What is Serialization? - Cracking the Java Coding Interview

Cracking the #Java #Coding #Interview - Question 188: What is Serialization?

[PterAntlo]

Another short answer: Pain. Less short answer: Pain, but the best thing we had in the old days.

[robertgardzinski]

Awesome! I've been wondering what this serialization is all about and always met "the short answer" version. The skipped validation on deserialization part I just heard from you. Man, you rock! :)

[gebjan]

This is so cool! I'd love to hear more about the history of Java.

[justsignmeup]

Is the Effective Java advice to not use java's built-in serialization still valid?

[madskaddie]

any (automatic) serialization has the same basic problems: data comes from the outside and thus is potentially invalid. jackson bean stuff has the same problems but can be mitigated with factories and some other features...

to avoid, data and behavior must be more separated than the classic OO examples; instead serializable objects should be restricted to plain old data objects (anemic DTOs)

[VuLinhAssassin]

Spring Framework uses Jackson for object serialization and deserialization, are they safe, sir?

[ahmedjaad]

you should make another series for all these "For another time" things

[bytewise]

Does calling a constructor makes it safe? I don't understand. Can anyone explain?

[slartidan]

Short answer: do not use Java's serialization, use one of today's popular formats (i.e. JSON or Protobuf).

[java-kotlin-go]

Please deprecate Java and use Scala or Kotlin. Work on JVM itself

[void_star_void]

Short answer: shit no one uses anymore