Pages

Saturday, January 15, 2011

Database.com: nice name, shame about the platform

Guest post When Salesforce.com announced its database-in-the-cloud service, Database.com, at Dreamforce last month, I suggested smaller PaaS vendors might get squished. Unsurprisingly, those who read my remarkswere none too pleased. Matt McAdams, CEO of TrackVia, was so incensed he sat down and wrote the following, which in the interests of balance, I’ve agreed to publish as a guest post.

Last month Salesforce.com announced its new cloud database service, called Database.com. Or rather, the vendor pre-announced it — it’s not actually available yet, and won’t be until an undisclosed date in 2011. When it is available, it will be a minor addition to the database-as-a-service (DaaS) market, but clearly inferior to other existing offerings.

If you dig beneath the PR spin and examine the technical details published at Database.com, you’ll realize this is not new technology. Rather, Salesforce.com is making the existing database that currently underlies its CRM and Force.com platforms accessible to subscribers who don’t have accounts on one of those two platforms. The target audience is programmers who want to build an application outside of Force.com, but want a hosted database.

Unfortunately, web application developers will find the idea of hosting their data outside their application platform severely unappealing. The reason is latency.

In any web application, when a user clicks a button in the web app, an HTTP or AJAX request is sent across the public Internet to wherever the app code is hosted. Salesforce.com suggests this could be in Google’s AppEngine, Microsoft’s Azure, or Amazon’s EC2, among others. The app code then consults the database to retrieve information, usually a half-dozen or more times, and the resulting HTML or JSON response is sent back across the public Internet to the user’s browser. If the database and the application code are in the same location, then only two public Internet traversals are required to complete the request. If the database and the application code are in different locations, then more than a dozen public Internet traversals are required to complete the request.

Since these traversals are usually the bulk of the wait time for any web app, the app built on Amazon but storing data in Database.com will run at perhaps one tenth the speed (that is, page loads will take ten times longer) than a web app whose code and data are collocated. It’s a non-starter.

The conclusion is, people building apps on Google, Amazon or Azure will use those platforms’ native, local database services. People who use Force.com (or VMForce or Heroku) will use Database.com, but they already do — there’s nothing new there.

Database.com will do better with developers of mobile apps, which contain the user interface and the app code in the same bundle. For mobile apps that need to store data remotely (for example to sync data across devices), Database.com won’t have a latency disadvantage over any other cloud DB. However, in this scenario, Database.com has a different, equally severe disadvantage: it doesn’t support structured query language, or SQL.

Despite the buzz the contrarian no-SQL movement has been getting, the fact is the vast majority of apps and app developers still use relational databases that support SQL. Database.com doesn’t, at least not without the purchase of third-party drivers. Nor does it support cross-table joins, a bread-and-butter query type for any non-trivial app. So Database.com is inferior to other DaaS offerings that do support SQL and joins, like Amazon’s Relational Database Service, FathomDB, or Xeround.

This doesn’t mean that Database.com is without anything innovative. The visual schema designer looks slick. Also cool is the integrated permission feature, in which a user ID can be included in a query, and the rows returned are automatically filtered to only include those the user should have permission to see. More puzzling is the feature that provides a social feed of data rows changed; this is technically cool, but the actual value of sending feed updates on a row-by-row basis from the database instead of from the application layer is a head-scratcher.

The bigger criticism applies to all DaaS offerings, and it’s this: they’re solving the wrong problem. Making databases more accessible to programmers who already know how to use databases is nice and all, but how about making databases more accessible to business users? Why not let non-programmers build web apps without writing code? To do this, Database.com would have to include things that Salesforce.com discloses explicitly are not part of the platform: page layout tools, reports, dashboards, and so on. These can be built with Force.com, but using Force.com requires programming knowledge.

It seems to me the more innovative cloud DB players are the companies providing a cloud database with a complete, integrated app development platform that requires no coding, only point-and-click configuration. These platforms, like TrackVia (the author’s company) or Intuit’s QuickBase, are doing more to change how cloud apps get built than the better-known DaaS vendors are.

In summary, Database.com promises a few interesting features, but it’s hard to see why it’s a better platform than existing offerings. It’s certainly not going to put Oracle out of business. The best part may be the domain name.

Redbox: Scaling down financial estimates doesn't change bullish outlook

Wall Street is keeping closer tabs on Coinstar, the company behind the RedBox DVD kiosks, after the company said that it would miss its Q4 and 2011 forecasts when it reports earnings later this month.

In a statement issued yesterday, the company put the blame on three miscues:

  • The company expected better results from the holiday releases
  • The demand for new releases never really materialized
  • Customers used the company’s “rent and return anywhere” service to heart, creating “temporary imbalances in available titles across the kiosk network.”

In other words, there was some pretty poor planning on the management side.

That’s one of the reasons that Wall Street remains bullish on Coinstar today, according to analyst notes highlighted on Barron’s Tech Trader Daily blog. This isn’t a case of the business model suddenly crumbling. This is a case of Coinstar making some bad business decisions. In a statement, Coinstar CEO Paul Davis said:

We have already taken a number of decisive steps to better align content purchases with our consumers’ behavior, including offering more day and date titles and better allocating Blu-ray titles to high demand areas. In addition, since inventory migration reflects the popularity of our rent and return anywhere capability, we have made adjustments in our field processes to minimize the impact of higher levels of migration on overall rentals. While some measures such as changes in purchasing take longer to impact financial performance, early results give us confidence that we have begun taking the right steps to address these issues and position the business for further success.

The positive outlook for the business model is helping to maintain a bullish outlook for analyst. Wedbush Securities analyst David Pachter, for example, reiterated his Outperform rating and said he thinks the miss for Q4 was due to “overly aggressive guidance.”

Piper Jaffray’s Michael Olson also saw the miss as a “function of inventory management, also noting that “the real question is whether the DVD kiosk story is over, and our take is that kiosks will continue to gain share over the next couple of years.”

Until streaming models take over in the new world of Connected TV, DVD rentals will continue to be a brisk business, especially for those without the overhead of brick-and-mortar locations and employees to staff those stores.

MSI rolls out four new F Series laptops; Intel Core CPUs, THX TruStudio sound

MSI recently introduced new laptops from its F Series at CES 2011, and now we have four new models to look over from the same collection.

All four of these new notebooks sport an anti-fingerprint texture, THX TruStudio Pro Surround Sound technology, and MSI’s signature Turbo Boost Drive for improved speed and performance in gaming, video playback and more.

Here’s a breakdown on the rest of the specs:

FX700

  • 17.3-inch display
  • Intel Core i5-480 processor
  • NVIDIA GeForce GT425M graphics card with DDR3 1G VRAM
  • NVIDIA PhysX, NVIDIA 3D Vision, and NVIDIA Optimus technologies
  • Dynaudio premium sound technology
  • Two USB 3.0 ports

FX603

  • 15.6-inch display
  • Intel Core i5-480 processor
  • NVIDIA GeForce GT425M graphics card with DDR3 1G VRAM
  • NVIDIA PhysX, NVIDIA 3D Vision, and NVIDIA Optimus technologies
  • Dynaudio premium sound technology
  • Two USB 3.0 ports

FX400-062US

  • 14-inch display
  • Intel Core i5-480 processor
  • NVIDIA GeForce GT325M graphics card
  • MSI Power eSATA ports

FX400-063US

  • 14-inch display
  • Intel Core i3-380 processor
  • NVIDIA GeForce GT325M graphics card
  • MSI Power eSATA ports

Pricing ranges from $849.99 – $1,049.99. The FX400-063US, the FX400-062US, and the FX603-019US are all available from Newegg and Amazon, while the FX700 is being sold exclusively by MSI Mobile.

Virginia based CSC outbids HCL for $600 Million ArcelorMittal IT deal

In a deal considered as one of Europe’s biggest IT contracts, steel conglomerate ArcelorMittal will be upgrading their IT infrastructure. Priced at $600 Million, the 5 year contract to consolidate the steel giant’s IT systems across Europe was closely competed.

Global heavyweights in the field such as IBM, HP, Capgemini were bidding along with Computer Science Corporation (CSC), Wipro and HCL. Earlier rumors placed Wipro as the front runner since Wipro was already in a 5 year contract with ArcelorMittal working on unifying their messaging systems. However, it came down to HCL and CSC in the end with CSC outbidding HCL.

CSC has close to 25,000 employees in India and quite a bit of the new ArcelorMittal contract is expected to be done in India. CEO of Outsourcing and Investment advisory firm Tholons, Avinash Vashishtha gave a few reasons as to why CSC is a better choice for Arcelor Mittal:

  • CSC’s presence in Europe helps them navigate through the outsourcing laws which HCL cannot.
  • CSC will be able to provide packaged solutions for applications development whereas HCL will have to develop applications specifically for ArcelorMittal.

According to Avinash Vashishtha, it will cost CSC less compared to HCL for deploying these systems. As part of the contract, CSC will be maintaining ArcelorMittal’s data centers to increase efficiency. ArcelorMittal is expected to reduce costs by upto 20-30% once the systems are in place.

Google pays $14,000 for high-risk Chrome security holes

Google has shelled out more than $14,000 in rewards for critical and high-risk vulnerabilities affecting its flagship Chrome web browser.

The latest Google Chrome 8.0.552.237, available for all platforms, patches a total of 16 documented vulnerabilties, including one critical bug for which Google paid the first elite $3133.7 award to researcher Sergey Glazunov.

“Critical bugs are harder to come by in Chrome, but Sergey has done it,” says Google’s Jerome Kersey. “Sergey also collects a $1337 reward and several other rewards at the same time, so congratulations Sergey!,” he added.

Here are the details on the latest Chrome patch batch.

  • [58053] Medium Risk: Browser crash in extensions notification handling. Credit to Eric Roman of the Chromium development community.
  • [$1337] [65764] High Risk: Bad pointer handling in node iteration.Credit to Sergey Glazunov.
  • [66334] High Crashes when printing multi-page PDFs. Credit to Google Chrome Security Team (Chris Evans).
  • [$1000] [66560] High Risk: Stale pointer with CSS + canvas. Credit to Sergey Glazunov.
  • [$500] [66748] High Risk: Stale pointer with CSS + cursors. Credit to Jan ToÅ¡ovský.
  • [67100] High Risk: Use after free in PDF page handling. Credit to Google Chrome Security Team (Chris Evans).
  • [$1000] [67208] High Risk: Stack corruption after PDF out-of-memory condition. Credit to Jared Allar of CERT.
  • [$1000] [67303] High Bad memory access with mismatched video frame sizes. Credit to Aki Helin of OUSPG; plus independent discovery by Google Chrome Security Team (SkyLined) and David Warren of CERT.
  • [$500] [67363] High Risk: Stale pointer with SVG use element.Credited anonymously; plus indepdent discovery by miaubiz.
  • [$1000] [67393] Medium Risk: Uninitialized pointer in the browser triggered by rogue extension. Credit to kuzzcc.
  • [$1000] [68115] High Risk: Vorbis decoder buffer overflows. Credit to David Warren of CERT.
  • [$1000] [68170] High Risk: Buffer overflow in PDF shading. Credit to Aki Helin of OUSPG.
  • [$1000] [68178] High Risk: Bad cast in anchor handling. Credit to Sergey Glazunov.
  • [$1000] [68181] High Risk: Bad cast in video handling. Credit to Sergey Glazunov.
  • [$1000] [68439] High Risk: Stale rendering node after DOM node removal. Credit to Martin Barbella; plus independent discovery by Google Chrome Security Team (SkyLined).
  • [$3133.7] [68666] Critical: Stale pointer in speech handling. Credit to Sergey Glazunov.
Google is withholding technical details on the vulnerabilities until the patches are released to its users. Google ships updates via the browser’s silent/automatic update mechanism.
 

Total Pageviews