Explaining Java Deserialization Vulnerabilities (Part 2)
In this part, we continue with even more harmful attacks and show you how you can prevent this in your own code.
Friends Of OpenJDK Today
Every article on foojay.io, newest first: OpenJDK, the JVM, Java tooling and the ecosystem around them, written by the Java community.
How to Create a Kubernetes Operator in Java
Kubernetes is much more than a runtime platform -- through its API you can not only create custom clients, but also extend Kubernetes …
4,679 viewsAnnouncing the Upcoming Virtual Foojay JUG Tour!
To celebrate the OpenJDK and Foojay.io as a community platform for its users, we’re kicking off the Virtual Foojay JUG Tour.
IntelliJ IDEA: Let's Go Beyond The Basics!
In this article, I’ll talk about some tricks that I use in my day to day job and show some best practices that can boost your productivity.
A Compendium of 2021 Java & OpenJDK Predictions
Now that 2021 is well underway, many prominent Java developers have taken the time to predict what 2021 may bring to the Java universe!
Explaining Java Deserialization Vulnerabilities (Part 1)
Java serialization—and specifically deserialization—is “the gift that keeps on giving” for the security issues produced over the years.
Vert.x Example on the Raspberry Pi with a Virtual Potentiometer
Vert.x is open-source reactive polyglot software toolkit from the developers of Eclipse. Let's use it to play with a virtual potentiometer!
CI/CD Workflow for Spring Boot Applications on Kubernetes via Skaffold
Skaffold eases development and deployment of applications running on Kubernetes, managing the entire workflow, giving instant feedback.
Tips on High Performance Rendering in JavaFX
Different rendering techniques in JavaFX using Canvas API, AWT Graphics2D, PixelBuffer and PixelBuffer GPU.
Hacking Java XML Input via External Entity Injection
In this video, I explain and demonstrate how an XXE injection attack works by extracting system data that should not be exposed.