As per The Register, Microsoft's latest security lapse with its Passport information service could trigger a $2.2 trillion fine on the company courtesy of the US government.
Microsoft product manager Adam Sohn's comment to the security flaw in the password reset tool of its Passport service which could compromise the information stored on all 200 million users: "You live and learn". Is M$ really serious about security?
The flaw could have been found by anyone who tried to crack Passport seriously. From The Register:
The flaw was discovered close to four minutes after security researcher Muhammad Faisal Rauf Danka set to work on Passport. He was able to access Passport accounts at will by typing "emailpwdreset" into a URL that has the e-mail address of a user account and the address where a reset message can be sent.
Saturday, May 10, 2003
M$: $2 Trillion fine for Microsoft?
Friday, May 09, 2003
J2SE: Joshua Bloch speaks about Tiger release
Ever since I read Joshua Bloch's Effective Java Programming Language Guide, I have been an admirer of his programming style.
java.sun.com published an interview with him(Joshua Bloch is Specification Lead for JSR 201).
Draft specs for enumerations, autoboxing, enhanced for loop, static import are available at jcp.org.
Joshua Bloch's sessions at JavaOne 2003.
Wednesday, May 07, 2003
M$: Know thy enemy
M$ seems to be following this perfectly.
1. M$ .NET evagelist Job posts mentioned J2EE experience as a requirement. A good friend of mine who used to be a J2EE developer is now preaching .NET as a .NET evagelist.
2. M$ training its staff in J2EE and Linux.
3. Looking at JavaBlogs visits, you will be surprised some of the visitors are from microsoft.com :-)
Probably its time to start for us to get to know the Enemy.
Sunday, May 04, 2003
J2ME: South Korea is now officially Java country
When it comes to cell phones, South Korea is now officially Java country. From News.com
Saturday, May 03, 2003
Security: Crash IE with 5 lines of HTML
A new IE exploit was found that crashes almost any version of Internet Explorer past 4.0 with just 5 lines of plain HTML code (no JavaScript, ActiveX, etc.).
Reportedly, the vulnerability can be exploited to crash the following applications:
- Windows Explorer
- Internet Explorer
- Outlook
- Outlook Express
- Frontpage
Here is the 5 lines of HTML thats required:
|
<html> <form> <input type crash> </form> </html> |
Friday, May 02, 2003
M$: Do M$ employees believe in windows?
The first thing M$ employees suspect when something is wrong with their server is WINDOWS. Here is the proof :-)
Its really interesting to read about Bill Gates style of notes from Rob Howards Blog:
|
The first thing I notice as the meeting starts is that Bill is left-handed. He also didn't bring a computer in with him, but instead is taking notes on a yellow pad of paper. I had heard this before - Bill takes amazingly detailed notes during meetings. I image he has to, given all the information directed at him. The other thing I noticed during the course of the meeting is how he takes his notes. He doesn't take notes from top-to-bottom, but rather logically divides the page into quadrants, each reserved for a different thought. For example, it appeared that all his questions were placed at the bottom of the page. |
Monday, April 28, 2003
Enterprise: Anyone else missing DCB?
Looks like not many people are missing DCB from SUN. It used to be one of my favorites, which has pretty good Enterprise level articles. It used to carry pretty good information about J2EE production deployments.
From SUN's EOL FAQ:
Sun has moved the most popular Dot-Com Builder articles to other Sun developer sites. We invite you to visit these sites for articles on Web services, Web security, and various other how-to articles for Web architects:
http://developer.sun.com/sunone/ -- Sun ONE for Developers
http://www.sun.com/bigadmin/ -- BigAdmin System Administration Portal
http://java.sun.com -- Java Technology
http://wireless.java.sun.com -- Wireless Technology
Also, there is an archive of forum discussion threads at dcbforum.sun.com.
But I couldn't find some of the Deployment Articles published under DCB anywhere mentioned above. There is a great need for Portal with contents similar to what DCB used to be. It used to be pretty good resource for J2EE Architects. Hope SUN will get it back.
Some of the best articles from DCB are at BigAdmin.
