Noutați

Introducing TMS WEB Core for Visual Studio Code 1.3

We are on the verge of rolling out the first beta of the next milestone of our TMS WEB Core for Visual Studio Code product. This is the version v1.3 and along all TMS WEB Core framework enhancements that will come in TMS WEB Core for Delphi 1.7, the new release v1.3 will introduce the major new feature that is package support. Learn all about in in our upcoming free webinar! Package support comes to TMS WEB Core for Visual Studio Code Package support is what will enable software developers to install packages containing component code for install of components for design-time use. While it is perfectly possible to use custom components with the current release of TMS WEB Core for Visual Studio Code, it was restricted to use these components at runtime. So, developers had to create and instantiate classes of components in code. With the new release, we will bring the RAD experience also for custom components. You write your custom component, add its source code to a package and then compile and install the package in the IDE. After this step, the registered component classes are added on the tool palette and can be dragged on the form designer and can be customized visually by changing properties via the object inspector. Our architect of TMS WEB Core for Visual Studio Code created this video for you to explain this: FNC comes to TMS WEB Core for Visual Studio Code Yes, the exciting news is not just that you can now add custom components for design-time use in TMS WEB Core for Visual Studio Code, but also that the entire range of TMS FNC components becomes available for use with TMS WEB Core for Visual Studio. We lost count of the total number of FNC components but this must meanwhile be approaching 300 or perhaps more. So yes, you will be able to install into TMS WEB Core for Visual Studio Code and use all of these components for creating classic web client applications, PWA’s (Progressive Web Applications) or Electron based cross-platform desktop apps* for Windows, macOS and Linux. And of course, you will be able to develop these applications from a Windows, macOS or Linux machine as the Visual Studio Code IDE is at home on these operating systems and so will be our FNC components. Opening, compiling & installing the package from the IDE List, add & remove component packages in the IDE Components on the tool palette and use the FNC components on the designer * Note that our Miletus technology for creating cross-platform desktop apps that will come in TMS WEB Core for Delphi 1.7, is scheduled for TMS WEB Core for Visual Studio Code v1.4 and will at that point also offer Windows, macOS and Linux support for and from these three operating systems. Join our upcoming free webinar Interested in learning all about the new version v1.3? We have a free webinar coming up for you via our platform TMS Web Academy (built with TMS WEB Core for Visual Studio Code by the way) and we have as host our chief architect José Leon Serna assisted by Bruno Fierens. Register now for this free webinar and be first to learn everything about component creation from TMS WEB Core for Visual Studio Code.

Read More

Securing Cloud Access in Applications

Published March 31, 2021 WRITTEN BY ED TITTEL. Ed Tittel is a long-time IT industry writer and consultant who specializes in matters of networking, security, and Web technologies. For a copy of his resume, a list of publications, his personal blog, and more, please visit www.edtittel.com or follow @EdTittel As applications become increasingly cloud-based – or even, cloud-native – more and more such code is sending data to and from cloud-based stores, both public and private. This makes the methods and controls that such applications use to access the cloud of particular interest. It also keeps the onus on application owners to protect and preserve application data, particularly when it involves information subject to compliance and regulatory requirements. That brings a host of other concerns into play that range from preserving privacy and confidentiality to the “right to be forgotten” (a GDPR requirement that obliges organizations to dispose of data about any registered individuals within 30 days of request for same, or face fines and penalties). Pass the Data, But Not the Buck Indeed, organizations must realize and own up to their responsibility for data, even when it leaves their hands and goes into the cloud. At best, the cloud service provider will assume a “shared responsibility” for an organization’s data once it hits their servers or data stores. But always, the organization that acquires (and presumably controls and protects) such data remains legally responsible for its privacy, confidentiality, and disclosures of breach, theft, or unwanted access or disclosure. Thus, organizations that use cloud platforms should thoroughly understand the provider’s security capabilities, and any data protection (such as encryption, access control and audit, and so forth) that the provider offers, and what responsibility and liability it assumes for data and applications that run within its systems. Best Security Practices for Cloud Access For cloud-consuming organizations, that’s just the beginning. Best security practices also insist that organizations implement the following principles where access to cloud applications, data, configurations, and resource consumption are concerned: Apply the Principle of Least Privilege (PLP): all access should be set to “deny” by default and only so much access allowed for authorized parties as they need to use an application (ordinary users) or administer the organization’s cloud environments and settings (and all admin level access should be logged, and routinely audited, especially use of privilege, account management, configuration and set-up of applications and data stores, and so forth). Use strong authentication, 2FA or better: Ideally, all access to cloud-based applications and data should require jumping demanding hurdles before access requests get granted. At a minimum, ordinary users should be required to use two-factor authentication (2FA: cellphone or email confirmation of one-time pads). Higher-level access, should probably use multi-factor authentication that includes something beyond 2FA, such as a certificate, smart token device, biometric data (fingerprint, facial scan, and so on), or be tied to a specific admin workstation’s MAC address. Encryption for data in motion and at rest: By default, organizations should turn on and use the strongest encryption they can employ without unduly affecting data access and/or application performance. Data should also be encrypted wherever it’s stored, both at endpoints when used on the client side, and in data stores when in use by an application or truly at idle rest (active or multi-tiered storage repositories). […]

Read More

Getting Ahead of Payment Card Security Threats

Published April 08, 2021 WRITTEN BY MICHAEL SOLOMON Michael G. Solomon, PhD, CISSP, PMP, CISM, PenTest+, is a security, privacy, blockchain, and data science author, consultant, educator and speaker who specializes in leading organizations toward achieving and maintaining compliant and secure IT environments. Payment card attacks are nothing new. Cybercriminals have been targeting payment cards for more than a decade. However, there is a disturbing trend of cybercriminals discovering and leveraging novel ways to steal payment cards credentials during online transactions. Online merchants have long espoused techniques that make online commerce safe, but that assurance is under a new level of attack. Recent advances in payment card attack sophistication up the game for cybersecurity professionals. Protecting online commerce is always challenging, but it can be rewarding and effective. Let’s look at a few ways to stay at least one step ahead of emerging payment card threats. Understanding payment card threats Using someone else’s payment card to steal funds is an attack that has existed as long as payment cards. In the beginning, merchants would use a mechanical device to make an impression of the raised payment card numbers into a set of carbon-copied transaction records. The customer would sign the record and take one copy. A second copy would stay with the merchant, and a third copy would go to a payment processor to settle the payment. The early process was simple, and when the device that created payment card impressions would fail, vigorously rubbing a pen or pencil body over the card would transfer the image to the transaction record. In those days, if you could grab a payment card number and forge the owner’s signature, you could create fraudulent transactions. When online transactions started to become more prevalent, signatures became less important; all cybercriminals needed were elements of a payment card holder’s basic information, such as card number, name and billing address. Intercepting credit card numbers wasn’t very difficult, since encryption wasn’t the norm prior to the early 2000s. But it didn’t take long for the payment card industry to recognize the growing threat to transactions. Several of the biggest payment card industry vendors, including Visa, MasterCard, American Express, JCB International and Discover, joined forces to develop the Payment Card Industry Data Security Standard (PCI DSS). One of the many requirements of the PCI DSS is that all transmissions involving payment card data (and subsequent storage) must be encrypted. PCI DSS increased security and upped the ante for payment card attacks, so the cybercriminals upped their game as well. Now we see a wide range of attacks that focus on intercepting, or skimming, payment card numbers and related data prior to any encryption efforts. The general idea for today’s attacks is to find creative ways to push the attack closer to the point of payment card number acquisition. In the physical world, this led to portable and stealthy physical card skimmers. Card skimmers work by replacing a valid card reader with a device that reads the credit card data and then sends it to an attacker’s preferred repository. Sophisticated skimmers pass the data through to the intended destination to remain undetected for as long as possible. As small battery-powered skimmers became popular, unscrupulous servers at some restaurants began skimming cards with pocket skimmers before processing payment cards properly. (Of […]

Read More

Developer Stories: Themba Sivate Talks About The ST Auto Player Lite Software

Themba Sivate has been a Delphi programmer since 2012. He introduced his application (ST Audio Player Lite) at the Delphi 26th Showcase Challenge and we got to converse with him to have an insight on his Delphi expertise. Find out more about his software at ST Software When did you start using RAD Studio/Delphi and have long have you been using it? I started using RAD Studio on 2012 at University. A year later, I started to learning building applications from scratch using C++ builder installed on institution’s machines, until today. What was it like building software before you had RAD Studio/Delphi? I tried both QT Creator and visual studio before, and it was a pain and limitations too. Rad Studio will let you call Delphi code within C++. Meaning you can reuse Delphi libraries on c++, How did RAD Studio/Delphi help you create your showcase application? RAD Studio is easy to use, simplified drag and drop, simplified packaging. It help me to complete my audio player in less time. What made RAD Studio/Delphi stand out from other options? Easy to use, backwards compatibility, tons of libraries/components, simplified drag and drop, cross-platform outputs. What made you happiest about working with RAD Studio/Delphi? Less development time. Good database handling and development. Its sad that the I cant afford the license at this stage, but I’d be happy to build the list of applications I had on my mind which requires a paid version of RAD Studio. What have you been able to achieve through using RAD Studio/Delphi to create your showcase application? Debugging was pretty easy and straight forward. Most can be achieved by modifying values of the properties, without writing a line code. What are some future plans for your showcase application? I’m planning to upload it on windows store. Future releases are planned and bug fixes. Also planned to support multiple languages. Thank you, Themba! You can check out his software’s showcase entry below. Showcase

Read More

How To Make An Epic Dashboard Visualization For Windows, Mobile And The Web The Easy Way

Dashboards, a graphical visualization of data, seem to be everywhere, especially in these pandemic times where daily and weekly trends take on a very personal significance. In this article we are going to look at a beautiful dashboard which you can very easily customize to suit your own needs. Visualization is the art of making the useful, beautiful. There is only so far you can get with tables of facts and figures. Sooner or later there comes a time when you will need to create a graphical visualization of your data. Pictures really do save a thousand words, but they also help your users get a grasp of the information in a more easily consumed way. Most Delphi programmers are probably familiar with the basic TChart component which has been bundled with nearly every version of Delphi. For more recent versions of RAD Studio such as Sidney, you had to tick an optional checkbox to get the TChart component to appear on your component palette. That bundled version of the TChart component is provided by Steema Software based in Spain. The dashboard we are writing about here is also produced by Steema to demonstrate the power of their Pro versions of TeeChart as well as their TeeGrid. More on that in a moment. What does the dashboard visualization look like? It’s beautiful! Where can you get the dashboard visualization? The great news is the Steema dashboard example is freely available for download from GitHub here: https://github.com/Steema/TeeChart-FireMonkey-samples/tree/master/Dashboard I used the cross-platform GitHub desktop project to download the sample directly from the repository. What components do you need? To work with Steema’s dashboard visualization example you’re going to need a copy of their Pro TeeChart component. This is NOT the same as the bundled version. In fact, if you have the bundled version installed you will need to completely uninstall it first because it will clash with the Pro version. You will also need to install Steema’s TeeGrid component too. What if I don’t have the TeeChart Pro or TeeGrid component packs? Not a problem – Steema’s website has a download for a fully functional 30-day trial of both component libraries. I used the trial versions to write this article and they worked without any problems. Go to this link to download them: https://www.steema.com/product/vcl Just make sure you uninstall the bundled version of TeeChart that came with RAD Studio FIRST because I didn’t remember and got myself into a bit of tangle. If that happens to you, uninstall both the new component packs using their uninstaller. Then go into the IDE, select “component” from the menu, then “install packages”. Now scroll down and make sure all references to the TeeChart and TeeGrid components are gone. Click on any that are there, and then “remove”. Now close the IDE and install the TeeChart Pro and TeeGrid components using their installers, and all will be well. I make these mistakes, so you don’t have to! What does the dashboard visualization do? Well, the source code reads from an included SQLite database. Almost all the data retrieval is done using LiveBindings. All the data access components use the FireDAC query components. There are a few areas in the program where the data is read and manipulated in code but overall, it’s nearly all the LiveBindings […]

Read More

Powerful Real-Time Retail Dashboard App is Powered by Delphi

RunIt Pulse mobile app provides owners and managers of retail chains with a real-time “on-the-go” dashboard and it’s made possible by the perfect partnership of Delphi coupled with developer skill.  This powerful and featured-packed app allows them to view critical, real-time metrics about their stores.  Written by Run It Systems based in New York, the app is available on just about any kind of hardware users might need including Windows, maxOS, iOS and Android. Also, Run It targets a number of different types of hardware too not only desktops and laptops but also tablets and mobile phones.  In fact, wherever Run It’s users are or whatever they are doing they can have a retail dashboard at their fingertips updated in real-time. RunIt Systems Website What sort of real-time data can RunIt Pulse display? RunIt Systems tell us the real-time RunIt Pulse allows the user to view: The latest sales statistics, broken down by store Number of receipts, voids etc. Top selling items, including on-hand and on-order Sales results by employee Sales trending graphs Google Play RunIt Pulse Apple App Store ‎RunIt Pulse on the App Store Screenshot Gallery Reduce development time and get to market faster with RAD Studio, Delphi, or C++Builder. Design. Code. Compile. Deploy.Start Free Trial   Upgrade Today    Free Delphi Community Edition   Free C++Builder Community Edition

Read More

Developer Stories: Jarrod Davis Speaks Of His GameVision Toolkit Application

Jarrod Davis has been using Delphi ever since Turbo Pascal 3.03. He registered his application (GameVision Toolkit) to the Delphi 26th Showcase Challenge and asked for his thoughts on using Delphi. More information of his application is on GameVision. When did you start using RAD Studio/Delphi and have long have you been using it? I have use every version starting with Turbo Pascal 3.03 back in the day through to the most recent version of Delphi What was it like building software before you had RAD Studio/Delphi? I’ve always used Object Pascal/Delphi, but in those times when I had to use a different development tool for whatever reason, I was never nearly as productive as I am using Delphi. How did RAD Studio/Delphi help you create your showcase application? I was able to take advantage of my knowledge using Delphi, source code, utilities and libraries I have accumulated over the years. What made RAD Studio/Delphi stand out from other options? Object Pascal is just a nice and expressive language for me and the Delphi IDE has all the features for rapid application development What made you happiest about working with RAD Studio/Delphi? Ease of use, rapid application development. Everything “just works.” What have you been able to achieve through using RAD Studio/Delphi to create your showcase application? Take my version 1.x and add all the features I had been planning in a impressively short period of time. What are some future plans for your showcase application? Continue to improve and add features. Thank you, Jarrod! The showcase entry for his software can be found below. Showcase

Read More

Developer Stories: Manuel Lopez Shares More About His Portraits With Craps Application

Manuel Lopez started using Delphi in 1997. He presented a showcase entry (A Fantastic Portrait Program From Craps Dice Is Made With Delphi) into the Delphi 26th Showcase Challenge and we talked to him about his Delphi mastery. More of his application Portraits With Craps on his website. When did you start using RAD Studio/Delphi and have long have you been using it? I started using Delphi from the version, which was presented in 1995 in Orlando, Florida, at the Borland conference at that time. Over time I used versions 2, 3, 4, 5, 6 and 7, the latter being the best in my opinion. There were new versions but I did not test them. I got funding for an academic project and bought the Seattle version. Without a doubt, the development and evolution of Delphi represents an extraordinary work. Being able to program with practically the same code for Linux, Mac Os, Pc and Android makes it, in my opinion, one of the best RAD development tools. I had the opportunity to go to more than one Borland convention. There I met David I, one of Delphi’s most enthusiastic programmers. Later, I even had the opportunity to interview Anders Heilsberg, the creator of Turbo Pascal and the Delphi compiler. What was it like building software before you had RAD Studio/Delphi? The idea of visual and non-visual components makes programming much more effective. The fact of dedicating more to solving the problem that we have already using components that do the routine tasks, is without a doubt one of the most attractive things about Delphi. In addition, for years Delphi has maintained the open source philosophy and there is a lot of source code, components and tools, which can be used very easily. For my PhD thesis I developed a program that uses a series of open source components that solves a significant number of problems for the results I needed to obtain. How did RAD Studio/Delphi help you create your showcase application? Portraits using Craps is a program that creates images with dice. In May 2020, I wrote about a dice image created by cyber artist Barbara Lynn Helman. Apparently the creator put the dice according to the shade of gray that she visually found in each bit of the image. The photographs he submitted seem to indicate this. However, visually making a box made with dice like this would have been too complicated a task and probably too easy to make mistakes. I want to assume that Barbara used some program that told her which die to put in which position. This would be, in any case, the smart way to do this task. So I wrote a program that precisely generates images with dice, like the ones Miss Lynn Herman does. In fact, the program is a modified version of other software that I wrote (for a Digital Image Processing university course), which allows making images with halftones, which seeks to simulate shades of gray for printing black and white photographs (see Computer Graphics. Principles and Practice in C, James D. Foley, Andries van Dam, Steven K. Feiner, John F. Hughes, Addison-Wesley, 1995; chapter 13.1.2 Halftone Approximation). I quickly got a program that generated the final images, putting virtual dice (dice images), instead of putting real dice on a […]

Read More

Easily Deploy RAD Server With Windows And Linux Installers

I have been showing complete, industry-ready solutions built with RAD Server. For instance, the Field Services Industry template contains REST endpoints which the Field Service Admin and Field Service App connect to. It uses InterBase on the backend for its database storage.  Or the Hospitality Industry template that includes a mobile client application for collecting survey data, a back-end server to store data and administer surveys, and a web client for viewing survey data. Includes RAD Server multi-tenancy support. To easily deploy your solutions, Embarcadero Technologies provides ready-to-use installers to deploy RAD Server on Linux and Windows servers. How can I install easily RAD Server on Windows and Linux? Be sure to head over and check out the RAD Server Windows & Linux installers on the GetIt portal and download them in the IDE!

Read More

Easily Perform Powerful Text Analysis With Google Machine Learning

Google Cloud offers a Natural Language API which allows a developer to take unstructured text as an input and utilize Google’s machine learning capabilities to derive insight from it. They have a number of different operations that can be performed on a piece of text including syntax analysis, entity analysis, custom entity extraction, sentiment analysis, custom sentiment analysis, content classification, custom content classification, custom models, and spatial structure understanding. The Google Natural Language APIs feature multi-language support, large dataset support, and give you access to Google’s AutoML models. RAD Studio and Delphi gives you easy access to all of this Natural Language processing capability via Google’s REST API. RAD Studio includes a tool called the REST Debugger where you can configure all of your REST API settings and then export them as components into your Delphi application. This includes wiring up the incoming data automatically to an in memory database table (TFDMemTable). It literally takes only a few minutes to get up and running with Google Cloud’s powerful Natural Language API from within Delphi and RAD Studio. Additionally, the application built and the source code available at the end of this blog post uses Delphi’s cross-platform/multi-platform FireMonkey framework which supports Windows, Linux, macOS, Android, and iOS with a single codebase and single responsive UI. Let’s dive into the Google Cloud Natural Language API and how to build a desktop and mobile application utilizing it’s REST API. What can I do with the Google Cloud Natural Language API? On Google’s website the full REST reference for the Natural Language API is available. Here are the different endpoints available in the API: analyzeEntities POST /v1beta2/documents:analyzeEntities analyzeEntitySentiment POST /v1beta2/documents:analyzeEntitySentiment analyzeSentiment POST /v1beta2/documents:analyzeSentiment analyzeSyntax POST /v1beta2/documents:analyzeSyntax annotateText POST /v1beta2/documents:annotateText classifyText POST /v1beta2/documents:classifyText How can I set up the Natural Language API credentials? An API key is needed in order to use the above REST APIs. You will need to visit the following URL which will walk you through creating a project and enabled the Natural Language API on your Google Cloud account. https://cloud.google.com/natural-language/docs/quickstart-client-libraries Once you have the Natural Language API enabled on your account you can visit the Credentials page to create an API Key. https://console.cloud.google.com/apis/credentials How do I connect to the Google Cloud Natural Language API REST end point with Delphi? I built a sample application in Delphi using the REST Debugger which utilizes the analyzeEntities end point. There is also a video tutorial for using the RAD Studio REST Debugger available to automatically create the REST components and paste them into your app. The analyzeEntiries endpoint breaks down the content of the text into entities that are contained within Google’s machine learning database. Entities have their own id (called mid), a type classification (like ‘ORGANIZATION’), and contain additional meta data like a Wikipedia URL and the like to provide context to that entity. Here are the three components in Delphi that make the API call. They are the TRESTClient, TRESTRequest, and TRESTResponse. You will notice that the API URL is set on the BaseURL of TRESTClient. On the TRESTRequest component you will see that the request type is set to rmPOST, the ContentType is set to ctAPPLICATION_JSON, and that it contains one request body for the POST which is set to: You will also notice that on the TRESTResponse component the RootElement […]

Read More