Unsafe random bit generation algorithms

ColdFusion Enterprise installation includes FIPS compliant RSA BSAFE JCE Crypto Provider. Default algorithm used by this library for random number generation is ECDRBG (A variant of Dual Elliptic Curve).  RSA has released an advisory regarding same (ESA-2013-068) listing unsafe random bit generation algorithms.  ColdFusion sets the default random number generator algorithm to FIPS186Random (JVM argument -Dcoldfusion.jsafe.defaultalgo=<algorithm>) which is completely safe to use.  So good news is by default your ColdFusion 10 installation is secure. Note that CrypotJ libraries are not […]

ColdFusion 10 Mandatory Update refreshed

We updated the ColdFusion 10 Mandatory Update bits on Nov 21, 2013. This has been done to implement certain internal changes in the code signing mechanism. Users who are on ColdFusion 10 Update 8 and above are not affected by this change. They need not reapply the Mandatory Udpate. Users on Update level 7 and below can follow this article to reapply the Mandatory Update. Users on a new ColdFusion 10 installation (build number 282482 or 283922)  should apply the Mandatory Update. Users […]

New Security Update Available for ColdFusion 9.0, 9.0.1, 9.0.2 and 10

New security update is available for coldfusion versions 9.0, 9.0.1, 9.0.2 and 10.0. This hotfix addresses the security issues specified in the technote here. Here is the link to the security bulletin for this hotfix. It also includes few important bug fixes for coldfusion 10 as specified here. We recommend locking down your server by following the lock down guide and disable unused features in the production environments. 

ColdFusion case study: ITRX Corp.

One of the world’s leading open-source research websites was experiencing performance issues because increasing volumes of data were taxing the system’s available memory. To solve the problem, the Social Science Research Network (SSRN) called on ITX Corp., an IT solutions provider. ITX rebuilt the site using Adobe ColdFusion, which helped eliminate memory problems, cut development times through the reuse of modularized code, and streamline SSRN’s web technology infrastructure.   “Not only did the upgrade to 64-bit Adobe Cold Fusion help […]

Thank you for making CFSummit 2013 a success!

I thank each of the 503 attendees for the overwhelming response and great feedback for the first ever ColdFusion conference from Adobe. The positive feedback post the conference on social media – Twitter, Facebook and the blogs has been really encouraging. We have also made note of some of the improvements that have been suggested and will work on those for a better CFSummit next year. The conference would not have been successful without the efforts from all the speakers. […]

CFSummit Mobile app for Android and iOS

I am pleased to let you know that there is a mobile app available for iOS and Android for the Adobe ColdFusion Summit happening in Vegas. Here is the link for the app on Google Play. And here’s the link for the app on iOS. The best part about this is app is that the entire app is built using the new Mobile features coming up in ColdFusion Splendor and ColdFusion Builder Thunder. The code for the app will be […]

ColdFusion: News and Updates from Adobe

Over the last few weeks there have been quite a few passionate discussions happening on ColdFusion. This post addresses those. 

Amazon Web Services Webinar – Leverage the power of Adobe ColdFusion on AWS

Amazon is organizing a webinar on the 18th of September at 10 am PT titled ‘Leverage the power of Adobe ColdFusion on AWS’. You can register for this AWS webinar here Learn about the AWS offering from, Tom Laszewski, Solutions Architect, Amazon Web Services Chandan Kumar, Computer Scientist, Adobe Akhila K. Srinivas, Software Engineer, Adobe  

ColdFusion Feature Usage Survey

Please participate in this ColdFusion feature usage survey. This is not a typical feature usage survey for ColdFusion. The purpose of this survey is to understand the usage of some of the old or not-so-popular features of ColdFusion. The information gathered here will help Adobe deprecate/retain/provide alternate features in the next major version of ColdFusion. Thanks for your time.

Adobe ColdFusion Summit – Last few places remaining for registration

We have received a great response so far for Adobe ColdFusion Summit happening in Las Vegas on the 24th and 25th of October. Speakers, the best from the ColdFusion community, and sessions have already been announced on the conference website. More sessions and speakers will be added in the coming days. If you are keen on attending the conference and are yet to register, please do it now as there are only last few places remaining for registration.  

Mac OS X 10.8.4 Java Update and ColdFusion Installers

Normal 0 false false false EN-IN X-NONE X-NONE MicrosoftInternetExplorer4 /* Style Definitions */ table.MsoNormalTable {mso-style-name:”Table Normal”; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-parent:””; mso-padding-alt:0cm 5.4pt 0cm 5.4pt; mso-para-margin:0cm; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:”Times New Roman”,”serif”;} Couldn’t Install ColdFusion on Mac OS X 10.8.4? There is a Java update (1.6.0 Update 51) for Mac OS X 10.8 and 10.7 around June 16th 2013. But unfortunately, there are issues with it. And so, any ColdFusion installers would have failed to launch if you try to […]

Price Reductions on Amazon EC2 Dedicated Instances

Amazon has recently announced price reductions on Amazon EC2 dedicated instances. Dedicated per region fee drops by 80%. Dedicated on-demand instance hourly price drops by 37% and dedicated reserve instance hourly price drops by 57%. This is could be relevant to those who are already using ColdFusion on AWS Marketplace or planning to use in future.