As you must be aware, this week there was a lot of buzz around the discovery of a major security vulnerability in Open SSL known as “heartbleed”. Most of the hosting providers, website operators, IaaS, PaaS and SaaS vendors are going though a grippling phase upgrading their servers, websites, and communicating to their users and community. Two-thirds of the Internet’s web servers are compromised. This is possibly the worst vulnerability discovered so far, which leaves no trace of what has been compromised, by whom and since when. Bruce Schneier the security expert, rates this vulnerability at 11 on a scale of 1-10.
We are fortunate enough to watch the action closely and none of our products are affected due to “heartbleed”, as we do not use Open SSL. Our own Load Balancer and Web Server implementations, which are bundled as part of WaveMaker Gateway use Java SSL and this is a life-saver at the moment.
We have built our own HTTPS layer, which is a closed source component using Java SSL libraries. We always believed having a closed-source security implementation, is the first step to provide enterprise-grade security and it really turned out to be true with this SSL vulnerability being unearthed.
What is the vulnerability?
To give a little insight into the security loophole, this is a programmer’s error in the Open SSL implementation combined with the C language’s inherent power of providing access to any unbounded memory data. Websites and hosted software that are vulnerable to this attack, would have their TLS/SSL secret keys, private keys, names and passwords of the users exposed.
Security experts have advocated to use TLS/SSL for encrypting data and secure communications for years, but this is very unfortunate to find SSL vulnerable.
Head of Engineering,
Greetings WaveMaker community!
We’re proud to announce to the WaveMaker community that we are releasing a new website. Even larger news than the new website, however, is the exciting expansion of our WaveMaker product family.
We have merged our CloudJee platform and our enterprise application server technology stack with WaveMaker to deliver an end-to-end “App Enablement Suite”. This suite not only provides full API Management. The Suite goes beyond other API Management solutions by helping deliver on the ultimate business objective of APIs – to get apps built — by leveraging WaveMaker Studio’s strength at enabling a much larger audience (e.g,. citizen and user developers) to build apps. Please check out the new WaveMaker.com for more info.
None of this changes the plans or directions we’ve stated for WaveMaker Studio – e.g., Studio will remain open source. We will be releasing access to the Beta SaaS version of our major new release 7 shortly. And we will continue investing in WaveMaker Studio as a strategic product in our suite.
We hope you will be as excited as we are about the game changing potential of our Suite and the greater opportunities this provides for our partners. Please contact us for any needs in building and managing APIs, or populating an API App Store.
CEO – WaveMaker, Inc.
We are in the process of upgrading WaveMaker Websites and its Infrastructure. We expect a downtime of Forums on March 11th, Tuesday starting from 1 AM PDT to 5 AM PDT.
We regret the inconvenience caused to you. We’ll resume the services back as they were after the upgrade is complete.
WaveMaker Community Manager
Hello WaveMaker Community,
With this post, we’d like to update you on what has kept us occupied since the New Year.
We are working towards modernizing our community platform. This includes migrating Community Forum from Drupal 5.7 to Drupal 6.3, upgrading WordPress to the latest version (3.8.1) by the end of March 2014.
Recently we enabled “Skip CAPTCHA” in the forum for trusted Community members. Community members will now be able to report spam posts using a new ‘Report Spam’ feature. We upgraded our Mail Delivery system so that user registrations and subscription emails will be delivered faster than before to your inbox.
We’ve had some great feedback on our 6.7 Beta and “WaveMaker Cloud™” to create and deploy powerful Cloud-ready web apps with a single click. We would like to thank the 650+ beta developers across 70 countries for trying WaveMaker Cloud and providing us with valuable feedback. Check out the below infographic about how the WaveMaker Cloud has gone so far. Also, WaveMaker 6.7 GA has just been released.
We have been providing WaveMaker Services like Support, Training, Application Development and Professional Services. Recently we worked with clients to build their Test Management Systems and Asset Management Systems using WaveMaker 6.x. If interested in these services, please email us at firstname.lastname@example.org.
WaveMaker offered by AWS Marketplace
We are glad to share that AWS now offers WaveMaker on its marketplace. Marketplaces such as AWS widen WaveMaker’s reach via their large customer base and simplify delivery via pre-built machine images. Here’s the WaveMaker listing on AWS Marketplace.
We’ve devoted dozens of developers to work on WaveMaker 7.0. Internal preview was seen in December, even with examples of our new Prefabs, including Prefabs for posting to eBay and Facebook. In days, we will start our alpha testing, and will open up beta testing to select users in April. We are striving to make sure replacing Dojo with AngularJS does not impact the user experience with the WaveMaker Studio. In fact, we hope WaveMaker 7.0 enables user to create and deploy applications faster than ever before.
With the planned revamp of the website next month, we will also unveil our expansion of the WaveMaker brand and product line. Stay tuned for more updates.
WaveMaker Community Manager
The WaveMaker team is pleased to announce the release of WaveMaker 6.7.0 RELEASE, the latest release to the WaveMaker 6.7.x family.
I want to post a quick update and apologize for the inconvenience caused. We had some issues with the WaveMaker production server. A technical issue in the Cache module caused service disruption from yesterday afternoon (Feb 3 2014). Our Engineering team fixed the issue and appropriate measures are taken to prevent this from happening in the future.
Due to this issue we have lost 6 posts with comments. We would like you to check your posts and comments you made between Feb-3-2014:1.30pm UTC and Feb-3-2014:6.30am UTC. Please recreate your missing posts and comments made during the above time period.
WaveMaker Community Manager
First, thanks to everyone who has been patient with us while we assumed stewardship of WaveMaker. I’ll admit that community communications has not been our strong suit. However, we are increasing our communications efforts with the goal of improving in 2014. In particular, I think we have not conveyed our commitment to WaveMaker clearly enough. To give some perspective, we have a development team working just on WaveMaker that is larger than I believe WaveMaker has ever had and literally at least 10 times the size of VMware’s WaveMaker team. We’ve taken on some lofty goals, big enough perhaps to worry some folks. But we took on WaveMaker because we see big potential. And we did make very good progress with the product last year, which I believe will poise WaveMaker and its large community of partners and customers for bigger things this year.
Picking up some of the operational pieces (code, web site, forum, doc, download repositories, ticket tracking system, training materials, wiki, etc.) took a bit more effort than you might think. And we are looking to modernize some of the community technologies this year.
In about half a year, we completed several 6.6 releases, including milestone releases and final GA in November. We’ve provided example apps for session and login management, and we’ve been delivering support and training for WaveMaker users.
We also released public beta of 6.7, or what we call “WaveMaker Cloud™” (wavemakercloud.com). With WaveMaker Cloud, we added the second “D” to RADD (Rapid Application Development and Deployment). We made it super-simple to deploy your WaveMaker app right from Studio to the cloud with a single-click. Via the CloudJee platform, we also give you a year free hosting (running on AWS) to try it out! Note: 6.7 continues to be open source, and you can still use 6.7 to develop offline just as you do with 6.6; our goal is not to lock you in, but to provide the easiest, self-service, no-ops way to build and deliver great cloud and mobile apps. We can provide a number of optional services for hosting WaveMaker applications such as choice of cloud providers, increased resources, SLA, etc.
In a little over a month last year, WaveMaker Cloud (6.7) has had thousands of downloads with hundreds of deployed instances from over 70 countries!
If you have not yet tried it out, sign up at WaveMakerCloud.com.
With several years in the market, WaveMaker has been able to build a strong loyal following. However, WaveMaker is also due for some modernization. It’s our intent with our version 7 to:
a) modernize the Studio user experience,
b) modernize the framework to current popular technologies; this will also facilitate faster development of new features,
c) do so without losing the power that makes WaveMaker so popular – including but not limited to back-end services integration, extensibility, browser-based, local/on-prem dev, open source, etc.
We expect the 7.0 platform to take us into the future. Just as airlines tell parents to ensure they put their oxygen masks on first in an emergency, we find the community generally understands that WaveMaker has to be commercially viable for WaveMaker to not only survive, but thrive. Thus, 7.0 will continue to have an open source version, but will also have an enterprise version. Features for the enterprise version are yet to be determined, but team development, collaboration, deeper security seem like obvious areas.
One of the features in 7.0 that I am most excited about is what we are currently calling API “Prefabs”. These are components specific to an API that can be easily used and reused in WaveMaker apps. A simple example might be a login Prefab for WorkDay (HR SaaS application) that can not only provide a consistent UI, but can perform all the required backend authentication handshaking. Developers and non-developers can then drag and drop this login Prefab into their WaveMaker apps. Then, the community will be able to build and share Prefabs for various APIs and platforms. We would like to hear from you which Prefabs you would like to see.
We will continue to support 6.6 for the foreseeable future. Version 6.7 functionality (auto cloud deployment) will merge with 7.0. Our goal is to provide migration tools for moving as much of 6.6 apps to 7.0 as feasible.
Special thanks to the loyal WaveMaker community and welcome to all the new users who discover WaveMaker each day and send us their praises for WaveMaker. Together, let’s make some waves in 2014!
From all of us here in the CloudJee WaveMaker team, we wish you all a very happy and prosperous New Year. Wishing joy and peace to all and we will see you in 2014!
The WaveMaker development team announces the availability of WaveMaker 6.7.0 M3.
The WaveMaker team is pleased to announce the release of Beta version of WaveMaker Cloud, a free cloud hosting service for your WaveMaker applications. WaveMaker Cloud is part of the WaveMaker 6.7.0 M2 milestone release which you can download from the community build page.
As a valued contributor in the WaveMaker community, we encourage you to try WaveMaker Cloud and hope that you will let us know what you think.
In addition to the power WaveMaker gives in rapidly building rich cloud and mobile apps, WaveMaker Cloud™ also gives you:
• A free hosting environment to deploy WaveMaker applications to the cloud
• The ability to manage deployed applications from within WaveMaker Studio
• Application portability with a standard software stack: Tomcat and MySQL
Don’t forget to sign up!
We hope you enjoy WaveMaker Cloud!