Slashdot Mirror

Well, to be honest - the whole WinMO thing is a huge bummer for me. That's one reason I bought a gaggle of iPhones for my family. I was tired of waiting for a mobile OS that didn't suck.

So, I don't have any insider knowledge on the WinMO stuff, but do know a couple things:

1. Some really good people moved to the WinMO org lately.
2. We get stuff right eventually. Im optimistic that the new team will deliver something credible.

The problem is this I think: WinMO 7.0 could be awesome and sill not be successful in the mobile space in any material way becuase the market has gotten locked in to two other very good solutions (iPhone, Android). Just like we have a lock on the desktop and office space with Windows and Office.

Its hard to comment on the iSlate/Pad/thing. There is TON of speculation about it and any tangible facts. Ill wait until Jobs launches it to form an opinion.

Note, you wont find harsh criticism of Apple from me - they are a great company. See this blog post and its comments. Apple is not big enough to do search They needMicrosoft/a>.

RRegarding Ballmer - I think you are being hard on him. One problem I have with many Microsoft critics is they expect Microsoft to be perfect. Kind of like your comment "Hey! Look Ballmer isnt perfect HAHAHAHA." You see this kind of thing all the time here on Slashdot.

I love the repeated reference to Ballmer throwing a chair. Its like the lamest thing ever to keep brining up. Really... its lame. I think it probably happened. Maybe he didnt throw it, but something with a char likely happened. Many CEOs are famously pasionate. Jobs is quite the tyrant. How about Larry Ellison? He has an ego the size of the Death Star. Ill tell you this - Ballmer is a much better leader than Gates. Gates is a brilliant strategist, but Ballmer has corporate leadership skills in spades. Hes also good at growing skilled execs.

As an aside, the exec to watch at Microsoft isnt Stephen Sinofsky (who is pretty good), is Qi Lu/a>. Ive heard him speak at internal meeting severl times now. He is the single most impressive executive Ive ever seen. I think he is the next Bill.

YYes, we have failed products, we also have products that are profitable, but dont reach the level of expectations we set for it. I think the tablet is a great example. Our tablet stuff has some great features. For example, the handwriting recognition is stellar - it really is. But we didnt change the rest of the experience to match - it is still the normal desktop experience. I suspect apple will nail this.

What people forget is despite the lack of market dominating success as Bill predicted, the Windows tablet PC has been a success. If any other company had done it they would be declared fabulous. The proof is in the pudding - our partners still make them and sell them. Believe me, they wouldnt do this if they didnt make money. The OEMs cut stuff faster than you can blink when it isnt successful.

Yes, we have failed products and Ballmer makes bad decisions form time to time. But, I’m not sure what point that makes. So do all big companies, including Apple, Google, HP, IBM and many others. Apple tried for years with hand held computing things. Remember the Newton? They have had other bombs too like the Cube, the Motorola Rokr, the Pippin (game console), EWorld, Apple PowerCD, Apple Powered Speakers, How about Apple TV? Is that a failure or is the Jury still out on that? Have you used it? Its pretty lame. XBOX live is way/em> better – and has way more content. They also failed utterly in the productivity software market – remember Claris Works?

I do ask you to consider that Microsoft has the financial, corporate, cultural fortitude to stick with things that need to be strategically successful. We m

Interesting you should say that... as IE sandboxes plugins by default. http://technet.microsoft.com/en-us/library/dd346862.aspx

I kind of doubt Microsoft is ever going to fix this

XP reached end of mainstream support on 14th April 2009 (source); as such it's very unlikely you'll see any more updates for XP other than security updates.

You read it wrong, the only thing he left out was attribution, it isn't some big sekrit:

https://connect.microsoft.com/VisualStudio/feedback/ViewFeedback.aspx?FeedbackID=517188&wa=wsignin1.0

...waitaminute - what about the gay folks who work for Microsoft? I'm sure they're not Mac users.

It has come to my attention that the entire Linux community is a hotbed of so called 'alternative sexuality', which includes anything from hedonistic orgies to homosexuality to paedophilia.

What better way of demonstrating this than by looking at the hidden messages contained within the names of some of Linux's most outspoken advocates:

• Linus Torvalds is an anagram of slit anus or VD 'L,' clearly referring to himself by the first initial.
• Richard M. Stallman, spokespervert for the Gaysex's Not Unusual 'movement' is an anagram of mans cram thrill ad.
• Alan Cox is barely an anagram of anal cox which is just so filthy and unchristian it unnerves me.

I'm sure that Eric S. Raymond, composer of the satanic homosexual propaganda diatribe The Cathedral and the Bizarre, is probably an anagram of something queer, but we don't need to look that far as we know he's always shoving a gun up some poor little boy's rectum. Update: Eric S. Raymond is actually an anagram for secondary rim and cord in my arse. It just goes to show you that he is indeed queer.

Update the Second: It is also documented that Evil Sicko Gaymond is responsible for a nauseating piece of code called Fetchmail, which is obviously sinister sodomite slang for 'Felch Male' -- a disgusting practise. For those not in the know, 'felching' is the act performed by two perverts wherein one sucks their own post-coital ejaculate out of the other's rectum. In fact, it appears that the dirty Linux faggots set out to undermine the good Republican institution of e-mail, turning it into 'e-male.'

As far as Richard 'Master' Stallman goes, that filthy fudge-packer was actually quoted on leftist commie propaganda site Salon.com as saying the following: 'I've been resistant to the pressure to conform in any circumstance,' he says. 'It's about being able to question conventional wisdom,' he asserts. 'I believe in love, but not monogamy,' he says plainly.

And this isn't a made up troll bullshit either! He actually stated this tripe, which makes it obvious that he is trying to politely say that he's a flaming homo slut!

Speaking about 'flaming,' who better to point out as a filthy chutney ferret than Slashdot's very own self-confessed pederast Jon Katz. Although an obvious deviant anagram cannot be found from his name, he has already confessed, nay boasted of the homosexual perversion of corrupting the innocence of young children. To quote from the article linked:

'I've got a rare kidney disease,' I told her. 'I have to go to the bathroom a lot. You can come with me if you want, but it takes a while. Is that okay with you? Do you want a note from my doctor?'

Is this why you were touching your penis in the cinema, Jon? And letting the other boys touch it too?

We should also point out that Jon Katz refers to himself as 'Slashdot's resident Gasbag.' Is there any more doubt? For those fortunate few who aren't aware of the list of homosexual terminology found inside the Linux 'Sauce Code,' a 'Gasbag' is a pervert who gains sexual gratification from having a thin straw inserted into his urethra (or to use the common parlance, 'piss-pipe'), then his homosexual lover blows firmly down the straw to inflate his scrotum. This is, of course, when he's not busy violating the dignity and co

It has come to my attention that the entire Linux community is a hotbed of so called 'alternative sexuality', which includes anything from hedonistic orgies to homosexuality to paedophilia.

What better way of demonstrating this than by looking at the hidden messages contained within the names of some of Linux's most outspoken advocates:

• Linus Torvalds is an anagram of slit anus or VD 'L,' clearly referring to himself by the first initial.
• Richard M. Stallman, spokespervert for the Gaysex's Not Unusual 'movement' is an anagram of mans cram thrill ad.
• Alan Cox is barely an anagram of anal cox which is just so filthy and unchristian it unnerves me.

I'm sure that Eric S. Raymond, composer of the satanic homosexual propaganda diatribe The Cathedral and the Bizarre, is probably an anagram of something queer, but we don't need to look that far as we know he's always shoving a gun up some poor little boy's rectum. Update: Eric S. Raymond is actually an anagram for secondary rim and cord in my arse. It just goes to show you that he is indeed queer.

Update the Second: It is also documented that Evil Sicko Gaymond is responsible for a nauseating piece of code called Fetchmail, which is obviously sinister sodomite slang for 'Felch Male' -- a disgusting practise. For those not in the know, 'felching' is the act performed by two perverts wherein one sucks their own post-coital ejaculate out of the other's rectum. In fact, it appears that the dirty Linux faggots set out to undermine the good Republican institution of e-mail, turning it into 'e-male.'

As far as Richard 'Master' Stallman goes, that filthy fudge-packer was actually quoted on leftist commie propaganda site Salon.com as saying the following: 'I've been resistant to the pressure to conform in any circumstance,' he says. 'It's about being able to question conventional wisdom,' he asserts. 'I believe in love, but not monogamy,' he says plainly.

And this isn't a made up troll bullshit either! He actually stated this tripe, which makes it obvious that he is trying to politely say that he's a flaming homo slut!

Speaking about 'flaming,' who better to point out as a filthy chutney ferret than Slashdot's very own self-confessed pederast Jon Katz. Although an obvious deviant anagram cannot be found from his name, he has already confessed, nay boasted of the homosexual perversion of corrupting the innocence of young children. To quote from the article linked:

'I've got a rare kidney disease,' I told her. 'I have to go to the bathroom a lot. You can come with me if you want, but it takes a while. Is that okay with you? Do you want a note from my doctor?'

Is this why you were touching your penis in the cinema, Jon? And letting the other boys touch it too?

We should also point out that Jon Katz refers to himself as 'Slashdot's resident Gasbag.' Is there any more doubt? For those fortunate few who aren't aware of the list of homosexual terminology found inside the Linux 'Sauce Code,' a 'Gasbag' is a pervert who gains sexual gratification from having a thin straw inserted into his urethra (or to use the common parlance, 'piss-pipe'), then his homosexual lover blows firmly down the straw to inflate his scrotum. This is, of course, when he's not busy violating the dignity and co

It has come to my attention that the entire Linux community is a hotbed of so called 'alternative sexuality', which includes anything from hedonistic orgies to homosexuality to paedophilia.

What better way of demonstrating this than by looking at the hidden messages contained within the names of some of Linux's most outspoken advocates:

• Linus Torvalds is an anagram of slit anus or VD 'L,' clearly referring to himself by the first initial.
• Richard M. Stallman, spokespervert for the Gaysex's Not Unusual 'movement' is an anagram of mans cram thrill ad.
• Alan Cox is barely an anagram of anal cox which is just so filthy and unchristian it unnerves me.

I'm sure that Eric S. Raymond, composer of the satanic homosexual propaganda diatribe The Cathedral and the Bizarre, is probably an anagram of something queer, but we don't need to look that far as we know he's always shoving a gun up some poor little boy's rectum. Update: Eric S. Raymond is actually an anagram for secondary rim and cord in my arse. It just goes to show you that he is indeed queer.

Update the Second: It is also documented that Evil Sicko Gaymond is responsible for a nauseating piece of code called Fetchmail, which is obviously sinister sodomite slang for 'Felch Male' -- a disgusting practise. For those not in the know, 'felching' is the act performed by two perverts wherein one sucks their own post-coital ejaculate out of the other's rectum. In fact, it appears that the dirty Linux faggots set out to undermine the good Republican institution of e-mail, turning it into 'e-male.'

As far as Richard 'Master' Stallman goes, that filthy fudge-packer was actually quoted on leftist commie propaganda site Salon.com as saying the following: 'I've been resistant to the pressure to conform in any circumstance,' he says. 'It's about being able to question conventional wisdom,' he asserts. 'I believe in love, but not monogamy,' he says plainly.

And this isn't a made up troll bullshit either! He actually stated this tripe, which makes it obvious that he is trying to politely say that he's a flaming homo slut!

Speaking about 'flaming,' who better to point out as a filthy chutney ferret than Slashdot's very own self-confessed pederast Jon Katz. Although an obvious deviant anagram cannot be found from his name, he has already confessed, nay boasted of the homosexual perversion of corrupting the innocence of young children. To quote from the article linked:

'I've got a rare kidney disease,' I told her. 'I have to go to the bathroom a lot. You can come with me if you want, but it takes a while. Is that okay with you? Do you want a note from my doctor?'

Is this why you were touching your penis in the cinema, Jon? And letting the other boys touch it too?

We should also point out that Jon Katz refers to himself as 'Slashdot's resident Gasbag.' Is there any more doubt? For those fortunate few who aren't aware of the list of homosexual terminology found inside the Linux 'Sauce Code,' a 'Gasbag' is a pervert who gains sexual gratification from having a thin straw inserted into his urethra (or to use the common parlance, 'piss-pipe'), then his homosexual lover blows firmly down the straw to inflate his scrotum. This is, of course, when he's not busy violating the dignity and co

Im not on the IE team so I cant speak to specifics. But here is what I know. Finding and fixing security bugs is the highest priority on every developers plate. When we learn about one in code we own things stop, we triage it, and we come up with a plan to fix it.

Often that plan is executed pretty quickly (sometimes even days...). Other times it takes longer. The reason is that almost none of these issues are easy to fix. Many of them must be done carefully so as not to break things or cause other security bugs. There is also some pretty extensive regression testing and review involved before we ship a fix.

Note, this isnt any different from Linux, Apache, Firefox or other widely used FOSS software. Even Linux has latent bugs that have been there a long time and only recently fixed. Here is one. The maintainers of these products are diligent, responsible and work hard to fix security bugs - just like Microsoft teams.

Did you actually look at the Microsoft Security Bulletin Page? Its really easy to find. We go to great lengths to get these out. You can get them on an RSS feed, via instant messaging, texts to your cell phone, and via email. What more do you want?

Did you read the page on how we monitor and manage vulnerabilities? Mmm... seems pretty professional to me.

Note that Mozilla guys dont publicize every security bug either. On their very professional security policy page they say this (excerpted, read the page for the full context...):

Full information about security bugs will be restricted to a known group of people, using the Bugzilla access control restrictions described above. However that group can and will be expanded as necessary and appropriate.

As noted above, information about security bugs can be held confidential for some period of time; there is no pre-determined limit on how long that time period might be. However this is offset by the fact that the person reporting a bug has visibility into the activities (if any) being taken to address the bug, and has the power to open the bug report for public scrutiny.

... The Mozilla security bug group will have a private mailing list, security-group@mozilla.org, to which everyone in the security bug group will be subscribed. ...

he security module owner, peers, and other members of the Mozilla security bug group will not be asked to sign formal nondisclosure agreements or other legal paperwork. However we do expect members of the group

... not to disclose security bug information to others who are not members of the Mozilla security bug group or are not otherwise involved in resolving the bug, except that if a member of the Mozilla security bug group is employed by a distributor of Mozilla-based products, then that member may share such information within that distributor, provided that this information is shared only with those who have a need to know, only to the extent they need to know, and such information is labeled and treated as the organization generally treats confidential material ...

... not to post descriptions of exploits in public forums like newsgroups, and to be careful in whom they add to the CC field of a bug (since all those CCd on a security bug potentially have access to the complete buzg report). .

.. to be careful in whom they add to the CC field of a

If you like that kind of thing, other companies will gladly accept you.

I prefer Google the way it is.

I'm thankful that they put text underneath the icons so I can tell WTF the icon is for, but the text makes the icon redundant.

OK, fifteen pages of complainers who have no idea about HCI now... let me give you a clue.

Icons are beneficial in all interfaces - menus, file managers, toolbars, you name it. They let you find what you're looking for faster. The human brain is optimized to recognize and analyze colors and shapes. When you're confronted with a menu of 10 programs, research shows you find yours more easily by looking for the circular blue-and-red icon than the words "Mozilla Firefox".

Factors in icon design include:
- A clear shape. Firefox is a circle, VS is an infinity symbol, Notepad is a rectangular notebook, and Word is a W in a square.
- Evocative colors. A red cross means delete, a green tick means confirm, yellow-black strips mean security, gray means utility application
- A unique, simple, recognizable design. Your brain sees it a few times and henceforth only looks for the icon, because it's less strain than reading the text.

If you don't trust me, perhaps you'll believe:
Microsoft
Apple

x264 is only an encoder for the H.264/MPEG-4 AVC standard. It does not handle decoding.

Doesn't make an iota of difference what decodes your video, if you're not legally allowed to encode it in your jurisdiction using a patent-encumbered codec in the first place.

Citation definitely needed. The project calls itself a H.264/AVC encoder [videolan.org].

http://stackoverflow.com/questions/1500342/h264-decoder-source-code

Being implemented through reverse-engineering doesn't matter. Anyway, it seems the specification is freely downloadable [itu.int].

The specs for FAT32 are available, too. Didn't seem to do TomTom much good, did it?

http://www.microsoft.com/whdc/system/platform/firmware/fatgen.mspx

If you already use Windows as your desktop and Exchange as your email / messaging systems you should look at Office Communications Server 2007 R2 http://office.microsoft.com/en-us/communicationsserver/default.aspx

- Integrates with outlook
- has desktop sharing with multi-monitor support
- you can use it will off the shelf hardware or cheap "certified hardware"
- You can use it for IM, PC to PC Voip, Video, and even as a full phone system replacement.

http://www.microsoft.com/presspass/press/2009/jul09/07-15BuffaloPR.mspx

http://www.pcworld.com/article/132893/microsoft_linspire_sign_linux_patent_deal.html

http://blogs.zdnet.com/microsoft/?p=3373

http://www.informationweek.com/news/windows/showArticle.jhtml?articleID=202400435

It's preferential over my company which (like most others) does not have this access and cannot use that as a benefit.

Well, my point was that China in particular didn't get preferential treatment. Government organizations in general do, yes, but there are still many of them (note that a particular government organization may also get the code for its own internal use, not necessarily the government as a whole).

Also, there is a similar program for companies. It would cost you a lot (since you need to have 1500 licensed Window seats under an "enterprise" support agreement - I don't think you'll need the actual physical seats, though), so yes, it is discriminative, but nonetheless, if you want the source, you can still get it.

I'm fully aware that the NSA also had preferential treatment (look up "NSA Key" on Google some day) and that any other government can now arrange the same in principle. However, apart from the US, where Microsoft comes from, this was not previously being extended to other places.

This is incorrect. For example, Russian government conducted security analysis (and certification) of Windows XP & 2003 source code in 2003, under the GSP. In fact, it seems that my previous statement that China was first to use GSP is incorrect, since the article claims Russia to be the first one to do so.

It's not "preferential". Any government can get Windows source code for security analysis under the Government Security Program

It's preferential over my company which (like most others) does not have this access and cannot use that as a benefit.

- it's just that Chinese were the first to jump on that bandwagon (it should be noted that there were similar programs in place before GSP, so China was only the first in GSP, not the first to get access to Windows source code in general).

I'm fully aware that the NSA also had preferential treatment (look up "NSA Key" on Google some day) and that any other government can now arrange the same in principle. However, apart from the US, where Microsoft comes from, this was not previously being extended to other places. Then China started threatening to use Linux and the source code access was set up specifically for them. It's not an accident that they were first in. It was their deliberate choice to get a head start.

Microsoft has given the Chinese government preferential access to the Windows Source code

It's not "preferential". Any government can get Windows source code for security analysis under the Government Security Program - it's just that Chinese were the first to jump on that bandwagon (it should be noted that there were similar programs in place before GSP, so China was only the first in GSP, not the first to get access to Windows source code in general).

Also, universities can (and do) get access to the source code for study and research purposes.

Microsoft has given the Chinese government preferential access to the Windows Source code

It's not "preferential". Any government can get Windows source code for security analysis under the Government Security Program - it's just that Chinese were the first to jump on that bandwagon (it should be noted that there were similar programs in place before GSP, so China was only the first in GSP, not the first to get access to Windows source code in general).

Also, universities can (and do) get access to the source code for study and research purposes.

It has now got to the point that Windows is completely unmaintainable - both for home users (who wont understand the problem anyway) and for commercial users (who will be seeking a safer Open Source solution right now).

I completely agree. Right now it is very hard for home users to use Automatic Updates or Microsoft Update. And for commercial users? It sucks that there isn't anything out there that allows administrators to centrally control the update process.

It has now got to the point that Windows is completely unmaintainable - both for home users (who wont understand the problem anyway) and for commercial users (who will be seeking a safer Open Source solution right now).

I completely agree. Right now it is very hard for home users to use Automatic Updates or Microsoft Update. And for commercial users? It sucks that there isn't anything out there that allows administrators to centrally control the update process.

It has now got to the point that Windows is completely unmaintainable - both for home users (who wont understand the problem anyway) and for commercial users (who will be seeking a safer Open Source solution right now).

I completely agree. Right now it is very hard for home users to use Automatic Updates or Microsoft Update. And for commercial users? It sucks that there isn't anything out there that allows administrators to centrally control the update process.

Wow, you found a patch that affects most of Microsoft's Operating Systems. Rare indeed.

At least they're responsible enough to distribute their own prophylactic lately.

Don't just dump IE.

Dump MicroSLOP
completely !

Yours In Novosibirsk,
K. Trout

This one has been around since Windows 95. Still no fix...

For specific, product-related information, please go to http://www.microsoft.com/ ;-)

True IE 6 hasn't but if you read the microsoft bulletin it also says that IE 7 and 8 share the vulnerability. http://www.microsoft.com/technet/security/advisory/979352.mspx "Our investigation so far has shown that Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4 is not affected, and that Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4, and Internet Explorer 6, Internet Explorer 7 and Internet Explorer 8 on supported editions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 are vulnerable."

Per my subject-line above, & this URL below (where you asked your questions):

http://slashdot.org/comments.pl?sid=1495166&cid=30715150

"Hi APK :)" - by Foredecker (161844) * on Sunday January 10, @11:57AM (#30715150) Homepage Journal

Hello Foredecker!

----

"Happy new year! Its been the Christmas and New years holiday. I've been on vacation. So has almost anyone else I'd need to talk to about this. We're all back now, but we're all very busy getting going after the Holidays." - by Foredecker (161844) * on Sunday January 10, @11:57AM (#30715150) Homepage Journal

Great, that's good news (& pretty much what you wrote in your email also)...

----

"Be patient :) Ill get to this. I just dont know when. I think I can get back to you by mid February, but it may be March.." - by Foredecker (161844) * on Sunday January 10, @11:57AM (#30715150) Homepage Journal

That's ok - See... this isn't just for "my benefit", but for all the folks that use HOSTS files

(Folks like Mr. Oliver Day @ securityfocus.com -> http://www.securityfocus.com/columnists/491 who KNOWS it gains you better online speeds AND security (as he states it in his article there for SYMANTEC) , the folks @ mvps.org -> http://www.mvps.org/winhelp2002/hosts.htm and the folks @ bluetack/BISS who do also -> http://blocklistpro.com/biss-hosts-file-manager.html & many others online, like myself, who know BOTH the added speed and security benefits inherent in the use of a CUSTOM HOSTS file...

I mean, hey - After all:

You folks @ Microsoft can regain what you yourselves made as a BETTER STANDARD (setting a new one) in HOSTS files being able to use a 0 blocking address (which in turn yields a faster internal parsing format per each line record in a HOSTS file for blocking purposes by doing so, because of less characters per line (using 0, vs. 0.0.0.0 or worse yet, 127.0.0.1) as well as a small HOSTS file...) back as far as Windows 2000, albeit, in a service pack AFTER its original distro on CD... which you kept up even into VISTA, up until MS "Patch Tuesday" on 12/08/2008, when it was suddenly removed... why though?

The fairly "recent" changes to the IP stack in VISTA/Windows Server 2008/Windows 7 have resulted in some "StRaNgE" stuff happening like -> http://www.microsoft.com/technet/security/bulletin/ms09-050.mspx OR here -> http://www.microsoft.com/technet/security/advisory/977544.mspx and, of course, what rootkit.com said about unhooking the firewall design based on NDIS6/WFP now being EASIER TO UNHOOK THAN THE OLDER MODELS OF WINDOWS HAD -> http://www.rootkit.com/newsread.php?newsid=952 ...

(I'm only trying to help you AND your company, by pointing this issue I have noted on HOSTS files being unable to use a 0 blocking address internally is all (because HOSTS files are invaluable for gaining both SPEED, and LAYERED SECURITY)... &, because the numbers & "physics of it" tend to bear out what I state here as the absolute truth is all as to the efficiency of the 0 blocking address format, vs. 0.0.0.0 &/or 127.0.0.1 ...)

There is, again, per my email to you, another issue surrounding this: That's the local DNS Client Cache FAILING on larger HOSTS files... that's another one to look into, in regards to this HOSTS files issue too.

Per my subject-line above, & this URL below (where you asked your questions):

http://slashdot.org/comments.pl?sid=1495166&cid=30715150

"Hi APK :)" - by Foredecker (161844) * on Sunday January 10, @11:57AM (#30715150) Homepage Journal

Hello Foredecker!

----

"Happy new year! Its been the Christmas and New years holiday. I've been on vacation. So has almost anyone else I'd need to talk to about this. We're all back now, but we're all very busy getting going after the Holidays." - by Foredecker (161844) * on Sunday January 10, @11:57AM (#30715150) Homepage Journal

Great, that's good news (& pretty much what you wrote in your email also)...

----

"Be patient :) Ill get to this. I just dont know when. I think I can get back to you by mid February, but it may be March.." - by Foredecker (161844) * on Sunday January 10, @11:57AM (#30715150) Homepage Journal

That's ok - See... this isn't just for "my benefit", but for all the folks that use HOSTS files

(Folks like Mr. Oliver Day @ securityfocus.com -> http://www.securityfocus.com/columnists/491 who KNOWS it gains you better online speeds AND security (as he states it in his article there for SYMANTEC) , the folks @ mvps.org -> http://www.mvps.org/winhelp2002/hosts.htm and the folks @ bluetack/BISS who do also -> http://blocklistpro.com/biss-hosts-file-manager.html & many others online, like myself, who know BOTH the added speed and security benefits inherent in the use of a CUSTOM HOSTS file...

I mean, hey - After all:

You folks @ Microsoft can regain what you yourselves made as a BETTER STANDARD (setting a new one) in HOSTS files being able to use a 0 blocking address (which in turn yields a faster internal parsing format per each line record in a HOSTS file for blocking purposes by doing so, because of less characters per line (using 0, vs. 0.0.0.0 or worse yet, 127.0.0.1) as well as a small HOSTS file...) back as far as Windows 2000, albeit, in a service pack AFTER its original distro on CD... which you kept up even into VISTA, up until MS "Patch Tuesday" on 12/08/2008, when it was suddenly removed... why though?

The fairly "recent" changes to the IP stack in VISTA/Windows Server 2008/Windows 7 have resulted in some "StRaNgE" stuff happening like -> http://www.microsoft.com/technet/security/bulletin/ms09-050.mspx OR here -> http://www.microsoft.com/technet/security/advisory/977544.mspx and, of course, what rootkit.com said about unhooking the firewall design based on NDIS6/WFP now being EASIER TO UNHOOK THAN THE OLDER MODELS OF WINDOWS HAD -> http://www.rootkit.com/newsread.php?newsid=952 ...

(I'm only trying to help you AND your company, by pointing this issue I have noted on HOSTS files being unable to use a 0 blocking address internally is all (because HOSTS files are invaluable for gaining both SPEED, and LAYERED SECURITY)... &, because the numbers & "physics of it" tend to bear out what I state here as the absolute truth is all as to the efficiency of the 0 blocking address format, vs. 0.0.0.0 &/or 127.0.0.1 ...)

There is, again, per my email to you, another issue surrounding this: That's the local DNS Client Cache FAILING on larger HOSTS files... that's another one to look into, in regards to this HOSTS files issue too.

It has come to my attention that the entire Linux community is a hotbed of so called 'alternative sexuality', which includes anything from hedonistic orgies to homosexuality to paedophilia.

What better way of demonstrating this than by looking at the hidden messages contained within the names of some of Linux's most outspoken advocates:

• Linus Torvalds is an anagram of slit anus or VD 'L,' clearly referring to himself by the first initial.
• Richard M. Stallman, spokespervert for the Gaysex's Not Unusual 'movement' is an anagram of mans cram thrill ad.
• Alan Cox is barely an anagram of anal cox which is just so filthy and unchristian it unnerves me.

I'm sure that Eric S. Raymond, composer of the satanic homosexual propaganda diatribe The Cathedral and the Bizarre, is probably an anagram of something queer, but we don't need to look that far as we know he's always shoving a gun up some poor little boy's rectum. Update: Eric S. Raymond is actually an anagram for secondary rim and cord in my arse. It just goes to show you that he is indeed queer.

Update the Second: It is also documented that Evil Sicko Gaymond is responsible for a nauseating piece of code called Fetchmail, which is obviously sinister sodomite slang for 'Felch Male' -- a disgusting practise. For those not in the know, 'felching' is the act performed by two perverts wherein one sucks their own post-coital ejaculate out of the other's rectum. In fact, it appears that the dirty Linux faggots set out to undermine the good Republican institution of e-mail, turning it into 'e-male.'

As far as Richard 'Master' Stallman goes, that filthy fudge-packer was actually quoted on leftist commie propaganda site Salon.com as saying the following: 'I've been resistant to the pressure to conform in any circumstance,' he says. 'It's about being able to question conventional wisdom,' he asserts. 'I believe in love, but not monogamy,' he says plainly.

And this isn't a made up troll bullshit either! He actually stated this tripe, which makes it obvious that he is trying to politely say that he's a flaming homo slut!

Speaking about 'flaming,' who better to point out as a filthy chutney ferret than Slashdot's very own self-confessed pederast Jon Katz. Although an obvious deviant anagram cannot be found from his name, he has already confessed, nay boasted of the homosexual perversion of corrupting the innocence of young children. To quote from the article linked:

'I've got a rare kidney disease,' I told her. 'I have to go to the bathroom a lot. You can come with me if you want, but it takes a while. Is that okay with you? Do you want a note from my doctor?'

Is this why you were touching your penis in the cinema, Jon? And letting the other boys touch it too?

We should also point out that Jon Katz refers to himself as 'Slashdot's resident Gasbag.' Is there any more doubt? For those fortunate few who aren't aware of the list of homosexual terminology found inside the Linux 'Sauce Code,' a 'Gasbag' is a pervert who gains sexual gratification from having a thin straw inserted into his urethra (or to use the common parlance, 'piss-pipe'), then his homosexual lover blows firmly down the straw to inflate his scrotum. This is, of course, when he's not busy violating the dignity and co

It has come to my attention that the entire Linux community is a hotbed of so called 'alternative sexuality', which includes anything from hedonistic orgies to homosexuality to paedophilia.

What better way of demonstrating this than by looking at the hidden messages contained within the names of some of Linux's most outspoken advocates:

• Linus Torvalds is an anagram of slit anus or VD 'L,' clearly referring to himself by the first initial.
• Richard M. Stallman, spokespervert for the Gaysex's Not Unusual 'movement' is an anagram of mans cram thrill ad.
• Alan Cox is barely an anagram of anal cox which is just so filthy and unchristian it unnerves me.

I'm sure that Eric S. Raymond, composer of the satanic homosexual propaganda diatribe The Cathedral and the Bizarre, is probably an anagram of something queer, but we don't need to look that far as we know he's always shoving a gun up some poor little boy's rectum. Update: Eric S. Raymond is actually an anagram for secondary rim and cord in my arse. It just goes to show you that he is indeed queer.

Update the Second: It is also documented that Evil Sicko Gaymond is responsible for a nauseating piece of code called Fetchmail, which is obviously sinister sodomite slang for 'Felch Male' -- a disgusting practise. For those not in the know, 'felching' is the act performed by two perverts wherein one sucks their own post-coital ejaculate out of the other's rectum. In fact, it appears that the dirty Linux faggots set out to undermine the good Republican institution of e-mail, turning it into 'e-male.'

As far as Richard 'Master' Stallman goes, that filthy fudge-packer was actually quoted on leftist commie propaganda site Salon.com as saying the following: 'I've been resistant to the pressure to conform in any circumstance,' he says. 'It's about being able to question conventional wisdom,' he asserts. 'I believe in love, but not monogamy,' he says plainly.

And this isn't a made up troll bullshit either! He actually stated this tripe, which makes it obvious that he is trying to politely say that he's a flaming homo slut!

Speaking about 'flaming,' who better to point out as a filthy chutney ferret than Slashdot's very own self-confessed pederast Jon Katz. Although an obvious deviant anagram cannot be found from his name, he has already confessed, nay boasted of the homosexual perversion of corrupting the innocence of young children. To quote from the article linked:

'I've got a rare kidney disease,' I told her. 'I have to go to the bathroom a lot. You can come with me if you want, but it takes a while. Is that okay with you? Do you want a note from my doctor?'

Is this why you were touching your penis in the cinema, Jon? And letting the other boys touch it too?

We should also point out that Jon Katz refers to himself as 'Slashdot's resident Gasbag.' Is there any more doubt? For those fortunate few who aren't aware of the list of homosexual terminology found inside the Linux 'Sauce Code,' a 'Gasbag' is a pervert who gains sexual gratification from having a thin straw inserted into his urethra (or to use the common parlance, 'piss-pipe'), then his homosexual lover blows firmly down the straw to inflate his scrotum. This is, of course, when he's not busy violating the dignity and co

It has come to my attention that the entire Linux community is a hotbed of so called 'alternative sexuality', which includes anything from hedonistic orgies to homosexuality to paedophilia.

What better way of demonstrating this than by looking at the hidden messages contained within the names of some of Linux's most outspoken advocates:

• Linus Torvalds is an anagram of slit anus or VD 'L,' clearly referring to himself by the first initial.
• Richard M. Stallman, spokespervert for the Gaysex's Not Unusual 'movement' is an anagram of mans cram thrill ad.
• Alan Cox is barely an anagram of anal cox which is just so filthy and unchristian it unnerves me.

I'm sure that Eric S. Raymond, composer of the satanic homosexual propaganda diatribe The Cathedral and the Bizarre, is probably an anagram of something queer, but we don't need to look that far as we know he's always shoving a gun up some poor little boy's rectum. Update: Eric S. Raymond is actually an anagram for secondary rim and cord in my arse. It just goes to show you that he is indeed queer.

Update the Second: It is also documented that Evil Sicko Gaymond is responsible for a nauseating piece of code called Fetchmail, which is obviously sinister sodomite slang for 'Felch Male' -- a disgusting practise. For those not in the know, 'felching' is the act performed by two perverts wherein one sucks their own post-coital ejaculate out of the other's rectum. In fact, it appears that the dirty Linux faggots set out to undermine the good Republican institution of e-mail, turning it into 'e-male.'

As far as Richard 'Master' Stallman goes, that filthy fudge-packer was actually quoted on leftist commie propaganda site Salon.com as saying the following: 'I've been resistant to the pressure to conform in any circumstance,' he says. 'It's about being able to question conventional wisdom,' he asserts. 'I believe in love, but not monogamy,' he says plainly.

And this isn't a made up troll bullshit either! He actually stated this tripe, which makes it obvious that he is trying to politely say that he's a flaming homo slut!

Speaking about 'flaming,' who better to point out as a filthy chutney ferret than Slashdot's very own self-confessed pederast Jon Katz. Although an obvious deviant anagram cannot be found from his name, he has already confessed, nay boasted of the homosexual perversion of corrupting the innocence of young children. To quote from the article linked:

'I've got a rare kidney disease,' I told her. 'I have to go to the bathroom a lot. You can come with me if you want, but it takes a while. Is that okay with you? Do you want a note from my doctor?'

Is this why you were touching your penis in the cinema, Jon? And letting the other boys touch it too?

We should also point out that Jon Katz refers to himself as 'Slashdot's resident Gasbag.' Is there any more doubt? For those fortunate few who aren't aware of the list of homosexual terminology found inside the Linux 'Sauce Code,' a 'Gasbag' is a pervert who gains sexual gratification from having a thin straw inserted into his urethra (or to use the common parlance, 'piss-pipe'), then his homosexual lover blows firmly down the straw to inflate his scrotum. This is, of course, when he's not busy violating the dignity and co

Wrong... the problem is in ALL versions of IE from at least 6 upwards on ALL operating systems from at least XP upwards. Microsoft themselves admitted that.

Our investigation so far has shown that Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4 is not affected, and that Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4, and Internet Explorer 6, Internet Explorer 7 and Internet Explorer 8 on supported editions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 are vulnerable.

Microsoft Advisory

Why are people still perpetuating the myth that this does not affect IE7 or IE8 when Microsoft themselves claim it does?!?!?! Just curious.

If we were able to have a less black and white discussion about this (yeah, right..) it might be better understood that default configuration of IE8 on Vista/W7 (protected mode, dep) is not vulnerable to this attack. But MSRC are, quite rightly, classifying the browser as vulnerable because it is possible for end user to make themselves vulnerable by turning off the default security measures.

I don't think anyone on the planet can find a D-Link security contact. More responsible companies make this easy.

Wrong... the problem is in ALL versions of IE from at least 6 upwards on ALL operating systems from at least XP upwards. Microsoft themselves admitted that.

Our investigation so far has shown that Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4 is not affected, and that Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4, and Internet Explorer 6, Internet Explorer 7 and Internet Explorer 8 on supported editions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 are vulnerable.

Microsoft Advisory

Why are people still perpetuating the myth that this does not affect IE7 or IE8 when Microsoft themselves claim it does?!?!?! Just curious.

But, although IE6 has been the source of the attacks until now, Microsoft's advisory admits that both IE7 and IE8 are vulnerable to the same flaw, even on Windows 7.

Someone needs to do a lot better research when writing these articles or posting them to Slashdot or both.

THIS is blatantly wrong:

Microsoft still insists IE8 is the 'most secure browser on the market' and that they believe IE6 is the only browser susceptible to the flaw. However, security researchers warned that could soon change, and recommended considering alternative browsers as well."

Heck, simply reading Slashdot would have turned up this:
Slashdot Article on this

Or this from Microsoft themselves which states even Microsoft believe no such thing.
Microsoft Admits IE7 and IE8 are vulnerable to this too

Our investigation so far has shown that Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4 is not affected, and that Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4, and Internet Explorer 6, Internet Explorer 7 and Internet Explorer 8 on supported editions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 are vulnerable.

I posted something similar about this days ago on yet another similar topic, but was laughed at by the MS/IE zealots who claim Microsoft said only IE6 is vulnerable... so, since they cant read obviously, there it is again... with the relevant section BOLDED this time.

C'mon folks, these RCEs are not new stuff, and seem to exist in EVERY version of IE since the beginning of time till now with "patches" that never fully address the issue (hence, as MICROSOFT themselves noted, this issue is... well... still an issue... even for IE7 and IE8).

Their lame (see story link above) answer that people should upgrade to IE8 as if that was the solution to this problem is idiotic. Yeah, people should upgrade to IE8 (if their machines can actually run it - some of my clients have older, slower machines and no budget to replace them)... but Microsoft should also be working on actually fixing all the RCE exploits and buffer issues in the IE line.

Regardless, my point is, with so much coverage over this (on Slashdot alone), you'd think the "Story Approvers" or author would have gotten that glaringly misleading (and incorrect) point correct. Oh well.

They use Cygwin for scripting a command shell.

Cygwin isn't a bad solution for keeping a semi-consistent shell across OS's. I use it in a few places where we need windows and have a few tasks like reading old sun tar tapes. I have more issues remembering the syntax differences between difference shells. PowerShell is pretty decent, but it is certainly not the same as a *nix shell.

And you cannot use a name for mount points, just one letter

Go lookup volume GUID path and mount points. MS has been trying to get rid of drive letters. Underneath you can refer to the volumes by their gui. http://msdn.microsoft.com/en-us/library/aa365248(VS.85).aspx. NTFS supports mount points work just like *nix mounts, although that capability isn't exposed to the user very well.

I could go on and on, for any professional systems administrator, Unix is far superior to Windows, there is no doubt about that. It's only for home computers that familiarity is a convenience, professionals can be readily trained to use a system that's intrinsically easier to use.

I somehow feel that trying to make a new OS that has exactly the same "feel" as Windows is like trying to make a modern car that has exactly the same feel as a Ford Model T.

You're starting to rant a bit here. The _best_ operating system is the one provides the functionality with minimal maintenance and good security. Just because you prefer and understand linux best, doesn't automatically mean linux is the best solution for everything. Try implementing the ease and manageability that a well deployed Active Directory solution provides with Linux. You'll end up with a one-off cobbling together of ldap and scripts that will require _more_ expertise and maintenance than a similar Microsoft solution.

I somehow feel that trying to make a new OS that has exactly the same "feel" as Windows is like trying to make a modern car that has exactly the same feel as a Ford Model T.

I think you missed the point. It's not about the "feel" of the OS. It's about getting Windows software to run seamlessly on an open-source OS.

MIcroslop completely.

Yours In Novosibirsk,
Kilgore Trout

Looking at another Robots.txt file seems to return what I expect.

Let no rock remain unthrown when it shows Microsoft is in the wrong - even if they aren't

It seems that all exploits that I've read about over the last decade all boil down to the same flaws - buffer overflows, invalid pointers, format strings, etc.
Yet, developers persist in using the same old programming languages & libraries that are rife with weaknesses.
Why haven't they changed to something better?

They did. A few examples for Microsoft in particular, listed in no specific order:

- .NET and C#/VB are memory-safe (though you can explicitly opt out in C# with "unsafe" code).
- StrSafe - C
- ISO C TR 24731 aka "Secure CRT" - C
- checked STL containers and iterators (bounds checking, iterator invalidation etc) - C++

The problem is that any memory-unsafe language (which both C and C++ are) has ways to work around any such library, and writing everything in a high-level language/framework (such as C#/.NET) is unfeasible because of performance requirements, and the sheer volume of existing C/C++ code. That said, there clearly is a trend of using higher-level languages and frameworks for new developments: any .NET language on Windows, Python or Ruby on Linux, Java mostly for internal corporate applications on various Unix flavors, etc; with only the perf-critical code parts implemented in C/C++ and called via FFI of high-level language used.

It seems that all exploits that I've read about over the last decade all boil down to the same flaws - buffer overflows, invalid pointers, format strings, etc.
Yet, developers persist in using the same old programming languages & libraries that are rife with weaknesses.
Why haven't they changed to something better?

They did. A few examples for Microsoft in particular, listed in no specific order:

- .NET and C#/VB are memory-safe (though you can explicitly opt out in C# with "unsafe" code).
- StrSafe - C
- ISO C TR 24731 aka "Secure CRT" - C
- checked STL containers and iterators (bounds checking, iterator invalidation etc) - C++

The problem is that any memory-unsafe language (which both C and C++ are) has ways to work around any such library, and writing everything in a high-level language/framework (such as C#/.NET) is unfeasible because of performance requirements, and the sheer volume of existing C/C++ code. That said, there clearly is a trend of using higher-level languages and frameworks for new developments: any .NET language on Windows, Python or Ruby on Linux, Java mostly for internal corporate applications on various Unix flavors, etc; with only the perf-critical code parts implemented in C/C++ and called via FFI of high-level language used.

It seems that all exploits that I've read about over the last decade all boil down to the same flaws - buffer overflows, invalid pointers, format strings, etc.
Yet, developers persist in using the same old programming languages & libraries that are rife with weaknesses.
Why haven't they changed to something better?

They did. A few examples for Microsoft in particular, listed in no specific order:

- .NET and C#/VB are memory-safe (though you can explicitly opt out in C# with "unsafe" code).
- StrSafe - C
- ISO C TR 24731 aka "Secure CRT" - C
- checked STL containers and iterators (bounds checking, iterator invalidation etc) - C++

The problem is that any memory-unsafe language (which both C and C++ are) has ways to work around any such library, and writing everything in a high-level language/framework (such as C#/.NET) is unfeasible because of performance requirements, and the sheer volume of existing C/C++ code. That said, there clearly is a trend of using higher-level languages and frameworks for new developments: any .NET language on Windows, Python or Ruby on Linux, Java mostly for internal corporate applications on various Unix flavors, etc; with only the perf-critical code parts implemented in C/C++ and called via FFI of high-level language used.

The submission consists of a factual statement and some literal quotes from Microsoft. If this is FUD about explorer it is Microsoft FUD about explorer and not the submitters.

Submitter "quoted" some quotes of Microsoft statements from a news site (PC Pro). As it turns out that is actually a misrepresentation of the factual statements made by MS.

The article actually had a link to real statements from Microsoft on the issue (security advisory). To quote those:

Mitigating Factors:

• Data Execution Protection (DEP) is enabled by default in Internet Explorer 8 on the following Windows operating systems: Windows XP Service Pack 3, Windows Vista Service Pack 1, Windows Vista Service Pack 2, and Windows 7.
• Protected Mode in Internet Explorer on Windows Vista and later Windows operating systems limits the impact of the vulnerability.

The advisory can be found here: http://www.microsoft.com/technet/security/advisory/979352.mspx.

Is it too much to ask that submitters actually click the links and read background information before quoting quotes? Or would it spoil a good MS bashing?

How is this a troll? What he said is true.

Corporate IT departments don't want to deploy Firefox, Chrome, or Safari because they can't be centrally managed. There is no equivalent to the IEAK. Chrome is particularly loathed by IT departments because you can download it, install it, and run it as a user because the program only installs to the user's application directory. Additionally, adding Firefox means you've also got to support that in addition to IE. Switching away from IE doesn't mean you can stop supporting it; it's a core OS component.

Summary gives the impression that MP4 and M4V are different (or platform-flavoured), but I have no trouble with renaming them back and forth.
M4V is iTunes-friendly, certainly. But that's a file association that can be tweaked in a few clicks.
V is just shorthand for video to clarify what the content inside the container is. A for audio, B for bookmarked audio, R for ringtones, etc. Apple is doing the same thing that Microsoft is doing with ASF, WMA and WMV.
http://en.wikipedia.org/wiki/MPEG-4_Part_14#.MP4_versus_.M4A_file_extensions
http://support.microsoft.com/kb/284094

The simple fact is that ignoring robots.txt is effectively evil, regardless of the intent. It's not like robots.txt is some new innovation...

Since when did Microsoft feel existing standards were something to honour? How many times have its browsers changed behaviour? Re-defined entrenched URL standards (you cannot specify username/password in an Internet Explorer URL but this is a legal standard form of URL)?

It stands to reason Microsoft would take no notice of anything your website has to say.

Unless.. of course.. Microsoft define a certificate type that can sign your Microsoft-specific format exception list after payment on an annual licensing basis..

Oh hey, another Microsoft example: Vista! After all, why assume someone upgrading their operating system might expect the same if not better!

PS see http://support.microsoft.com/kb/834489

Alright, I'll bite. Those people who stupidly purchased DRMed music with PlaysForSure have until the end of 2011 to backup their music to CD. Microsoft Java was supported for 8 years after Microsoft were forced to discontinue the product as part of the settlement of Sun's lawsuit. COM is still in use today. I don't understand why that is on your list.

Alright, I'll bite. Those people who stupidly purchased DRMed music with PlaysForSure have until the end of 2011 to backup their music to CD. Microsoft Java was supported for 8 years after Microsoft were forced to discontinue the product as part of the settlement of Sun's lawsuit. COM is still in use today. I don't understand why that is on your list.

Its Active X in internet Explorer thats usually the issue. Turn it off

I'm sure I have seen this issue before about IE and the zero day issue in a news article.

Yep found it and it has those chinese hacker type persons in it as well in 2008. ;-)
http://www.h-online.com/security/news/item/Two-new-zero-day-exploits-dent-Microsoft-s-Patch-Tuesday-739273.html

Here is micro$oft's advice on how to disable Active content.
http://support.microsoft.com/kb/154036

Who doesn't use Google to search MSDN? I haven't tried MSDN's own search recently, but at least it used to be utter shit. Slow and bad results. You search for an API function, it turns up the Windows CE version near the top, with the normal one maybe buried software. Fucking useless.

I'm not sure what engine it was using before. Perhaps it was MSN/Live Search, actually, as that was also rather infamous for poor search results.

Now that it uses Bing as a backend, it actually works fine. For example, searching for CreateWindow gets the Win32 function on top, then the WinCE one, then a bunch of other links that are quite relevant (WM_CREATE, a sample application etc). It also has a decent presentation of search results with no information overload - just a very simplistic link listing, and no ads etc.