integrate

On Thursday, new code was posted on the Internet that could exploit a flaw in unpatched Microsoft Host Integration Servers.

The exploit is part of Metasploit, a toolkit used by penetration testers and criminal hackers alike.

On Tuesday, Microsoft issued security bulletin MS08-059 to address the vulnerability detailed in CVE- 2008-3466. In its patch bulletin, ranked as critical, Microsoft said "this vulnerability could allow remote code execution if an attacker sent a specially crafted remote procedure call request to an affected system. Customers who follow best practices and configure the systems network architecture remote procedure call (SNA RPC) service … Read more

Microsoft on Tuesday released its October 2008 security bulletin. The four critical bulletins concern Windows, Internet Explorer, Microsoft Host Integration Server, and Microsoft Excel. The patch for Internet Explorer is cumulative.

Microsoft is now sharing the technical details of new vulnerabilities in advance of so-called Patch Tuesday to give software developers a chance to update affected products before the public announcement.

Microsoft is also including within each bulletin this month an "exploitability index" to help system administrators prioritize the patches--1 is for consistently functioning exploits (of most concern), 2 is for inconsistently functioning exploits (of moderate concern), and … Read more

Sometimes "free" is not so free.

I recently discovered this when a large, global system integrator (SI) deployed Alfresco Labs, our free and unsupported product, for a large client in Europe. The SI wasn't a partner of ours, and as the client soon learned when its deployment stumbled, the SI wasn't capable of providing enterprise-class support on the product. Yes, it knew the product well enough to deploy it and get paid over $50 million for its trouble, but when the deployment hit a glitch, guess to whom the SI came crawling for help?

It's not just my company. I know of another global SI that has deployed well over 100 Mule ESB instances, without buying support through MuleSource for its clients for a single one of them. If something goes wrong with those installations, the enterprise clients are going to end up paying a premium for the SI to figure out how to resolve the problems on the client's dime, never mind potential indemnification issues.

Not all SIs act like this, at least not all the time. My own company works closely with Satyam, SAIC, Booz Allen Hamilton, and others, and Accenture sells supported instances of the Spring Framework, but this is the exception to the rule for the large SIs, many of which seem happy to deploy open-source software for their clients without buying support or production-grade versions of the software.

Such SIs seem to believe that life has started raining free lunches.

This is a myopic way to do business, as the large SI in my initial example found: in that example, spending $50,000 (in the midst of a $50 million project) would have saved the SI the embarrassment and cost of trying to support a product that experience proved it didn't know nearly as well as it thought it did. The SI risked the success of a $50 million project to boost its margins by $50,000, only to find that one problem with the software ended up costing it and the client far more than $50,000.

If you're an enterprise looking for a strong SI on a project, here are a few things to consider:… Read more

On Thursday, Microsoft announced four security bulletins for next week. The announcement is intended as a heads-up for IT departments before Patch Tuesday. Four fixes are considered critical, six important, and one is moderate as ranked by the software giant.

Starting this month, Microsoft is sharing the technical details of new vulnerabilities to give software developers a catch to update affected products before the public announcement. And on Tuesday, Microsoft is expected to provide with each bulletin an "exploitability index" to help system administrators prioritize the patches.

Among the critical patches one each affects Windows, Internet Explorer, Microsoft … Read more

Nokia has introduced automated kiosks across the central Klang Valley of Malaysia in a bid to encourage people to recycle their mobile phones.

In a recent study conducted by the mobile-phone maker, only 3 percent of respondents recycled their cell phones, and 50 percent were unaware that their devices could be reused.

Nokia is hoping to improve the statistics with the introduction of kiosks specially designed to ease the recycling process.

"We've been at the forefront of driving environmental initiatives in the mobile industry for over a decade, and Nokia Malaysia is the first to launch this automated … Read more

Ask Sean Maloney about Intel's biggest challenges and biggest opportunities for growth and he'll mention the same thing: WiMax, the company's chosen broadband technology.

Maloney, an executive vice president of Intel and the chipmaker's chief sales and marketing officer, has seen waves of technology come and go since joining the company back in 1982. Recently, he got the additional responsibility of coordinating company strategy, which he said has "a good deal to do with the rapid pace of our global development."

I had the chance to talk with him last week. Maloney initially touched … Read more

Texas Instruments commemorated the 50th anniversary of the integrated circuit with the opening Friday of Kilby Labs, honoring Jack Kilby, the Nobel-prize-winning inventor of the seminal electronic device.

As a new TI employee in 1958, Kilby was forced to work during the traditional company summer vacation. During that time, he built the first integrated circuit, now the basic building block of everything from 3G cell phones to supercomputers.

The first IC was crude: a sliver of germanium with protruding wires glued to a glass slide (see image below). When Kilby applied electricity to the circuit, "an unending sine wave … Read more

Enemy combatants are close to feeling the heat from an airborne laser weapon called the "long-range blowtorch" and, if officials at US Air Force are right, nobody will know what hit them.

The 5.5-ton Advanced Tactical Laser (ATL) combines chlorine and hydrogen peroxide molecules to release energy that stimulates iodine into an intense infra-red, silent and invisible laser with a 20 kilometres striking range.

New Scientist reports that both Cynthia Kaiser, chief engineer of the US Air Force Research Laboratory's Directed Energy Directorate and John Corley, director of USAF's Capabilities Integration Directorate, used the phrase &… Read more

Update at 11:45 a.m. with additional information about Intel blogger.

Aaron Brezenski, the blogger, states the following in describing his posts: "Aaron Brezenski has been at Intel (Chandler, AZ) since 1995 and has been a product engineer for most of that time. He currently manages a team of product development engineers in STTD, but his nefarious purpose in (Intel Software Network) Blogspace is to highlight Intel Integrated Graphics in the Home Theater PC space from an end-user perspective."

An Intel engineer has posted a discussion about performance issues with its newest Centrino 2 graphics silicon.

The … Read more