OK 
 
 
    Start | MVPs 
Overzicht
Weblogs
MVP FAQs
Microsoft.com


        MVP Weblogs


door: jubo

Big news today! Intel announced that it would aquire McAfee. For the details check the McAfee for the Announcement. Or hear directly about the deal from Intel Senior VP Renee James and McAfee president and CEO Dave DeWalt on the YouTube video.

 

 


comments 8/20/2010 2:41:00 AM

door: jubo

Since yesterday you can download a refresh of the Beta version of Windows Live Essentials. And really, it's getting better and better. Especially Live Photo Gallery looks great. For more information, system requirements and to download, see Windows Live Essentials Beta website.

 


comments 8/18/2010 5:34:00 PM

door: jubo

Yesterday was patch-Tuesday and Microsoft posted their Security bulletins. This time it's really a busy month; there are 15 bulletins addressing 34 vulnerabilities. There are 9 bulletins rated as "critical" and 6 of them are rated as "Important".

Critical:

  • MS10-046 - Vulnerability in Windows Shell Could Allow Remote Code Execution (2286198)
  • MS10-049 - Vulnerabilities in SChannel Could Allow Remote Code Execution (980436)
  • MS10-051 - Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2079403)
  • MS10-052 - Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (2115168)
  • MS10-053 - Cumulative Security Update for Internet Explorer (2183461)
  • MS10-054 - Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214)
  • MS10-055 - Vulnerability in Cinepak Codec Could Allow Remote Code Execution (982665)
  • MS10-056 - Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (2269638)
  • MS10-060 - Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution (2265906)

Important:

  • MS10-047 - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (981852)
  • MS10-048 - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2160329)
  • MS10-050 - Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (981997)
  • MS10-057 - Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution (2269707)
  • MS10-058 - Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)
  • MS10-059 - Vulnerabilities in the Tracing Feature for Services Could Allow an Elevation of Privilege (982799)

A more technical version of the Security Bulletin can be found at Microsoft TechNet and an end-user version is available at Microsoft's Security website.

See also the MSRC blog: August 2010 Security Bulletin Release.

If you do not have automatic updating turned on, or to check whether you need the update, go to Microsoft Update. Microsoft Update is an online tool that will scan your computer and provide you a report about what updates your computer needs.

From another great Starbucks store somewhere in the Olympia, WA area... Have a great day!

 


comments 8/11/2010 6:35:00 PM

door: jubo

Today Microsoft released their August Security Bulletin Advanced Notification. Will be a busy day next week as there are 14 bulletins, of which 8 are rated as "critical", addressing 34 Vulnerabilities. This is the most ever in one month.


comments 8/5/2010 10:20:00 PM

door: FransBouma

Yesterday, Microsoft announced a new Visual Studio tool: Microsoft LightSwitch. LightSwitch is a tool which allows you to create Line of Business (LoB) applications by using a visual tool, similar to Microsoft Access, although LightSwitch can also produce applications for the web and can pull data from various sources instead of its own build-in database.

Large companies like Microsoft develop many products which will never see the light of day or will die in the first weeks after being released, that's life. A successful product has to appeal to a large enough audience and that audience has to be willing to pay money for the product (if it costs money), otherwise the market for the product is too small, it won't bring in enough money to cover the development costs and things will go rough from there. It doesn't have to be that a product directly generates money; it can be it generates money indirectly, for example because it stimulates its users to purchase additional products which cost more money and are from the same company, e.g. services, support, add-ons. Give a guy a car and he'll come back every day for gas.

What puzzles me with LightSwitch is: what's the target audience? Who is supposed to use this tool instead of another tool? Is this a tool to sell more Sharepoint licenses, more Azure licenses? I have no idea. The main problem is that there's some friction in the image of LightSwitch. Microsoft says LightSwitch is aimed at the tech-savvy non-developer who wants to create a LoB application without needing to hire a truck full of professional developers. In short: a tool for an amateur who wants to 'Do It Him/Herself'. The friction is in the level of knowledge a person apparently has to have: what's a database, what's a table, what's an entity, what's a screen, what's validation etc.. So is it really an amateur tool for amateurs or is it an amateur tool for professionals?

The 'Do It Yourself' remark is familiar: a lot of people try to fix things around the house themselves before they call in the pro's, and sometimes they even succeed wonderfully. These 'do-it-yourself' people buy off-the-shelve cheap powertools to help them with the job and if you close your eyes a bit, the end result looks OK, as if a professional did the work. However, how many of those 'do-it-yourself' people will successfully install a full electrical circuit in the house, or create a new bathroom, with bath, plumbing, fancy mirrors etc.? Not many, they'll call the professionals, who have different tools and different skills and don't create a dangerous train-wreck.

I didn't want to compare LightSwitch to an el-cheapo power-drill, so I have chosen a different metaphore: an electrical guitar. A beginner will buy a beginner's guitar. A professional will buy a professional's guitar. Let's look at two brand examples: Squier and Fender. Squier is a brand from Fender actually and under that brand, Fender sells el-cheapo knock-offs of its expensive equipment, like the telecaster and the stratocaster. A Squier stratocaster costs below 200 euros, a Fender USA made stratocaster costs 1400+ euros. Why's that? They both have 6 strings, pick-ups (the 'elements' below the strings) and produce sound, and look almost the same: what's the difference?

As an amateur rock-guitarist, I can only try to describe the difference, but I hope it will show you what I mean. I played on el-cheapo guitars for some time, maybe 2 years or so, and one day I was offered to play a couple of hours on a real Fender telecaster (which costs over 1300 euros). I still can't believe the difference in sound that guitar made. It played like a dream, the sustain (the time a note continues to sound) was endless, the pickups were able to produce much deeper sound than I had ever heard from my el-cheapo's. Did it make my own compositions at that time sound better (warmth, depth)? Yes absolutely. Did it make my compositions better? No. Did it make me a better guitar player? No.

An amateur guitarist will sound like an amateur guitarist, no matter the equipment. A professional guitarist will sound like a professional, no matter the equipment. Don't make the mistake that by using a more expensive guitar you suddenly are Jeff Kollman of Cosmosquad (one of the best guitarists in the world, see below): the notes you'll play perhaps sound better, but the overall music will still be at the amateur level.

Microsoft LightSwitch is a tool for amateurs to produce stuff amateurs will produce. It's a mistake to think the stuff produced with LightSwitch will be usable by professional developers later on to extend it / maintain it or will appeal to professionals. See LightSwitch as that el-cheapo Squier Telecaster: it looks like a real Fender Telecaster guitar, it produces guitar sound, but a professional will choose for the real deal, for reasons a professional understands. Is that bad or arrogant? No: a professional is a professional and knows his/her field and has skills an amateur doesn't have and therefore doesn't understand. In these videos on Youtube (Part 1 | Part 2) (12 minutes combined) Jeff Kollman / Cosmosquad is interviewed and plays a Fender Telecaster in a custom tuning. It's very advanced stuff, but it shows what a professional can do with a tool for professionals.

In guitar-land things are pretty much settled down, amateurs use amateur material/tools, professionals use professional material/tools. In developer-land, let's see it the same way. The only fear I have is that in a few years time, the world is 'blessed' with applications created by amateurs using a tool meant for amateurs and us professionals have to 'fix the problems'. You can't bend a Squier to become a Fender, it will stay a Squier: amateurs of the world, please do realize that.


comments 8/4/2010 10:56:23 AM

door: jubo

On July 29th Microsoft released an out of band patch to address security advisory 2286198. For more details see Microsoft Security Response Center blog. More technical details can be found at the Microsoft Malware Protection Center post: Stuxnet, malicious .LNKs, ...and then there was Sality.

Of course you can always point your mouse to the Microsoft Update.Or launch Windows Update from your Windows 7 Start Menu.

 


comments 8/3/2010 4:08:00 PM

door: jubo

If you want to give the Beta version a try of the new Microsoft Security Essentials then see and download it from this post at Blogging Windows. It's a great program and besides... it's free...;)

 


comments 7/29/2010 11:39:00 PM

door: jubo

Mozilla has released some security fixes for Firefox. Detailed information about these patches can be found here: Security Advisories for Firefox 3.6. If you want to download a new version check their website: Firefox 3.6.

 


comments 7/21/2010 6:10:00 PM

door: jubo

Good website with tips on how to protect your family, yourself and your computer: Microsoft Online Safety.

 


comments 7/19/2010 3:54:00 AM

door: jubo

Last Tuesday Microsoft released 4 security bulletins for Windows and Office. Three of them are rated as "critical" and one as "important". Here's the complete list:

Critical:

  • MS10-042 - Vulnerability in Help and SupportCenter Could Allow Remote Code Execution (2229593)
  • MS10-043 - Vulnerability in Canonical Display Driver Could Allow Remote Code Execution (2032276)
  • MS10-044 - Vulnerabilities in Microsoft Office Access ActiveX Controls Could Allow Remote Code Execution (982335)

Important:

  • MS10-045 - Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

A more technical version of the Security Bulletin can be found at Microsoft TechNet and an end-user version is available at Microsoft's Security website.

For more technical details check Microsoft Security Research & Defense blog.

Because of all that traveling I had to do the last few months, I wasn't able to post any details last month. So, if you haven't updated your Windows in the last few months then point your mouse to Microsoft Update and see what your computer needs for updates.

Have a wonderful day... from a sunny and warm Washington (Evergreen state) this time...;)

 


comments 7/15/2010 6:28:00 PM

door: jubo

 When working at the McAfee forums as a volunteer moderator, aka McAfee Maniac, you sometimes get some free stuff. One of these is a very nice t-shirt. See below..;)

If you have McAfee's software installed on your computer, and you have any questions, then just visit us at McAfee Communities. There are other Maniacs/Volunteers and McAfee techs available to answer your questions!

 

 


comments 7/15/2010 6:18:00 PM

door: Jan Karel Pieterse
Seems the methods I described to prevent the workbook_Open event do not always work for Excel 2007.
comments 7/8/2010 10:00:00 PM

door: jubo

Been traveling accross the USA for the last few months, and still on my way... but here's something I like to mention. Yesterday I got a notification of a new version of Microsoft Security Essentials, MSE. Tried to upgrade within the program but got an error message. Send an email to Support and they replied within 24 hours. They even called me later. But just after I sent the email Microsoft Update kicked in and showed it as a "critical" update. Installing the new version through MS Update was no problem. Nowe I have the following version installed:

Microsoft Security Essentials Version:  1.0.1963.0
Antimalware Client Version: 2.1.6805.0
Engine Version: 1.1.5902.0
Antivirus definitions: 1.85.1058.0
Antispyware definitions: 1.85.1058.0

If you also get an error message try Microsoft Update website or "Windows Update" in Vista or Windows 7. Now MSE is running nicely on this laptop.

 


comments 6/30/2010 9:29:00 PM

door: FransBouma

After two years of hard work we released v3.0 of LLBLGen Pro today! V3.0 comes with a completely new designer which has been developed from the ground up for .NET 3.5 and higher. Below I'll briefly mention some highlights of this new release:

  • Entity Framework (v1 & v4) support
  • NHibernate support (hbm.xml mappings & FluentNHibernate mappings)
  • Linq to SQL support
  • Allows both Model first and Database first development, or a mixture of both
  • .NET 4.0 support
  • Model views
  • Grouping of project elements
  • Linq-based project search
  • Value Type (DDD) support
  • Multiple Database types in single project
  • XML based project file
  • Integrated template editor
  • Relational Model Data management
  • Flexible attribute declaration for code generation, no more buddy classes needed
  • Fine-grained project validation
  • Update / Create DDL SQL scripts
  • Fast Text-DSL based Quick mode
  • Powerful text-DSL based Quick Model functionality
  • Per target framework extensible settings framework
  • much much more...

Of course we still support our own O/R mapper framework: LLBLGen Pro v3.0 Runtime framework as well, which was updated with some minor features and was upgraded to use the DbProviderFactory system. Please watch the videos of the designer (more to come very soon!) to see some aspects of the new designer in action.

The full version comes with Algorithmia in sourcecode as well. Algorithmia is an algorithm library written for .NET 3.5 which powers the heart of the designer with a fine-grained undo/redo command framework, graph classes and much more.

I'd like to thank all beta-testers, our support team and others who have helped us with this massive release. :)


comments 5/29/2010 3:54:09 PM

door: jubo

Yesterday was the 2nd Tuesday of the month and as usual, Microsoft released some new security updates. This time it's not that many; only two:

Critical:

  • MS10-030 - Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542)
  • MS10-031 - Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (978213)

A more technical version of the Security Bulletin can be found at Microsoft TechNet and an end-user version is available at Microsoft's Security website.

See also the MSRC blog: May 2010 Security Bulletin Release.

You can also watch a video about these updates.

For more technical details check Microsoft Security Research & Defense blog: MS10-030: Malicious Mail server vulnerability.

If you do not have automatic updating turned on, or to check whether you need the update, go to Microsoft Update. Microsoft Update is an online tool that will scan your computer and provide you a report about what updates your computer needs.

This time not from my favorite Starbucks in Seattle but from somewhere in Tornado Alley in Oklahoma...

 


comments 5/12/2010 8:33:00 PM