Cigital

Great interview.

Bob pointed out his main gripe with Java’s security model which is how it treats fine grained authorization. It requires defining all of the policy up front, very difficult or impossible to do in real world. And it lacks layers of indirections that we can use to resolve when we don’t know a priori the full subject + object + session policies (i.e. most of the time). Bob opines that XACML and Claims may help resolve this, and I agree (if nothing else it represents our best current hope), but they didn’t drill down on this

Bob or Gary – anything to add here?

Technical gripe on the podcast audio: I found the difference in volume between Gary and Bob so great that I was constantly having to adjust my volume in my car to understand Bob but not get blasted away by Gary.

Don’t mean to just complain though. Really enjoy the podcasts and the mix of technical and non-technical questions.

Von — This one was a particularly difficult one to level out due to a lot of background noise (and, therefore, the use of noise reduction) and level inconsistencies. Sorry it was a tough listen for you — hopefully past and future episodes aren’t so jarring.

… Ryan

death to smileys.

sorry for the technical difficulties on this one. we’re usually better and we will be again.

gem

Great goods from you, man. I’ve bear in mind your stuff prior to and you are just extremely fantastic. I actually like what you’ve got here, really like what you’re stating and the way wherein you assert it. You are making it entertaining and you still take care of to keep it wise. I cant wait to learn much more from you. That is really a wonderful website.- Elegant London Escorts, 65-67 Brewer Street, Floor: 2, London W1F 9UP. Phone: 020 3011 2941