[newbie] JNLP, Quicktime Java, WebObjects

I'm developing a Java Client application that uses WebStart, Apple's Quicktime Java and WebObjects. (I'm new to WebStart and somewhat new to Java Client). Several issues have arisen. Quicktime likes to record stuff directly to hard disk. So, I'm going to have to figure out how to bypass the sandbox environment, or use the JNLP API to get around this. I'm having a hard time wrapping my head around this problem...
- - WebObjects signs all the .jar fies for the application with a generic sig. This seems to prevent me from granting all permissions in the JNLP. From what I understand I can create a dummy JNLP file that imports the other .jnlp file as an extension. Is this right? If so, is it possible to create a dummy JNLP that doesn't have it's own content and just references another to accomplish this?
-- Is there a way to grant access using the JNLP API so that Quicktime Java could write directly to the disc? I could put things into memory, then write using the JNLP API, but direct access would be cool.
Thanks for any help for this newbie,
Jaime

- - WebObjects signs all the .jar fies for the
application with a generic sig. This seems to prevent
me from granting all permissions in the JNLP. From
what I understand I can create a dummy JNLP file that
imports the other .jnlp file as an extension. If this is a valid codesigning signature you can put the WebObjects
jars in a component-extension and request <all-permissions> in
that extension.
Is this right? If so, is it possible to create a dummy JNLP
that doesn't have it's own content and just references
another to accomplish this?No - you still need a main (application-desc) jnlp file with a Main JAR
(containing a Main class) and have it reference the extension.
(this main jnlp file dosn't need to request <all-permissions> or
have its Main JAR signed)
>
-- Is there a way to grant access using the JNLP API
so that Quicktime Java could write directly to the
disc? I could put things into memory, then write using
the JNLP API, but direct access would be cool.No - there is no way to use the JNLP API to grant blankett
disk i/o access to the application.
>
Thanks for any help for this newbie,
Jaime/Dietz

Similar Messages

After installing Final cut server client on OSX 10.6.8 error: Apple QuickTime or the QuickTime Java component is not installed.

After installing Final cut server client on OSX 10.6.8 error: Apple QuickTime or the QuickTime Java component is not installed.
I know this error on windows machines but cannot get a solution for OSX.

I have fixed this by installing the latest combo update

Quicktime Java Vulnerability (4/24/07) -

A QT vulnerability is reported to affect QT versions 3x,4x,5x,6x,7x when used w/Java in browsers: Safari, Firefox and IE. Hopefully this will be patched in a timely manner. In the meantime surf carefully and take appropriate precautions.
Info sources:
Secunia advisory
Apple QuickTime Java Handling Unspecified Code Execution
Secunia Advisory: SA25011
Release Date: 2007-04-24
Critical:
Highly critical
Impact:
System access
Where:
From remote
Solution Status:
Unpatched
Software:
Apple Quicktime 3.x
Apple Quicktime 4.x
Apple Quicktime 5.x
Apple Quicktime 6.x
Apple QuickTime 7.x
A vulnerability has been reported in Apple QuickTime, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to an unspecified error within the Java handling in QuickTime. This can be exploited to execute arbitrary code when a user visits a malicious web site using a Java-enabled browser e.g. Safari or Firefox.
The vulnerability is reported on a Mac OS X system using Safari and Firefox. Other browsers and platforms may also be affected.
Solution:
Disable Java support.
Do not browse untrusted websites.
Provided and/or discovered by:
Dino Dai Zovi
Original Advisory:
Matasano:
http://www.matasano.com/log/812/break...n-quicktime-affects-win32-apple-code/
US-Cert current activity
Vulnerability Involving Apple QuickTime and Java
added April 24, 2007 at 04:07 pm
US-CERT is aware of a new vulnerability involving Apple QuickTime and Java. Any platform supporting QuickTime and Java may be affected. Details about the vulnerability are currently limited; however, it is reported that disabling Java will protect users.
US-CERT recommends users follow the Securing Your Web Browser document to disable Java.
US-CERT will continue to investigate this vulnerability and provide more information as it becomes available
Spybot S&D advisory
QuickTime vuln - unpatched
FYI...
- http://isc.sans.org/diary.html?storyid=2689
Last Updated: 2007-04-24 21:54:43 UTC ~ "Secunia has posted an advisory today that involves Apple Quicktime Java. According to the advisory this is a highly critical problem that affects versions 3.x, 4.x, 5.x, 6.x and 7.x. The vulnerability is due to an unspecified error within the Java handling in QuickTime. This can be exploited allowing execution of arbitrary code when a user visits a malicious web site using a Java-enabled browser e.g. Safari or Firefox (ed. note: IE, too)..."

Does this vulnerability exist in the PowerPC code as well?

A JNLP based Java application is not running on JDK/JRE 1.7

I am planning to upgrade users to java 7 up40. The generated command line that I am calling via the Process is working find when I run using jre1.6 but it doesn't work when I call javaw via jre1.7. Very strange that if i update xbootclasspath to use 1.5 or 1.7 it works but it doesn't work jre1.6.
As suggested in other forums I updated the version in jnlp to 6 and also cleared the stderr and stdout from the process error stream and input stream in separate thread but still the thread is locked in FileInputStream.readBytes and doesnt move futher with jre1.6 as the classbootpath.
any help on this regards will be helpful.

btw this happens only if user does not have java 7 installed on their machine. As the app tries to install and run and so picks up javaw to java 7 and jre 1.6 in xbootclasspath.

Newbie question on JAVA networking

Hi,
I'm newbie on JAVA networking. Can anyone guide me to do a task to :
read the TCP/IP packets which are sent from a specific host to another host? I need to capture the packets and analyse the contents.
thanks in advance,
jackling

Well I've search google for a low level TCP api, but I came up with absolutely no results. So I guess the only way would be to write your own native API (using C/C++) and call this through the Java Native Interface.

Quicktime Java install bug?

I've been trying to run this Java app that runs on pretty much every other Windows XP machine except mine; on my machine the app starts and then whines about something on the classpath: QTJava.zip. My machine happens to be the only that I've tried that has QT7 on it, in fact I've installed, uninstalled, and reinstalled QT7. I read on a mailing list that:
"You can't just download QTJava.zip and put it into your classpath. You need to reinstall Quicktime to enable Quicktime for Java. If
you just put QTJava.zip you will still get errors about your classpath, even though it's correct - that's because QTJava needs a dll to be installed and some stuff in the registry."
It looks like the QT7 installer or uninstaller didn't do something correctly because my QT7 install seems to work fine although this is the first time I've ever had this bug and I've had QT on my machine for over a year. Has anybody else's classpath been infected by this bug?

I do have the same problem did you find something about it?

What to make of this latest Quicktime/Java security flaw announcement?

Here's the link:
MacFixIt
Secunia: "The vulnerability is caused due to an unspecified error within the Java handling in QuickTime. This can be exploited to execute arbitrary code when a user visits a malicious web site using a Java-enabled browser e.g. Safari or Fire fox."
MacFixIt: "It appears that the flaw is triggered by simply accessing a malicious Web page--no further user action is required."
I followed the instructions for Safari and quickly found some financial web sites unusable.
For now I'm ignoring it but have backed up to my two bootable clone drives, one internal and the other external.
What do people do with these vulnerability alerts arising from what I suppose fall under the "proof of concept" variety. Do nothing and wait until something happens?
Raymon
G4 933 MHz "2002 Quicksilver", 1.54 GB RAM, two 160 GB HD, Mac OS X (10.4.9) 120 GB FireLite FW drive, iLife'06, LaCie d2 burner, 80 GB iPod

Stanley,
Thank you for your reply. I've since set up "User B", a non-Admin. account. Some questions:
1. I have the Pictures and Music folders in the Shared user folder. I'm assuming any changes to these folders will take place only in these folders and not in their original counterparts in the Admin. account which I'm told I can delete later?
2. I copied the Admin. user Library folder for User B. However, I still can't run my Netscape browser and email client applications while logged in User B without giving read/write privileges for the Admin User Library folder to User B. I haven't tried just assigning access to the Netscape Mozilla folder.
For improved security I've denied access to the other Admin user folders.
Taking a tip from Pogue's Missing Manual, Tiger Edition, I've clicked off the "Restart-Sleep-Shut Down" buttons in the login window.
On the other hand, I've selected showing only the login passwords for each User in the login window. So no need to type in the user name. I've also since chosen better passwords.
I've backed up to a bootable clone in an external Firewire drive.
Any comments and advice would be much appreciated.
~Raymon

Newbie Help: Calling Java function from XSLT

Hi everyone!
I am trying to call a java function from my XSL file. like...
<xsl:stylesheet version="1.0"
    xmlns:java="http://xml.apache.org/xslt/java"
    xmlns:fn="http://www.my.com/xslt"
    exclude-result-prefixes="java fn">
<xsl:variable name="embeddedpic"
select="formData/instance/EmployeePicture" />
<xsl:variable name="pic" select="fn:com.my.utils.ConversionUtils.base64DecodeString($embeddedpic)"/>I am getting this exception in calling the above java function from my XSLT (XalanXPathException: The function number 'http://xml.apache.org/xslt/java:com.my.utils.ConversionUtils.base64DecodeString' is not available.)I have the function lib file in my classpath but still i am getting this error. Any info is highly appreciated.
Thanks

Try this.
<?xml version="1.0" ?>
<xsl:transform version="1.0" xmlns:fn="com.my.utils" >
<xsl:variable name="pic" select="fn:ConversionUtils.base64DecodeString($embeddedpic)"/>
etc.
as long as your code is in the classpath it should find it.
Henock.

JSP newbie: local Sun Java System Application Server installation

I am new to JSP and I am preparing to get the software I need. JDK 6 and Netbeans 6 are installed. Now I need an application server. Since the Sun tutorials use the "Sun Java System Application Server" I have choosen this one (version 9.1). As far as I know I could also use, e.g., Tomcat or Glassfish (correct?).
I just would like to install the application server for learning JSP.
Could I safely install the Sun Java System Application Server on my PC so that the application server only listens to local calls? Does it use a lot of system ressources while idle?
Thanks!

I`ve posted a shorter version of the question in the hopes of getting a timely answer. Thanks

Newbie question concerning java chat

Hi everyone,
I'm going to program at chat-service in java at school. Since I'm still rather new at this game, I was wondering if anyone knew any good tutorials to start with. I'm also very interested in recommendations as to which java techniques would be best.
My initial thoughts on the project are:
1) it's going to be controlled by a central server (using servlets and JSP).
2) I wish to overcome problems concerning firewalls etc.
3) I took a peek in the book "Java Servlet Programming". It said that there were 3 possible implementations: HTTP, Sockets and RMI. I wonder if there are any other possibilities? JMS for instance?
4) I wish to implement the service in such a way, that different users can approach the service differently (eg. user A with HTTP, and user B with RMI). this should be completely transparent. But is that possible?
Well, thats basically all. I hope someone have some tips or experiences to share. I doubt that I'm the first (or the last) one embarking on a project like this.

I've found some links in previous posts.
http://www.javaworld.com/javaworld/jw-01-1997/jw-01-chat_p.html
And the section on "Java Shared Data Toolkit"

Newbie question to java web services....

hi,
I used to be a .net programmer for a few years, and am have done web services in .net.... (using IIS, of course)
And i moved onto Java side recently - and am pretty new to tomcat / axis..etc..
I looked at the netbeans ide tutorial, and it covered on how to create a web services and a client using the IDE - with that is with the sun app server. Since I want to stick with Tomcat (which is a servlet container, i believe), the compilation complained that the HelloWSImpl.java is not a servlet, and will not let me run the web app. I have tried the WSDP 2.0 tutorial as well, but I first got the FastSetsource.jar not found? Then I got some other classes not found..etc... so, until now - i still am not able to create a web service, and a cliet to talk back and forth.
I have the following questions..
1. I am confused that how come tomcat itself is already a webserver, why would people use it on top of apache http server, which is another web server?
2. To create a web services, (I am thinking of the .net web services that i have done - that once you deploy it with IIS, and you browse to that service, if the function takes 2 parameter, there will be 2 textboxes waiting for you to put data to, then once you post - the xml response will come back...), does java allow front end interface automatically like that in .net? Or you have to code the JSP pages to include those textboxes yourself, and do a manual post to the web services address?
3. Are there any book out there, explains how to use tomcat for webservices? I have looked thru some of the java books that talks about web services, they mainly explain what webservices are, what is xml..etc... and of course, they did talk about the differenct type of messaging format available. (JAX-RPC..etc..)
4. In the java world - how do you use webservices? Is it the same way that i am familiar with? Like, that we have a front end gui, that it will call the web services, pass it a few param, and get the xml result back, and parse it and display / store.. it? Or that is not the correct way to consume the web services in java world?
5. In .net - as long as i have the .net framework sdk, and a IIS - i am good to go. In java - what do i need in order to deploy a web services?? I already have tomcat / jdk / wsdp / IDE - do i have enough to create a simple ws? if so, can you show me a basic tutorial??
based on some reading, i understand that the ws on the service side, needs an SEI implementing java.rmi.remote, and we need another class implementing this SEI. But I would really want to see more example, or downloads, where i can just download / view the whole thing all at once... I googled "java web service", "jax-rpc example"..etc.. most of the return links are from either java.sun.com, or ibm, or some other vendor's web site, explaining the architecture... I really want to look at the code, to get a better understand, what is the relationship between each of these softwares (tomcat, apache http server, axis...)
Any suggestions??
Thanks,
T

I think I can answer your Q1
Apache is very good at serving simple HTML pages
Tomcat is capable of serving active content
So the two complement each other
Or that's how I understand it.
Steaker

NEWBIE question about java

Why is the java compiler making two .class files for my swing applet?
input > applet1.java
output> applet1.class , applet1$1.class
This is annoyin because it appears the applet1.class needs applet1$1.class
to run. Unfortunately, my webserver (FreeBSD) doesn't support $ characters in filenames,
converting the second file to applet1_1.class

Yes, I do have an anonymous listener...
import java.io.*;
import java.awt.*;
import javax.swing.*;
import java.awt.event.*;
import java.util.*;
import java.net.*;
public class applet1 extends JApplet
    JLabel label1 = new JLabel("Please enter street address of organization here");
    JLabel label2 = new JLabel("Enter unique ID here");
    JTextField textbox1 = new JTextField();
    JTextField textbox2 = new JTextField();
    JButton button1 = new JButton("Submit");
   public void init(){
      Container c1 = getContentPane();
      GridBagLayout gridbag = new GridBagLayout();
      GridBagConstraints constraints = new GridBagConstraints();
      c1.setLayout(gridbag);
      constraints.weighty = 1;
      constraints.fill = GridBagConstraints.NONE;
      constraints.weightx = 1;
      constraints.anchor = GridBagConstraints.WEST;
      gridbag.setConstraints(label1,constraints);
      c1.add(label1);
       constraints.fill = GridBagConstraints.HORIZONTAL;
       constraints.gridwidth = GridBagConstraints.REMAINDER;
       gridbag.setConstraints(textbox1,constraints);
       c1.add(textbox1);
        constraints.weightx = 1;
                   constraints.gridwidth = GridBagConstraints.WEST;
        gridbag.setConstraints(label2,constraints);
        c1.add(label2);
       constraints.weightx = 1;
                 constraints.gridwidth = GridBagConstraints.REMAINDER;
       gridbag.setConstraints(textbox2,constraints);
       c1.add(textbox2);
       constraints.fill = GridBagConstraints.NONE;
       constraints.gridwidth = GridBagConstraints.REMAINDER;
       constraints.anchor = GridBagConstraints.CENTER;
                  gridbag.setConstraints(button1,constraints);
       c1.add(button1);
button1.addActionListener(new ActionListener()
    public void actionPerformed(ActionEvent event)
        int i=0;
        int f=0;
        Date myDate = new Date();
        int day = myDate.getDate();
        int month = myDate.getMonth() + 1;
        int code = Integer.parseInt(textbox2.getText());
        boolean matchFound=false;
        String h = (new String(textbox1.getText()).substring(0,10));
        String str;
        //search database
        try{
            URL url = new URL(getCodeBase(), "address.txt");
            InputStream inStream = url.openStream();
            BufferedReader br = new BufferedReader(new InputStreamReader(inStream));
            StringBuffer l = new StringBuffer(10);
            StringBuffer r = new StringBuffer(20);
            while((str = br.readLine())!=null){
            r.append(str);
            //take out spaces
            for (i=1;i<r.length();i=i+2)
                l.append(r.charAt(i));
            if (h.equalsIgnoreCase(l.toString().substring(0,10))){
                   //we have a match
                   matchFound = true;
            //clear buffers for next record
            r.setLength(0);
            l.setLength(0);
            br.close();
            inStream.close();
            if (matchFound==true)
                //if match found, perform date conversion
                day = (code/month)/day;
                textbox2.hide();
              textbox1.hide();
              button1.hide();
               label1.setText("Confirmed! Use this number to unlock: ");
                label2.setText(String.valueOf(day));
            else
            textbox1.setText("Address not found");
        catch (Exception e)
            textbox1.setText("Data file missing");
}

Newbie question on Java Persistence API - Entity Beans

Hi All,
I am basically new to Entities and the Java Persistence API. My question is, when using a container managed EntityManager, do I have to manually tidy-up any resources? Say for example, do I have to explicitly close the database connection (if ever I have that ability)? Invoke close() on EntityManager?
- Pat

You don't have to. That's what they mean by container managed. The container does it for you.
In fact you will get an IllegalStateException if you call close on a container-managed EntityManager.

Newbie Question w/Java 1.4 & InitialContext

The below listed code works fine using the included properties and jdk1.3.1. Using jdk1.4.1_02, I get the following exception...
// Exception I got using JDK 1.4
javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining name ''
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:2942)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2863)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2669)
at com.sun.jndi.ldap.LdapCtx.c_list(LdapCtx.java:1033)
at com.sun.jndi.toolkit.ctx.ComponentContext.p_list(ComponentContext.java:551)
at com.sun.jndi.toolkit.ctx.PartialCompositeContext.list(PartialCompositeContext.java:273)
at com.sun.jndi.toolkit.ctx.PartialCompositeContext.list(PartialCompositeContext.java:262)
at javax.naming.InitialContext.list(InitialContext.java:387)
at AppList.main(Unknown Source)
// Property file: jndi.properties:
com.sun.jndi.ldap.netscape.schemaBugs=true
java.naming.security.authentication=simple
java.naming.provider.url=ldap://localhost:389/o=My Corp
java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
java.naming.security.principal=cn=Directory Manager
java.naming.security.credentials=mypw
////////// Code Here
import javax.naming.*;
class AppList {
public static void main(String[] args) {
String target = "";
try {
     Context ctx = new InitialContext();
     NamingEnumeration enum = ctx.list(target);
     while (enum.hasMore()) {
     System.out.println(enum.next());
     } catch (NamingException e) {
     e.printStackTrace();
Thanks for any help with this, I'm stumped.
-Michael Gray

Just read elsewhere with similar problem. Try putting single quotes around the item in your URL that contains spaces.
http://www.ldapguru.org/modules/newbb/viewtopic.php?topic_id=621&forum=6

Newbie Question - Quicktime to DVD?

Hi,
I own a Kodak Easyshare camera which takes videos. When I put these on my computer they open as Quicktime movies. I would like a simple way to put several of these movies onto a DVD that can be played in a normal DVD player (some relatives still don't have computers/email/etc.). I own a Macbook Pro with iDVD. Can I use this program to do this or is there another way that anyone knows of?
Thank you,
Peace

Thanks for the advice.
I don't have iDVD 09 yet, but I have iDVD 08. I didn't see it on my dock, and when I searched for it with the Finder I couldn't find it. But then I just went into the Applications folder and double-clicked on it to open it. It was super easy.
I picked a theme and then dragged a photo into the sunflower that was on the menu page. Then I just started dragging videos in straight from iPhoto. Then I clicked add a Slideshow. I also just dragged a bunch of pictures in and then picked a song from my iTunes library to go with them.
I burned it to a DVD-R and then watched it in my regular DVD player hooked up to my tv. Works Great!
Peace

[newbie] JNLP, Quicktime Java, WebObjects

Similar Messages

Maybe you are looking for