Latest on Technology, Systems, and Security

Archive for February, 2010

In a running saga which has lasted since before Windows XP’s release back in 2001, Microsoft have finally shipped an update for their Windows platform which will allow users to choose the web browser they want to run.

Windows 7 in Europe was due to have the update built in when it was released back in October 2009, but last-minute wranglings between the EU and Microsoft saw the deadline off for another short period. Now users will get the choice which was proposed then – a pop-up box asking whether the user wishes to keep on using Internet Explorer 8 or whether they want to switch to Mozilla Firefox, Google Chrome, Opera or Apple Safari.

This is the end of part of Microsoft’s problems with antitrust and competition regulators who wanted to see MS’s practice of making Internet Explorer tightly entwined with their operating systems end. Microsoft’s Windows platform has enjoyed a very dominant market position over the last few years, meaning most web users didn’t even know there was a choice of web browser in the first place.

Whether this will help make the web a safer place is still unknown, however.

 
Friday, February 19th, 2010

Google’s new social network, Buzz, has caused a bit of a stir with privacy campaigners recently, with Google admitting they have messed up with their launch strategy.

The concerns centre around the way Buzz integrates with Gmail and other Google services to provide people with a starting network of friends to share content with. Using the user’s e-mail history, it constructs a list of those users e-mailed most often from that account and automatically adds them to their circle of friends. However, this information is then visible to other users, making it possible to see who a particular user is in contact with.

Google stated that since this product had not gone through its “Trusted Tester” program (whereby friends and family of Google staff are used to test products before launch) the issue had not popped up – especially as internal Googlers hadn’t predicted the problem beforehand.

This does leave a bad taste in the mouth as Google collect ever more data on their users. Slip-ups like this should not be happening with a company holding so much private information, especially when they recently criticised the Chinese government for not respecting the privacy of its users.

 
Sunday, February 14th, 2010

The Chinese government have certainly been grabbing headlines over the last few years with regards to the internet. Everything from starting their own Chinese-language internet inaccessible from the outside world to trying to hack into Google accounts. Now the government has decided to target hacker websites in order to show how committed they are to stamping out cyber crime. Those Chinese certainly understand irony, don’t they…

The latest news comes about a site which apparently had hundreds of thousands of registered users, with over ten thousand of those signing up for paid accounts which supposedly granted them access to hacking software. Needless to say this site has now been shut down and its owners thrown in a dark cell (well, probably).

Apparently this one was the largest “hacker training” website in China, and had earned over $1m in membership fees for its owners. The move to shut it down could be tied to the Google fiasco, saving face for a government increasingly seen as a meddling force in the future of the internet.

 
Tuesday, February 9th, 2010

Microsoft, kings of buggy software, have just patched a bug in their Windows operating systems which was discovered by a Google techie – except this one was almost old enough to drink legally.

The 17 year old bug is in the NTVDM piece of software, responsible for allowing old MS-DOS based programs to function in the Windows NT, XP, Vista and 7 lines of OSes produced by Microsoft.

Why this bug has taken so long to locate, and whether it is a genuine security risk these days is a mystery, only that it has indeed existed since Windows NT 3.1 and is still present in the most modern versions of Windows.

Now I’m no Microsoft basher, but surely it should have been detected by someone inside their organisation long before now, not some Google security analyst in 2010?

 
Thursday, February 4th, 2010

Internet Explorer 6 is a web browser which first appeared in 2001. Since then, we’ve seen browsers like Mozilla Firefox, Apple Safari and Google Chrome establish themselves as serious choices alongside older alternatives like Opera. We’ve even seen IE7 and IE8 arrive on the scene.

All of these browsers leave IE6 in the dust in terms of security, reliability, compatibility and new features. Web developers have been tearing their hair out for years over the problems that IE6 and IE7 present when designing websites, while security firms have warned against using the outdated technology. Recent events have seen Google blame a vulnerability in IE6 for the China e-mail hacking fiasco and both the German and French governments recommend that citizens do not use Internet Explorer until the issues are fixed.

I firmly believe IE6 should be discontinued by Microsoft, along with IE7, leaving IE8 as their only supported browser on the market. What this would do would be to focus all their energies on their latest and greatest, enable developers the world over to cater to more modern browsers and help safeguard users’ private data.

I wouldn’t hold out much hope though. After all, Microsoft say IE6 will be supported until 2014, when it will be 13 years old. Brilliant.