|By Derek Ferguson||
|August 10, 2004 12:00 AM EDT||
.NETDJ: What is your official title and department?
Don Box: I am an architect in the Distributed Systems Group. I am responsible for the protocols and the plumbing that we do in that group. I'm on an architecture team, so the responsibility is distributed, but basically five other architects and I work on the WS-* protocols, Indigo, and the stuff that leads up to Indigo, such as work on ASMX and Web Services Enhancements (WSE).
.NETDJ: How did you get started in computer technologies?
DB: I started programming in 1983 as an undergraduate math student. After that, I went to graduate school, then started a company and had a ton of fun in the 1990s doing COM. In 2001, I decided to get a real job so I came to Microsoft. At the ripe old age of 39, I had my first HR review (where I was on the receiving side). It was pretty wild, actually.
.NETDJ: Tell us about founding your company.
DB: Let's see - a good friend of mine, Andrew Harrison, was teaching at University of California (UC) Irvine Extension. He was the TA in all of the hardest theory classes and the smartest guy I knew at UC Irvine. Andrew made teaching seem both easy and fun, so I talked to him about it and we wrote a class together. After teaching it at Oregon Graduate Institute (OGI), I said "Wow - this is a very easy and fun way to make money, so maybe I'll start a company." And then I brought in my grad student cronies and the rest is history.
.NETDJ: What was your first class?
DB: Essential Windows was our first class in 1994. In that same year, I wrote the Essential COM class. August 8 was the first day I delivered that class. I remember it vividly because that was the day I figured out COM. Prior to that, I was able to make things work and I knew a lot of facts, but I had no insight and no intuitive understanding. In August, I was in Oregon teaching my first Essential COM class to a packed room of 24 people. It was in the first lecture that I made the connection between dynamic_cast and QueryInterface and that was when it all became obvious.
I taught COM for a good two years before I seriously entertained writing a book, and then it took two years to write.
.NETDJ: That book, Essential COM (Addison-Wesley), was released in 1998, then. Can you tell us about writing that book?
DB: When I tried to figure COM out, there was nothing to guide me. There was a Brockshmidt book that was decent and the Dale Rogersson book - which is a very "how" oriented book, but nothing really ever spoke to me as to what the real principles were. I figured it out in 1994 and traveled the world telling the story with Chris Sells, Tim Ewald, and Keith Brown. Over time, the story crystallized and the book spoke to people.
.NETDJ: What about David Chappell's book on COM - wasn't that out then?
DB: Chappell's book came out a little before mine, although mine was already "in the can" when his book was done. I remember he sent me a copy from the first batch and he put a note in it that there wasn't one line of code in the whole book. While his book was excellent and I recommend it as the prerequisite to reading my book, it doesn't help you really to understand it from a programmer's view. For most software engineers, it won't directly answer the question, "How does COM relate to me?" Even though I'm an architect and I do think about very broad issues, at the end of the day someone has to write a program and I'm fortunate to stay grounded at that level - even though I'm in my advanced years with a high falutin' title.
.NETDJ: Tell us about your first experiences with Web services? How did you come to be involved in the standardization of SOAP?
DB: Back in 1995, Microsoft wanted to see Distributed COM (DCOM) everywhere. They had contracted with Software AG to do COM on Unix - and Microsoft recommended that they get me to help them. I worked in Germany for a while and we basically did it by emulating NT on Unix and because of that, it wasn't a smashing success. Microsoft had hoped that that would be the big thing that brought everyone together, but the engineering didn't work out.
In 1997, Bob Atkinson and Mohsen Al Goshein of Microsoft had decided to go off and try RPC using XML. Dave Reed, the general manager of COM at the time, said that they should get me because I know platforms and so they brought me and Dave Winer to Microsoft to write the first SOAP specification in March of 1998. We wrote it in two days. The three of us worked on the first SOAP specification and within a couple of weeks we had Interop working between COM and Java.
.NETDJ: Tell us about leaving DevelopMentor to go to Microsoft.
DB: Keith Brown, Chris Sells, and I were visiting Microsoft. Someone wanted us to meet with someone who was working on Web services in late 2001. All the .NET stuff was in late beta at that point, but we'd already published the SOAP specification and I knew how the Web services stuff all worked. I met with Mark Lucovsky and Mark Burner from the Hailstorm team and I also met with Robert Wahbe, John Shewchuk, and Andrew Layman of the Indigo team.
I had some very interesting conversations with the Hailstorm guys, but there was something about what the Indigo folks were working on - basically that they were going to take the idea of XML-based messaging and make it as ubiquitous as possible. I asked them how widespread they were going to make it and they said, "How far do you want to go?" That was the moment when I decided.
At that point in time, I was in the process of trying to separate myself from my then-partner at Develop Mentor and was trying to figure out what the next decade of my life would look like. When I saw Indigo, I knew I had found my new tribe, so things got remarkably clear after that. There was a Microsoft Professional Developers Conference (PDC) shortly after that and I sat down with Eric Rudder in Los Angeles and I came up and interviewed with the folks on the Indigo team and that was it. We loaded up the truck and moved to Bellevue (Washington, that is).
.NETDJ: I'm perfectly happy using ASMX for Web services - why should I care about Indigo?
DB: ASMX is the closest to "the truth" of all our shipping technologies for distributed computing. If you are doing service-oriented programming, ASMX is the easiest to use and the most likely to keep you on the straight and narrow. You have to work harder to do the wrong thing. .NET remoting is more unbounded and happily allows you to do both right and wrong things with equal ease.
There is nothing wrong with ASMX. It has some limitations. One of the limitations is that the current implementation is bound to ASP.NET and pragmatically, that means it is really about working over HTTP. It can work over other transports, but there is no easy way to do that...some assembly is required. So, as people want to use other transports, ASMX won't be enough.
ASMX also has a very coarse-grained extensibility model. SOAP Extensions allow you to replace pieces of the plumbing, but only with a very coarse-grained tool. If I want to see the actual bits as they go in or come out, or the stack frame, there are integration points exposed for this. However, if I want to see the intermediate XML, I have a lot of work to do. For example, Web Services Enhancements (WSE), has to do some fairly obscure back-flips in order to fit into this model and to do XML-based processing. The ASMX/WSE user doesn't see this, but it's definitely more work for us than it should have been.
.NETDJ: So, how will Indigo be better than WSE 2.0?
DB: WSE 2.0 brings end-to-end security to the current ASMX code base, but it has to do some rather "interesting" engineering to make that happen. Since we built Indigo from the ground up with XML messaging as "the thing" it is a lot easier to plumb.
There are a lot of implementation choices in ASMX we wouldn't make again. For example, there is a high reliance on code generation under ASMX. If you look at Indigo, we don't do code generation - we let the runtime do stack-to-message translations.
Indigo will still support the [WebMethod] attribute and friends if developers want to use the old names. There is a compatibility namespace so that the right namespaces are in scope and we will support most of the current attributes out of the box. If you want to think of Indigo as just a new implementation of the Web services plumbing, go ahead - there is a class of developers who will just do this.
.NETDJ: So, is Indigo mainly for SOA, then?
DB: It is very obvious how to do service-oriented development with ASMX - you don't need Indigo for that. What Indigo enables is if you want to do more advanced messaging - such as rich support for intermediaries and end-to-end security. Indigo is a great solution if you want integration with our transactional plumbing.
.NETDJ: I happened to see you performing with Band on the Runtime at the PDC last October (2003) in Los Angeles. What can you tell us about that?
DB: Ted Pattison, David Chappell ,and I are all friends and David had suggested playing music together in the past, as had Ted. We did a conference in San Francisco where we said, "Let's do some Filk" - which is the art of taking popular songs and rewriting the lyrics to be about something else. Any time the three of us would be at a conference together, we'd try to put the band together and play a gig.
.NETDJ: I especially liked your song Miguel - a Filk version of the Beatles' Michelle about Ximian's Miguel de Icaza, no?
DB: Yes it is. The song was really a recruiting tune, as I think Miguel should work at Microsoft. He's got a lot of energy and a lot of creativity, and I think he would have an excellent time working at "the Firm." I think it would be good for him and good for us.
.NETDJ: While we're on the topic of music, Jeff Richter told us a few months ago that you are a Progressive Rock fan. Who are your favorite artists?
DB: Jeff and I went to see King Crimson last time they were in Seattle. Jeff is much more fanatical about it than I am. I like the stuff - I have a lot of CDs and had a lot of vinyl back in the day, but Jeff is...I don't know anyone as fanatical about a kind of music as Jeff!
.NETDJ: What are your thoughts on Tech Ed this year?
DB: I've been giving my talks. I had an extremely fun time giving the devices talk. Those guys have some fun technology that I like to play with. And I got to show my COM underwear on the wolf vision projector.
.NETDJ: Yes, I saw that! Where, exactly, does one even buy COM underwear?
DB: COM underwear is a collector's item. We probably made several thousand pairs back in the day and I peeled 14 off one of the shipments to take home. For a while, that was the only underwear I wore. For years of my life I always was wearing COM underwear. Now I only wear it on special occasions. For example, I am not wearing COM underwear right now.
.NETDJ: Have you ever been mistaken for Jon Box (NETDJ's Mobility Editor)?
DB: The first time that ever happened was at Tech Ed this year. I went to register and they wanted to give me Jon Box's badge. I'm sure David Chappell was really pissed off when that guy from the J2EE world started using his name - at least Jon Box is on my side of the fence!
.NETDJ: Tell us about Essential .NET.
DB: So, I wrote Essential .NET, Volume I: The Common Language Runtime (Addison-Wesley, 2003) about the CLR and I tried to do what I did with Essential COM, which was to answer the questions that I had. It was to answer the questions about why .NET is the way that it is. I'm not very good at writing tutorials - but I'm pretty good at figuring out design motivations. As I get older, I have more historical context. I can see the echoes of old things in new things.
.NETDJ: What path would you recommend for someone with a background in non-native platforms such as Visual Basic or Java, who wants to learn .NET internals?
DB: I think the best preparation is to write code - a good programmer will inevitably ask, "Why is it this way?" The book is really an exploration of how .NET is designed and why. If you are a person who benefits from that kind of analysis, it will benefit you. If you aren't, then my stuff is just esoteric ravings.
.NETDJ: What is your order of preference between speaking, coding, and writing?
DB: I like to write, then code, and then speak. Of all the things I can do, writing is the one that gives me the best catharsis. For me at least, writing starts with a story inside of me that I need to get out and then propagate it efficiently. There is nothing like writing!
Finishing a writing project gives you a feeling like having a baby. It's like, "Finally, this thing is outside of my body!" but - unlike a baby - a book doesn't need to be changed or breastfed. You get a sense of release when you get done writing something.
Coding is what I do to understand. I find that coding is an exercise in self-education - that's how I get my ideas.
I also get ideas through speaking, but speaking is just what one does everyday. I'm speaking right now...whether I do this in front of 1000, 5000, or 3 people doesn't matter. Some people are listening and some people aren't, but speaking is as natural to me as eating. Actually, I like eating better!
.NETDJ: Who do you most like to hear speaking about development nowadays?
DB: I love listening to David Chappell - I just think he is great. I also like listening to Ted Pattison - he is a great guy. Pat Helland is wonderful to listen to. That is my short list, I think.
.NETDJ: What do you make of the recent warming of relations between Microsoft, Sun, and Oracle?
DB: We all share the same customers and our customers want our stuff to work together. The whole premise of doing this kind of integration is all about making our stuff work with everyone else's - realizing that we can't get NT running on every box. People are nice enough to invite us into their datacenters, and interop is just good manners. Our customers are going to have non-Microsoft systems and we want to make sure that we are good guests.
.NETDJ: What are your thoughts on global outsourcing?
DB: (Thoughtful pause)...Can't ignore it! It is very real. Developers should perceive outsourcing as an opportunity. What choice do we have? Seeing it as a threat doesn't buy you anything - you have nothing to gain from that. A much more interesting approach is to say, "How can I take the fact that I have less expensive labor and harness it to my benefit?"
.NETDJ: Do you hold any software certifications - MCP, MCAD, MCSD, etc.? Why or why not?
DB: I have an MS in computer science. Why do I have that? Because I was in grad school for a very long time and they give you a Masters somewhere along the way to a PhD. Beyond that, I just never had a need for certification.
.NETDJ: You talked about the failure of Java and the illusion of choice during your general session at Tech Ed yesterday? Could you elaborate on that topic a little more?
DB: I've had a really lucky life. The DCOM experience was very illustrative...the notion that we could get OLE32 to run on every machine on the planet. The plan was to take the COM runtime and make that run on every computing device on the planet and that was going to be the way we got reach. That was just utter folly. It ignored the fact that not only do people have lots of investments that they hold dear for good reasons, but that there are all kinds of cultural differences. There are all kinds of different programmers and it is crazy to think that everyone is going to want to program the same way, which is what OLE32 imposed on the programmer. The practice of COM assumed that the entire programming universe will have the same kind of aesthetic.
We learned such a lesson with DCOM that now, with Web services, we are just saying, "Everyone programs in something different, so let's just do protocol-based integration, where we will just agree on the format of the messages we are going to exchange over the wire." We came to that realization in 1997, when Sun was full steam into that Java thing, which was very similar to the experience we had had with OLE32. They were even more intrusive than us because they had a runtime and a language, and to think that everyone in the world wants to use the same programming language is just naïve.
I can say this because I had exactly that belief when I was sitting in the cold parts of Germany porting DCOM to Unix and I saw what happened. I think the Java community has come around and realized that they are also guests in any given datacenter and that protocol-based integration is where it is at. I'm happy to see all of the Java vendors signing up to do XML-based messaging with the rest of us.
.NETDJ: What was your worst-ever moment on stage and how did you handle it?
DB: I have two experiences that stick out - one was the talk on Monday morning...I can't remember ever giving a talk and being that sick. I am in the middle of one of the most hellacious flus I have ever had and I know that I didn't do my best.
The other time, I had to sub for someone to teach an MFC class very early in the history of my teaching career and I just didn't care. I had no real passion for it and while I understood it and knew it, I didn't care about it and it was just utter torture for me. And so what I've really figured out from that was that I have to have skin in the game. If I'm going to talk, I really have to have an investment. So I started doing stunts so I would feel emotionally invested.
.NETDJ: What kind of stunts?
DB: I once gave a talk wearing only a speaker shirt, and then took that speaker shirt off in a room of 3000-4000 people...that was my first real stunt. I had toyed with things before, like to illustrate how apartments worked, I had people in the audience come up and hug and then I took it further to see if I could get people to kiss! I really want people to have an experience when they come to one of my talks. I want there to be something memorable. I started with that, then I did a couple of various stages of undress, with bathtubs and dancers.
If you Google me, you can find the bathtub images.
.NETDJ: What technologies coming out of Microsoft - besides Indigo - do you find most exciting?
DB: I love the devices stuff - that stuff is just so amazing. I am also having a wonderful time working with the new C# language features - it is very hard to go back. I had fallen in love with Standard ML and functional programming in general. When we started getting drops of the new C# compiler and between anonymous methods, iterators, and parameterized types, things felt exceedingly familiar.
.NETDJ: If you had to do your whole career over again thus far, what would you do differently?
DB: I wish I would have finished my PhD. I also would have paid more attention in the early years to the business side of DevelopMentor. I naively had the attitude that I could trust someone else to lead and run my company while I focused 100% on technology. I don't plan to ever make that mistake again. Lesson learned.
.NETDJ: What are your career goals at this point?
DB: To ship Indigo. After that, I'm confident the future will present itself - it always has in the past.
Cultural, regulatory, environmental, political and economic (CREPE) conditions over the past decade are creating cross-industry solution spaces that require processes and technologies from both the Internet of Things (IoT), and Data Management and Analytics (DMA). These solution spaces are evolving into Sensor Analytics Ecosystems (SAE) that represent significant new opportunities for organizations of all types. Public Utilities throughout the world, providing electricity, natural gas and water, are pursuing SmartGrid initiatives that represent one of the more mature examples of SAE. We have s...
Nov. 27, 2014 04:00 PM EST Reads: 1,789
The security devil is always in the details of the attack: the ones you've endured, the ones you prepare yourself to fend off, and the ones that, you fear, will catch you completely unaware and defenseless. The Internet of Things (IoT) is nothing if not an endless proliferation of details. It's the vision of a world in which continuous Internet connectivity and addressability is embedded into a growing range of human artifacts, into the natural world, and even into our smartphones, appliances, and physical persons. In the IoT vision, every new "thing" - sensor, actuator, data source, data con...
Nov. 27, 2014 04:00 PM EST Reads: 1,957
The 3rd International Internet of @ThingsExpo, co-located with the 16th International Cloud Expo - to be held June 9-11, 2015, at the Javits Center in New York City, NY - announces that its Call for Papers is now open. The Internet of Things (IoT) is the biggest idea since the creation of the Worldwide Web more than 20 years ago.
Nov. 27, 2014 03:00 PM EST Reads: 1,283
The Internet of Things is tied together with a thin strand that is known as time. Coincidentally, at the core of nearly all data analytics is a timestamp. When working with time series data there are a few core principles that everyone should consider, especially across datasets where time is the common boundary. In his session at Internet of @ThingsExpo, Jim Scott, Director of Enterprise Strategy & Architecture at MapR Technologies, discussed single-value, geo-spatial, and log time series data. By focusing on enterprise applications and the data center, he will use OpenTSDB as an example t...
Nov. 27, 2014 03:00 PM EST Reads: 2,129
How do APIs and IoT relate? The answer is not as simple as merely adding an API on top of a dumb device, but rather about understanding the architectural patterns for implementing an IoT fabric. There are typically two or three trends: Exposing the device to a management framework Exposing that management framework to a business centric logic Exposing that business layer and data to end users. This last trend is the IoT stack, which involves a new shift in the separation of what stuff happens, where data lives and where the interface lies. For instance, it's a mix of architectural styles ...
Nov. 27, 2014 03:00 PM EST Reads: 1,921
An entirely new security model is needed for the Internet of Things, or is it? Can we save some old and tested controls for this new and different environment? In his session at @ThingsExpo, New York's at the Javits Center, Davi Ottenheimer, EMC Senior Director of Trust, reviewed hands-on lessons with IoT devices and reveal a new risk balance you might not expect. Davi Ottenheimer, EMC Senior Director of Trust, has more than nineteen years' experience managing global security operations and assessments, including a decade of leading incident response and digital forensics. He is co-author of t...
Nov. 27, 2014 01:00 PM EST Reads: 2,034
The Internet of Things will greatly expand the opportunities for data collection and new business models driven off of that data. In her session at @ThingsExpo, Esmeralda Swartz, CMO of MetraTech, discussed how for this to be effective you not only need to have infrastructure and operational models capable of utilizing this new phenomenon, but increasingly service providers will need to convince a skeptical public to participate. Get ready to show them the money!
Nov. 27, 2014 11:00 AM EST Reads: 1,827
The Internet of Things will put IT to its ultimate test by creating infinite new opportunities to digitize products and services, generate and analyze new data to improve customer satisfaction, and discover new ways to gain a competitive advantage across nearly every industry. In order to help corporate business units to capitalize on the rapidly evolving IoT opportunities, IT must stand up to a new set of challenges. In his session at @ThingsExpo, Jeff Kaplan, Managing Director of THINKstrategies, will examine why IT must finally fulfill its role in support of its SBUs or face a new round of...
Nov. 27, 2014 10:00 AM EST Reads: 1,854
One of the biggest challenges when developing connected devices is identifying user value and delivering it through successful user experiences. In his session at Internet of @ThingsExpo, Mike Kuniavsky, Principal Scientist, Innovation Services at PARC, described an IoT-specific approach to user experience design that combines approaches from interaction design, industrial design and service design to create experiences that go beyond simple connected gadgets to create lasting, multi-device experiences grounded in people's real needs and desires.
Nov. 27, 2014 08:00 AM EST Reads: 1,796
Enthusiasm for the Internet of Things has reached an all-time high. In 2013 alone, venture capitalists spent more than $1 billion dollars investing in the IoT space. With "smart" appliances and devices, IoT covers wearable smart devices, cloud services to hardware companies. Nest, a Google company, detects temperatures inside homes and automatically adjusts it by tracking its user's habit. These technologies are quickly developing and with it come challenges such as bridging infrastructure gaps, abiding by privacy concerns and making the concept a reality. These challenges can't be addressed w...
Nov. 27, 2014 07:45 AM EST Reads: 1,965
The Domain Name Service (DNS) is one of the most important components in networking infrastructure, enabling users and services to access applications by translating URLs (names) into IP addresses (numbers). Because every icon and URL and all embedded content on a website requires a DNS lookup loading complex sites necessitates hundreds of DNS queries. In addition, as more internet-enabled ‘Things' get connected, people will rely on DNS to name and find their fridges, toasters and toilets. According to a recent IDG Research Services Survey this rate of traffic will only grow. What's driving t...
Nov. 27, 2014 07:00 AM EST Reads: 2,023
Scott Jenson leads a project called The Physical Web within the Chrome team at Google. Project members are working to take the scalability and openness of the web and use it to talk to the exponentially exploding range of smart devices. Nearly every company today working on the IoT comes up with the same basic solution: use my server and you'll be fine. But if we really believe there will be trillions of these devices, that just can't scale. We need a system that is open a scalable and by using the URL as a basic building block, we open this up and get the same resilience that the web enjoys.
Nov. 27, 2014 06:45 AM EST Reads: 2,082
Connected devices and the Internet of Things are getting significant momentum in 2014. In his session at Internet of @ThingsExpo, Jim Hunter, Chief Scientist & Technology Evangelist at Greenwave Systems, examined three key elements that together will drive mass adoption of the IoT before the end of 2015. The first element is the recent advent of robust open source protocols (like AllJoyn and WebRTC) that facilitate M2M communication. The second is broad availability of flexible, cost-effective storage designed to handle the massive surge in back-end data in a world where timely analytics is e...
Nov. 27, 2014 06:45 AM EST Reads: 1,994
We are reaching the end of the beginning with WebRTC, and real systems using this technology have begun to appear. One challenge that faces every WebRTC deployment (in some form or another) is identity management. For example, if you have an existing service – possibly built on a variety of different PaaS/SaaS offerings – and you want to add real-time communications you are faced with a challenge relating to user management, authentication, authorization, and validation. Service providers will want to use their existing identities, but these will have credentials already that are (hopefully) i...
Nov. 27, 2014 04:00 AM EST Reads: 1,667
"Matrix is an ambitious open standard and implementation that's set up to break down the fragmentation problems that exist in IP messaging and VoIP communication," explained John Woolf, Technical Evangelist at Matrix, in this SYS-CON.tv interview at @ThingsExpo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Nov. 27, 2014 04:00 AM EST Reads: 1,694
P2P RTC will impact the landscape of communications, shifting from traditional telephony style communications models to OTT (Over-The-Top) cloud assisted & PaaS (Platform as a Service) communication services. The P2P shift will impact many areas of our lives, from mobile communication, human interactive web services, RTC and telephony infrastructure, user federation, security and privacy implications, business costs, and scalability. In his session at @ThingsExpo, Robin Raymond, Chief Architect at Hookflash, will walk through the shifting landscape of traditional telephone and voice services ...
Nov. 26, 2014 02:00 PM EST Reads: 2,018
Explosive growth in connected devices. Enormous amounts of data for collection and analysis. Critical use of data for split-second decision making and actionable information. All three are factors in making the Internet of Things a reality. Yet, any one factor would have an IT organization pondering its infrastructure strategy. How should your organization enhance its IT framework to enable an Internet of Things implementation? In his session at Internet of @ThingsExpo, James Kirkland, Chief Architect for the Internet of Things and Intelligent Systems at Red Hat, described how to revolutioniz...
Nov. 24, 2014 07:00 PM EST Reads: 2,212
Bit6 today issued a challenge to the technology community implementing Web Real Time Communication (WebRTC). To leap beyond WebRTC’s significant limitations and fully leverage its underlying value to accelerate innovation, application developers need to consider the entire communications ecosystem.
Nov. 24, 2014 12:00 PM EST Reads: 1,957
The definition of IoT is not new, in fact it’s been around for over a decade. What has changed is the public's awareness that the technology we use on a daily basis has caught up on the vision of an always on, always connected world. If you look into the details of what comprises the IoT, you’ll see that it includes everything from cloud computing, Big Data analytics, “Things,” Web communication, applications, network, storage, etc. It is essentially including everything connected online from hardware to software, or as we like to say, it’s an Internet of many different things. The difference ...
Nov. 24, 2014 11:00 AM EST Reads: 2,309
Cloud Expo 2014 TV commercials will feature @ThingsExpo, which was launched in June, 2014 at New York City's Javits Center as the largest 'Internet of Things' event in the world.
Nov. 24, 2014 09:00 AM EST Reads: 2,175