Videos on foojay.io - Friends of OpenJDK

The Java Story: A Film About All of Us

Thu, 09 Jul 2026 08:43:59 +0000

Every so often a story comes along that belongs to an entire community rather than any one company or person. The Java Story documentary by CultRepo is one of those. On July 17th at 7pm UTC, the official Java documentary premieres live on YouTube - if you’ve spent any significant part of your career working with Java (and I assume most Foojay readers have!), I really think you’d want to watch it!

JC-AI Newsletter #16

Tue, 09 Jun 2026 18:28:33 +0000

Over the past two weeks, the field of artificial intelligence has continued its remarkable pace of advancement. As AI becomes increasingly woven into the fabric of daily life, shaping how we work, communicate, and make decisions, it is both timely and valuable to step back and understand the broader trajectory of this technology. Whether the developments around us feel promising or challenging, one truth remains clear: AI is not simply going away. It is here to stay, and understanding its evolution is essential from many perspectives. Have you ever wondered what harness engineering is, how evals attempt to move traditional unit tests onto a probabilistic plane, or how AI is reshaping entire industries across various branches? Let’s start.

No Keys, No LLM: Building a Wikidata Definition API with Embabel

Thu, 05 Mar 2026 08:00:25 +0000

TL;DR

I built a Spring Boot 4 API that defines terms via Wikidata.
The app is fully reproducible: no API keys and no model installation needed.
Embabel orchestrates the pipeline as a sequence of actions to achieve the goal DefinitionResult.
The logs show planning, execution, and typed object binding—the most useful part for teaching agentic flows.

I wanted a demo that is simple , reproducible , and still shows agentic orchestration in a way that’s easy to explain on video.

Shaping Jakarta Agentic AI Together

Mon, 02 Mar 2026 11:15:46 +0000

Last week, Eclipse Foundation and Payara hosted Jakarta Agentic AI, An Open Conversation, an open house Jakarta TechTalk session, exploring a brand new initiative under the Eclipse Foundation. If you could not join us live, the full recording is now available.

What is Jakarta Agentic AI?

Jakarta Agentic AI is an exploratory project looking at how AI agents could be built, deployed and run within Jakarta EE runtimes. As AI systems increasingly move from simple inference to autonomous, agent-based behaviour, the question becomes how these systems fit into enterprise Java environments that value reliability, security, and portability.

Personal Branding Tips for Java Developers

Thu, 26 Feb 2026 10:28:58 +0000

The software development industry is more competitive than ever. Being a strong technical expert is essential, but on its own it is often not enough to grow your career or open new opportunities.

In this short, practical talkDIY Technical Marketing, Real World Tips For Building A Successful Developer Brand , delivered at Jfokus 2026 conference , Payara Community Manager Dominika Tasarz-Sochacka explores why personal branding matters for developers and how even small, intentional actions can make a real difference over time.

JC-AI Newsletter #13

Thu, 05 Feb 2026 21:12:12 +0000

Two weeks have passed, and it is time to present a new collection of readings that may shape developments, utilization or ideas in the field of artificial intelligence in 2026.

While significant activity characterizes the AI field, many unresolved research, design, and implementation challenges continue to impact progress. Future advancement depends heavily on understanding the nature of these challenges to approach probabilistic problems from the appropriate directions. This JC-AI newsletter features insightful interviews with key figures in the field, enabling readers to ask the right questions and compare visions of an ‘uncertain future’ against current capabilities to maintain a grounded perspective.

First Experiments with Java on the LattePanda IOTA: An Alternative to Raspberry Pi?

Thu, 11 Dec 2025 09:13:14 +0000

After years of experimenting with Raspberry Pi boards, Java, JavaFX, and Pi4J to control electronics, I wanted to explore whether my knowledge and experience could be applied to similar boards from other providers. There are many alternatives available these days, based on ARM, Intel processors, and RISC-V architectures.

I reached out to several suppliers to see if I could get evaluation copies, and I’m happy to share that I received my first box from DFRobot containing the LattePanda IOTA .

JC-AI Newsletter #11

Tue, 09 Dec 2025 16:12:01 +0000

Fourteen days have passed, and it is time to present a fresh collection of readings that could influence developments in the field of artificial intelligence.

This newsletter explores the evolution of agentic AI systems, provides valuable insights into the Chain-of-Thought (CoT) approach, Vibe coding, and discusses the pattern-matching capabilities of LLMs. The newsletter features an insightful interview with Stuart J. Russell, known for his significant contributions to the AI field. Even more exciting is the published paper by Apple researchers titled ‘The Illusion of Thinking…’ and several immediate reactions to the authors’ conclusions, which allow newsletter readers to observe current research challenges and scientific community responses. This provides readers with a vital picture of the state-of-the-art in AI research.

JC-AI Newsletter #10

Wed, 26 Nov 2025 18:39:40 +0000

Fourteen days have passed, and it is time to present a fresh collection of readings that could influence developments in the field of artificial intelligence.

This newsletter focuses on examining how agentic AI systems improve accuracy, tutorials on agentic system architecture, and importnat security challenges arising from increased not only from agentic AI systems adoption. This edition of the AI newsletter includes compelling discussions and interviews about the future of AI and approaches.

Micrometer & Prometheus in Spring Boot: Kafka Burger Orders

Fri, 14 Nov 2025 10:13:03 +0000

👨‍💻 GitHub: https://github.com/vinny59200/dukeburger

🔵⚪⚪⚪⚪⚪⚪⚪⚪⚪⚪⚪

This guide shows how to use Micrometer and Prometheus in Spring Boot to track a custom metric for a Kafka-driven Burger Orders app. You’ll post a burger order to a REST endpoint, publish it to Kafka, consume the topic, and increment a counter for all “DukeBurger” orders. Copy the snippets, run, and you’ll see your metric on /actuator/prometheus.

JC-AI Newsletter #9

Wed, 12 Nov 2025 15:21:12 +0000

Fourteen days have passed, and it is time to present a fresh collection of readings that could influence developments in the field of artificial intelligence.

This newsletter focuses on examining how AI enhances productivity through enterprise studies, tutorial, agentic system architecture, GraphRAG, evaluating risk methodologies in agentic systems, and the security challenges arising from increased AI-LLM adoption. This edition of the AI newsletter includes a compelling discussion between six of the most influential leaders in artificial intelligence, along with additional content.

JC-AI Newsletter #8

Thu, 30 Oct 2025 06:36:12 +0000

Fourteen days have passed, and it is time to present a fresh collection of readings that could influence developments in the field of artificial intelligence.

This newsletter focuses on examining how AI enhances productivity through enterprise studies, agentic system architecture, attack vectors, Model Context Protocol (MCP) implementation, Agent-to-Agent (A2A) protocol, Java code generation within IDEs, LLM benchmarking methodologies, and the security challenges arising from increased AI-LLM adoption.

The world influenced by LLM is changing very quickly, let’s start…

JC-AI Newsletter #2

Tue, 05 Aug 2025 06:30:03 +0000

The JC-AI Newsletter Vol.2 brings again a very interesting collection of articles worth considering.

The world influenced by LLM is changing very quickly, let’s start…

article: OpenAI CEO Sam Altman warns of an AI ‘fraud crisis’

author : Clare Duffy, CNN
date : 2025-07-22
desc.: Sam Altman discusses the serious potential for current AI abuse. Although the example of attacks on financial institutions is mentioned, Sam Altman warns of the broader impact before one even takes advantage of LLM agent systems.

Release V0.0.2 of Java DMX512 Library With Universes and USB-to-DMX support

Mon, 04 Aug 2025 14:19:25 +0000

Earlier this month, I released V0.0.1 of my new Java library to interact with DMX512 devices using (optionally) the Open Fixture Library (OFL) . After some more experimenting, I’m able to announce the next (beta) release V0.0.2 with the following major changes:

Code refactoring: As this library is still in beta, major changes were expected and happened 😉 The video of V0.0.1 is still valid, but some of the demonstrated code has changed.
Improved demos : Demo code has been moved to the demo directory in the sources to make them easier to understand and reuse.
Introduction of DMX Universes: to be able to control fixtures connected to the two ports of my IP-to-DMX controller, universes needed to be added. (more info below)
USB-to-DMX Support: First working protocol over serial communication to DMX512! (more info below)

Introduction of DMX Universes

For my tests, I’m using an JUNELIONY ArtNet 1024 2-Port Sulite DMX LAN512 2-Port ArtNet Converter controller. It has two XLR-connectors, labeled as DMX1 and DMX2, which can be controlled as universe ID 0 and 1.

Monolith vs Microservices in 2025

Mon, 04 Aug 2025 13:45:09 +0000

In recent years, the tech world has been buzzing with debates about architecture choices. However, 2025 offers a more balanced perspective.

Simplicity, developer experience, and maintainability are reshaping how teams design software.

From Infrastructure as Code (IaC) to “vibecoding” culture, and from startups to enterprises, many rethink their position on the monolith vs microservices 2025 spectrum.

So, what has actually changed?

🔵⚪⚪⚪⚪⚪

🔁 Terraform and IaC: Changing Architecture with Confidence

How Infrastructure as Code helps teams adapt architecture efficiently

Infrastructure as Code tools like Terraform make architecture changes easier. Nevertheless, the process is not effortless.

Introducing a New Java DMX512 Library With Demo JavaFX User Interface

Fri, 25 Jul 2025 06:17:00 +0000

In this post, I would like to inform you about a new Java library that is now available on Maven Central, allowing interaction with DMX512 devices using (optionally) the Open Fixture Library (OFL). I also published a video with a code walkthrough of my test setup and demo code.

But first…

AI Newsletter #1

Tue, 22 Jul 2025 05:39:26 +0000

There is a lot going on in today’s technological world, but the most intense and vibrant area is undoubtedly the field of artificial intelligence. After brainstorming, our Java Champion Education group agreed to create a newsletter with a 14 days cadence. In our newsletters, we will include a collection of recently read interesting resources in the field of artificial intelligence with a short description.

Although the stream of published articles is very large and the ability to read them all is an illusion, the published selection, such as the below is implicitly narrowed. The purpose of the AI Newsletter is to help everyone stay informed and expand their knowledge in areas related to artificial intelligence.

SpringBoot and Kafka Streams – Event Routing & Testing

Thu, 19 Jun 2025 08:37:11 +0000

Welcome to this hands-on guide to building a Spring Boot Kafka Streams application! (SpringBoot and Kafka Streams).

In this article, I’ll walk you through a project I built during the first day of a three-day Kafka Streams training. The goal? Validate sightseeing events in Lille based on predefined timetables and route the data accordingly.

Let’s explore how Kafka Streams powers a real-time city tour experience! 🧭

🔵⚪⚪⚪⚪⚪⚪⚪⚪⚪

Speed up your Spring Batch with Native Image and GraalVM

Tue, 10 Dec 2024 15:47:53 +0000

Spring Batch is often used for data processing jobs that don’t run continuously. Instead, they start, process, and stop,which makes them a perfect candidate for GraalVM Native Image. Unlike traditional Java applications that require a long JVM startup time, Native Images execute almost instantly, giving a significant performance boost.

In this article, you’ll learn how to build a Spring Batch application that reads a CSV file, logs its content, and writes it to a PostgreSQL database.We’ll see how to compile it into a Native Image using GraalVM , and most importantly**, we’ll benchmark the difference between** running it as a traditional JAR and as a native binary.

Prevent LDAP injection in #java 💥💉with #springboot

Wed, 04 Dec 2024 14:45:35 +0000

LDAP (Lightweight Directory Access Protocol) is essential for managing and accessing directory information in Java web applications. However, it’s crucial to understand and prevent LDAP Injection, a serious security vulnerability that can lead to unauthorized access and data breaches.

Following OWASP Recommendations , such as validating user inputs and using parameterized queries, is vital for securing your applications. In this article, we’ll dive into LDAP, explore LDAP Injection, share OWASP’s best practices, and demonstrate secure coding in Spring Boot.

Client-server application in Java: Easy with FEPCOS-J – Video.

Tue, 30 Jul 2024 11:51:04 +0000

This is a result of the FEPCOS-Project , aka @FepcosInfo; #FepcosJ_blog5.

See how FEPCOS-J relieves developers of the network programming required to implement a client-server application in Java.
External link to : G. Fuchs: Video: Easy Implementation of a Client-Server Application in Java with FEPCOS-J; On: YouTube, FEPCOS-Project (@FepcosInfo); 29-July-2024; https://youtu.be/qtPP7kZbriQ .
Impression of the above-linked video: FEPCOS-J provides annotations like @AYSpec, @In, @Out, and @Behavior for programming a client-server application in Java. Watch the video for a complete example application of FEPCOS-J.

New video series "JavaFX In Action", Part 1

Tue, 16 Jul 2024 07:35:29 +0000

JavaFX is a powerful user interface framework, often overlooked in the world of desktop applications development. With this new series of video interviews, I want to take you behind-the-scenes of some applications built using JavaFX.

JavaFX combines the best features of a modern user interface toolkit with the unparalleled strength of the Java platform. This approach enables you to perform heavy “background tasks”, like processing large amounts of data, while still providing a responsive user interface.

Example Java Application with Embedded Jetty and a htmx Website

Fri, 21 Jun 2024 08:59:42 +0000

I was experimenting with a Java application that can act as a web server and includes the user interface HTML-files that get modified with htmx, to replace certain parts of the HTML with other ones created in Java.

I found it pretty hard to understand how to configure the embedded Jetty webserver, but as always with Java libraries, it’s pretty easy once you understand how to do it 😉 I decided to share my example, so you don’t need to go through the same search if you want to use the same approach…

Cloud Cost Optimization Is Hard, Java Can Help

Wed, 21 Feb 2024 12:07:37 +0000

In my recent conversation with William Fellows, Research Director at S&P Global Market Research, we discussed ways to reduce cloud waste specifically for Java workloads. After all, cloud cost optimization is hard.

A large delta is growing between budgeted and actual spending. Top areas for spending are cloud integration and modernization services, security and compliance monitoring, and application modernization – specifically applications written in Java.

Flexible Jakarta EE Apps With Apache CouchDB NoSQL Database

Mon, 19 Feb 2024 07:33:38 +0000

Are you a Jakarta EE developer interested in leveraging the power of NoSQL databases for your applications?

This webinar - watch the recording here - is designed specifically to introduce you to the world of NoSQL through CouchDB, a high-performance, scalable database ideal for cloud-native applications.

What is CouchDB?

CouchDB is a NoSQL database used in distributed and cloud environments. It uses a schema-free JSON document format, which allows for more flexible and efficient data models.

Video: Spring Boot Testcontainers Support for Local Development

Fri, 16 Feb 2024 09:07:33 +0000

Spring Boot has supported TestsContainers for running services during tests for quite a while.

With Spring Boot 3.1, Testcontainers support for local development was added. This video will show you how this works and how to use it.

DTrace Revisited: Advanced Debugging Techniques

Tue, 13 Feb 2024 07:46:04 +0000

DTrace Overview
Understanding DTrace’s Capabilities
Performance and Compatibility of DTrace
- Cross-Platform Compatibility
- Compatibility Challenges on MacOS
Customizability and Flexibility of DTrace
- Adaptability to Various Scenarios
- Examples of Customizable Probes
Real-World Applications of DTrace
- Final Words

When we think of debugging, we think of breakpoints in IDEs, stepping over, inspecting variables, etc.

However, there are instances where stepping outside the conventional confines of an IDE becomes essential to track and resolve complex issues. This is where tools like DTrace come into play, offering a more nuanced and powerful approach to debugging than traditional methods.

Video: Spring Boot Docker Compose Support

Wed, 31 Jan 2024 07:50:17 +0000

In Spring Boot 3.1, Docker Compose support was added to simplify local development with external resources.

In this video, I show you how this works and how to use it!

Video: Vaadin Drag & Drop Support. It's so easy!

Fri, 01 Dec 2023 13:24:06 +0000

In this video I show how simple it can be to add drag and drop to a Vaadin application! Drag and Drop can be helpful in many situations, but often it’s complicated to implement. That’s not the case with Vaadin. Vaadin makes it easy to have drag-and-drop support for all components.

More information about drag and drop can be found in the documentation .

Video: "If I decide to stay with Oracle Java what issues will I face?"

Thu, 23 Nov 2023 09:12:35 +0000

Simon Ritter and Gerrit Grunwald answer a question that they hear repeatedly: “If I decide to stay with Oracle Java (rather than migrate to an OpenJDK distribution) what issues will I face?”

Foojay Podcast #31: Report of Devoxx 23 in Belgium

Mon, 16 Oct 2023 07:16:57 +0000

The first week of October, the 20th edition of Devoxx took place in Antwerp, Belgium.

Over 3000 Java developers, speakers, and enthusiasts gathered to share their knowledge and learn from each other.

I got the opportunity to walk around with a microphone and talk to visitors and speakers.

Not all of them, as there were just too many people and too many exciting sessions happening simultaneously.

Podcast Apps

You can listen and subscribe to the Foojay Podcast on:

Temperature, humidity, and pressure in BME280 Sensors with Java

Thu, 03 Aug 2023 07:16:36 +0000

To make it as easy as possible to get started with Java on the Raspberry Pi to interact with electronic components, I started a new section on the Pi4J website with JBang examples .

In this tutorial, I want to show you how you can read the temperature, humidity, and pressure from a BME280 Sensor.

What Is Used?

As explained on the websites of each project:

Pi4J

A friendly object-oriented I/O API and implementation libraries for Java Programmers to access the full I/O capabilities of the Raspberry Pi platform. This project abstracts the low-level native integration and interrupt monitoring to enable Java programmers to focus on implementing their application business logic.

How to Share Your Work With a Video or Podcast

Fri, 14 Jul 2023 09:22:11 +0000

Season 2 of the Foojay Podcast has come to an end. Since September of ‘22, 22 episodes where published here on Foojay.

In this article, we want to share some of the experiences of creating such podcasts, but also more generally, how you can share your work in a video with a small (or bigger) budget…

Audio

There is one fundamental rule for the audio: “Garbage in = Garbage out.”

Yes, you can apply many filters and effects in a later phase, but you can’t make a bad recording sound good. You need a clear and good recording as a starting point!

Enterprise Java Applications With Jakarta EE and Vaadin

Wed, 12 Jul 2023 09:26:07 +0000

Watch this webinar recording to get an overview of the Vaadin framework and learn how to use it to build modern web applications on the Jakarta EE Platform in pure Java, without any frontend framework.

Find out more about the core features of Jakarta EE, like its dependency injection (Jakarta CDI) and persistence (Jakarta Persistence) APIs. Additionally, you will learn how to use Vaadin and Jakarta EE to build responsive web applications that can run on different devices and browsers.

Operator Overloading in Java

Sat, 10 Jun 2023 12:19:26 +0000

In this article, we’ll delve into the fascinating world of operator overloading in Java.

Although Java doesn’t natively support operator overloading, we’ll discover how Manifold can extend Java with that functionality.

We’ll explore its benefits, limitations, and use cases, particularly in scientific and mathematical code.

We will also explore three powerful features provided by Manifold that enhance the default Java type safety while enabling impressive programming techniques.

We’ll discuss unit expressions, type-safe reflection coding, and fixing methods like equals during compilation.

Logging Best Practices Revisited

Mon, 15 May 2023 13:07:59 +0000

As I write this my interview on DevCentral hasn’t started yet so if you subscribe to my blog or follow me on socials you might be able to catch it live. If not the recording should appear right here:

Either way, this isn’t the first time I wrote about or talked about logging and the common pitfalls we see when logging in production or debugging. I covered this extensively in the old blog . I also did a video covering these ideas. But my ideas somewhat evolved around some of the concepts I discussed.

Java Security: Log4J, the SecurityManager, and Funding

Fri, 24 Mar 2023 09:28:00 +0000

A demonstration of log4j exploits, which defenses people tried, and which worked.

We’ll cover how groups responded effectively to patch to see what was common.

We’ll also look at open source funding models, subscriptions, and bug bounty programs to see why it’s sometimes hard to donate.

This talk uses actual exploit code that takes over systems through their log messages to open calculators.

Debugging Streams and Collections

Fri, 13 Jan 2023 14:59:59 +0000

I will run a book giveaway promotion on the Code Ranch on January 17th . Be sure to be there and let your friends know. It would be great to answer your questions about debugging. I’m very excited by this and by the feedback I’m getting for the course and new videos.

I also launched a free new Java course for complete beginners . No prior knowledge needed. This is probably not the audience for this course. But if you know someone that might be interested I’ll appreciate a share. I hope people find it useful and learn a bit about Java. I’m working on a cadence of one video per week in this beginner course.

Debugging Program Control Flow

Fri, 23 Dec 2022 07:36:35 +0000

As of now I published the first three videos of the course and will publish the fourth tomorrow. I plan to publish two videos per week on YouTube to maximize the impact but here I’ll only blog one lesson per week to avoid oversaturation. I shot about four hours of video content and still haven’t finished the 2nd module out of eight. This course will be very detailed and intensive.

Debug Like a Senior Developer

Fri, 16 Dec 2022 06:34:02 +0000

My book on debugging is already on preorder and I’m super thrilled to announce I’m doing a full online course to go along with it.

The course website isn’t ready yet but I already have the full outline and a lot of recorded material. I will try to drop videos at a rate of two per week in the next few months until the full course will be online.

It’s shaping up to be a very detailed course. I recorded the first module and half of the second module and I’m already close to 3 hours of dense recorded material!

Visualizing Brain Computer Interface Data using JavaFX

Fri, 09 Dec 2022 09:42:20 +0000

Recently Sean Phillips shared some fascinating screenshots on Twitter and videos on YouTube of Trinity, a JavaFX application he is working on.

He is a software engineer at the Johns Hopkins University Applied Physics Laboratory (JHUAPL ), specializing in data visualization for multiple projects. JHUAPL works on various projects, ranging from medical work, building drones, cyber defense, and brain-computer interfaces to cislunar defense systems.

The project that caught my eye is a visual exploration tool to test and evaluate machine learning decision-making and decoding systems.

What is An Application Server? In 3 Minutes!

Thu, 01 Dec 2022 17:01:44 +0000

Low on time and want to know what an ‘application server’ really is?

Here we offer our explanation. This video covers the difference between application servers and web servers, what an application server can do to make your life as a developer easier, and more, all in less time than your average pop song!

This is a high-level view that might be helpful to pass on to managers and procurement teams who aren’t sure what an application server is.

Java Profiling Overview

Mon, 14 Nov 2022 09:14:25 +0000

When I ask Java developers whether they do profile, the answer is usually “no”.

The few that profiled before usually used VisualVM as a student and maybe JProfiler or YourKit years ago at work.

One of the reasons for this is a lack of available information and thus knowledge for everyday Java developers.

This is a pity as profiling should be a part of the tool belt for every experienced developer (not just for Java). The problem is that most of the open-source profilers are targeted to the OpenJDK developers (or their colleagues), even if they won’t admit it. This can be seen in the lack of entry-level material on this topic and even the little that is out there is distributed across multiple conference websites, blogs, YouTube channels, and Twitter accounts.

Can Java/Jakarta EE do Microservices?

Thu, 01 Sep 2022 12:43:12 +0000

In this myth-busting webinar, Steve Millidge (founder of Payara ), demonstrates that Java/Jakarta EE can do microservices.

In this video, Steve explains:

What are microservices?
How JAX-RS API makes it easy to develop applications that use the REST architecture
Deployment models for microservices
How to use MicroProfile with Jakarta EE
12 factor apps with Jakarta EE

If you’ve been hearing that Java/Jakarta EE is only for monolithic architecture, watch this video to see why that’s not true and how you can continue using your existing development skills to modernize your application development with microservices.

Deserialization exploits in Java: why should I Care?

Thu, 14 Jul 2022 07:39:03 +0000

Hackers refer to deserialization in Java as “the gift that keeps on giving”. But what is actually the problem? In most cases, it is not even your own code that creates this security vulnerability. This problem is also not restricted to Java’s custom serialization framework. When deserializing JSON, XML, or YAML, similar issues can occur as well.

I recently gave a talk about this during Devoxx UK , the largest and most prestigious Java community conference in the United Kingdom. In this talk, I explain how deserialization vulnerabilities work natively in Java and how attack chains are created. This was loosely based on my blog post: “Serialization and deserialization in Java: explaining the Java deserialize vulnerability” .

Quick Fire Java: Java After Log4j

Thu, 31 Mar 2022 08:23:36 +0000

In this episode of the Quick Fire Java video series, Rudy De Busscher and Priya Khaira-Hanks discuss Log4j, security processes and prioritization, and how Payara dealt with the vulnerability.

All in a concise 10-minute video!

The Log4j vulnerability, Log4Shell , was disclosed in early December 2021 and the repercussions have been far-reaching.

Rudy explains more about what this actually means and about the wider implications of the incident. He also responds to BreachQuest’s Jake Williams for Threatpost , who claimed “being exploited through an internet-facing system running vulnerable log4j at this point is a leadership failure, not a technical one.”

Security Warning: Your Java Attack Surface Just Got Bigger

Thu, 17 Mar 2022 16:35:38 +0000

Building cloud-native Java applications is undoubtedly awesome.

However, it comes with undeniable new risks. Next to your own code, you are relying on so many other things.

Blindly depending on open-source libraries and Docker images can form a massive risk for your application. The wrong package can introduce severe vulnerabilities into your application, exposing your application and your user’s data.

In the talk below we’ll show common threats, vulnerabilities, and misconfiguration including the recently disclosed issues in Log4j. Most importantly, you’ll learn how to protect your application with actionable remediation and best practices.

Video: SDKMAN Explained

Fri, 04 Feb 2022 08:30:04 +0000

One of the highlights of the Friends of OpenJDK room at FOSDEM 2021 was Marco Vermeulen, the creator of SDKMAN, talking about SDKMAN.

Check it out here, in the Foojay YouTube channel:

Tip: More content from the Foojay room at FOSDEM 2021 is here .

Even more, including cool techy prizes, in this year’s edition of the event, as described here .

Hype-Driven Development: Don't Be a Victim!

Wed, 12 Jan 2022 09:38:51 +0000

Don’t be a victim of development trends that are “hot” right now, but might not actually be best for your specific business!

In this video, Rudy De Busscher warns against software investments based on “buzz” around a trend or product, rather than whether it actually works for your use case. He discusses what technologies, commonly used with Java and Jakarta EE, can often be a case of hype over helpfulness.

7 Reasons to Switch to OpenJDK 17 as a Jakarta EE Developer

Mon, 15 Nov 2021 08:19:03 +0000

JDK 17, the next Long-Term Release of Java SE , launched in September.

You may have seen many of the great blogs, articles, and videos about what this means for Java developers. For just a few places to start, we like:

the JetBrains team’s discussion on migrating to JDK 17
Todd Ginsberg on his ten favourite features
Gunter Rotsaert mapping out the differences between Java 11 and Java 17.

But what does the new release mean for Jakarta EE developers specifically?

Discussion: The State of Java 2021

Mon, 25 Oct 2021 14:05:56 +0000

There is a lot going in the Java world lately. A lot of this is already captured is the Snyk JVM Ecosystem Report 2021 based on a joint survey by Azul and Snyk . In addition, Java 17 — the new LTS version — was released in September and Oracle uncovered their plans to shorten the LTS release cycle to every 2 years.

In a recent livestream, I had a discussion with some great folks in the Java world about the highlights of the Snyk Java Ecosystem report and the current developments in the Java world.

Do Java/Jakarta EE Standards Matter?

Thu, 02 Sep 2021 14:43:05 +0000

In this myth-busting webinar, Steve Millidge, founder of Payara , will show you why standards like Java EE (i.e., now Jakarta EE ) are beneficial.

In this webinar, learn the following:

How standards help with vendor neutrality and why that is important
How standards help drive competition (and why that’s good for you)
How standards help you develop future proof applications
How a working group offers the opportunity to shape the future of the industry

If you’ve been thinking standards like Jakarta EE don’t matter, this video will show you how having standards gives you the opportunity to develop future proof applications, among other benefits.

SolarWinds Hack: What Does This Mean For Us?

Thu, 19 Aug 2021 08:19:56 +0000

In the past two years, we have had to learn a lot about cybersecurity. New attack vectors are becoming more and more sophisticated and are directed more and more against the value chain in general.

But what does that mean for us? What can be done about it, and what reactions have the state already taken?

Let’s start with the story that got all of this rolling and made sure that the general attention was drawn to the vulnerabilities of the available IT infrastructure.

Is Java/Jakarta EE Cloud-Native?

Wed, 18 Aug 2021 09:14:45 +0000

In this myth-busting webinar, Steve Millidge (founder of Payara ), shows you that Java/Jakarta EE IS Cloud-native and can handle microservices and containers in the Cloud.

In this webinar, learn:

What is Cloud-Native?
How Jakarta EE (Java EE) applications run securely in the Cloud
Why you should build applications, not runtimes
How to keep your runtime easily up-to-date
Learn about an upcoming project,Payara Cloud , that separates the deployment from the runtime to make running Jakarta EE applications on the cloud even easier

If you’ve been hearing that Java/Jakarta EE is not Cloud-native or it’s difficult to get your Java/Jakarta EE applications running in the Cloud, watch this webinar to see why that’s not true and how you can continue using your existing Java/Jakarta EE development skills to modernize your application development!

Are Java/Jakarta EE Application Servers Heavy?

Thu, 12 Aug 2021 07:10:29 +0000

In this myth-busting webinar, Steve Millidge (founder of Payara ), demonstrates that Java/Jakarta EE application servers are not resource-heavy or slow.

Watch live demonstrations of application servers that show it’s possible to have a small footprint and low resource usage inJakarta EE runtimes.

In this webinar:

See a new Jakarta EE (Java EE) runtime that allows for single jar deployment
Watch a demo of a small start up/small footprint Jakarta EE runtime
See a Jakarta EE application server that is not fat or heavy with high resource usage

If you’ve been hearing that Java EE application servers are all resource hogs and slow to start up – watch this webinar to see why that’s not true and how you can continue using your existing Java EE development skills to modernize your application development!

Is Java/Jakarta EE Outdated & Dead?

Wed, 28 Jul 2021 08:08:50 +0000

Java was created in 1995 and, despite being over 25 years old, is still one of the most popular and widely used programming languages in the world.

Due to its longevity – many myths around Java EE (now Jakarta EE ) have circulated.

In the “Dismiss the Myths” webinar series , Steve Millidge, founder of Payara, discusses these common myths and shows you the programming language is still relevant, keeps up with the changes in the IT world, and that there is a future in Jakarta EE.

CVSS 101: First Steps with Common Vulnerability Scoring System

Wed, 14 Jul 2021 06:56:13 +0000

What is the Common Vulnerability Scoring System (CVSS), who is behind it, what are we doing with it, and what does a CVSS Value mean for you?

On Foojay, you can apply the insights below to understand the Security/CVE Views in the OpenJDK Update & Release Details pages , such as the one shown here:

I will explain how a CVSS Score is calculated, what the different elements of it mean, and what are the differences between the different CVSS versions.

SKP's Core Java/Java EE Roots : Gang of Four Design Patterns - Part 01

Wed, 28 Apr 2021 13:43:33 +0000

[About SKP’s Core Java/Java EE Roots]
Series of Articles on Rooted Concepts in Core Java and J2EE. They Revolve Around Memory Architecture, Connection & Memory Leaks, Core Java Syntax & Semantics, Java Object Layout/Anatomy, Multi-Threading, Asynchronous Task Execution, Design Patterns, Java Agents, Class Loading, API Design, OOPs & SOLID.

To understand the philosophical and historical perspective on the Gang of Four’s design patterns, I made a short, 10-minute video. (This was also my PluralSight Author Audition). Please take time to view the [Introduction to Gang of Four Design Patterns] Video.

How to Create a REST API with Jakarta EE 9

Mon, 26 Apr 2021 07:18:39 +0000

In this second article of the “Getting Started with Jakarta EE 9 ” series, we show you some basic scenarios using the REST specification. Although most people are using the term REST or RESTful API just to indicate they do data transfer over HTTP, and ignore the “Hypermedia as the engine of application State (HATEOS)” part of REST. The technology is used a lot lately to connect the front-end with the back-end.

Delegation vs. Inheritance in Graphical User Interfaces

Wed, 24 Feb 2021 16:07:53 +0000

In this article, we will look at the difference between inheritance and delegation concepts.

Or, to put it in another way, why I prefer delegation and why I want to emphasize this rarely-used feature in Java.

The Challenge

The challenge we face today is quite common in the field of graphic user interfaces like desktop- or web-apps: Java is widely used as the development language for both worlds and it does not matter if we are in the classic fields of Swing or JavaFX or in the field of web frameworks like Vaadin. Explicitly, I’ve opted for a pseudo-class model in core Java, as I’d like to look at the design patterns here without any technical details.

Introduction to MicroProfile OpenTracing with Jaeger

Thu, 18 Feb 2021 09:41:19 +0000

In this short video, Rudy de Busscher demonstrates how to use MicroProfile OpenTracing with Jaeger in combination with Payara Micro.

The MicroProfile OpenTracing specification defines behaviours and an API for accessing an OpenTracing compliant Tracer object within your JAX-RS application. The behaviours specify how incoming and outgoing requests will have OpenTracing Spans automatically created. The API defines how to explicitly disable or enable tracing for given endpoints.

Jaeger , inspired by Dapper and OpenZipkin, is a distributed tracing system released as open source by Uber Technologies. It is used for monitoring and troubleshooting microservices-based distributed systems, including:

How to Create a Kubernetes Operator in Java

Wed, 27 Jan 2021 08:46:27 +0000

Kubernetes is much more than a runtime platform for Docker containers.

Through its API, you can not only create custom clients, but you can also extend Kubernetes. Those custom Controllers are called Operators and work with application-specific custom resource definitions. You can not only write those Kubernetes operators in Go, but you can do this also in Java.

In this talk, delivered by Payara’sRudy De Busscher at JCON 2020 , you will be guided through setting up your environment to your first explorations of the Kubernetes API within a plain Java program.

Hacking Java XML Input via External Entity Injection

Thu, 14 Jan 2021 08:37:10 +0000

Java natively supplies many different options to parse XML. However, all available parsers in Java have XML eXternal Entity (XXE) enabled by default. This makes Java XML libraries particularly vulnerable to XXE injection.

We already briefly went into XXE injection problem in an earlier blog post on foojay.io. However, let’s go a little deeper. In the video below, I explain and demonstrate how an XXE injection attack works by extracting system data that should not be exposed. I also show you how you can solve this in your Java code in multiple ways.

Minimizing Security Risks in Application Development

Tue, 08 Dec 2020 11:02:28 +0000

United by their passion for open source, Payara and IBM recently teamed up for a panel discussion on security in Java application development.

Security is something that is considered extremely important, however, it is not always something that is a priority for many development teams. The main question is—how to minimize security risks while developing Java applications.

In this panel discussion, our experts addressed a variety of topics related to secure application development. Most of the topics were introduced by questions from the audience.

MicroProfile Metrics with Prometheus and Grafana

Wed, 02 Dec 2020 09:11:30 +0000

In a distributed microservices architecture, it is important to have an overview of your systems in terms of CPU, memory management and other important metrics.

This is called Observability, measuring the internal state of a system, in this case, the micro-services instances.

These metrics are gathered centrally, so that you can instantly have an overview of all the values and it allows the determination (mostly automated based on some rules) of the health of the instances.

Getting Started Quickly and Easily with Payara Server

Tue, 10 Nov 2020 09:39:02 +0000

The following four short videos will take you step-by-step through installing, writing, and deploying an application to Payara Server , even if you’ve never used the application server before:

{#more-36262}

Introduction to Payara Server

Learn how to write a simple Hello World application and deploy it to Payara Server.

Install Software

Securing Microservices with Auth0 and MicroProfile in Kubernetes

Tue, 03 Nov 2020 15:38:00 +0000

In this day and age, securing enterprise platforms is a challenge that developers and consultants tackle in an uninformed manner, producing subpar solutions in most cases.

To combat this pattern, third-party security services such as Auth0 have been devised to externalize the security of services, and they focus on stable implementations of common enterprise use cases (identity management, OAuth compatibility, and so on), and platforms such as Eclipse MicroProfile allow for their easy integration with enterprise Java microservices.

Videos on foojay.io - Friends of OpenJDK

The Java Story: A Film About All of Us

JC-AI Newsletter #16

No Keys, No LLM: Building a Wikidata Definition API with Embabel

TL;DR

Shaping Jakarta Agentic AI Together

What is Jakarta Agentic AI?

Personal Branding Tips for Java Developers

JC-AI Newsletter #13

First Experiments with Java on the LattePanda IOTA: An Alternative to Raspberry Pi?

JC-AI Newsletter #11

JC-AI Newsletter #10

Micrometer & Prometheus in Spring Boot: Kafka Burger Orders

JC-AI Newsletter #9

JC-AI Newsletter #8

JC-AI Newsletter #2

I n the first newsletter , we introduced a 14-day cadence, which means that this week it’s time for a new collection of articles from the fields of AI, LLM, Java and more.

article: OpenAI CEO Sam Altman warns of an AI ‘fraud crisis’

Release V0.0.2 of Java DMX512 Library With Universes and USB-to-DMX support

Introduction of DMX Universes

Monolith vs Microservices in 2025

🔁 Terraform and IaC: Changing Architecture with Confidence

How Infrastructure as Code helps teams adapt architecture efficiently

Introducing a New Java DMX512 Library With Demo JavaFX User Interface

AI Newsletter #1

SpringBoot and Kafka Streams – Event Routing & Testing

Speed up your Spring Batch with Native Image and GraalVM

Prevent LDAP injection in #java 💥💉with #springboot

Client-server application in Java: Easy with FEPCOS-J – Video.

New video series "JavaFX In Action", Part 1

Example Java Application with Embedded Jetty and a htmx Website

Cloud Cost Optimization Is Hard, Java Can Help

Flexible Jakarta EE Apps With Apache CouchDB NoSQL Database

What is CouchDB?

Video: Spring Boot Testcontainers Support for Local Development

DTrace Revisited: Advanced Debugging Techniques

Video: Spring Boot Docker Compose Support

Video: Vaadin Drag & Drop Support. It's so easy!

Video: "If I decide to stay with Oracle Java what issues will I face?"

Foojay Podcast #31: Report of Devoxx 23 in Belgium

Podcast Apps

Temperature, humidity, and pressure in BME280 Sensors with Java

What Is Used?

Pi4J

How to Share Your Work With a Video or Podcast

Audio

Enterprise Java Applications With Jakarta EE and Vaadin

Operator Overloading in Java

Logging Best Practices Revisited

Java Security: Log4J, the SecurityManager, and Funding

Debugging Streams and Collections

Debugging Program Control Flow

Debug Like a Senior Developer

Visualizing Brain Computer Interface Data using JavaFX

What is An Application Server? In 3 Minutes!

Java Profiling Overview

Can Java/Jakarta EE do Microservices?

Deserialization exploits in Java: why should I Care?

Quick Fire Java: Java After Log4j

Security Warning: Your Java Attack Surface Just Got Bigger

Video: SDKMAN Explained

Hype-Driven Development: Don't Be a Victim!

7 Reasons to Switch to OpenJDK 17 as a Jakarta EE Developer

Discussion: The State of Java 2021

Do Java/Jakarta EE Standards Matter?

SolarWinds Hack: What Does This Mean For Us?

Is Java/Jakarta EE Cloud-Native?

Are Java/Jakarta EE Application Servers Heavy?

Is Java/Jakarta EE Outdated & Dead?

CVSS 101: First Steps with Common Vulnerability Scoring System

SKP's Core Java/Java EE Roots : Gang of Four Design Patterns - Part 01

How to Create a REST API with Jakarta EE 9

Delegation vs. Inheritance in Graphical User Interfaces

The Challenge

Introduction to MicroProfile OpenTracing with Jaeger

How to Create a Kubernetes Operator in Java

Hacking Java XML Input via External Entity Injection

Minimizing Security Risks in Application Development

MicroProfile Metrics with Prometheus and Grafana

Getting Started Quickly and Easily with Payara Server