Doug's Mailbag: IE Security, Lieberman Software Praise, Windows 7 Disgust, More

One reader discusses that the IE security breech patched this week may not be the fault of Microsoft:

The issue is not just with browsers, but with us Web designers and developers.

We keep making our sites to require scripts and ActiveX controls. We keep using Flash, Silverlight and any other "cool" graphic appeal we get out hands on. We throw everything, including the kitchen sink, on the front-end just because we can.

All of these add to the security problem. Most of the security hacks are not from IE or any other browser, but from the junk we add. Our sites are totally unusable if one does not allow scripts, ActiveX, etc. So users must leave their browsers open to hackers.

Don't blame the browsers, blame ourselves.
-Anonymous

More

Posted by Doug Barney on 04/02/20100 comments


Third-Party Report: Lieberman Software

Lieberman Software, headed by super smart Phil Lieberman, has long been in the Windows admin market. Now Phil is eying the cloud with Enterprise Random Password Manager, which now brings its identity management features to cloud providers.

According to Lieberman (the company and the man), IT interest in the cloud is growing, but so are fears that data will be stolen or spied upon.

We at Redmond are working a cloud security story, so a recent e-mail exchange with Phil was timed perfectly. Here's the gist of Phil's thoughts:

More

Posted by Doug Barney on 03/31/20100 comments


IE Patch Rushed to Market

An IE remote code execution (RCE) flaw is so serious that it just can't wait till April's Patch Tuesday. Instead, an out-of-band fix was released this week.

The RCE issue occurs when someone is led to a malicious Web page and is lured into clicking. The fix applies to all current forms of IE -- from IE 5 to the latest, IE 8.

The patch is actually a cumulative fix, repairing a heaping 10 problems.

More

Posted by Doug Barney on 03/31/20105 comments


Doug's Mailbag: Business in Foreign Countries, Windows Upgrade Plans, More

With Google out and Microsoft staying the course in China, Doug asks whether a company should adhere to the laws and protocols of a host country. Here are some of your responses:

It is a privilege to provide another country with our services.  Google accepted and followed the business rules of China.  China, in turn, did not respect their business.  Had China respected Google's business, they would have taken action against the hacker (yet perhaps it was the Chinese Government). 

Business is based upon an agreement between two entities.  Google held up their end of the bargain, yet China fell short on theirs by failing to care about such a vital matter that provided a great service (especially since they were able to censor the searches).

So, in essence, it is respectful to follow the rules of another "household" when providing a service for them.  Yet, when those rules jeopardize the very core of who you are (the core of Google's whole business in this case) and what you stand for, do as Jesus instructed his disciples to do and "shake the dust from your feet in protest against them" (Acts 13:51 NIV) and move on.  Money isn't worth jeopardizing your entire business.

In the article where Microsoft vows to play by China's rules, they are not any better than Google.  Just wait until the core of their business is hacked and it will be very interesting to see how they respond.  It's coming; it's just a matter of when.
-Dawn

In case you are not aware, the USA owes China trillions of dollars. They buy our Treasury notes and bills. They effectively loan us money. Lots of money. They are keeping us afloat as our national operating deficit continues to mount.

Their economy is growing at a faster rate than anyone's. Their combination of communism and capitalism is unique, but is apparently effective. They have a right to run their country however they decide.

So, if your company wants to do business with the fastest growing economy in the world, then it would behoove one to do all one can to follow their rules of engagement -- their laws as a sovereign nation -- to stay in their good graces to make some serious profit. The Chinese are running things in the world, economically speaking. They have a strong balance of trade, compared to the U.S. They deserve our respect.
- C. Sam

Bully for Microsoft. It appears that they are making some right moves.

If they are operating on Chinese soil, it's a little like civil disobedience.  You violate the law at the risk of having to pay the consequences -- and in a place like China, those consequences could be pretty severe. 

I think what Google did was courageous -- but in the long run, the right choice.  Since the "Tiananmen Square" demonstrations (years ago now) and since China decided to open its markets to the West, the days of blatant censorship have been numbered.  Slowly but surely, the Chinese people have begun to stand up to their government and the government's control over information is slipping away.   

Every act of resistance, even from the outside, serves the long-term interests of the people of China and, indirectly, people everywhere.   
-C. Mark

More

Posted by Doug Barney on 03/31/20100 comments


Hackers Crack IE 8 in Two Minutes Flat

At a recent hacker event, it only took two minutes to break through IE 8's defenses. Rather than get defensive or ignore the event, Microsoft addressed the issues head-on, arguing that if you really want to secure your browser, you need a defense-in-depth approach, battening down all your computing hatches.

Part of those defenses, Microsoft argues, includes moving to more secure operating systems such as Windows 7 or Vista.

More

Posted by Doug Barney on 03/31/20107 comments


Doug's Mailbag: Web Censorship vs. Free Speech Debate Continues

We continue to go through your responses to Doug's censorship vs. free speech blog:

I don't know which is worse: that members of the KKK read your newsletter or that I agreed with him on freedom of speech. I was surprised and appalled when I read the signature on the letter after reading and mostly agreeing with it. Thankfully, I don't agree with the hatred of anyone different than me.

I totally agree that the right to preach your beliefs and to find like-minded people should be protected. However, my freedom cannot and should not impinge on someone else's freedoms. The minute the speech goes from beliefs to threats, that threshold has not only been crossed, but destroyed.

I, however, do not agree with the whole hate speech thing. It's a slippery slope to start to say that one type of speech is protected, but another is not – that is how dictators come to power. We must be vigilant to protect all individual's freedoms (whether we agree with them or not), lest we all become pawns to another's goals and find we've lost our freedoms.
-Joe

The freedoms of speech and thought are basic human rights.

To deny them validates the beliefs of those who irrationally fear those whom they demonize and strengthens both the position and the intensity of their language.

Censorship also denigrates those who deny these freedoms by allowing them to forget or marginalize the humanity of those they are censoring.

Live and let live, speak and allow others to speak, listen and learn.

You don't have to agree with what you hear and discuss but open discourse is the best way to combat the hateful beliefs and misconceptions which drive intolerant speech. O
Open discourse is also the only lasting way to open the minds of others, which ultimately frees people from intolerant ideas.

-Todd

So the Rabbi thinks we should censor and persecute particular groups he feels are a negative influence on society? That's never been done, so let's give it a try! Maybe we should elect him to a high office so he has the power to really get things done.
-G

The most erroneous stories are those we think we know best -- and therefore never scrutinize or question.
-Sephen

I appreciate your thoughts. I find this whole issue a major quandary. While I find hate speech repugnant, who defines "hate?" Google pulls it services from China because of censorship. I suspect that China thinks that the pro-democracy messages that they have been censoring are hate speech. A devout Muslim considers a critical cartoon about Mohammed to be hateful, but a critical cartoon about Jews (or Christians or Hindus or…) to be righteous. As a Christian, there are behaviors that I oppose, but if I state that the Bible says those behaviors are wrong, I am speaking hate. I personally try to separate the person from their action, but it can be a challenge.

Ugly mess this freedom stuff. Causes all sorts of problems. Is it all or none?
-H

As much as I would love to segregate the hate-mongers from the rest of society, we have a long tradition of letting speech speak for itself. Those that don't hate can easily recognize those that that do, so there is really no sense in censoring such speech.

More importantly, the slippery slope is that restricting hate speech can lead to restricting all sorts of ideas based upon the beliefs of those doing the restricting. There are those who "hate" conservatives and there are those that "hate" liberals.  There are also those who hate Christians, Muslims or Jews. Mostly, there are those that hate anything or anybody who is somehow different than themselves.

Who censors the censors? And who protects each person's right to speak (even of their position is idiotic) if it is not us?

Some consider Michelangelo's David and Playboy magazine equally pornographic and would restrict both -- yet the Supreme Court agrees than pornography is not illegal and though obscenity is illegal, the high court can't seem to decide what constitutes obscenity.

The bottom line is that if I don't get to judge what I should or should not access, who does? You? Congress? POTUS? Should we have Web censors like we have (broadcast) TV censors?

I am concerned that illegal activity on the Web cannot be traced to the perpetrators or even to the jurisdiction where the illegal activity takes place.

If there was some way to categorize Web content by type (without prejudice) and by the identity and credentials of the source, it would be much easier for the typical user to tell whether or not a source is reliable. If I could read Web-based content and be sure of the credentials of the source, the legitimacy of a Web site, and the identity of the person sending me spam, I would be much happier.

The fact that there is so much hate in the world is certainly disturbing but the idea that somehow gagging those that express such hate will make them, or their like-minded readers, hate any less is simply ridiculous.

Only an open expression of ideas among honest people will reveal the truth and falsehoods of unfettered speech.  
-C Mark

I think that your recognition of the hate problem is great. I am not sure what the solution is short of censorship. I believe that pressure should be put on the hosting sites, but even that may not work because many of the sites are in foreign countries. There are several e-mail lists that send out vicious racial and religious comments. Again, I am not sure of a good solution but I would very much like to see something done.
-Jerry

Here's my not-so-hidden agenda on Web hate-speech. I'm a Scientologist.

For that, I've been told on the Web, "I hope you die in a fire." I've heard more f-bombs than sailors' barracks. In the real world, I've found two notes advocating death to Scientologists.

Visit any Web news that mentions Scientology -- even its prominent members -- and you'll find its comment section an armory of hatred dripping with venom.

YouTube prints cesspools of rage, four-letter words and expressions of violence under any unmoderated Scientology-related video. And under videos about any other minority you can name.

In my experience, ABCNews is the only major news site that takes seriously "violation reports" about readers' posts that violate its terms of service. Most sites have no one-click way to report violations; you have to go searching. At the far end of the scale is the St. Petersburg Times, which only purges outright vulgarity about Scientology. A zillion micro-sites and blogs purge nothing on any topic.

As to censoring hate-speech on the Web, my gut so agrees with Rabbi Cooper!

But what if my emotions are wrong? Should we let Web hate-speech alone?

If hate-crazies aren't allowed to vent, posture and display their anger verbally to their Web buddies -- and get their team's "attaboys" -- might they increase actual violence against Jews, blacks, Hispanics, Asians, other minorities and Scientologists?

If that's a possible trade-off, I'll take their virtual, verbal violence over physical.
-Jon

My own opinion is that the Web should be a free-for-all! This is not to say that we should not educate and speak out against all hate, pornography and the bad the Internet has to offer, but we must remember "freedom is not free". We all must pay a price to remain "free" and if that payment is to allow a free Internet, then so be it. At what point do we stop restricting what people have to say, and who will be the judge of what is considered appropriate? Remember that you have the choice to visit or not, and the real reason to keep the Internet free is the fact that you do have a choice. We are not China!
-Vin

More

Posted by Doug Barney on 03/29/20108 comments


Banging Out a New Bing

Last December we ran a story ( Bing, Bang, Boom! ) that you all helped to write. The whole idea was that we asked what you thought of something and you wrote an entire story based on your, and only your opinions. Turns out you liked Bing quite a bit, though few were ready to give up the Google.

Now Microsoft is prepping a brand new Bing due this spring (which means it could be any day now, but is likely a few months off).

More

Posted by Doug Barney on 03/29/20103 comments


Google's China Loss Is Bing's Gain

As you probably know, Google no longer has a native search engine for mainland China. but instead redirects users to its uncensored Hong Kong engine. This all stems from a dispute over Chinese hacking which made the government-mandated censorship suddenly unacceptable.

What's interesting is that Hong Kong is now officially part of China proper. However, the Chinese authorities have wisely let Hong Kong hang onto some of its long-held freedoms and run it as a separate "administrative region."

More

Posted by Doug Barney on 03/29/20108 comments


Garage Company Stuck in Neutral

If you've never read The Onion, you might want to start. This site has satire in the tradition of the old National Lampoon, though a heckuva lot cleaner. Nat Lamp died before the computer market really took hold, so it is The Onion that can skewer our favorite devices and vendors.

A recent story talks about a computer company that began in a garage three decades ago, and is now in a smaller garage.

More

Posted by Doug Barney on 03/29/20102 comments


Doug's Mailbag: Web Censorship vs. Free Speech, Apple vs. Google vs. Microsoft, More

Doug's Wednesday blog item about Web censorship not only brought in a deluge of letters from all of you (see below), but also one from a spokesperson from the Klu Klux Klan:

When the day comes you silence all opposition, America will have ceased to exist. Silence the Ku Klux Klan and you muzzle this nation permanently.

With no voice of dissention what would have happened to the Watergate story? Having only one side of an argument means you get no truth at all.

Learn the lessons of propaganda: is propaganda your truth, my truth or the truth. The answer is my truth, I don't care about your truth and the truth is what you decide it is. If we take away your truth, and my truth do we get the truth? No, far from it. You will then have no way to reach the truth.

Likewise, hate is what you say it is. If I dislike green beans will you say I hate all vegetables? If I love lima beans does that mean I love all vegetables?

What has made America the country it is? The right to speak, publish and preach your truth, trusting the public to know what to ignore and what is to be called truth.

- Rev. Dr. Travis Pierce, National Membership Dir.
The Ku Klux Klan, LLC.

More

Posted by Doug Barney on 03/26/20103 comments


BizTalk Talks the Talk

I have to admit I don't fully understand BizTalk. Middleware is always a bit imprecise to me, and BizTalk is no different. And service-oriented architecture, in which BizTalk plays, is confusing to me even after reading an entire book about it.

So forgive me if my report on the next version of BizTalk lacks depth.

What I do know is that BizTalk is all about integrating software systems in what used to be called enterprise application integration. BizTalk talks the talk by integrating with over two dozen major applications such as SQL Server, SAP, Oracle, Seibel, DB2 and PeopleSoft.

More

Posted by Doug Barney on 03/26/20100 comments


Dell: Windows 7 a Winner

Dell is not exactly known as a research company, but with its reach into IT shops around the world, one could argue the hardware maker could out research Gartner or IDC. So I am presuming the company's findings that 87 percent of IT folks will adopt Win 7 are credible.

One reason the percentage is so high, Dell said, is because Win 7 has been proven fast and reliable.

More

Posted by Doug Barney on 03/26/20101 comments


Subscribe on YouTube