Archive | Home Page

Articles to appear on the home page (nearly all)

Doc Searls posts Syndicate keynote audio and slides: Because vs. With

The Doc Searls Weblog posts Better late than later. “I’ve finally put up the slides from my closing keynote at the Syndicate conference in New York. Here’s the audio (a podcast on its own). Here’s one version of the original, with all the builds. For my friends who have problems with my resistance to characterizing the Net as a “medium” for the transport of “content,” I begin making my case here, and expand on it here.”

It’s a great presentation and worth the time to listen if only to enjoy the delivery. If you’re in a rush, here’s one of several points and another. Well worth a bit of study.

Rhode Island government on the web, at your service

Garrett Fitzgerald’s Blog notes Rhode Island government on the net. The Rhode Island state government has an API!

It is simply unacceptable at this point in history that a citizen can use web services to track the movies he is renting, the weather around his house, and the books he’s recently purchased but cannot as easily monitor data regarding the quality of his drinking water, legislation or regulations that will directly impact his work or personal life, what contracts are currently available to bid on for his state, or what crimes have recently occurred on his street.

Cool!

IE bug can crash the browser; might allow malicious code to run

InfoWorld: Top News reports IE bug can crash browser. “Security researchers have discovered a bug in Microsoft’s Internet Explorer (IE) browser that can cause the software to crash, and which could possibly be used to let an attacker run unauthorized software on the IE user’s machine.” Translation: slow news day before American and Canadian holiday weekend. Nothing to see here, folks, move along…

Microsoft Watch: Will RSS expose Longhorn to exploit?

Microsoft Watch from Mary Jo Foley notes The Downside of Embedding RSS in Longhorn. “Microsoft watchers are thinking through the security implications of Microsoft’s plan to embed RSS in Longhorn.”

The upside is that Microsoft bundling a feature in with their OS means that developers can count on the feature being available (although uptake of recent versions of windows may mean that’s only 20% of all Windows users). The downside is that it means malicious developers can count on it being available. While Microsoft is getting better at shipping software less exposed to exploit, it still enlarged the exposed surface for exploit.

The Death Spiral

A reader flamed me recently for commenting that Microsoft was on a “death spiral.” That wasn’t just vindictive thinking because they’re killing my favorite product or because their insecure OS allows malicious software to splatter my Dad’s computer. That was a real live professional opinion from a computer consultant who’s spent 20+ years in the industry and seen ’em come and go. 8″ floppies, paper tape, Winchester drives, Business Basic, Data General, WANG, Digital, blah, blah, blah, ones and zeros? You had zeroes? Now, bear in mind I was also a big Amiga and GEOS fan, so vision is not what I sell to clients. I deliver working code.

Otoh, Mitch Kapor has a lot of experience shipping code, delivering product, selling into the Fortune 100, reviewing business plans, and working venture capital deals. He’s got some of that vision thing too. He had a profile in the Boston Globe recently (sadly, it disappears behind a paywall soon) that talked about his work with EFF and the exciting Open Source product called Chandler, which promises to be a well-thought-out PIM. The killer quote at the end of the article:

”Chandler could fail totally,” he said. ”But open source as a movement is something that Microsoft cannot defeat. . . .Their style of triumph and of dominance is part of an era whose time is passing.”

What is the best firewall for Windows servers?

Slashdot hosts an interesting question: What is the Best Firewall for Servers?. Sushant Bhatia asks: “I maintain a bunch of servers (Win 2003/XP Pro) at our labs in the university. Of late, the number of attacks on the computers has been more noticeable. The university provides firewall software (Kerio) but that doesn’t work with Win 2003 (works with XP). And so we keep getting hit by zombie machines taken over in the Education Department or from Liberal Arts :-). So what does the Slashdot crowd use when they need to secure their Linux and Windows servers? Does it cost less than US$100?”

Slashdot is filled with trolls, so setting your threshold around 4 raises the level of discussion and lowers the number of responses to read (although the rebar and concrete answer was a keeper). Interesting that the responses were pretty strongly “FreeBSD.” An answer near the bottom points out the latest W2K3 service pack provides the WinXP firewall to W2K3 servers. Another posting argues that each Windows machine needs its own firewall in addition to the perimeter. The perimeter defense was proven to have some serious flaws in the fall of Troy. Amazing that it is still considered.

Powered by WordPress. Designed by Woo Themes

This work by Ted Roche is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 United States.