username. On my Mac, it is "/Users/ray". On my Windows box (yes, I'm ashamed, I still keep one around), the directory is "c:\documents and settings\administrator". So this technique seems like a good one. You could certainly use it to suggest the current username. Here is a simple demo that Gary cooked up using this technique: I modified it a bit just to simplify things. http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/r61dtRSdRKY/Finding-the-username-in-an-AIR-app-and-a-quick-binding-tip http://feedproxy.google.com/~r/RaymondCamdensColdfusionBlog/~3/r61dtRSdRKY/Finding-the-username-in-an-AIR-app-and-a-quick-binding-tip Sat, 27 Jun 2009 23:25:00 EST I'm thrilled to announce that I recorded a TV interview in New York last weekend for Better TV and a sneak peak has appeared on YouTube. I was interviewed by Ereka Vetrini who you may remember from season 1 of the Apprentice. http://feedproxy.google.com/~r/AdamHowittsBlog/~3/bBGKcHUSTPQ/WalkJogRun-TV-Interview http://feedproxy.google.com/~r/AdamHowittsBlog/~3/bBGKcHUSTPQ/WalkJogRun-TV-Interview Sat, 27 Jun 2009 06:42:00 EST A recruiter contacted me to ask if I knew anyone looking for ColdFusion and Flex work in the Philadelphia area. Unfortunately, I don't. If I did, I would probably steal them to fill an open position in my department. But in hopes that someone out there looking for work in the Philadelphia suburbs might fit, I offered to post the information here. Flex/ColdFusion Developer needed for a 3 week project in Malvern PA. Please contact Jacky Barry, j.barry@thebossgroup.com or 610-668-3456 It sounds like freelancers and moonlighters might be able to take it on, but I'm not sure if it requires working on-site or during normal business hours. http://feedproxy.google.com/~r/NerdFusion/~3/dOBKm6pfe_k/flex-coldfusion-position-in-the-philadelphia-area http://feedproxy.google.com/~r/NerdFusion/~3/dOBKm6pfe_k/flex-coldfusion-position-in-the-philadelphia-area Sat, 27 Jun 2009 00:58:22 EST Its been a couple of weeks since the last Fridays joke as I’ve been crazy busy recently. I have also been following the recents bits of info leaking out as ColdFusion 9 and Bolt ColdFusion Builder have been doing the rounds at the UG’s recently, so now is as good as time as ever to [... http://www.andyjarrett.com/blog/?p=1265 http://www.andyjarrett.com/blog/?p=1265 Sat, 27 Jun 2009 00:27:37 EST