You've probably never thought of SQL Injection Attacks and O/R mapping in the same context. I know I haven't, that is, until today. I saw Scott's post on how to "Guard Against SQL Injection Attacks" and started wondering how long it's been since I've given it any thought. Then I realized that it was around the same time I switched to O/R...

I flagged this for followup some time ago, but it just got lost in the shuffle. Brent (?) put up a great post called "XML vs. Web Service, Who Wins?" where he dispells the WebServices Everything Everywhere anti-pattern. In the example he uses, a read-only XML file ended up being a much simpler, and almost definitely more performant solution...

After reading Harry Pierson's comments on an SOA workshop he attended presented by Thomas Erl, and the rest of the reuse bubble growing and popping, I wanted to add some comments from my experience in using SOA in the wild. First of all, the "reuse" is bull. In the cases where I found high reuse, I also found a function instead of a service...

From the SOA in Action Blog: There has been considerable hand-wringing over the potential performance impact of SOA, and especially XML, on server environments. In a new think piece posted at Search WebServices, ZapThink's Jason Bloomberg sheds some light on the challenge of high-performance SOA -- and yes, he uses "high performance" and "SOA"...

And I don't mean CRUD as in Create,Read,Update,Delete. I haven't been following the factories much but David Hayden's recent post pulled me back in. Here's an example of the kind of solution that the factory creates: I thought that object orientation was already accepted as good practice, but here comes Microsoft splitting up data and behavior...

Dr. Dobb's recently published an article on "Application Responsiveness" by Joe Duffy where he gives a very thorough treatment of threading issues in UIs. I felt that the discussion of the solutions was a bit light, but there was one solution missing that, in my opinion, is more important than all the rest. The kinds of systems that I work on...

If I'm Statler, the one on the right, can you guess who's Waldorf?

It appears that the questions are getting more concrete around my Autonomous Services article. This one comes from Eric who asks: "Udi, Your article caught my attention because we are currently trying to figure out the "infrastructure implementation" piece of the puzzle in an MSMQ cluster scenario. I didn't understand the term "remote...

Following my article in the Architecture Journal, I've been getting quite a stream of emails asking for more information. The latest one came from Alex and I'd like to relate his thoughts here, with my comments inserted inline. "Udi, I read with big interest your article in the architecture journal. I liked your ideas, but some statements were...

After reading this article you just might be thinking that business rules management systems (BRMS's) are the key to what SOA was supposed to bring (now that we're in the trough of disillusionment) - that is, if you haven't tried working with these beasts before. There are several now-well-known fallacies around BRMS's. One is that business...

Get it here. In this podcast, we address questions about autonomous services, publish/subscribe communication, exceptions, data duplication, reuse, and governance. Let me know if you like this style of question and answer format. Resources: 1. Autonomous Services and Enterprise Entity Aggregation 2. Ask Udi a question on SOA 3. Subscribe to the...

Just recently the .Net Rocks crew interviewed Jimmy Nilsson on Domain Driven Design (DDD). In the first half, Richard Campbell describes SOA as the opposite of DDD, where SOA "very much is a set of technologies, that are going around trying to find a problem to solve", and DDD is based on focusing on the problem and designing a solution for...

I haven't seen this begin circulating yet, so I just might get to be the first. I'll be doing a talk on SOA and workflow. More details coming soon...

Get it here. In this podcast, we describe the service oriented analysis process that leads to coherent services that are strongly business aligned. Verification techniques are also presented which can point to poor service decomposition. Finally, we drill down and show how services can be decomposed further into ���Business Components��� and...

In my previous post .Net 2.0 Generics, Anonymous Methods, and Delegate inference bug I bemoaned the difference in behavior between anonymous methods and delegates. When using plain old event handlers, it is perfectly acceptable to subscribe and unsubscribe by doing the following: Commands.Open.Activated += new...