Archive | Microsoft

McAfee quarantines files incorrectly

From Slashdot: McAfee Anti-Virus Causes Widespread File Damage. AJ Mexico writes, “[Friday] McAfee released an anti-virus update that contained an anomaly in the DAT file that caused many important files to be deleted from affected systems. At my company, tens of thousands of files were deleted from dozens of servers and around 2000 user machines. Affected applications included MS Office, and products from IBM (Rational), GreenHills, MS Office, Ansys, Adobe, Autocad, Hyperion, Win MPM, MS Shared, MapInfo, Macromedia, MySQL, CA, Cold Fusion, ATI, FTP Voyager, Visual Studio, PTC, ADS, FEMAP, STAT, Rational.Apparently the DAT file targeted mostly, if not exclusively, DLLs and EXE files.” An anonymous reader added, “Already, the SANS Internet Storm Center received a number of notes from distressed sysadmins reporting thousands of deleted or quarantined files. McAfee in response released advice to restore the files. Users who configured McAfee to delete files are left with using backups (we all got good backups… or?) or System restore.”

News.com: McAfee update exterminates Excel

SANS Internet Storm Center

Another one bites the dust?

Microsoft Watch from Mary Jo Foley notes Vista Sheds Another Anticipated Feature?. “little explanation (so far at least), Microsoft has decided to cut from Windows Vista planned support for the Extensible Firmware Interface (EFI).” Isn’t EFI the next generation replacement of BIOS used in the Intel-based MacBooks? I think I’d feel more secure knowing I couldn’t boot Windows on my MacBook…

Patch Tuesday coming with few patches

Computerworld News reports Microsoft to issue one critical patch Tuesday. “In its monthly patch release next Tuesday, Microsoft Corp. said it will issue one critical security bulletin concerning the Office suite and one bulletin on Windows that is rated important.”

Later on in the article, they explain, “Microsoft will distribute its updated version of the Windows Malicious Software Removal Tool via Windows Update, Microsoft Update, Windows Server Update Services and the Download Center… There will also be one non-security High-Priority Update on Microsoft Update and Windows Server Update Services. There won’t be any non-security High-Priority Updates for Windows coming over Windows Update or Software Update Services.” Well, that certainly clears things up.

OpenOffice.org lagging behind MSOffice?

Linux-Watch.com asks: “Is OpenOffice really ten years behind MS Office?” A better question might be if that’s a bad thing. The 2nd edition of “Hacker’s Guide to Word for Windows” printed in 1995 claims to cover WinWord 6. How many more features did we really need? Toolbars that transmogrified into palettes? Menus that went 3-D when the mouse was over them? The words came out the same.

I don’t agree that OpenOffice.org is “ten years behind.” I still can’t get it to run the Melissa virus. But I’m not sure “ten years behind” or even better “ten years on a different path” is a bad thing.

Stealing Your Biometrics

InfoWorld: Top News is reporting Researcher hacks Microsoft Fingerprint Reader.

(InfoWorld) – “Never mind worrying about hackers stealing your password. A security researcher with the Finnish military has shown how they could steal your fingerprint, by taking advantage of an omission in Microsoft’s Fingerprint Reader, a PC authentication device that Microsoft has been shipping since September 2004.”

When you lose your password, you can get it reset. When your credit card shows suspicious activity, you can get a new and different one. What happens when your fingerprints are stolen?

Why Not FoxPro?

On the ProFox mailing list on 2/24/06, Dave Bernard wrote: > > For every person on this planet planning or executing a complete rewrite of > a working line of business VFP system (not a developer tool) into > .NET/J2EE/anything, I want to ask a simple question: > > “What were the business reason(s) for doing so?” >

1. Scale. Client wanted to move to gigabytes of data, and their internal programming staff and consultants they brought in could not develop a satisfactory app. Client invested millions in DotNet and SQL Server, and went bankrupt. Remants of the company are back to megabytes and back to VFP.

2. Inability to find good consultants. Having gone through a dozen VFP developers who were dBASE refugees and should not have been developers, company went for the magic pixie dust of Java. After millions of dollars of development (sounding familiar?), company was bought for hundreds of millions of dollars and entire app was scrapped in favor of the purchasing company’s existing system.

(There are a lot of developers out there who write junk for code. I don’t think VFP attracts them, especially, perhaps it’s just had a longer time to accumulate them? I’ve seen some pretty awful stuff out there.)

3. Painted too deeply into the corner: I supported a client for nearly a decade who had a legacy system written by a well-known developer early in the VFP 3.0 days. There were no best practices then, so there were some fairly complex work-arounds. The system was very large and very complex, and the micro-managing, penny-pinching boss would never authorize an hour spent to rewrite something that worked, no matter how arcanely. After a decade of making serious money out of this application, he got caught up with a young guy who could show him spiffy little tricks in *Delphi* of all things (out of the frying pan, into the fire) and, not understanding the differences between superficial GUI tricks and the deep functionality of his application, put his existing development into maintenance mode to go on a wild goose chase with Delphi. He was too cheap and too wily to lose his business to this, but his best developers quit, his customer base moved on, and when he sells out in a few years, he’ll get a lot less than he could have.

4. Slightly off-topic from the VFP re-write question, but an answer to why not FoxPto: Corporate standards: I tried to pitch a WebConnect app to a Very Large Insurance Company. They had standardized on: Macs on the desktop, Novell for their network, Oracle for their database and Netscape Enterprise for their intra-, extra- and inter-nets. I fought this one all the way up to a one-on-one with the CIO, who tried to explain to me that Microsoft was “going the wrong way,” a view I’ve come to agree with, but for different reasons and with a differnt new direction. IT evolution slowed to a crawl in this company, and the CIO has taken an early retirement to “pursue other interests.”

5. Cost savings: Tired of paying experienced senior developers with decades of experience in the business niche and this particular application, PHB thought it would make sense to employ cheap VB developers to rewrite the app in the para-dig-m of the day, VB and SQL Server. Experienced developers moved on, weaker devs stayed on for free training. New apps took forever to deliver, cost gazillions, and lacked the functionality of the original. Customers wouldn’t upgrade for fewer features. Company foundered, bought up by BigCompany for 1/10th of peak worth, for customer base. Old code and new code discarded.

In summary: incompetence, incompetence, incompetence, incompetence, incompetence. Hmm. Guess there is a pattern .

So, Dave, you were looking for GOOD business reasons to switch? I have run into few of them:

Good apps need to be rewritten every once in a while, as cruft builds up, and the model of the business encapsulated in the code doesn’t always evolve as fast as the business does. Software tends towards rigidity and/or fragility. Refactoring and other advanced techniques are designed to extend the longevity of an application, but refactoring a gnarly old app can be more costly than rebuilding.

When rewriting, you have the glory of starting with a clean slate, and re-examining your assumptions. New business models (software rental, software as a service, application service provider) may be available since the original app was conceived (probably back when we used floppies). ACID compliance, disaster recovery, HIPAA and SOX compliance can make new architectures a requirement. New component models, loose coupling, multi-phase commits, heterogenous backends are all designs to consider.

Security is a huge concern with ever-increasing connectedness, portability and liabilities.

So, ultimately, the business decisions come down to:

1. What business(es) do you want to be in? 2. What architectures enable that? 3. What tools enable those architectures? 4. What resources do you have available to execute those designs?

When faced with a clean slate project, new languages and tools are always a siren song. “There are no silver bullets” is a 30-year-old quote.

However, given the specs of a couple of apps lately, I couldn’t find a justification for writing them in FoxPro. While we have a mature language (well-debugged, well-documented and lots of support), some great frameworks and lots of programming talent, there were concerns I could not address: Microsoft has handed out BILLIONs in legal settlements in the last couple of years. Microsoft has made it clear VFP9 is the end-of-the-road for the binaries, with some xBase decorations extending VFP9 into Sedna. 64-bit is out and support for NX bits mean some loss of functionality. Bottom line: a single vendor who is end-of-lifing the product. Competing languages with rich features included Perl, Python, PHP and Ruby had no proprietary vendor lockin, no preferred data source and the flexibility to deploy on many platforms. VFP Web deployment is a chain of SPOFs (Single Point of Failure): W2K3, IIS, COM. In comparison, if a mod_perl app has a problem on Apache/Linux, redeploy on OS X or on Zeus or via CGI. Options. Choice. That’s what it came down to. The VFP solution was climbing out onto a limb with a vendor renowned for orphaning its products.

Orphaning: In the late 80s, I sat in a room back at the Park Plaza Hotel in Boston while Microsoft announced the rollout of the NT platform. During the Q&A session, a fellow came up to the microphone and explained that he was a Microsoft “partner,” had subscribed to their products and had spent years with a staff of programmers developing an app not far from release, but targeted at OS/2. What, he asked, was Microsoft going to do for him? His voice was unsteady, and it was apparent that he was facing a disastrous failure. There was an awkward silence when he finished as the crowd fell silent. There was no noise but an occasional clink of crystal against silverware. A Microsoftie finally managed to speak up, trying to deflect the comment into a pitch for their new development tools. The spell ended, but the impression remains to this day.

I can’t lead another client down that path. THAT’s the business reason.

Ziff-Davis notices FoxPro and Sedna

Microsoft Watch from Mary Jo Foley reports FoxPro Faithful Await Microsoft ‘Sedna’. “This week, FoxPro developers received a first test build of a new set of technologies, code-named Sedna, designed to make FoxPro interoperable with Windows Vista, Office 2007 and .Net.”
“Visual FoxPro developers, oft-overlooked by Microsoft, are about to get an infusion of new technologies aimed at making the FoxPro language interoperable with Windows Vista, Office 2007 and .Net.”

Powered by WordPress. Designed by Woo Themes

This work by Ted Roche is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 United States.