Microsoft: Windows 7 not affected by latest flaw

September 9, 2009

Microsoft issued a formal security advisory late Tuesday on a reported zero-day flaw in Windows Vista and Windows Server 2008. However, the software maker also said that the flaw does not affect the final version of Windows 7, contrary to earlier reports.

"Microsoft is investigating new public reports of a possible vulnerability in Microsoft Server Message Block (SMB) implementation," Microsoft said in the advisory. "We are not aware of attacks that try to use the reported vulnerabilities or of customer impact at this time."

The flaw could allow an attacker to gain control of a system, although Microsoft said that "most attempts to exploit this vulnerability will cause an affected system to stop responding and restart."

The software maker said it is working with security software partners to provide information that can be used to create protections. Once its investigation is wrapped up, Microsoft said it will take action, which could include releasing a patch during its next monthly cycle or doing an "out-of-band" release, if necessary. Tuesday was Microsoft's monthly release for patches, which included five critical Windows updates addressing eight vulnerabilities.

The software maker said the latest issue affects the "release candidate" version of Windows 7, but not the final version that was completed in July. Also, the recently completed Windows Server 2008 R2 is not vulnerable, Microsoft said, nor are the earlier Windows XP and Windows 2000 operating systems.

Microsoft is already dealing with a separate, still unpatched flaw reported last week. Attacks have already been seen based on that vulnerability. Microsoft has taken issue with the fact that that flaw, like the latest one, was reported publicly as opposed to being privately disclosed to Microsoft, giving the company time to patch it.

 

IBM is its own open-source lab for social software

September 5, 2009

Most vendors must guess what customers want to buy, and how they'll use it. For IBM, however, with about 400,000 employees, it has the potential to be its own best laboratory, one that becomes even more potent when mixed with active participation in open-source communities.

That potential, as I discovered in an interview on Friday with Jeff Schick, IBM's vice president of social software, isn't a "gimme," but is powerful if you can enable the right sort of corporate culture and processes.

For example, Schick mentioned that IBM has a technology adoption program for employees that spans the gamut of new products, add-ons and patches to existing products, and still-raw technologies direct from IBM's labs. While the invitation list and process is different for each particular item, IBM generally encourages its product groups to "experiment" upon each other. The earlier in the development process, the better.

At the heart of this open approach to technology adoption are open standards and open source. When I pressed Schick on the relative importance of both ("If you could only choose open standards or open source, which would it be?"), he responded:

Our products may include open-source components, and often do, but ultimately open standards are the most important consideration for customers. As customers integrate our products into their various enterprise systems, open standards are critical for ensuring they work.

Point taken, but it's impressive just how much open source influences IBM's product development. Gartner estimates that 80 percent of commercial applications will include open-source components by 2012. At IBM, the number may even be higher.

Despite IBM not releasing its core software products under open-source licenses, Schick noted just how integral open source is to IBM:

From a development perspective, as we build our social software products in Lotus, we're always looking at ways to improve quality and time-to-market. Open source often helps us with both areas.

For example, we were blogging within IBM for a long time before deciding to build the Lotus Connections product, which is fast approaching hundreds of millions of users. After some study, we decided to build the blogging piece of Lotus Connections using the Apache Roller project, an open-source Java blog software. We have become active contributors to the project since then.

But it's not just in Lotus Connections. As you look across nearly every capability across our social-software strategy, open source plays a critical role. Open source is an integral part of how we build products. Our engineers are very much in tune with the wide variety of open-source components that are available to them, and use and contribute to them. Regularly.

IBM seems to have figured out better than most how to marry the global open-source laboratory with a massive internal laboratory. Talking to Schick, there appears to be a very blurry line between "internal" development and "external" development, giving the company a significant advantage over proprietary (Microsoft) and open-source (Liferay, Open-Xchange) competitors alike.

Some competitors may be able to match IBM's scale, but few to none have managed to marry internal scale (employees) with the power of external scale (open-source communities) in the way that IBM has.

 

Gmail outage blamed on capacity miscalculation

September 2, 2009
Google's nearly two-hour Gmail outage Tuesday was the result of a miscalculation regarding the capacity of its system, the company said late Tuesday.

Gmail was down from about 12:30 p.m. PDT Tuesday to about 2:30 p.m. PDT, affecting millions of Gmail customers who depend on the service for everything from fantasy football roster updates to business-critical information. The problem was caused by a classic cascade in which servers became overwhelmed with traffic in rapid succession.

According to Google, the problem began when it took several Gmail servers offline for maintenance, a routine procedure that normally is transparent to users. However, the twist this time around was that Google had made some changes to the routers that direct Gmail traffic to servers in hopes of improving reliability, and those changes backfired.

"As we now know, we had slightly underestimated the load which some recent changes (ironically, some designed to improve service availability) placed on the request routers -- servers which direct web queries to the appropriate Gmail server for response," Google said in a post to its Gmail blog late Tuesday.

"At about 12:30 p.m. Pacific a few of the request routers became overloaded and in effect told the rest of the system 'stop sending us traffic, we're too slow!' This transferred the load onto the remaining request routers, causing a few more of them to also become overloaded, and within minutes nearly all of the request routers were overloaded," wrote Ben Treynor, vice president of engineering and site reliability czar.

Google fixed the problem by allocating traffic across the rest of its prodigious network, a luxury that it enjoys given the resources it has put in place to operate the world's leading search engine. But what's next?

Google said it would focus on making sure that the request routers have sufficient headroom to handle future spikes in demand, as well as figuring out a way to make sure that problems in one sector can be isolated without bringing down the entire service. "We'll be hard at work over the next few weeks implementing these and other Gmail reliability improvements -- remains more than 99.9% available to all users, and we're committed to keeping events like today's notable for their rarity," Treynor wrote.

Several Google Apps customers who use Gmail for internal e-mail at their businesses and organizations did not return calls Tuesday seeking information on the degree to which they were affected, making it difficult to know the magnitude of the failure. However, Google has put an awful lot of time and money this year behind promoting Gmail as a back-end e-mail software alternative to products from Microsoft and IBM, and embarrassments like this will not help it sell the service to other organizations.

"We know how many people rely on Gmail for personal and professional communications, and we take it very seriously when there's a problem with the service," Treynor wrote. "Thus, right up front, I'd like to apologize to all of you -- today's outage was a Big Deal, and we're treating it as such."


 



Best Communitation Website
Which communication website is best?

Myspace
Facebook
Twitter
Furry-paws
Youtube


Make a free website with Yola