#json

Jackson-databind and Default Typing Vulnerabilities

Today, GitHub sent out security notices to owners of projects using old jackson-databind versions (older than 2.8.11.1 and 2.9.5). These notices pertain to this issue. I have talked about its relevance before on IRC, but since it is getting more attention now, I will describe it here again. The Problem The “bug” comes from using the so-called default typing. This feature allows a user to deserialize subclasses (or...

Oct 16, 2018 — 5 minute(s) read

#jackson #json #security #serialization #xml

The JavaChannel Podcast, vol 16

It’s only been six months, so it’s finally time for a new podcast. This one doesn’t even pretend to go over the mountains of killer content from ##java since the last podcast – it focuses on some of the more recent links, and that’s it. Well, apart from talking about the Java ecosystem a bit, especially in contrast with Python, an upstart language that’s making a lot of headway lately thanks...

Aug 16, 2018 — 3 minute(s) read

#docker #functional #jakarta-ee #java-ee #json #maven #netbeans #openjdk #podcast #podcast-16 #toml #yaml

Javachannel’s interesting links podcast, episode 7

Welcome to the seventh ##java podcast. I’m Joseph Ottinger, dreamreal on the IRC channel, and it’s Monday, 2017 November 6. Today feels slightly less anonymous than yesterday. This week we have a co-host, Andrew Lombardi – kinabalu on ##java – and we also offer our humblest apologies to Ms. Debbie Gibson. This podcast covers news and interesting things from the ##java IRC channel on Freenode; if you see something interesting that’s related to...

Nov 6, 2017 — 8 minute(s) read

#ai #chunking #cognition #cryptography #http #http2 #java-10 #json #kafka #kotlin #machine-learning #osx #podcast #podcast-7 #prod #staging #testing

Interesting Links – 14-Feb-2017

From DZone: Distributed Systems Done Right: Embracing the Actor Model is a reference to a webinar (ugh, “webinar”) from Lightbend on, well, the Actor Model, a way of representing distributed services. Powerful model, even if you don’t use Actors as described. TwelveMonkeys is a set of additional plug-ins and extensions for Java’s ImageIO. It includes BMP, TIFF, JPEG, PNM, and a few others. From user u1dzer0: Awesome Asciidoctor: Include Partial Parts from...

Feb 14, 2017 — 7 minute(s) read

#actor #actors #asciidoc #asciidoctor #dexy #documentation #imageio #java-9 #java-ee #json #scala