|
|
|
| Related Articles |
| Client-side vulnerabilities loom large |
28 November 2007 |
| Critical vulnerabilities in common PC software, including both applications and operating systems, continue to grow in number and stand as the leading cause for concern in the IT security landscape today, according to training experts at the SANS Institute.Holes in so-called client-side applications, including Web browsers, e-mail clients, productivity suites, and media players, have become particularly worrisome over the last year, according to SANS, which highlighted the issue as part of its annual report on the top 20 Internet security risks for 2007.As hackers have shifted their attention further away from operating system flaws and drilled down to applications-layer vulnerabilities they have found a seemingly endless wealth of possibilities for infecting PCs with everything from spyware to botnet programs, SANS researchers contend.Unless something can be done to improve software developers' coding habits or better test popular applications for such issues before they land on end-users' machines, attackers will be able to continue their successful assaults against enterprise networks and devices for the foreseeable future, said Rohit Dhamankar, project manager for the Top 20 report at SANS and a senior manager of security research for TippingPoint.?"There's just been such a dramatic rise in the numbers of vulnerabilities found in applications like Internet Explorer and Microsoft Office and a number of media players that attackers are having their way," said Dhamankar. "Enterprises are bolstering security, but desktop users still pose a massive risk if they can download anything they want from the Web; the attacks are also growing in sophistication to the extent that many can defeat antivirus and other security systems primarily by obfuscating their code."Some of the most powerful tools that hackers have adopted in hunting for potential targets are the same industrial-strength applications fuzzing tools that software vendors themselves are using to search for holes in their products, said the expert.Enterprises could do themselves a favor by enforcing stricter policies that dictate the types of applications that end-users are allowed to put on their work machines and using technical means to ensure that those rules are being followed, Dhamankar said.Other SANS researchers noted that while companies may not want to tell end-users that they cannot utilize media players, messaging clients, and other applications that have moved into the business world from the consumer sector, they could help themselves out by limiting the variety of client-side applications that people may choose from."IT departments can't focus on all the applications of the world, but they can choose several and keep their eye on those while allowing end-users some freedom," said Amol Sarwate, research manager at Qualys who studies vulnerability patterns for SANS. "What companies need to do is enforce standards for applications usage and utilize technical means to block unwanted software, devices, and even wireless access points."While many businesses have already realized that they need to shift more of their efforts toward defending client-side vulnerabilities, most have failed to embrace a proactive approach versus simply keeping track of publicly-reported flaws and patching those issues said Sarwate.Enterprises need to think about future security issues
It will be particularly important for firms to examine the additional security issues that will be introduced in the coming years with broader adoption of technologies including VoIP (Voice over IP), according to the expert."The key is for people to start thinking ahead of these client-side vulnerabilities to understand what the next big thing may be. Things like VoIP need to be examined for their security implications," said Sarwate. "Many companies are already adopting these tools because of all the advantages they offer, but there will be many attacks carried out against these systems as well."Among the advice that SANS is offering organizations hoping to improve their client-side security coverage is to mandate secure configurations at installation time for all applications, to constantly verify patching and upgrading of both applications and system software, to scan for new vulnerabilities frequently, and to keep their security systems up to date.Other leading areas of concern highlighted by SANS in its report included critical vulnerabilities in Web applications that allow for cross-site scripting attacks or for computers to be otherwise compromised simply by pointing their browsers at poisoned URLs."Gullible, busy, accommodating computer users," including executives, IT staff, and others with privileged access also remain a major weak point for enterprise security, according to SANS, as these seemingly more seasoned users of computers and software are still falling for increasingly targeted spear-phishing campaigns in large numbers.One of the best ways to educate users about the problem is for organizations to create fake spear-phishing threats and send them out to internal users to determine which individuals might be most likely to fall for the schemes and follow up with additional training, the group said.Critical vulnerabilities in the software and systems that provide the operating environment and primary services to computer users, or server-side software, remain another area of leading concern, according to SANS.Problems in Microsoft Windows services, Unix and Mac OS services, back-up and AV programs, management servers, database software, and VoIP technologies in particular are proving troublesome, according to the report.Many of those issues can be addressed by following the same advice offered for solving client-side vulnerabilities, SANS said in the research. |
| |
| Micron exec: SSDs to reach portable devices in 2008 |
28 November 2007 |
| Memory maker Micron Technology on Wednesday introduced a line of solid-state drives (SSDs) and said it would plug the technology into portable storage devices by mid- to end 2008.Micron's new RealSSD hard drive, announced at an event in San Francisco, will come in sizes of 1.8 inches and 2.5 inches with storage capacities of 32GB and 64GB. Micron also announced embedded SSD modules for blade servers with storage capacities of 1GB to 8GB.Purported by many to be the future replacement of hard drives, the growth of SSDs has been stymied by high pricing, longevity, and storage issues. However, the power-efficient and ruggedness of SSDs may attract users, said Dean Klein, vice president of memory system development at Micron.RealSSD is 50 percent lighter than standard hard drives, and at under 2 watts of power consumption, the drives will be ideal for laptops, Klein said. The drives also support the SATA II interface, a standard typically used to connect hard drives to computer systems.With no moving parts, RealSSD drives also have a rugged design and store data reliably. They handle vibrations and resist shock better than rotating media, Klein said.Despite multiple advantages, SSDs may not replace hard drives as storage devices in the near future, he said. SSD technology is under development, and some markets are sensitive to price-per-gigabyte of SSDs, Klein said.SSDs currently cost between $7 and $10 per gigabyte, making them much more expensive than hard drives, which cost $0.20 to $0.30 per gigabyte, according to data from research firm iSuppli.Initial consumers for RealSSD could be OEMs or enterprises, which look for reliability and high data throughput, and laptop consumers, which require portability and power efficiency, Klein said.RealSSD drives could reach consumers in the form of portable storage devices or ExpressCards by mid- to end 2008, depending on consumer demand, Mark Adams, Micron's vice president of digital media said in an interview. An ExpressCard fits in a laptop's PCMCIA slot.Sending SSDs to consumers immediately is questionable as the emerging technology hasn't proven itself yet, Adams said. There is a risk in being first-to-market if the product doesn't sell, which will build up unnecessary inventory of SSDs. Instead, Micron will try to get feedback from OEMs that include SSDs in their products and develop devices accordingly, Adams said.Micron sells portable consumer storage devices through Lexar Media, which it acquired last year.There are already a few vendors that include SSDs in their hardware. Aurora, a gaming systems manufacturer, includes them in its Area-51 ALX and Aurora ALX desktop PCs, and Toshiba includes SSDs in its laptops. |
| |
| desktop pc (dagenham essex, Price: £800) |
01 January 0001 |
| this pc comes with a monitor mouse keyboard mic webcam speakers lexmark x330 all in one printer and scanner with ink2 usb hubs 2 game pads and netgear wirless ruter the pc is windows vista ultimate and the software is norton 360 microsoft office 2007 paint shop pro x2 nero 8 microsoft encarta for kids great learning program. the games are sims 2 all of them apart from sims 2 uni simcity 4 deluxe rise of nataions gold. specs memory1022 mb processor Amd Athlon 64 processor 3500 mother board Asus m2a-vm mother board integated graphics hard drive 250gb drives dvd rw rewrighter 16x speed dvd rom drive 3.5 floopy drive. the computer has neon lights plus about 5 fans plus 2 blue lcd lights on the front extraxs i will give you some dvd r disc and cd r disc and there is a lot more like games and soft ware installed on the computer please only call if you are 100 byer or questions i will sell this computer and all of the extras for a mim of £650 and a max of £800. p.s. i have no car so this item will have to be picked up by you please i really need a byer as soon as possible phone 07954080201 |
| |
| Server Desktop ready for action (Cricklewood, Price: £85) |
01 January 0001 |
| Low Price computer ready to be set up as Server or Workstation. The specs of the computer are Cabinet is a proper server cabinet called CoolerMaster Cavalier 3 silver with two large fans to give a good air flow plus plenty of space for drives of various sizes. Asustek P5PE-Vm S775 Intel 865G Atx Audio GigaLAn Graphics Intel Celeron 331 Socket 775 2.66GHz 256Kb Em64T Box Kingston ValueRAM 512MB 184Pin Dimm Pc3200 Ddr Ram 30 Gb system Harddrive Ide Hd fan to keep drive cooled Computer has been running a Linux Ubuntu server Os completely smoothly over the past 7 months serving as the house file server with five busy users (Hd capacity was 1tb It has fairly small specs but high performance for a file server (sambanetworkdrivesftp) email server web server and as standard workstation. The Mother board can take 2 Sata and 2 Ide drives and the Pci allows for additional Ide Sata sockets or Raid to be added. |
| |
| Dell Desktop (Kingston, Price: £140) |
01 January 0001 |
| Dimension 2400 in black with 17" Crt monitor keyboard speakers and Usb modem Celeron 2.4ghz Processor 256Mb Ram 40Gb Hard Disk Office including Word Excel etc Has been mainly used for word excel and internet surfing which it is still quick Comes with ikea computer desk if wanted Would make great first computer for student or kids to surf online. Email with any questions |
| |
| Dell Inspiron Xps M1710 216 , 2gig,120HD, Laptop (Notebook, Price: £445) |
01 January 0001 |
| Product Highlights 2.16ghz Cpu 2 Gig Ddr Memory 120 Gb Hard Drive 256MB Nvidia GeForce 7900GS graphics card Pci-Express x16 Xp Media Centre Built in Wireless 17" True Life Screen 1 Year Dell Warranty 6 fast Usb 2.0 technologies offer more bandwidth for transferring digital files and sending images to and from your computer Audio jacks Line out (external speakers headphone) and external microphone. 15-pin monitor connector Vga Ac adapter Weight Starting from 3.0 kg (6.65 lbs)5 with Dvd-Rom drive and 6-Cell Battery Rj11 (Modem V.92) and Rj45 (10 100 Ethernet network) connector Keyboard 88 keys (UKEurope) Touchpad pointer 20 points mm (500 points inch) resolution Tv-Out (S-video-Out) 7-pin mini-Din connector (optional S-video to composite video adapter cable) Ie 1394 (Firewire) 4-pin serial connector non-powered Integrated 5-1 Card Reader Intel ProWireless 2200 802.11b g Mini Pci Wireless Lan Card Fully Dell Boxed with all cables Charger Dells Factory Restore Software Desktop Manual |
| |
| Intenet Ready Desktop Pc Perfect Second Computer (Stockwell, Price: £80) |
01 January 0001 |
| Internet Ready Desktop Pc. Would be ideal as a second home computer. In good working condition. Sale due to upgrade. Specification Dual Intel Celeron 366Mhz 256MB Ram (expandable to 3gb 1 slot used 2 slots free) 20GB Hard Disk Aopen 32x Cd-Rw Drive 3.5" Floppy Drive Ati Rage128 Gl 16MB Agp Graphics Card Creative Sound Blaster 64 Sound Card 10 100Mbit Network Card 56K Modem Genuine Microsoft Windows Xp Professional with Service Pack 2 Microsoft Office 2003 Professional Avg Anti-Virus Buyer to collect or deliver can be arranged for a small fee. |
| |
| Internal Adsl modem, Cd R Rw, Cd player,Power unit, Ram, speakers, Floppy drive (London, Price: £20) |
01 January 0001 |
| They belong to my old desktop computer and they are all in perfect working condition. Internal Adsl modem with driver Cd Ram 64 128 Mb Cd R Rw Cd player Floppy drive Power unit computer speakers with power adapter (Not shown here I can send the photo by email) I can bring them to these locations Waterloo Station Southwark Station London Bridge Station. |
| |
| jQuery and Microsoft |
28 September 2008 |
| jQuery is a lightweight open source JavaScript library (only 15kb in size) that in a relatively short span of time has become one of the most popular libraries on the web. A big part of the appeal of jQuery is that it allows you to elegantly (and efficiently) find and manipulate HTML elements with minimum lines of code. jQuery supports this via a nice "selector" API that allows developers to query for HTML elements, and then apply "commands" to them. One of the characteristics of jQuery commands is that they can be "chained" together - so that the result of one command can feed into another. jQuery also includes a built-in set of animation APIs that can be used as commands. The combination allows you to do some really cool things with only a few keystrokes. For example, the below JavaScript uses jQuery to find all <div> elements within a page that have a CSS class of "product", and then animate them to slowly disappear: As another example, the JavaScript below uses jQuery to find a specific <table> on the page with an id of "datagrid1", then retrieves every other <tr> row within the datagrid, and sets those <tr> elements to have a CSS class of "even" - which could be used to alternate the background color of each row: [Note: both of these samples were adapted from code snippets in the excellent jQuery in Action book] Providing the ability to perform selection and animation operations like above is something that a lot of developers have asked us to add to ASP.NET AJAX, and this support was something we listed as a proposed feature in the ASP.NET AJAX Roadmap we published a few months ago. As the team started to investigate building it, though, they quickly realized that the jQuery support for these scenarios is already excellent, and that there is a huge ecosystem and community built up around it already. The jQuery library also works well on the same page with ASP.NET AJAX and the ASP.NET AJAX Control Toolkit. Rather than duplicate functionality, we thought, wouldn't it be great to just use jQuery as-is, and add it as a standard, supported, library in VS/ASP.NET, and then focus our energy building new features that took advantage of it? We sent mail the jQuery team to gauge their interest in this, and quickly heard back that they thought that it sounded like an interesting idea too. Supporting jQuery I'm excited today to announce that Microsoft will be shipping jQuery with Visual Studio going forward. We will distribute the jQuery JavaScript library as-is, and will not be forking or changing the source from the main jQuery branch. The files will continue to use and ship under the existing jQuery MIT license. We will also distribute intellisense-annotated versions that provide great Visual Studio intellisense and help-integration at design-time. For example: and with a chained command: The jQuery intellisense annotation support will be available as a free web-download in a few weeks (and will work great with VS 2008 SP1 and the free Visual Web Developer 2008 Express SP1). The new ASP.NET MVC download will also distribute it, and add the jQuery library by default to all new projects. We will also extend Microsoft product support to jQuery beginning later this year, which will enable developers and enterprises to call and open jQuery support cases 24x7 with Microsoft PSS. Going forward we'll use jQuery as one of the libraries used to implement higher-level controls in the ASP.NET AJAX Control Toolkit, as well as to implement new Ajax server-side helper methods for ASP.NET MVC. New features we add to ASP.NET AJAX (like the new client template support) will be designed to integrate nicely with jQuery as well. We also plan to contribute tests, bug fixes, and patches back to the jQuery open source project. These will all go through the standard jQuery patch review process. Summary We are really excited to be able to partner with the jQuery team on this. jQuery is a fantastic library, and something we think can really benefit ASP.NET and ASP.NET AJAX developers. We are looking forward to having it work great with Visual Studio and ASP.NET, and to help bring it to an even larger set of developers. For more details on today's announcement, please check out John Resig's post on the jQuery team blog. Scott Hanselman is also about to post a nice tutorial that shows off integrating jQuery with ASP.NET AJAX (including the new client templating engine) as well as ADO.NET Data Services (which shipped in .NET 3.5 SP1 and was previously code-named "Astoria"). Hope this helps, Scott |
| |
| Silverlight 2 Release Candidate Now Available |
26 September 2008 |
| This evening we published the first public release candidate of Silverlight 2. There are still a small handful of bugs fixes that we plan to make before we finally ship. We are releasing today's build, though, so that developers can start to update their existing Silverlight Beta2 applications so that they'll work the day the final release ships, as well as to enable developers to report any last minute showstopper issues that we haven't found internally (please report any of these on the www.silverlight.net forums). Important: We are releasing only the Silverlight Developer Runtime edition (as well as the VS and Blend tools to support it) today, and are not releasing the regular end-user edition of Silverlight. This is because we want to give existing developers a short amount of time to update their applications to work with the final Silverlight 2 APIs before sites are allowed to go live with it. There are some breaking changes between Beta2 and this RC, and we want to make sure that existing sites can update to the final release quickly once the final release is out. As such, you can only use the RC for development right now - you can't go live with the new APIs until the final release is shipped (which will be soon though). You can download today's Silverlight Release Candidate and accompanying VS and Blend support for it here. Note that Expression Blend support for Silverlight 2 is now provided using Blend 2.0 SP1. You will need to install Blend 2.0 before applying the SP1 service pack that adds Silverlight 2 support. If you don't already have Blend 2.0 installed you can download a free trial of it here. Beta2->RC API Updates Today's release candidate includes a ton of bug fix and some significant performance optimization work. Today's release candidate also includes a number of final API tweaks designed to fix differences between Silverlight and the full .NET Framework. Most of these changes are relatively small (order of parameters, renames of methods/properties, movement of types across namespaces, etc) although there are a number of them. You can read this blog post and download this document to get a listing of the known API breaking changes made from the Beta2 release. We have updated the styles of the controls shipped with Silverlight, and have also modified some of the state groups and control template names they use. When upgrading from Beta2 you might find it useful to temporarily remove any custom style templates you've defined, and get your application functionality working using the RC first - and then after that works add back in the styles one style definition at a time to catch any rename/behavior change issues with them. If you find yourself stuck with an question/issue moving from Beta2 to the RC, please report it on the www.silverlight.net forums (Silverlight team members will be on there helping folks). If after a day or two you aren't getting an answer please send me email (scottgu@microsoft.com) and I can help or connect you with someone who knows the answer. New Controls Today's release candidate includes a bunch of feature additions and tweaks across Silverlight 2, as well as in the VS and Blend tools targeting it. In general you'll find a number of nice improvements across the controls, networking, data caching, layout, rendering, media stack, and other components and sub-systems. Over the next few months we will be releasing a lot of new Silverlight 2 controls (more details on these soon). Today's release candidate includes three new core controls - ComboBox, ProgressBar, and PasswordBox - that we are adding directly to the core Silverlight runtime download (which is still only 4.6MB in size, and only takes a few seconds to install): At runtime these controls by default look like: The ComboBox in Silverlight 2 supports standard DropDownList semantics. In addition to statically defining items like above, you can also use databinding with it. For example, we could define a "Person" class like below: And the add a ComboBox to a page like so: And then write the below code to databind a collection of Person objects to the ComboBox (by setting its ItemSource property): At runtime our simple app will then display the data-bound Person names (note that we set the DisplayMemberPath property on the ComboBox above to display the "Name" value from our Person objects): We could then implement a SelectionChanged event handler like below to run code when a person is selected from the ComboBox: Notice above how we can retrieve a reference to the selected "Person" object from the databound ComboBox using the ComboBox's "SelectedItem" property. We can then call the MessageBox.Show() helper method (new in the RC) to display a modal dialog box that displays some details about our selected person: New Control Skins The final release of Silverlight 2 will have a much more polished set of default control template skins than those that were in Beta1 and Beta2. Our goal with the default control templates is to have a look that is professional and attractive, can be used in the majority of applications as-is (without requiring you to author custom style templates), and which is also easily tweakable using Expression Blend. Today's RC build has skins that are close to the final look we plan to ship (there are a few final tweaks we are doing post RC on the focus color of controls, as well as to tighten up and tweak a few issues in some of the control templates). Below is the default look for the DataGrid, RadioButton, CheckBoxes, and the DatePicker controls with today's RC build: Note that the DatePicker control above allows users to type in a date (with a masked edit to ensure it is a valid date), or they can click the calendar icon to the right of the textbox and select the date using a popup Calendar control: One of the most powerful features of Silverlight and WPF, of course, is the ability for designers and developers to completely customize the look and feel of any control. This goes beyond simple styling of colors and fonts - you can literally completely change the visual UI of a control, as well as customize its behavior (for example: add animation) without writing any code. Within Expression Blend, simply right-click on any Silverlight control and choose the "Edit Control Parts" sub-menu to open and edit its control template: When in control template editing mode, you can manipulate any sub-element of a control (for example: a checkbox's inner content), as well as customize each "state" its in (notice the states pane circled in red below). This allows designers to customize what the control looks like in individual states (for example: checked, unchecked, mouseover, etc). Silverlight will then automatically handle animating the control from state to state depending on the user action: You can learn more about how Silverlight's Visual State Model works from my previous blog post here. Previous releases of Silverlight often rendered graphics on sub-pixel locations - which could cause lines and shapes to sometimes appear "fuzzy". The RC of Silverlight has a new features called "layout rounding" that causes the layout system to round the final measure of a control to an integer ("pixel snapping"), which results in crisper lines and fewer rendering artifacts. This feature is now on by default, and helps make applications look nicer. Summary The final release of Silverlight is not that far off now. It has been a pretty amazing project that has come a long way in a pretty short amount of time. If you have existing Beta2 applications, please start getting them ready for the final release - as once we release Silverlight 2, users that have existing beta releases installed will automatically be upgraded to use the final version. Testing your application out with the release candidate will ensure that you can easily update your applications and have them ready within hours of the final release. Let us know if you find issues with today's release candidate, and please make sure to post them on the forums on http://www.silverlight.net. Hope this helps, Scott |
| |
 |
|
|
|