A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Welcome to the java-serializable library! This Java library provides a simple way to easily serialize all the objects from java (including the ones without the Serializable interface implementation) ...

More than once, I have seen code such as the following (without the comments I have added to point out flaws), in which a well-intentioned Java developer has ensured that their favorite Enum ...

This is a basic, proof-of-concept Java object serializer that shows how such a problem can be approached using reflection in Java. The serializer (and deserializer) is capable of handling both JSON ...

In this article we discuss a recent deserialization vulnerability we found in Relution (CVE-2023-48178), a mobile device management product that is popular among multinational German corporations. CVE ...