I remember that thread on twitter π
I used to have a circular indicator when waiting on the decompiler to finish in Recaf but swapped it out for something else. Reintroduced the circle indicator in the project summary screen while it was generating content.
I used to have a circular indicator when waiting on the decompiler to finish in Recaf but swapped it out for something else. Reintroduced the circle indicator in the project summary screen while it was generating content.
February 6, 2026 at 6:20 PM
I remember that thread on twitter π
I used to have a circular indicator when waiting on the decompiler to finish in Recaf but swapped it out for something else. Reintroduced the circle indicator in the project summary screen while it was generating content.
I used to have a circular indicator when waiting on the decompiler to finish in Recaf but swapped it out for something else. Reintroduced the circle indicator in the project summary screen while it was generating content.
Reposted by Matt Coley
JavaFX is missing a native Switch control β every major UI framework has one except JavaFX.
I've implemented a SwitchButton with full theme support. Hope to contribute to OpenJFX.
Thanks @dlemmermann.bsky.social for his help!
github.com/leewyatt/Swi...
#JavaFX
I've implemented a SwitchButton with full theme support. Hope to contribute to OpenJFX.
Thanks @dlemmermann.bsky.social for his help!
github.com/leewyatt/Swi...
#JavaFX
January 22, 2026 at 11:26 AM
JavaFX is missing a native Switch control β every major UI framework has one except JavaFX.
I've implemented a SwitchButton with full theme support. Hope to contribute to OpenJFX.
Thanks @dlemmermann.bsky.social for his help!
github.com/leewyatt/Swi...
#JavaFX
I've implemented a SwitchButton with full theme support. Hope to contribute to OpenJFX.
Thanks @dlemmermann.bsky.social for his help!
github.com/leewyatt/Swi...
#JavaFX
Reposted by Matt Coley
OpenJDK is faster than GraalVM*
It's around twice as fast in one particular area. Read more in my latest tiny blog post at mostlynerdless.de/blog/2026/01...
It's around twice as fast in one particular area. Read more in my latest tiny blog post at mostlynerdless.de/blog/2026/01...
OpenJDK is faster than GraalVM Java* - Mostly nerdless
OpenJDK is faster than GraalVM in some instances, but maybe it's not important? Discover more in this short blog post.
mostlynerdless.de
January 9, 2026 at 8:11 AM
OpenJDK is faster than GraalVM*
It's around twice as fast in one particular area. Read more in my latest tiny blog post at mostlynerdless.de/blog/2026/01...
It's around twice as fast in one particular area. Read more in my latest tiny blog post at mostlynerdless.de/blog/2026/01...
Looking at the skin impl for the control, it looks like intended usage of RotateTransition. So based on this and the GC root information, I'm inclined to say its a problem of the transition. This is on JavaFX 23.0.2 - Don't see any memory leak notes in 24/25 releases for this case.
January 9, 2026 at 5:24 AM
Looking at the skin impl for the control, it looks like intended usage of RotateTransition. So based on this and the GC root information, I'm inclined to say its a problem of the transition. This is on JavaFX 23.0.2 - Don't see any memory leak notes in 24/25 releases for this case.
So I debugged where that rotate transition was coming from that is caching the node... Its a neat little component I use from AtlantaFX, RingProgressIndicator with the value set to INDETERMINATE_PROGRESS. If I don't use it, or reset the progress value, then the leak goes away...
January 9, 2026 at 5:09 AM
So I debugged where that rotate transition was coming from that is caching the node... Its a neat little component I use from AtlantaFX, RingProgressIndicator with the value set to INDETERMINATE_PROGRESS. If I don't use it, or reset the progress value, then the leak goes away...
I *could* play wack-a-mole and null out references when the UI elements are removed, but it feels weird having to manually wire up logic to free this if the node is no longer part of the scene graph.
There's got to be a more efficient route, right?
There's got to be a more efficient route, right?
January 8, 2026 at 8:45 AM
I *could* play wack-a-mole and null out references when the UI elements are removed, but it feels weird having to manually wire up logic to free this if the node is no longer part of the scene graph.
There's got to be a more efficient route, right?
There's got to be a more efficient route, right?
Any #JavaFX people experience removed nodes being stuck around in memory after they've been removed from the scene graph?
If I have a node that has a ~500 MB byte array, and then I remove it, I should be able to expect that to be freeable right?
Heap dump GC root for reference
If I have a node that has a ~500 MB byte array, and then I remove it, I should be able to expect that to be freeable right?
Heap dump GC root for reference
January 8, 2026 at 8:43 AM
Any #JavaFX people experience removed nodes being stuck around in memory after they've been removed from the scene graph?
If I have a node that has a ~500 MB byte array, and then I remove it, I should be able to expect that to be freeable right?
Heap dump GC root for reference
If I have a node that has a ~500 MB byte array, and then I remove it, I should be able to expect that to be freeable right?
Heap dump GC root for reference
Reposted by Matt Coley
I reverse engineered DexProtector, the security solution protecting applications like Revolut and other banking apps.
From custom ELF loaders to vtable hooking, here is an insight into how these protections work and their limitations.
www.romainthomas.fr/post/26-01-d...
From custom ELF loaders to vtable hooking, here is an insight into how these protections work and their limitations.
www.romainthomas.fr/post/26-01-d...
A Glimpse Into DexProtector | Romain Thomas
This blog post provides a high-level overview of DexProtector's security features and their limitations
www.romainthomas.fr
January 5, 2026 at 6:11 AM
I reverse engineered DexProtector, the security solution protecting applications like Revolut and other banking apps.
From custom ELF loaders to vtable hooking, here is an insight into how these protections work and their limitations.
www.romainthomas.fr/post/26-01-d...
From custom ELF loaders to vtable hooking, here is an insight into how these protections work and their limitations.
www.romainthomas.fr/post/26-01-d...
Reposted by Matt Coley
As an old and somewhat inactive Mockito maintainer I'd like to congratulate Tim for these past years keeping the light on the Mockito project. He his now stepping down.
Thank you Tim.
github.com/mockito/mock...
Thank you Tim.
github.com/mockito/mock...
Stepping down as maintainer after 10 years Β· Issue #3777 Β· mockito/mockito
In March 2026, I will be Mockito maintainer for 10 years (nearly a third of my whole life). Looking ahead, I decided that a decade milestone is a good moment to pass on maintainership to other folk...
github.com
December 28, 2025 at 4:20 PM
As an old and somewhat inactive Mockito maintainer I'd like to congratulate Tim for these past years keeping the light on the Mockito project. He his now stepping down.
Thank you Tim.
github.com/mockito/mock...
Thank you Tim.
github.com/mockito/mock...
Reposted by Matt Coley
I spent about two days learning and implementing atmosphere rendering for planetary views from space. The tutorials and other sources I found on it were prettty lacking in implementation details but I got there in the end. Too late now, but does anyone have any recommends? Should I write an article?
October 30, 2025 at 6:45 PM
I spent about two days learning and implementing atmosphere rendering for planetary views from space. The tutorials and other sources I found on it were prettty lacking in implementation details but I got there in the end. Too late now, but does anyone have any recommends? Should I write an article?
Reposted by Matt Coley
another excellent eBay acquisition
November 4, 2025 at 3:05 AM
another excellent eBay acquisition
Reposted by Matt Coley
I interviewed @mattcoley.bsky.social about #Recaf and his #JavaFX libraries. But unexpectedly, I got a deep-dive course on #Java byte code, obfuscated code, and how JARs can be (ab)used to hide their real code...!
www.youtube.com/watch?v=6NIJ...
More info: webtechie.be/post/2025-10...
www.youtube.com/watch?v=6NIJ...
More info: webtechie.be/post/2025-10...
Matt Coley, diving into byte code and JARs with Recaf and JavaFX libraries (#22)
YouTube video by Frank Delporte
www.youtube.com
October 30, 2025 at 7:11 AM
I interviewed @mattcoley.bsky.social about #Recaf and his #JavaFX libraries. But unexpectedly, I got a deep-dive course on #Java byte code, obfuscated code, and how JARs can be (ab)used to hide their real code...!
www.youtube.com/watch?v=6NIJ...
More info: webtechie.be/post/2025-10...
www.youtube.com/watch?v=6NIJ...
More info: webtechie.be/post/2025-10...
If you're using the JavaFX "Flowless" library for virtualized controls and are observing sluggish performance, do not add stylesheets to the Virtualized Node. Add them to the Scene. I observed an immediate 10x performance boost by doing this.
October 24, 2025 at 10:36 AM
If you're using the JavaFX "Flowless" library for virtualized controls and are observing sluggish performance, do not add stylesheets to the Virtualized Node. Add them to the Scene. I observed an immediate 10x performance boost by doing this.
The good news is, they reverted that 404 -> 403 option, and *some* of our projects updated to use Artifactory first instead of last.
September 24, 2025 at 12:19 PM
The good news is, they reverted that 404 -> 403 option, and *some* of our projects updated to use Artifactory first instead of last.
Artifactory: IT was instructed to prevent crawling, so one thing they did was change Artifactory replying 404 for missing artifacts to replying with 403 (like all other urls on other services they ran)
Result: 403 kills gradle builds, so nobody used artifactory and if they did, they put it last.
Result: 403 kills gradle builds, so nobody used artifactory and if they did, they put it last.
September 24, 2025 at 12:05 PM
Artifactory: IT was instructed to prevent crawling, so one thing they did was change Artifactory replying 404 for missing artifacts to replying with 403 (like all other urls on other services they ran)
Result: 403 kills gradle builds, so nobody used artifactory and if they did, they put it last.
Result: 403 kills gradle builds, so nobody used artifactory and if they did, they put it last.
I love reading these articles and thinking "Yup, that's us on the job. We're part of the industrial inefficiency complex"
Artifactory set up but nobody uses it? π
CI jobs with zero caching? π
+ they can recursively spawn other jobs? π
+ they can trigger from simple "fix typo" commits? π
Artifactory set up but nobody uses it? π
CI jobs with zero caching? π
+ they can recursively spawn other jobs? π
+ they can trigger from simple "fix typo" commits? π
Free isnβt free: the infrastructure behind open source has real costs, and itβs time we aligned usage with responsibility.
This morning we jointly launch a new blog and open letter on sustainable stewardship.
www.sonatype.com/blog/from-ab...
This morning we jointly launch a new blog and open letter on sustainable stewardship.
www.sonatype.com/blog/from-ab...
From Abuse to Alignment: Why We Need Sustainable Open Source Infrastructure
Open source relies on shared infrastructure. Learn why sustainable stewardship is critical to keep ecosystems like Maven Central strong.
www.sonatype.com
September 24, 2025 at 12:05 PM
I love reading these articles and thinking "Yup, that's us on the job. We're part of the industrial inefficiency complex"
Artifactory set up but nobody uses it? π
CI jobs with zero caching? π
+ they can recursively spawn other jobs? π
+ they can trigger from simple "fix typo" commits? π
Artifactory set up but nobody uses it? π
CI jobs with zero caching? π
+ they can recursively spawn other jobs? π
+ they can trigger from simple "fix typo" commits? π
Now Recaf 4X can inline return values of simple static methods (like a xor string decryption call in this case)
September 8, 2025 at 8:42 AM
Now Recaf 4X can inline return values of simple static methods (like a xor string decryption call in this case)
Recaf's interactive deobfuscation window now lets you specify how many passes to run. For some obfuscation patterns that can't be one-shot in one linear pass (opaque control flow leading to more opaque control flow repeated N times) increasing the pass count to N+1 reduces it completely.
August 20, 2025 at 10:59 AM
Recaf's interactive deobfuscation window now lets you specify how many passes to run. For some obfuscation patterns that can't be one-shot in one linear pass (opaque control flow leading to more opaque control flow repeated N times) increasing the pass count to N+1 reduces it completely.
Reposted by Matt Coley
JavaFX now has a Headless platform.
bugs.openjdk.org/browse/JDK-8... is now Resolved!
Pfew, that took me 1 year, 5 months and 29 days. Goodnight!
#JavaFX #Java
bugs.openjdk.org/browse/JDK-8... is now Resolved!
Pfew, that took me 1 year, 5 months and 29 days. Goodnight!
#JavaFX #Java
Loading...
bugs.openjdk.org
July 28, 2025 at 8:45 PM
JavaFX now has a Headless platform.
bugs.openjdk.org/browse/JDK-8... is now Resolved!
Pfew, that took me 1 year, 5 months and 29 days. Goodnight!
#JavaFX #Java
bugs.openjdk.org/browse/JDK-8... is now Resolved!
Pfew, that took me 1 year, 5 months and 29 days. Goodnight!
#JavaFX #Java
Reposted by Matt Coley
Australia's decision to require age/identity verification, including facial scans, in order to do a Google search is dystopian.
We're watching the death of an open, anonymous internet, and the gradual takeover of information online by the state β under the guise of protecting children.
We're watching the death of an open, anonymous internet, and the gradual takeover of information online by the state β under the guise of protecting children.
Australia is quietly rolling out age checks for search engines like Google
Just as Australians are adjusting to the idea of having their ages checked for social media, age assurance rules are being applied to search engines and many other corners of the internet.
www.abc.net.au
July 11, 2025 at 9:50 PM
Australia's decision to require age/identity verification, including facial scans, in order to do a Google search is dystopian.
We're watching the death of an open, anonymous internet, and the gradual takeover of information online by the state β under the guise of protecting children.
We're watching the death of an open, anonymous internet, and the gradual takeover of information online by the state β under the guise of protecting children.
And from my last 𧡠here's the sample that had attributes lying about their lengths being patched automatically (amongst many other tricks).
July 5, 2025 at 6:01 AM
And from my last 𧡠here's the sample that had attributes lying about their lengths being patched automatically (amongst many other tricks).
Updates to how some of the transformers work has cleaned up the output on most obfuscated samples I have. Here's a demo on a Minecraft server plugin getting optimized back to almost perfectly legible source.
July 5, 2025 at 5:59 AM
Updates to how some of the transformers work has cleaned up the output on most obfuscated samples I have. Here's a demo on a Minecraft server plugin getting optimized back to almost perfectly legible source.