Code Liability

Review your Event Logs

2011-10-05T17:06:00.000-07:00

I was just browsing my event log and found the following entry in system:

Remote session from client name a exceeded the maximum allowed failed logon attempts. The session was forcibly terminated.

This normally would not be a concern except I've the message was logged every minute or so. After further review I see that this has been going on for the last 3 months! (as far back as my event goes)

Clearly someone is trying to hack into my computer through the Remote Desktop Service. I do have a forwarding rule in my ISP's router that forwards port 3389 to my desktop. Being as 3389 is the default port for remote desktop, I guess I should not be surprised that this was happening.

So what did I do? I changed the default RDP port. Yes, that's right "Security by obscurity" Not the preferred solution but it should slow down the attacks.

I updated the forwarding rule in the ISP router/firewall and updated my desktop RDP port using http://support.microsoft.com/kb/306759 The desktop computer firewall also had to modified to support the new port. The firewall rule for RDP on port 3389 is locked so I just created a new one for the new port.

I also changed the Local Security Policy's Account Lockout Policy to 3 attempts and 30 minutes to reset. This should slow someone down as well.

Luckily I have a strong password according to http://www.passwordmeter.com/

Score:	79%
Complexity:	Strong

So I suggest you do take some time to review your event logs. It's surprising what you might learn.

Some important Google Chrome Add-Ons

2011-02-20T08:19:00.001-08:00

Google Chrome has been released more than two years ago and it's the browser of choice for many people. Despite having won hearts for its speed and elegance, Google Chrome does have some minor flaws that you might want to fix. Here are some of them:

1. No confirmation when closing multiple tabs

Google Chrome does't show a warning when you close a window with multiple tabs. If you accidentally close Chrome windows, you can install Chrome Toolbox. The next time you close many tabs, you'll at least get a warning.

2. Basic history page

Google Chrome's history page is pretty basic and you can't restrict the list to a certain time interval.
The History 2 extension comes to the rescue by allowing you to sort web pages based on the day/week you visited them. History

2 allows you to delete multiple items from your history page at the click of a button – something that's not possible by default.

3. Missing image properties

There's no way to quickly examine an image when you're in Chrome. Fortunately, you can install Image Properties Context Menu, an extension that lets you right-click on an image and find information about the image size, location, dimensions and more.

4. No support for feeds

Chrome simply doesn't recognize RSS feeds and all you get is a page with gibberish text. If you install the RSS Subscription extension developed by Google, you can quickly subscribe to any feed using Google Reader, iGoogle, Bloglines or My Yahoo.

5. You can't send a web page by email

While other popular browsers allow you to quickly send any web page you're viewing by email, such an option is nowhere to be found in Google Chrome.
Worry not, because you can create a simple Javascript bookmarklet to open your default email program with the current URL. If Gmail is what you use, you can alternatively install the Send from Gmail extension to send the web page to Gmail.

6. No session manger

Closing Google Chrome and reopening it does not restore previously opened tabs. In order to do that, go to the Options dialog and enable Reopen tabs that were open last.
If you want advanced session saving options like the ability to create multiple sessions, try the Session Buddy addon for Google Chrome.

7. You can't switch to a tab from the Omnibox

Firefox 4 lets you switch to any open tab by typing relevant words into the address bar. If you'd like to see a similar feature in Chrome, install theSwitch To Tab extension.
The next time you have too many open tabs, just type sw followed by some words from the page. Hitting Enter switches to the tab that's listed as the first match.

And as a bonus, on You Tube you can not set you’re preferred stream to HD. Get the Auto HD for YouTube

Enjoy.

Reviewing ReactiveUI

2011-02-12T10:26:00.001-08:00

I am reviewing the ReactiveUI code now and I have to say it’s some of the coolest code I’ve seen in a while!

I really like the base ReactiveValidatedObject class for building ViewModels. The view models become so much easier for validation and INotifyPropertyChanged:

string _Name;
[Required]
[StringLength(35, MinimumLength = 3, ErrorMessage = "Names have to be between 3 and 35 letters long")]
public string Name {
    get { return _Name; }
    set { _Name = this.RaiseAndSetIfChanged(x => x.Name, value); }
}

The MemoizingMRUCache class looks very handy and I also like how the logging is accomplished.

The sample that comes with it has great comments and I learned more about MEF in the process.

It has a Ruby feel to with with a rake build script.

I have so much more to review.

we hatez your browser or how not to design web sites in 2011!

2011-02-04T03:36:00.000-08:00

While visiting the www.MVA.Maryland.gov website I discovered the following message:

The eMVA store is not available to Google Chrome users. Please use another browser.

In the words of Jar Jar... "how rude"

Cheating at Bejeweled Blitz on Facebook

2010-11-22T15:33:00.001-08:00

My new bot is complete and is scoring greater than 800k.

Check it out at http://cheatatbejeweledblitz.com/

Your Android may one day be infected at it's core

2010-10-21T05:24:00.000-07:00

Last night's BaltoMSDN presentation by Mike Wolf was on Windows Phone 7 development. When I heard that all apps would need to be certified by Microsoft, I thought, "Oh, No. Here we go with the oppressive oversight". But after a little surfing this morning regarding mobile OS's and security I came across this white paper describing how the entire Android OS could be infected with Ad/Malware.

http://appanalysis.org/tdroid10.pdf

Let's hope Microsoft get's security right on the WP7 but is not as oppressive as Apple in app certification.

HTML5 Canvas

2010-10-10T18:25:00.001-07:00

I thought it was time to start learning some HTML5 so I dove into the Canvas element.

View it here

Node.js can't use multiple CPU/Cores

2010-08-13T13:42:00.000-07:00

I just install Ubuntu 10.04 and got Node.js up and running.

It's scary how easy it is to create a highly scalable web / socket application.

Don't get too excited yet. The gurus at Yahoo had this to say:

But all is not sunshine and lollipops in NodeJS land. While single-process performance is quite good, eventually one CPU is not going to be enough; the platform provides no ability to scale out to take advantage of the multiple cores commonly present in today's server-class hardware. With current NodeJS builds, the practical limits of a single CPU acting as an HTTP proxy are around 2100 reqs/s for a 2.5GHz Intel Xeon.

While Node is relatively solid, it does still crash occasionally, adversely impacting availability if you're running only a single NodeJS process. Such problems can be particularly common when using a buggy compiled add-on that can suffer from the usual cornucopia of C++ goodies such as segfaults and memory scribbling. When handling requests with multiple processes, one processing going down will simply result in incoming requests being directed at the other processes.

And lastly, Alex Payne sums up what large scalability and why node.js might just remain the realm of the less than skilled programmers.

http://al3x.net/2010/07/27/node.html

Threads are not dead!

This looks interesting for javascript : http://documentcloud.github.com/underscore/

CQRS and User Interface Design

2010-05-01T05:09:00.001-07:00

I am beginning to have a shift in thinking about user interface design as I study the CQRS architectural pattern. The pattern really forces you to think about design UI’s around tasks.

You have to ask yourself, “Why would a user want to change the state of the system?”

Why would the user want to change the address of a customer? Was it a mistake? Did they move? These might be important to know. If they made a mistake and they have pending orders about to ship it might imply very different business rules.

It also forces you to think about the experience from the user’s perspective.

Udi Dahan said it perfectly during one of his talks: "User Interface design is as much a part of architecture as anything else that you do"

Google Hates Internet Explorer

2009-07-22T13:40:00.000-07:00

Just went to look something up and was using IE. Google is advertising Chrome in IE but not FireFox.

Open Source Code Review - A choice to name a method "Inscrutable"?

2008-08-30T06:09:00.001-07:00

I've been reviewing various open source projects related to Amazon S3 and discovered the excellent Resourceful library and the related project SpaceBlock. The following code is a utility class in the SpaceBlock project.

The method I found offensive was named "Inscrutable" and is located in the class named F. The definition of "Inscrutable" from dictionary.com is "incapable of being investigated, analyzed, or scrutinized; impenetrable." This reminds me of a quote I heard 25 years ago from an old mainframe programmer at Westinghouse. I was complaining about the understandability of his VMS code and he said "If it was hard to write, it should be hard to understand". I couldn't have disagreed with him more. I believe in intellectual manageability of the code you write. You don't write code for yourself or the compiler. You write it for other people. By naming a function "Inscrutable" you are flipping me and everyone else the bird!

I guarantee this will happen to you one day (if it has not already). You will be reviewing your own code for a bug fix and discover a particularly tricky piece of code that you didn't comment or name your function properly. If you were so arrogant as to name your method "YouAreTooStupidToUnderstandHowThisWorksSoDontEvenTry" you will be essentially flipping yourself the bird! You will then end up spending way too much time figuring out and reflecting on exactly you were thinking when you wrote that code.

Now, I'm not saying I'm not guilty of doing similar complexities with my code. In fact, I can hear my co-workers now shouting over the cubical walls "Hey, isn't that the pot calling the kettle black". I'm posting this as a reminder to myself and all developers to never do something this blatant and egotistic as this in our code.

I am not slamming these projects. I think they are well written and have a great coding style. I plan to use them in the future.

C# 4.0: Meet the Design Team

2008-08-30T05:14:00.001-07:00

Anders and crew meet in the room where C# was birthed and talk about the future.

C# 4.0: Meet the Design Team

Edward Tufte One Day Seminar

2008-05-07T11:08:00.001-07:00

Yesterday I attended a one day seminar in Arlington, VA presented by Edward Tufte.

It was a great presentation and I picked up all four of his books.

quotes and general notes:

Great designs are transparent

Never segregate data by the mode of production.

Show all the data, it provides credibility.

We should be concerned with the quality of thought.

Don't use lowest common denominator design or you will have an intellectual disaster.

Tables out perform graphs for data less than 1000 points.

Screens should be 95% content and 5% administrative debris (scrollbars, toolbars, etc.). Measure it.

Design the surface first. Outside-In design. iPhone designed the hardware platform before the software. iPhone has one of the highest DPI of any consumer device.

Don't provide an application solution.

Leave the UI alone once it's done.

There is no relationship between the amount of information and the ability to process. The human eye can process 10mbit/sec.

Don't be an original. Steal a good design.

Consider a "super graph". It unifies and relates the audience to the data or theme.

Increase information throughput

Examine how newspapers report data and clone it. Examine "Nature" magazine.

Multivariant problems are the only interesting problems.

Progress in technology is measured in resolution

Don't use legends on graphs. Put the text on the line.

Maximize content reasoning and minimize decoding

"We want to be approximately right rather than absolutely wrong"

Use Gill Sans Font

Annotate everything

about presentations

Show up early for your own presentation to meet people, to show a gracious gesture, and to hand out materials early.
Use presentations as a review of the material distributed prior to the meeting. Maybe simply ask "Are there any questions?" and end the meeting.
Use Power Point as a projector operating system
Give out handouts before meeting - people can read 2x-4x times faster than you can talk.
What is the problem?
Who cares? the relevance
The solution
Have a summary
Say you will answer questions when they are done reading
Use sentences. No laundry lists of nouns. Sentences for you to think causally.
Don't use bullet reveals.
Practice in front of a friend or a video camera
Turn off the video and listen to the audio
Ask a trusted friend for criticisim
Never begin with an all purpose joke
Never apologize at the start of the presentation
Stay out of the first person during the introduction
Stay on content
Finish early

Patterns and Practices releases Unity 1.0

2008-04-16T07:35:00.001-07:00

How did I miss this?

http://www.codeplex.com/unity

He's worse than dead!

2008-04-16T07:32:00.001-07:00

Quote of the day

2008-03-26T05:39:00.001-07:00

Playing with the .NET FCL symbols and source code

2008-01-30T07:28:00.000-08:00

I’m playing with the debug symbols for the .NET framework and came across some interesting things in code.

Dropping back to memory manipulation for performance from the String class

// Returns the entire string as an array of characters.

unsafe public char[] ToCharArray() {

// huge performance improvement for short strings by doing this

int length = Length;

char[] chars = new char[length];

if (length > 0)

{

fixed (char* src = &this.m_firstChar)

fixed (char* dest = chars)

wstrcpyPtrAligned(dest, src, length);

}

return chars;

}

AMD Specific code!

#if AMD64

// for AMD64 bit platform we unroll by 12 and

// check 3 qword at a time. This is less code

// than the 32 bit case and is shorter

// pathlength

while (length >= 12)

{

if (*(long*)a != *(long*)b) break;

if (*(long*)(a+4) != *(long*)(b+4)) break;

if (*(long*)(a+8) != *(long*)(b+8)) break;

a += 12; b += 12; length -= 12;

}

#else

while (length >= 10)

{

if (*(int*)a != *(int*)b) break;

if (*(int*)(a+2) != *(int*)(b+2)) break;

if (*(int*)(a+4) != *(int*)(b+4)) break;

if (*(int*)(a+6) != *(int*)(b+6)) break;

if (*(int*)(a+8) != *(int*)(b+8)) break;

a += 10; b += 10; length -= 10;

}

#endif

DBPro for unit testing - PITA

2007-12-14T12:23:00.000-08:00

DBPro for unit testing has been a PITA for the following reasons:

1. Roll back of initial test state is difficult

There is no easy way to begin a transaction in the setup and rollback in the tear down without modifying the generated code to use transaction scope. The setup/tear down methods cannot be used because they run on a separate connection than the test is executed. This is important for security testing but not all that applicable to the work that we perform. I don’t think it’s reasonable for the tear down methods to have to reverse all the work of the test setup methods. Database rollback is the appropriate approach. Therefore, we have reverted to not using anything but the body of the test.

2. Inability to share T-SQL code to setup common state across tests

This is forcing us write T-SQL setup code that is duplicated across multiple tests or we resort to putting all the testing for a given state into single test. These tests are then testing a single unit (stored proc, trigger, view, etc.) but are testing multiple conditions. If the first condition fails, all subsequent tests will not execute. Also, using state that was modified by a previous test can be very problematic and creates interdependencies between tests.

3. Test designer for specifying test conditions is difficult

The point/click interface for editing many test conditions becomes laborious for large numbers of result sets and columns. Managing inline T-SQL with RAISERROR statements is easier and allows a script to be reviewed without the designer surface.

4. T-SQL test editing designer is not friendly for debugging your test

Most people find that using SQL Management Studio to write/debug your unit tests is easier. In order to use SMS you must copy-paste your code in and out of the DBPro test designer. This process is error prone and laborious.

5. DBPro is slow at executing tests

6. Data Generation Plans are not useful

I may be wrong but I don’t find the Data Plan Generation facility very useful for most unit tests. I see how it would be useful for performance or load testing but these types of tests are much higher level.

7. Integrating the DBPro tests into the build process is not easy

This has not been attempted yet but it does not appear on the surface to be easy.

ObjectBuilder Documentation is incorrect.

2007-11-30T09:40:00.000-08:00

The following is the default Object Builder Pipeline Stages:

PreCreation
Microsoft.Practices.ObjectBuilder.TypeMappingStrategy
Microsoft.Practices.ObjectBuilder.SingletonStrategy
Microsoft.Practices.ObjectBuilder.ConstructorReflectionStrategy
Microsoft.Practices.ObjectBuilder.PropertyReflectionStrategy
Microsoft.Practices.ObjectBuilder.MethodReflectionStrategy

Creation
Microsoft.Practices.ObjectBuilder.CreationStrategy

Initialization
Microsoft.Practices.ObjectBuilder.PropertySetterStrategy
Microsoft.Practices.ObjectBuilder.MethodExecutionStrategy

PostInitialization
Microsoft.Practices.ObjectBuilder.BuilderAwareStrategy

My Digital Picture Frame project (DPF)

2007-11-25T17:39:00.000-08:00

I considered purchasing one of these cool toys but had high requirements for it.

WiFi

Support Pictures via RSS with local storage media as fall back.

Remote Administration

Re-chargeable battery

Options for wood frames

Of course the few that actually fit these most were > $500 up to $1000. There was only one that supported RSS.

So I used an old Tecra 8100 laptop and set out this long holiday weekend to build my own. I purchased a frame and shadowbox at Micheal's craft store at a total cost of $22.

Three hours later I had produced this:

The laptop already had windows XP loaded on it so it was just a matter of:

Setting windows to automatically login

Loading the google screen saver which supports local media as well as RSS feeds.

Loading up TightVNC for remote administration

Adding nircmd.exe screensaver as a startup item.

When I unplug the laptop and it will run for an hour or so and then go into standby mode. luckily, (this particular laptop) when you plug it back it it comes right back on and begins charging again.

I decided I had better leave the back panel of the shadowbox to allow air flow. The laptop does get a little bit warm.

I hope this inspires you to build your own DPF!

Effective Code Reviews... the next steps.

2007-11-21T13:59:00.000-08:00

I've been giving a lot of thought as to how to move closer toward pair programming within our development organization. Code reviews today are somewhat effective but tend to take a back seat when the pressure is on to make schedules to release code. e.g. The urgent always wins over the important. (Stephen Covey)

So developers and managers under pressure will delaying code reviews until after the release. That's just a stall tactic as sometimes that occurs and sometimes it doesn't. Either way, it's POINTLESS! The further in time you are away from when the code was written the more chance you have of making a breaking change. (ignoring unit test coverage and unit test quality)

Most code reviews reveal code that can be improved but is not incorrect. These types of changes should never be made on released code! Sometimes it's even worse in that the code requires design changes that we glossed over during the design phase but we obvious design concerns now that the code is complete.

Perhaps the best approach to shortening the time between when the code is written to when the code is reviewed is to enforce check-in policies. This would require at least another developer to review code changes before it could be committed to the source code repository.

I have noticed that TFS contains a field to indicate that the code was reviewed. I imagine a combination of shelving and using this flag with policies in place could begin to move code reviews more into the daily coding work flow rather than waiting until there is no time at the end of the schedule.

Another possibility to get closer to pair programming is to all developers be requires to spend one hour each day reviewing (hence pairing) on another developers work for the day.

I just don't think the culture shift to pair programming is going to be something that is ever dropped into an existing organization. We need to find methods to introduce it in small doses in order to succeed.

As Einstein once said, "Insanity is doing the same thing over and over again and expecting different results."

Presenter communication with the view - events or direct communication.

2007-10-28T06:29:00.001-07:00

I just started reading Jeremy Miller's excellent blog post series on Build your own CAB series. I'm currently up to his 6th post on "View to Presenter Communication" and found the discussion of using events vs. callbacks on the presenter very interesting and relevant to my current work.

Let me share a recent experience...

I've been using events from my view to communicate with the presenter and ran across a bug that was related to using event inadvertently. While working one day, I accidentally pressed Ctrl-L and duplicated a line in my presenter constructor. The line I duplicated was a hook of a view event. This caused my presenter event delegate to be called twice.

I found out later that my unit tests for the presenter were correctly checking that I wired all the view events but they were not checking that the events were only wired once. All my integration testing was in debug mode! Then ran the application in release mode. BOOM!

It turns out the events fired in a different order under release mode and caused a null reference exception with a state change in the model.

If the purpose of events is to allow multiple listeners, when would I ever design the use of a single event to communicate multiple methods in the presenter?

Perhaps I would but that appears to be more of an edge case and not very good design. It would lead me back towards a design where events don't communicate specifics but something more abstract as the 'SomethingChanged' event.

Would I ever have multiple presenters for the same view? Never.

So is using events a good design principle to create loose coupling? Yes, but only if you require multiple listeners. If you don't, are you over engineering the solution? Perhaps.

Now when it comes to the model, events are essential! I have multiple presenters listening to model objects!

I've also been fighting memory leaks due to the use events on my model objects. My model has certain objects that can be retrieved from cache and exist for the life of the process. When my presenter hooks these events, it was causing my presenter to not unload when the view was destroyed. This cause me to have to disconnect my model events from the model objects when the presenter was disposed. This also required me to dispose my presenter when the code that first created the presenter fell out of scope.

On a side note, I found the memory leak using SciTech's excellent memory profiler. If you are creating WinForm applications, I suggest you download it and try it against your application. You might be surprised to find you have memory leaks in your applications. It also has an API so you can build integration or unit tests to check for memory leaks.

Some more unknown programming quotes

2007-10-20T06:56:00.000-07:00

"Any sufficiently advanced bug is indistinguishable from a feature."

"Programming is an art form that fights back."

"There are two ways to write error-free programs; only the third one works."

Ioc is very simple and important.

2007-10-16T05:55:00.000-07:00

I attended the CMAP code camp this past weekend and sat in on Michael Pastore's excellent presentation on Dependency Injection and Inversion of Control.

Although I was already familiar with DI/IOC his presentation managed to sharpen my understanding of why Ioc is important.

I don't have Mike's exact definition of Ioc but in my words:

"Ioc is where code surrenders control or configuration to external code"

This is very common in most Frameworks including the the .NET framework.

Consider the TrueForAll method from List from reflector:

public static bool TrueForAll<T>(T[] array, Predicate<T> match)
{
 if (array == null)
 {
     throw new ArgumentNullException("array");
 }
 if ( match == null)
 {
     throw new ArgumentNullException("match");
 }
 for (int i = 0; i < array.Length; i++)
 {
     if (!match(array[i]))
     {
         return false;
     }
 }
 return true;
}

This method delegates control to the Predicate inverting the control to the caller. These delegate / callback methods appear all over the .NET framework.

So in my opinion Ioc is a very important concept that every developer should understand to effectively implement that Single Responsibility Principle.

My Seven Year old is out blogging me!

2007-10-12T09:00:00.000-07:00

My seven year old took up blogging last week.

Has a real fascination with star wars. (Webkinz is is side hobby)

It's really pathetic that I can't seem to blog as much as he does! Yikes!

A nice quote relative to current work

2007-09-28T14:40:00.001-07:00

I'm currently working on a Presenter First design and I stumbled across this quote:

"Doing encapsulation right is a commitment not just to abstraction of state, but to eliminate state oriented metaphors from programming." — Alan Kay, Early History of Smalltalk.

Tech gadgets I would like to get for Christmas

2007-09-12T08:23:00.000-07:00

Logitech Quickcam Fusion

Aliph Jawbone Noise Shield Bluetooth Headset

Guitar Hero II

WTF Comcast?

2007-08-26T08:23:00.000-07:00

I recently moved from Comcast Digital TV and Internet Services to FiOS and I couldn't be happier. My download speeds on the Comcast's internet service was horrific at times.

I just followed this a digg link and found this article about how Comcast has drawn an invisible line for acceptable bandwidth use. The interesting thing was I got an advertisement on the page for comcast triple play. LOL!!!

FizzBuzz c# 3.0

2007-07-28T09:08:00.000-07:00

I've been playing with the C# 3.0 Express beta....

(from n in Enumerable.Range(1, 100)
where (n % 3) == 0 || (n % 2) == 0
select n.ToString() + "=" + (((n % 2) == 0) ? "fizz" : "") + (((n % 3) == 0) ? "buzz" : "")).ToList().ForEach(Console.WriteLine);

Complexity

2007-07-28T09:07:00.000-07:00

Every problem can be solved by adding another layer of indirection.

Unfortunately, adding another layer usually creates a new problem.

The inverse of Moore's Law?

2007-07-26T05:20:00.000-07:00

Moore’s Law

The power of computers per unit cost doubles every 24 month.

Wirth’s law

Software gets slower faster than hardware gets faster.

Another good law...

2007-07-26T05:19:00.001-07:00

Conway’s Law

Any piece of software reflects the organizational structure that produced it

Put another way...

If you have four groups working on a compiler, you’ll get a 4-pass compiler.

A new tip one for my wall

2007-07-26T05:17:00.000-07:00

Hofstadter’s Law

A task always takes longer than you expect, even when you take into account Hofstadter’s Law.

statics are EVIL!!!

2007-07-17T17:38:00.001-07:00

I made this statement a year or so ago while on a Microsoft lab engagement trip and I got some strange looks from some of the Microsoft folks over lunch. So here are my thoughts on why I believe use of statics is a bad idea.

when you use a static you couple to an implementation and not an interface. You can not change the implementation without changing all dependencies.
your statics are essentially global. Use of globals should be discouraged for the reason of intellectual manageability of your code. Strive to minimize the scope.
using statics do not follow tenets of Object Orientation. Fine for your functional programming style but not OO.
statics leads to all or nothing testing. Testing a single unit is much harder if not impossible.

For me it all comes down to testability. Some folks say that testing should not drive design but as I have said before, designing your code for more than one client leads to a much better and flexable design.

Of course this crazy talk will eventually lead you to Ioc. See you when you get there.

How to code....

2007-06-27T08:35:00.000-07:00

Make it correct, make it clear, make it concise, make it fast. In that order.

Presenter First Pattern

2007-06-12T18:26:00.000-07:00

I've been using MVC patterns for 10+ years and recently have been looking at Fowler's Passive View and Supervising Controller now that he has pulled the MVP pattern.

But the Presenter First pattern really is starting to make a lot of sense when it comes to easy testing and mocking of the model and presenter. I saw someone describe on a blog as "UI as a service". I like the idea of the Model and View being totally ignorant of the view.

I'm still a little fuzzy on the mechanics of wiring MVP triads together at the model levels.

Grab the whitepaper and check it out.

Getting back to Domain Driven Design

2007-06-06T16:08:00.000-07:00

I recently started reading Domain Driven Design by Eric Evans and am gaining some insights into many of the DDD design practices I have unknowingly been using over the past 5 years.

It is interesting to see how over time aspects of my companies domain design has been muddled and broken down over time due to the miscommunication of the UBIQUITOUS LANGUAGE we developed in the initial design of the system.

This quote from the FACTORY/REPOSITORY chapters was quite pungent and applicable to our current environment when I read it:

"A client needs a practical means of acquiring reference to pre-existing domain objects. If the infrastructure makes it easy to do so, the developers of the client may add more traversable associations, muddling the model. On the other hand, they may use queries to pull the exact data they need from the database, or to pull a few specific objects rather than navigating the AGGREGATE roots. Domain VALUE OBJECTS become mere data containers. The sheer technical complexity of applying most database access infrastructure quickly swaps the client code, which leads developers to dumb down the domain layer, which makes the model irrelevant."

Also, in discussing the corrosion of the domain model he mentions how making it easy to convert data into objects using mapping layer can lead developers astray. Developers don't think of objects but just think of data containers. Is this the debate between DataSets and Business Objects a wolf in sheep's clothing?

"As a client code uses the database directly, developers tempted to bypass model features such as the AGGREGATES, or even object encapsulation, instead directly taking and manipulating the data they need. More and more domain rules become embedded in query code or simply lost."

I've been heads down in design and coding for so long in an attempt to establish the financial stability. I have been ineffective in the capacity as a System Architect in this regard.

My situation is rather humorous because the majority of Architects tend to spend too much time on Architecture related tasks where as I've been spending the majority of the last 5 years on design, coding, and support.

Also, people will fall back on the argument that any added abstraction is going to impact performance. Pooh to that! Depends on what you are building. If you are building a typical business app, design it correctly for God sake! Unit test it for performance and adjust as required. A good design is agile to change with TDD.

I look forward to reading more of DDD. It's stimulating new ideas and re-enforcing ones I already knew to be correct.

Esoteric and entertaining programming languages

2007-06-03T06:25:00.000-07:00

If you ever have some times to waste I encourage you to check out the following programming languages. They are not really of any use but are a cool mental exercise.

Whitespace
BrainFu*k (or BF)

Whitespace is interesting because you embed secret messages through code within white space of your web pages.

Sure, go ahead and print out your white space program and destroy the source file. No one is ever going to figure it out now.

Apparently I had some time to waste this weekend.

My Fizz Buzz interview question

2007-05-13T07:09:00.000-07:00

So there has been some "buzz" about the interview question that sets the bar for any entry level programmer. (forgive the pun)

I have my own entry level programming problem I have developed over many years of interviewing:

"Write the code in your favorite language (or pseudo-code) to remove all items from a list that a contained in another list."

I give them concrete lists so we can talk about the implementation:

List 1 = A, B, C, D, E, F
List 2 = C, E, F

Sounds easy enough but candidates almost always start with a loop over List 1 with an inner loop or lookup in list 2. Then, any normal programmer realizes the errors in their ways and say's oh crap, I'll be screwing up my iterator or index over list 1 if I modify list 1. It's interesting to watch as they try to come to a solutions. You would be surprised how many can not make a leap to a solution.

I get statements such as "Oh, man I've done this before" and then they never come to a solution.

Better candidates always ask questions such as what data structures would they be stored in and how large could the sets become? Is performance a factor? Do I memory limitations. The poor developers never make it to a solution. This is the true sign of an experienced developer.

But it's important that they give you a solution that works. I don't take the intelligent discussions around the problem as confirmation that they are a good developer. I want developers on my team that are good thinkers as well as can get things done.

I debated if I should post my version of the "Fizz Buzz" question here but my traffic on my blog is almost non-existent. I guess it's because either I don't have anything interesting to say or I don't blog enough.

Whatever....

Bug-by-by compatibility - semantic compatibility

2007-04-25T07:04:00.000-07:00

I just finished to a Hanselminutes episode with Raymond Chen where they discussed a multitude of topics. One of them was about how the Microsoft App compat team has to deal with what Raymond called "Bug-By-Bug compatibility"

I realized that what he was really talking about was a form of semantic compatibility. My best real world example of semantic compatibility is when a component exposes events through it's interface. Although the interface is immutable the order in which events fire is not. So a component vendors may release a new version of a component for bug fixes or new features and not modify the interface but modify the order in which it's events fire causing a semantic compatibility problem.

The software development industry is doing a great disservice by not documenting event ordering through it's standard component documentation. Yes, we have BeforeActivate and AfterActivate through naming standards but does BeforeActivate come before or after BeforeInitialize? Got me! Let me test that. Oh, ok... now I know what it does. Is that what it's going to do on the next version?

So here's an interesting story I've told many friends:

Years ago I wrote a security component that handled all user password for encryption and decryption for system. This component was written in VB6 and used the CryptoAPI calls to encrypt and decrypt the passwords. As an example for calling the CryptoAPI I used this class from planetsourcecode.com I created full unit tests for encrypting and decrypting and everything worked great. The application shipped and the world is happy.

Now, we are migrating the system to .NET and one of the first components I needed to migrate was the security component. Unfortunately .NET 1.1 did not have native managed support for the algorithm I selected (CALG_RC4). No problem, I'll just implement the PInvoke calls as I did in the VB6 code.

I did that. Wrote unit tests and for some reason I was unable to decrypt passwords encrypted with the VB6 component. Passwords encrypted with the .NET component decrypted fine. Hmmmm, very odd. It turns out that the one of the hash parameters in the VB6 Crypto API declarations was defined "as String" when it should have been defined "as Any". This caused the hash to go through a unicode string conversion where the .NET code was not.

So now we have to inject a bug in our .NET code to maintain compatibility with a bug in our VB6 code. ARRRRRRGGGG!

A few of lessons here:

Just because it passes all your tests does not mean it is correct.
Don't use code directly off the internet (even API declarations)
Once software is in the field you must maintain bug-for-bug compatibility and semantic compatibility.

ORM and when query plans go bad.

2007-04-20T12:10:00.000-07:00

I've been listening to quite a few discussions on the debates between the use or ORMs and two topics that never seem to get discussed is:

How can dynamic SQL ORMs deal with the fact that your database server (a.k.a SQL Server) can decide at any point that it is going to use an alternate query plan. A simple index HINT on the join syntax can fix this problem but how is my ORM going to handle this?
How come there is no talk about scaling these ORMs. No, I'm not talking about scaling the database. A layer between the ORM and the database execution.

Point #1 can be explained away in a theoretical world where all the correct load testing scenarios are covered during your quality assurance phase. BUT THAT NEVER HAPPENS.

Point #2 I've also een starting to pay more attention to the Microsoft Entities Framework. .NET Rocks did a show with one of the product managers for ADO.vNext (Dan someone) and he talked about the Entities framework in depth. He talked about how they are getting pressure from the community that they are not supporting all the functionality that the ORMs (such as NHibernate) are providing. His response was that MS has a longer term strategy with the EF to support replication and reporting (essentially a unified model) against the EF. He continued to say we would have to put up with the limited capabilities to reach this higher level.

The interesting part was that he continued on to talk about how he worked on the WinFS team before it was killed. He talked about the reason it was killed was because they were unable to deliver all the functionality on one release and how no one (especially mgmt) could not decide on the base feature set. It was rather ironic that he was mentioning this on the heals of talking about how the EF was a stepping stone.

In my opinion the EF will certainly be a wait and see technology. CSLA .NET is still my choice.

Searching for .NET solutions

2007-04-20T12:07:00.000-07:00

Dan Appleman did a talk at VSLive Orlando about "Discoverability". I was not able to attend the session but my co-worker did.

I also heard Dan talk on the internet talk show .Net Rocks regarding the same topic. One interesting link that was served up was a site that uses a google custom search. Dan has set one up for only search the top .NET sites. The site is www.searchdotnet.com and currently searchs about 300 sites. Some of those sites are the MSDN blog sites so the actual depth of the content being searched is much greater than the 300 sites.

So far it has been returning much more relative results than straight google searchs on .NET topics.

2007-04-20T12:05:00.000-07:00

I've been looking for a private simple desktop VPN solution for a while and I finally found it.

http://www.hamachi.cc/

Encrypted over HTTP... NICE! No more opening RTP ports in my firewall.

Javascript prototype function for formatting dates objects.

2007-04-19T11:19:00.000-07:00

Some useful javascript for formatting date objects:

String.prototype.zf = function(l) { return '0'.string(l - this.length) + this; }
String.prototype.string = function(l) { var s = '', i = 0; while (i++ < l) { s += this; } return s; }
Number.prototype.zf = function(l) { return this.toString().zf(l); }

Date.prototype.format = function(f)
{
if (!this.valueOf())
return ' ';

var d = this;

return f.replace(/(yyyy|mmmm|mmm|mm|dddd|ddd|dd|hh|nn|ss|a\/p)/gi,
function($1)
{
switch ($1.toLowerCase())
{
case 'yyyy': return d.getFullYear();
case 'mmmm': return gsMonthNames[d.getMonth()];
case 'mmm': return gsMonthNames[d.getMonth()].substr(0, 3);
case 'mm': return (d.getMonth() + 1).zf(2);
case 'dddd': return gsDayNames[d.getDay()];
case 'ddd': return gsDayNames[d.getDay()].substr(0, 3);
case 'dd': return d.getDate().zf(2);
case 'hh': return ((h = d.getHours() % 12) ? h : 12).zf(2);
case 'nn': return d.getMinutes().zf(2);
case 'ss': return d.getSeconds().zf(2);
case 'a/p': return d.getHours() < 12 ? 'a' : 'p';
}
}
);
}

A new Vista security issue?

2007-02-01T10:56:00.000-08:00

A new Vista security issue? I don't think so!!! This is the exact reason I can't stand rags like e-Week.

Grrrrr...