Thursday, September 28, 2006
Microsoft Patches VML Vulnerability
"Microsoft has quietly released an official patch for the zero-day VML vulnerability. The patch was publicly available yesterday, But Microsoft has just added it to the Security Bulletin Index." Eight days from time of first report to patch is pretty fast for Microsoft, and is almost two weeks ahead of their normal patch schedule. This security flaw was being aggressively exploited out in the wild.
Friday, September 22, 2006
The US Navy Says Goodbye to the Tomcat
"Though it's not being widely reported, this week marks the end of the line for the F-14 Tomcat in US Navy service. First flown in 1970, the Grumman F-14 Tomcat was easily one of the world's most powerful, advanced, and deadly aircraft for many years, capable of flying at Mach 2.3 and firing its half-dozen Mach 5 AIM-54 Phoenix air-to-air missiles at targets as much as 100 miles away. Having been gradually replaced during the last several years by the newer F/A-18E/F, the last of the aircraft in US service will be officially retired on Friday, September 22nd in a ceremony at Virginia's Oceana Naval Air Station. However, at least a few F-14s will continue to fly for a few more years: Iran — which took delivery of 79 aircraft before the overthrow of the Shah — still flies the plane, though only a small number (perhaps ten or twenty) are believed to still be in service due to a lack of spare parts and attrition."
Monday, September 18, 2006
Google.org, a For-Profit Charity
Google has set up a subsidiary, Google.org, a for-profit philanthropy with initial capital of a billion dollars. Not being organized on a tax-free basis carries both advantages and drawbacks. From the article: "Unlike most charities, this one will be for-profit, allowing it to fund start-up companies, form partnerships with venture capitalists and even lobby Congress. It will also pay taxes." One of Google.org's first projects is the development of a plug-in hybrid vehicle that achieves a mileage rating equivalent to 100 MPG.
The Engine of US Jobs
"BusinessWeek has an interesting take on the US job situation, What's Really Propping Up The Economy. I think many of us have felt the US tech job market was stagnant and this article has insights into why this economy is so hot, yet not from our perspective. The spoiler is the business of health care — which will come as no surprise to anybody who has looked through the help wanted section lately. BusinessWeek has some opinions on how IT should play a bigger role in the health care industry."
Wednesday, September 13, 2006
Microsoft Re-Re-Releases IE Patch
"InfoWorld reports that on Tuesday Microsoft quietly released the second update for MS06-042. This is the cumulative patch for IE that actually introduced a new security hole into systems that applied the update. Microsoft re-released the patch back in August, but it now turns out that the updated patch had yet another vulnerability similar to the first, once again discovered by folks at eEye Digital Security. As with the previous hole, it concerned the handling of long URLs from web sites using HTTP 1.1 with compression."
Thursday, September 07, 2006
CSS: The Missing Manual
"Ever since Cascading Style Sheets (CSS) first appeared on the Web scene in the late 1990s, a plethora of books have been written and published that purport to explain how CSS works, and how to make it work for you. So why would any publisher decide that what the technical world needs is yet another CSS book? Perhaps because they have taken a close look at the bulk of those available titles, and found them to be wanting — filled with overly theoretical explanations and sample code that is far too focused on some pet domain of the author. Such books may be adequate for the veteran Web developer, who has the time and inclination to separate the wheat from the chaff. But developers new to CSS need much more approachable material, with clear examples. Perhaps that is the thinking behind CSS: The Missing Manual."
Tuesday, September 05, 2006
Google Releases Tesseract as Open Source
"Google recently released Tesseract as open source. Originally developed at the HP Labs from 1985-1995, it has been touted as one of the most accurate Optical Character Recognition (OCR) programs available. Having sat on the shelf gathering dust for so many years, Google cleaned up some of the more outdated portions of the code and released it for general consumption. You can download Tesseract over at Sourceforge.
Microsoft Research Builds 'BrowserShield'
"Researchers at Microsoft have completed work on a prototype framework called BrowserShield that promises to intercept and remove, on the fly, malicious code hidden on Web pages, instead showing users safe equivalents of those pages. The BrowserShield project, an outgrowth of the company's 'Shield' initiative, could one day even become Microsoft's answer to zero-day browser exploits such as the WMF (Windows Metafile) attack that spread like wildfire in December 2005."