Google search
Google Banner
Vista Lands in the U.S
After five years and numerous delays, customers can now get their hands on the final version of the Windows Vista operating system.
Well, business customers can at least. Though Microsoft celebrated the launch of Vista--as well as Office 2007 and Exchange 2007--at events across the globe today, both Vista and Office 2007 won't be generally available through retail in the U.S. until January 30, 2007. Today marked the day business customers could purchase those products through Microsoft's volume licensing program.
And though business customers can begin ordering Exchange 2007 today, the new version of Microsoft's messaging server software won't be released to manufacturing until the end of December.
Analysts Unimpressed
Not only was today's launch party for all three products a bit premature and anticlimactic after so long a wait for Vista, it could also be the last of its kind, according to industry watchers. With more software being pushed out to customers over the Web as services, launch parties for packaged software products may soon be a thing of the past, they said.
"This is a big launch for them but for everyone else it's ho-hum," said James McQuivey, a professor for Boston University's College of Communication who specializes in marketing research and business management. "It's the biggest wait-and-see event of the week. Customers are going to wait and see when they need [Vista] and if they need it."
'Biggest Launch in [Microsoft's] History'
These concerns aside, Microsoft Chief Executive Officer Steve Ballmer was on hand with his usual enthusiasm at the New York launch event to promote what is arguably the industry's most highly anticipated product launch of the year.
"It's an exciting thing to finally be here," Ballmer said. "That's all I'll say about the past." He had previously promised that Microsoft will never again have another lengthy gap between the major releases of its client operating system. The vendor debuted Windows XP, the previous version of its client OS, in October 2001.
"This is the biggest launch in our company's history," Ballmer said. "These are frankly the most significant releases of these two products [Vista and Office] we've ever done."
Vista was the big star of today's event, though Microsoft teamed the OS launch with Office 2007 and Exchange 2007 for several reasons. One is that the company is trying to promote the technology links between the products to show how they can bring better worker productivity and cost savings to business customers in the hopes companies will purchase and deploy all three at once.
Another reason for the triple product launch is that Vista has been so long coming, Microsoft felt it had to give customers a little extra incentive to be excited about it, said Sunil Misra, vice president of Getronics. The provider of managed services and consulting has been helping business customers prepare for Vista deployment.
"It's the love campaign," Misra said, referring to the launch of all three products together. "People have been waiting a long time for Vista."
Customers Likely to Hold Off
The last time Microsoft released Windows and Office together was with Windows 95. But during that time in the heyday of Windows, customers would have flocked to the new OS release even without its tie to Office. "It's not nearly as exciting as it used to be in the old days," said McQuivey. "With Windows 95 and 98, you actually had people waiting in line at [retail store] Best Buy" to purchase the OS.
This certainly isn't the case now, as consumers can't purchase Vista until January. And it may not even be the case then, as consumers in addition to business customers have said they may hold off on purchasing Vista until they need a new PC.
Many of those new PCs are bought during the busy holiday shopping season that is currently in progress, but since Vista is not available yet in retail outlets, it can't benefit from that rush. In lieu of that, Microsoft's hardware partners such as Hewlett-Packard and Dell are offering discount coupons for the OS if customers buy PCs that are capable of running it this holiday season.
On the business side, customers will likely continue their Vista planning process throughout the end of the year and most of 2007, Misra said. Indeed, most analysts think the bulk of Vista business deployments won't happen until 2008.
China Martens in Boston contributed to this story.
Vista Launch Gets Rolling
Today Microsoft kicked off the day-long launch of its Vista operating system, Office 2007 suite, and Exchange Server 2007 applications for enterprise users with events at three locations in Asia.
It's the first time that new versions of Windows and Office have been launched simultaneously since 1995 and that makes it one of Microsoft's biggest launches in years. The three products became available today to volume licensing customers. Consumer versions won't be available until next year.
"I'm super excited about this launch today. It's been a very long journey but now I can say that we have truly arrived," said Darren Huston, president and chief executive officer of Microsoft's Japan unit.
The launch, which began with an event in Sydney and was followed with similar events in Tokyo and Beijing, provided Microsoft a stage from which to talk up the three products and showcase some of the businesses that have already committed to rollouts.
Interest High in Corporate Japan
Microsoft Japan has 57 companies that have said they'll roll out at least one of the three products. The list includes Sharp, Sanyo Electric, McDonalds Holdings Company (Japan), Nikon, Chubu Electric Power, computer game maker Capcom, and trading company Itochu.
Interest from potential users in Japan has been high, according to Huston. Of 5 million downloads and 1 billion user sessions conducted as part of the beta testing for Windows Vista, about 20 percent have been by users in Japan. The country accounts for about 10 percent of the global IT market.
Speaking in Tokyo, Jay Jamison, leader of Microsoft's Windows business group in Japan, said, "We are hopeful and optimistic that in Japan Windows Vista will be the most successful business OS release of Windows ever."
Other Launch Plans
In Australia, companies including BDO Chartered Accountants & Advisers and alcoholic drinks company Lion Nathan have begun testing the products.
Later today Microsoft will hold launch events in Munich, London, Paris, Toronto, and New York. A consumer version of Windows Vista is due on January 30 in many countries.
Rodney Gedda of Computerworld Australia contributed to this report.
Could Existing Malware Infect Vista?
Microsoft has touted Vista as a more secure version of Windows, but on the day of Vista's official launch, a security company has identified malware already in circulation that can infect computers running the OS.
Sophos Says Vista Vulnerable to Worms
Sophos identified three viruses typically spread through e-mail that can infect Vista customers who use a third party Web e-mail client. While Vista's e-mail client stops Stratio-Zip, Netsky-D, and MyDoom-O, the malware slips past Vista's defenses when users receive infected messages through a Web-based e-mail service, Sophos said.
Stratio-Zip topped Sophos' list of malware affecting computer users in the month of November, accounting for 33.3 percent of malware in circulation. Combined, the three viruses that can affect Vista users make up 39.7 percent of all malware in circulation during the month, Sophos said.
However, even if the malware Sophos identified slips through in an e-mail, customers won't necessarily be affected, another researcher said.
New Security Measures Work, Says F-Secure
Additional Vista security mechanisms should protect users, said Mikko Hypponen, chief research officer at F-Secure. If a customer opens an infected malware file, Vista would warn and question the user before allowing the malware to wreak havoc. "These particular examples of malware probably wouldn't still be able to successfully infect the machine unless the user specifically allows it," he wrote in an e-mail exchange.
Sophos applauded the security improvements in Vista, saying that the variety of popular third party applications used by consumers inevitably will open doors to hackers.
McAfee and Symantec: Vista not Secure
Other antivirus companies haven't been so kind. McAfee has been highly critical of changes in the operating system that it says will make Vista less secure than previous versions of Windows. Symantec said it has discovered vulnerabilities in Vista's networking software which makes it less stable than Windows XP.
Sophos found that overall, the proportion of infected e-mail remained low in November at 0.28 percent, but identified a record number of new threats, 7,612, during the month.
New Version of Microsoft's Windows XP Antipiracy Tool Coming Soon
Microsoft plans to roll out a new version of its antipiracy Windows Genuine Advantage (WGA) Notifications tool for Windows XP over the coming weeks and months, following a barrage of criticism from users.
The software giant has incorporated user feedback into the new version to make installation of the tool and validation of the operating system less opaque, according to a Microsoft statement issued today.
The upcoming release of WGA Notifications features a new installation wizard and will display validation results as soon as the tool has been installed. The software doesn't need to be rebooted after its installation, Microsoft said. Instead of the tool simply flagging a copy of the OS as genuine or not, Microsoft has added an additional "indeterminate" result category and access to resources to troubleshoot issues if users are unable to validate their operating systems.
Microsoft plans to update the tool every 90 to 120 days, as a way to react to re-evaluation of the software and any changes in software piracy.
Background
Microsoft began piloting an initial version of WGA Notifications in April to ascertain whether users' copies of Windows XP were genuine, as part of the vendor's Genuine Software Initiative to crack down on pirated and counterfeit versions of Windows. Users who can't validate their copy of Windows as genuine forfeit the right to install many of the updates Microsoft provides for Windows and add-on software.
So far, WGA Notifications has proved highly unpopular with users, with criticism reaching a crescendo in June.
First, the tool came under attack for exhibiting spyware-like behavior since WGA Notifications was checking in with Microsoft's servers each time users rebooted their PCs even though the software had already certified the copy of Windows XP as genuine. Microsoft disputed the spyware allegation, saying that although the tool regularly called home, it wasn't providing any information to Microsoft, just checking to see if it should run.
Later that same month, users complained that Microsoft was delivering WGA Notifications as a high priority automatic update for Windows XP despite the tool still being in a test version. The software vendor has typically provided test versions of its software separately from updates. Microsoft said the tool's license explained the software was a pre-release version, but customers countered that fact wasn't made sufficiently obvious.
Microsoft finally responded by issuing a second version of WGA Notifications in late June that only periodically checked if the copy of Windows was genuine every time users logged on to the system. At the same time, the software vendor moved the tool out of the testing stage.
Microsoft remains committed to having WGA Notifications fully deployed worldwide by year-end.
Vista Adoption Rate Predicted to Outpace Windows XP
Adoption of Microsoft's Windows Vista operating system will happen at a faster pace than any previous operating system release, a software analyst predicted last week.
Up to 15 percent of PC users will move to Vista within the first year that the operating system is available, said David Mitchell, the software practice leader at Ovum Ltd. "That would make it the fastest-moving operating system ever," he said.
By comparison, between 12 to 14 percent of users switched to Windows XP during the first year of its release, Mitchell said.
Corporate and Consumer Users
Vista gain traction in the market from quick adoption by both corporate and consumer users. For example, companies that participate in Microsoft's Software Assurance licensing program will automatically get upgrades to Vista, Mitchell said. "On the consumer side, there has been a bit of pent-up demand. Just look at the beta adoption in the consumer space--it's very high," he said.
Vista will be available to business customers from November 30, with the operating system available to consumers from January. For users who buy a new computer before Vista is released to consumers, Microsoft is now shipping Vista upgrade coupons with computers that are sold with Windows XP.
The upgrade coupons mean that Microsoft will not be hurt financially by missing the year-end holiday shopping season -- a peak time for computer sales.
While corporate and consumer users will quickly move to Vista, the adoption prospects for Office 2007--which goes on sale at the same time--are less clear. While many users may now see no need to upgrade, once Office 2007 starts to make its way into companies users may find themselves upgrading to keep pace, Mitchell said.
Overall, the rate of adoption of Office 2007 will be lower than Vista during the first year, Mitchell said. "You don't get the OEM drag effect. If you buy a new PC, you get a copy of Vista. You don't necessarily get a copy of Office," he said.
Vista Meets Antitrust Rules
Microsoft's Windows Vista operating system doesn't pose antitrust issues so far, according to the latest status report on Microsoft's compliance with the U.S. antitrust settlement.
Utility Vendors Worry
The company has addressed all of the bugs identified relating to how third-party middleware software interacts with Vista, according to the report, filed in U.S. District Court in Washington, D.C.
Microsoft has increased its cooperation with the court's technical committee in several ways to help ensure that middleware vendors have their software ready for Vista before the OS ships, the report says.
The document defines middleware as software programs such as instant messaging programs, media players, e-mail clients, and Internet browsers. Around 30 vendors are working with regulators and Microsoft on how their software works with Vista, the report said.
Releasing Specs
The U.S. government and states that were a party to the antitrust suit against Microsoft have conducted "extensive testing" of interim builds of Vista and Internet Explorer 7 to ensure compliance with the November 2002 antitrust settlement, the report said.
As part of that settlement, Microsoft agreed to license communication protocols to IT vendors interested in developing server software that works smoothly with its Windows operating system.
After complaints, Microsoft is rewriting some of the technical documentation for its Microsoft Communications Protocol Program.
The status report said Microsoft has made the new documentation easier to understand, but the company needs to stay on schedule for delivering further documents. Microsoft has until November 2009 to provide the information.
Europe Scrutinizes
The European Commission has also been scrutinizing Vista, following its 2004 antitrust ruling against Microsoft. So far, the Commission has taken no action against Vista. Microsoft has warned that if regulatory interference delays Vista's European launch, it could hurt Europe's economy.
Microsoft plans to release Vista to business customers on November 30.
In 2004, the Commission fined Microsoft $613 million for abusing its monopoly in the desktop OS market, ordered it to release a version of Windows XP without Windows Media Player software, and mandated it to license and document protocols used by its server products. Microsoft is appealing the decision before the European Court of First Instance in Luxembourg.
Tips & Tweaks: Microsoft Wants to Enhance Your Functionality
You've got to love the geniuses at Microsoft. In an effort to combat software piracy, Microsoft's adding a special "reduced functionality mode" to Vista. It's enhanced, as a press release explains: "Reduced functionality is already a part of the Windows XP activation process, but Windows Vista will have a reduced functionality mode that is enhanced."
George Orwell would be proud.
In other news, it looks as if Vista's going to be released to corporate users as soon as the end of November--even small businesses can get in on the fun. The rest of us should be able to get a copy in late January.
Not surprisingly, Microsoft wants us to buy in to the whole package--Windows Vista and Office 2007. The pundits are skeptical we'll take the bait.
Dig This: When was the last time your exercised? Seriously, I worry about your cardiovascular health. You know what I mean. You spend way too many hours pushing your Fortran+ and Cobol++ code to the limits, drinking soda, and scarfing up pizza. About the only way you get your heart rate up is when your PC kicks up a BSOD. I have a solution. Slimgeek's Geek-a-Cycle ($400) gives you a way to pedal while you debug your code.
Dig This, Too: Braindots will keep you busy just long enough to get behind on any project. My average reaction time was 4.73 and I'm sure you can do better. Have more time on your hands? Try out the rests of the tests at Cognitive Labs.
Get Up to Speed on WGA
I've been getting some questions about Windows Genuine Advantage, and I'm surprised by how of you aren't aware of the WGA fiasco. Basically, Windows XP detects whether you're using a legit copy and phones Redmond with a report. Andy Brandt's "Windows Genuine Annoyance" covers the topic.
If you're having problems, you might want to consider RemoveWGA, a freebie that does a number on WGA. We've got a copy of it in our software library. Take a look at what users have to say about the program, and download it if you're intrigued.
While you're spending time fretting over Windows, take a minute to read Scott Dunn's "Don't Let a Windows Update Bring You Down."
Dig This: I'm sure you knew the Federal Bureau of Investigation has files on Al Capone and the American Communist Party. But I was surprised by the jackets on the U.S. Supreme Court, Winston Churchill, Albert Einstein, J.F.K., and George Orwell. Browse the list of files released under the Freedom of Information Act and be amazed.
Dig This, Too: Ever wonder how much money your neighbors earn, or maybe how long it takes most of them to commute to work? Neighboroo shows you the demographics for practically anywhere in the U.S., and it makes for fascinating reading.
Free: Microsoft Office Accounting Express
Lest you think I have it out for Microsoft, here's something good the company's doing for us: It's giving away a free copy of its Office Accounting Express 2007 software. You can download a copy of the 208MB file, or order a free CD.
Quick Update: I've been mouthing off about spam being up, Up, UP for the last few days. Read IDG News' recent "Spam Levels Up by 80 Percent" for details and an explanation.
Dig This: It could have been a low overpass, or maybe a backhoe sitting too high on a flatbed trailer. Either way, "An Engineer's Story Problem" made for some amazing pictures.
Dig This, Too: A buddy sent me an amazing video of a tire's path along a race track. Chances are good you'll be as impressed as I was. BTW, no tires or auto were harmed in this video.
Steve Bass writes PC World's monthly "Hassle-Free PC" column and is the author of PC Annoyances, 2nd Edition: How to Fix the Most Annoying Things About Your Personal Computer, available from O'Reilly. He also writes PC World's daily Tips & Tweaks blog. Sign up to have Steve's newsletter e-mailed to you each week. Comments or questions? Send Steve e-mail.
Attack Code Posted For Latest Microsoft Bugs
Hackers have posted code that could be used to target Microsoft's Windows operating system in a worm attack.
The code, which was published early Thursday on the Milw0rm Web site, works on the Windows 2000 operating system, according to Oliver Friedrichs, director of emerging technologies with Symantec's Security Response.
It takes advantage of a flaw in the Windows Workstation service, which Windows uses to do things like file-sharing or printing over the network.
Targeted Attacks
When Microsoft patched this flaw in its monthly batch of security fixes earlier this week, security vendors had warned that this was one of the most critical of the November updates, and could possibly be exploited in a self-replicating worm.
On Thursday, they reiterated this advice, though the odds of a widespread worm may not be great.
"If you run Windows 2000 systems in your environment, this flaw is the most critical one to patch, and even more so now that there's a live working exploit on the Internet," said Marc Maiffret, chief technology officer with eEye Digital Security.
Maiffret said that while the Workstation flaw is "just as easy to exploit" as the flaws used by the Blaster and Zotob worms, the bad guys have realized that they can be more effective by using their malware in low-key, targeted attacks. "Nobody is going to dare to write a worm," he said. "Why would they, when they could target companies and make money off of them?"
"All worms do is create awareness," he added.
Other Worms In Circulation
Symantec has not yet seen this malware being used in attacks, Friedrichs said Thursday.
Still, some security vendors think that a worm attack could be in the works. "If we are able to confirm that it does work ... then the possibility of a worm is really high," said Amol Sarwate, Vulnerability Research Lab manager with Qualys. "Once people get it working, it's only a matter of time for people to encapsulate it in worm behavior."
Qualys researchers are studying the exploit code and are still not sure which versions of Windows can be compromised by the attack, he said.
Sarwate noted that there is other attack code in circulation this week. Hackers have also posted malware targeting a critical flaw in the WinZip 10 file compression software, which was also patched by Microsoft on Tuesday.
"It is a big deal for the people who have WinZip installed, but it's not as much of a big deal as [the Workstation exploit]," he said.
Symantec is now warning of attack code targeting a third Windows flaw. On Thursday it said that exploit code has also been published for a flaw in the Client Service for Netware, which was also patched Tuesday.
Pirated Vista May be Useless
Microsoft says supposedly pirated copies of its new Vista computer operating system "will be of limited value" to those who use them.
Microsoft responded to reports that some Web sites have been circulating pirated copies of Vista and the Microsoft Office 2007 applications suite.
The pirated Vista comes with a product key that users can enter to activate a version of the products on their computers without paying for them, according to a report on the Web site of The Sydney (Australia) Morning Herald newspaper. A product key is a unique serial number tied to each package of a software product.
A second download, called an "activation crack," can then be applied that bypasses the activation process intended to guarantee that the Vista version being downloaded is legitimate, the Herald reported. Pirated copies of Office 2007 can be downloaded just with the product key with no second activation code required.
Apps Will Expire
But Microsoft said in a prepared statement that those pirated copies of the OS won't work for long.
"The copies available for download are not final code and users should avoid unauthorized copies which could be incomplete or tampered. This unauthorized download relies on the use of pre-RTM [release-to-manufacturing] activation keys that will be blocked using Microsofta??s Software Protection Platform. Consequently, these downloads will be of limited value," the statement said.
Microsoft is still looking into reports of pirated versions of Office 2007 and declined further comment.
"Microsoft is happy that customers are eager to begin using Windows Vista," the company said.
Vista's Launch Schedule
Microsoft has been criticized for multiple delays in bringing Vista to market, but has said it wants to take care that the product is designed correctly to avoid security flaws, piracy problems, and other software glitches.
The company released Vista to computer manufacturers November 8 for them to build into new laptops and desktops available for retail sale in January 2007. Consumers can start buying individual copies of Vista January 30.
Microsoft also plans to have Vista in the hands of business customers by the end of November. It has scheduled a Vista launch event in New York City on November 30 when the new Office 2007 and Exchange Server 2007 will also be introduced.
Microsoft Releases Six Security Updates
Microsoft has issued six security updates, fixing critical bugs in Windows components ranging from Internet Explorer to the Microsoft NetWare client service.
The updates were released Tuesday as part of Microsoft's monthly cycle of security patches. Five of the November updates are rated critical by Microsoft, meaning that these bugs could be exploited by attackers to run unauthorized software on a system without user action. Microsoft rates the sixth update, which fixes the NetWare flaw, as "important."
The updates also fix Microsoft's Extensible Markup Language (XML) parser, the Windows Workstation service, the Microsoft Agent, and the Macromedia Flash Player that is distributed with the operating system.
Nine Holes Plugged
In total, nine security flaws are patched in the six updates, said Mark Griesi, a security program manager with Microsoft.
Many of the flaws could be exploited by attackers who planted malicious code on Web servers and then tricked victims into visiting these sites.
For example, the Macromedia Flash, Microsoft Agent, and Internet Explorer bugs fall into this category, Griesi said. "The attack vector on all of these is the same," he said.
According to Symantec, the most critical of the updates is the Workstation service patch. "This issue can be exploited by remote anonymous attackers on Windows 2000, Windows XP and possibly Windows Server 2003 systems," Symantec said in a statement. "A wide variety of component technologies and services are impacted by this issue which has potential for a worm-style attack."
Griesi said he did not believe that a widespread worm attack based on this vulnerability was likely.
Remote attackers would be able to exploit this system remotely on a Windows 2000, Service Pack 4 system, according to Microsoft's Web site. But on an XP Service Pack 2 machine, attackers would first need to have administrator privileges on the machine. The vulnerability does not affect Microsoft's server operating systems.
Browser Bugs Squashed
The Internet Explorer update is important, because unlike many of the other services being patched this month, Internet Explorer (IE) can easily be targeted by attack code placed on a Web site, said Roger Thompson, co-founder and chief technology officer with Exploit Prevention Labs. "I think IE is always the most critical," he said via instant message.
Because hackers have also posted attack code that exploits a hole in the XML parser, the XML update is also noteworthy, he said.
Symantec also flagged the XML update. "All supported versions of Internet Explorer (including the new Internet Explorer 7.0) make use of this functionality and are susceptible to possible attack," the company said. "This is a publicly known vulnerability that is currently being exploited in the wild."
Phasing Out Support
While this month's updates mark the end of free, mainstream support for XP Service Pack 1 and Office 2003, Service Pack 1, Microsoft is cutting users of its Software Update Services (SUS) users a break. Microsoft had been planning to end support for SUS on December 6, but this deadline has now been pushed back to July 10, 2007, Griesi said.
Microsoft pushed back the date to give enterprise users a bit more time to move to SUS's successor, Windows Server Update Services, he said. "That time frame now should give everybody enough time to get it done," he said.
CompUSA to Offer Vista Early
Microsoft continues to expand ways customers can get access to Windows Vista as the OS's official launch date approaches. The company said on Monday it is teaming with CompUSA stores to offer early access to Windows Vista to U.S. small businesses.
Through the Microsoft Small Business Value Program, small businesses that want to purchase five or more licenses for Vista can purchase them through one of two licensing programs--Open Value or Open Business--beginning on November 30 from CompUSA stores. This is the day Vista will be available to Microsoft's volume license customers, but before the product's general availability in retail outlets, which will not occur until January 30, 2007.
The Open Value and Open Business license programs are intended to allow smaller companies to acquire Microsoft software in a cost-effective way that can be managed online, according to Microsoft. Typically, small businesses can purchase software through these programs either from Microsoft or a licensed reseller, but Microsoft is extending this access to CompUSA retail outlets. CompUSA has more than 229 stores in the U.S.
The company plans to allow more retailers to offer Vista through these volume-licensing programs throughout 2007, Microsoft said.
Program Details
Open Value will spread payments for the software out over a year, while Open Business requires an upfront payment, according to Microsoft's Web site. Open Value also includes a subscription to Microsoft Software Assurance, the company's software update program, while SA is an add-on option for Open Business customers.
Small business customers that purchase Vista at CompUSA through one of the programs will initially receive a Microsoft Small Business Value Program Kit and a proof of purchase. A CompUSA sales associate also will work with the customer to explain how to download Vista and activate the licenses, Microsoft said.
Microsoft is touting the long-delayed Vista as a major overhaul of its Windows client OS with many benefits for customers, and has high hopes that people will upgrade to the new OS as early as possible. However, there is evidence from both analysts and business customers that neither consumers nor businesses are in a hurry to purchase Vista
Microsoft to Release Six Windows Security Updates
Microsoft will release six groups of security patches next Tuesday, fixing flaws in its Windows operating system.
The updates will be released as part of Microsoft's regularly scheduled monthly patch release, and will fix critical flaws in Windows and the company's XML (Extensible Markup Language) parser, Microsoft said Thursday.
With only six updates, November looks to be a quieter month than October. Last month, Microsoft issued 10 updates, fixing 26 bugs in its Windows and Office software.
Not Fixing Everything
The XML update is of particular interest to security experts because hackers have posted code showing how a flaw in the parser could be exploited to run unauthorized programs on a PC.
However, Microsoft gave no indication that it plans to patch this or another recent bug, reported last week in its Visual Studio software. That bug, known as the WMI Object vulnerability could also allow an attacker to run unauthorized code on a victim's computer.
Rated As Hype
Because these bugs were reported recently Microsoft has had a narrow window in which to develop patches.
"It wouldn't surprise me if neither of these are fixed this month, given how little time it seems Microsoft has had to fix them," said Russ Cooper, senior information security analyst for Cybertrust, via instant message.
Either way, most users are not at great risk from the two bugs, he added. "As far as we at Cybertrust are concerned, both of these issues have been rated as hype," he said. "There is far more media attention than actual exploitation ... or risk."
Windows Vista On Its Way To Manufacturing
After several delays, the long-awaited update to the Windows client OS, Windows Vista, is expected to be on its way to manufacturers Wednesday.
"This is a good day," said Jim Allchin, co-president of Microsoft's Platform & Services Division, on a call to announce Vista's release to manufacturing (RTM). "Vista is rock solid and we're ready to ship."
Allchin also confirmed that Vista will be available to consumers on Jan. 30, which many suspected was the case after online retailer Amazon.com posted that date in August in pre-order listings for the OS.
The IDG News Service reported several weeks ago that the Vista's release to manufacturers (RTM) had been pushed from Oct. 25 to Nov. 8 because a last-minute bug in one of the last builds of Vista had to be repaired.
Installations Can Begin
Once Vista is in the hands of manufacturers, hardware vendors can begin installing it and configuring it on computers that will be sold via retail channels beginning in January 2007, according to Microsoft's current schedule.
Microsoft also plans to have Vista in the hands of business customers by the end of November, and is hosting a launch event in New York on Nov. 30 to mark that occasion. The company also will launch Office 2007 and Exchange Server 2007 at that event.
Most Secure Microsoft OS Yet
Allchin said he expects business customers will jointly deploy all three of those products, which will give them "dramatic benefits" in security and reliability.
In fact, he cited security as a primary reason he expects both consumers and businesses to upgrade to Vista. Allchin said Microsoft paid closer attention to security in Vista than it ever has in any other Windows OS.
"In my opinion, it's the most secure system thata??s available and the most secure system we have shipped," he said. This means the number and severity of security updates Microsoft must release every month on Patch Tuesday, the name security researchers have given for when Microsoft releases its monthly security patches, should be reduced, Allchin said.
"That can be proven," he said of his patch prediction. "We will see about that."
If this bodes true it will be good news for IT administrators, as Microsoft has been releasing a significant number of patches over the last several months to fix security holes in its software. In October Microsoft released 10 patches to fix 26 vulnerabilities, a record number of flaws for the vendor.
Benefits For Waiting
Vista has been a long time in the making, and was originally scheduled to hit retail channels this month in time for the busy holiday shopping season. Microsoft is offering coupons through its hardware channel to encourage customers to buy Vista-ready PCs during that time so they can upgrade to Vista when it's available generally.
Microsoft Pushes Dual Deployment of Vista, Office 2007
With the launch of Windows Vista and Office 2007 less than a month away, Microsoft was in New York on Monday showing off some features of the products it thinks should convince business customers that upgrading--and deploying both applications at once--is a good idea.
Windows Vista and Office 2007 will launch together alongside Exchange Server 2007 at an event in New York on November 30. On Monday, Microsoft said Office 2007 had been shipped to manufacturing, and that customers in the U.S. and Canada can begin downloading the product on December 1.
Microsoft's Plan Could Backfire
It's Microsoft's hope that users will deploy Vista and Office 2007 together, but this plan could backfire and push upgrades of both products further out. Most companies have said they will hold off on adopting Vista right away until they can justify the cost of the new OS or the first service pack is available for it. This may also delay enterprise upgrades to Office 2007.
"In all likelihood, enterprises will tie deployment of both Vista and Office 2007 with a hardware upgrade cycle," said Andrew Brust, chief of new technology for IT consulting firm twentysix New York. His reasoning for this is that it would be easier for companies to handle one disruption to its IT systems than two.
New Features
Peter McKiernan, a senior product manager for Windows, highlighted new features built directly into Vista that will make it more efficient and productive for enterprise employees to use the OS in their everyday work environment. These features also will enhance applications in Office 2007, he said.
Among them is Vista's new search engine. Microsoft has added a search box right into Windows Start menu, so instead of having to find applications or files by clicking through lists, all users have to do is start typing the name of the application or file they are looking for and it will come up in the search, McKiernan said.
Users can still search specifically for certain kinds of files, such as e-mails, Word documents, photos or music, but because search is an inherent part of the OS, it speeds up any search process considerably, he said.
Microsoft also has added a feature to its file system that allows users to preview any document before they open it in a preview pane. This includes all of the documents that originate in Office 2007, he said.
Additionally, Vista has a new "Live Icons" feature that gives users the ability to make icons in a folder look like a snapshot of the first page of an Office 2007 document, McKiernan said. "Now I can glance at a [file icon] and know what I'm looking at," he said.
Current Versions 'Good Enough'?
Even with all of these bells and whistles, customers may delay upgrading to either or both software packages indefinitely, said Don Smutny, a software developer for an IT company in the Midwestern U.S. He does not think Microsoft has given most companies compelling enough reasons to move off the current versions of Windows and Office.
Microsoft is not oblivious to this situation--executives have called it a "good enough" problem, meaning customers believe the software they currently use is sufficient for the tasks of the organization. But it seems despite all of the company's efforts, the problem still exists.
"I don't see any medium or large companies rushing to upgrade to Office 2007 or Vista," Smutny said.
BenQ Unveils Vista-Approved LCD Monitors
BenQ unveiled some new flat-panel monitors Thursday that have been qualified to work with Microsoft's upcoming Windows Vista operating system.
Two of the monitors, due out in early December, have received Microsoft's Works with Windows Vista logo. A third, due out by the end of this month, is expected to be awarded Windows Vista Premium Certification, BenQ said.
New Graphical Interface
The Works with Windows logo indicates that a product will work smoothly with Windows Vista, although it won't necessarily offer the full Vista experience. The premium certification indicates that a product will take advantage of all of Vista's new capabilities, which include a new graphical interface.
The Works with Vista products, called the FP93GX and FP93GS, were designed with video in mind. BenQ said it achieved a crisp moving-image quality by reducing response time across color scales.
Specifications
The FP93GX is a 19-inch monitor with a 700:1 contrast ratio and 2 millisecond response time. It will be launched in the U.S., Europe and China in early December at a suggested retail price of $299. The FP93GS is also 19 inches across but slightly less expensive, at US$260. It will be launched in Europe, Japan, and China in early December.
The third screen, expected to get the "premium" certification, is a 24-inch monitor called the FP241VW. It's set to hit stores in the U.S., Japan, China and Taiwan by the end of November at a suggested retail price of $1,299.
Pressure Forces Microsoft to Change Vista Licensing
Customer concerns over changes to Windows Vista licensing that would limit a transfer of the license to only one machine have moved Microsoft to revise the operating system licensing policy.
Microsoft said today it has changed the retail license terms for Vista so that customers now may uninstall the OS from one machine and install it on another as many times as they want. The new terms do away with limitations on the number of new devices to which the license can be transferred.
However, to continue the discouragement of piracy, Microsoft has worded the license so that it is clear that users cannot "share this license between devices."
Background
When the new licensing was disclosed several weeks ago, power users who rebuild their computers with new components several times a year or who plan to upgrade their computers more than once in the lifetime of the OS raised a fuss. They demanded clarification from the vendor about how scenarios like these would play out under the new licensing. PC World readers were among those who really sounded off.
According to Shanen Boettcher, a Windows general manager at Microsoft, the company thinks it has come up with an answer to placate those users without encouraging software piracy, which the original change was designed to thwart.
"We think this clarification strikes the right balance," he says. Boettcher says the piracy problem has nothing to do with "the enthusiast community that was sending me e-mails," but with people who install one licensed copy of Windows on many machines and then sell those to other users.
"This is a definite improvement over the original licensing terms, and I'm glad Microsoft has relented," says Don Smutny, a Windows user and software developer for a large IT company in the midwestern United States. However, he still is not convinced there aren't other hidden complications within Vista's license that will have to be addressed later.
The change in policy will not affect consumers who purchase their Windows license preinstalled on a PC from a hardware manufacturer. No license transfers are allowed in those cases.
Information about license changes for any Microsoft product is available on Microsoft's site, though Vista details may not be available right away.
Symantec CEO Encouraged by Microsoft Statements
The head of Symantec said today that he is encouraged by recent statements from Microsoft that it plans to work with security software companies and provide them with more access to the Windows Vista operating system.
Symantec and other security companies have been complaining recently that steps being taken by Microsoft in the name of security would actually hamper their ability to compete with Microsoft's recently launched antivirus software.
"The fact that they have made very positive moves is an encouragement," Symantec CEO John Thompson told reporters at a briefing in Tokyo. "But we have to see them follow through on the statements that they have made."
Security Companies' Complaints
The chief target among the complaints is PatchGuard, a kernel protection technology in the 64-bit version of Windows Vista. PatchGuard would stop modification of the kernel by third parties--including security vendors like Symantec. The security companies say it would put them at a disadvantage because they would not be able to offer certain technologies for virus detection and intrusion prevention that require modifications made to the kernel.
The security vendors also want the ability to switch off alerts from Windows Security Center because they fear they would duplicate those from their own software and confuse users.
"Innovation around the Windows platform has required that security companies have unfettered access to the kernel and when [Microsoft] delivers the 64-bit version of Vista we want to make sure that we have similar access, principally because we believe innovation requires that. And innovation is necessary in the security world if we are going to stay one step ahead of the bad guys," Thompson said.
"Unfettered access" was the same phrase used by George Samenuk, the chairman and CEO of McAfee, in a full-page newspaper ad headlined "Microsoft increasing security risk with Vista" that the company ran last month in the Financial Times.
Microsoft's Response
In the last couple of weeks Microsoft has begun responding by providing APIs (application programming interfaces) to allow security vendors to turn off certain features and has also held meetings on the issue of kernel access. The company acquiesced in part after pressure from the European Commission to level the playing field in the security market.
Thompson said Symantec had been contacted by the European Union and other antitrust regulators.
"We have been in communications with E.U., the Fair Trade Commission here in Japan, and the fair trade commissions in other countries, who are interested the behavior of Microsoft, specifically as it relates to security technologies," he said.
He said Symantec is "certainly not going to rule out any possibility at this point" regarding the filing of a complaint against Microsoft, but that recent moves by Microsoft are welcome.
Vista, Office 2007 Coming Later This Month
After years of waiting, U.S. business customers will finally have a chance to get their hands on Windows Vista and Office 2007 when Microsoft launches the products on November 30 at an event in New York City.
The company sent e-mail invitations to a launch event, which is called Microsoft New Day for Business, on Wednesday. According to the e-mail, the event "will mark the business availability of three major releases from Microsoft" In addition to Vista and Office 2007, Microsoft Exchange Server 2007 also will be released to business customers at the event.
Microsoft Chief Executive Officer (CEO) Steve Ballmer will be on hand for the event, along with Microsoft partners and customers, according to the invitation. The event will be held at the Nasdaq Stock Market in midtown Manhattan and the Marriott Marquis in Times Square.
Coming Sooner?
Microsoft will launch the products in Canada slightly earlier than in the U.S., the IDG News Service previously reported. According to the MSDN Canada site, Microsoft will hold New Day for Business events throughout Canada starting in Edmonton, Alberta, on November 23.
Following the Edmonton event, which will be held at the Shaw Conference Centre, Microsoft will hold events in Toronto on December 5, Montreal on December 7, Ottawa on December 12, and other cities throughout the country through January 2007.
Even though Vista and Office 2007 will be available to business customers later this month, many business customers have said they likely will not upgrade to Vista right away but will hold off until they do hardware upgrades or can justify the cost of the new OS. Microsoft is hoping customers will deploy Vista and Office 2007 together, and is planning press interviews in New York on Monday to discuss specifically the benefits of doing so.
The general release of Vista and Office 2007 is still on track for January 2007.
Symantec Software Supports Vista
In the next few weeks, Symantec will roll out products aimed at early adopters of the Windows Vista OS and 64-bit computing, while also expanding the capabilities of its backup software.
Symantec on Wednesday unveiled Backup Exec 11d, which has been under testing since early this year. Available on November 6, the newest upgrade adds recovery support for Microsoft Exchange with what Symantec calls "granular recovery technology."
The feature can restore an individual e-mail rather than a whole mailbox. It can also be used for data contained in SharePoint Portal Server or Active Directory, Microsoft's software for managing identities, such as in the case of restoring a deleted user.
Backup Exec 11d, which also works with SQL Server, continuously backs up data as it's created. Users have an option of 128-bit or 256-bit encryption for stored data. The software also works with 64-bit Windows environments, Symantec said.
Antivirus for Vista
The company also announced an incremental beta release just ahead of the December release of its Antivirus Corporate and Antivirus Enterprise editions. Antivirus 10.2 is available for download for current Symantec customers who are now testing Vista. Both editions work for 32-bit or 64-bit editions of Vista.
The Enterprise Edition adds an antispyware client plus a console that integrates the antivirus, firewall and intrusion protection functions, Symantec said. Both Antivirus versions should be released within 30 days of the final release of Windows Vista, scheduled for availability to business customers this month.
Early next month, Symantec will release Ghost Solution Suite 2.0, a tool for managing and provisioning Windows machines on a network. The 2.0 version supports Vista and 64-bit Windows machines.
Also new is an ability to edit NTFS file system images, Symantec said. Ghost Solution supports the GUID partition table to image larger partitions, which Symantec said eases migration to Vista. The GUID partition table is used in some hardware systems, such as Intel's Itanium processors.
In other developments, the company said it has started the Global Symantec System Builder Program to better train system builders. The company also said it's honing in on the small and medium-size business market, increasing its investment in tools and training for its partners and their infrastructure.
Vista License Limits Benchmarks
License transfers aren't the only thing the End User License Agreement for Microsoft Windows Vista limits. The license also puts restrictions on how benchmarks of certain components of the operating system can be published, another issue that is raising eyebrows as Microsoft still has not clarified how changes will specifically affect users.
According to the Vista user agreement (EULA), because the OS contains "one or more components" of the .Net Framework 3.0, users can conduct internal benchmarking of those components, but can't disclose the results of those benchmarks--or measurements to compare rival products--unless they comply with conditions found at a Microsoft Web site.
Several attempts to reach that Web site to see what those conditions are for benchmarking were unsuccessful on Tuesday, as the page for unknown reasons could not be displayed in Internet Explorer 7.
Restrictions Panned
Several published reports and open-source proponents have raised concerns about this terminology of the Vista license, claiming it limits the benchmarking of Windows Vista that can be published because of the inclusion of the .Net Framework. While benchmarking is still possible, Microsoft is in control of how that information is released, and the company can change the rules on the "conditions" Web site at anytime. This could make it difficult for anyone to get a clear idea of how the OS and certain components perform, critics said.
"To be in control of what is published seems to be the logical consequence of Microsoft's policy," said Joachim Jakobs, a representative for the Free Software Foundation Europe, via e-mail. He cites several instances in which this behavior around benchmarks is consistent with other efforts Microsoft has used to control the use of its software, such as its litigation against companies it says violates patents Microsoft owns, and the company's continuing antitrust tussle with the European Union.
Microsoft said Tuesday that on Thursday it will clarify issues raised by changes in Vista licensing--including ones around benchmarking. User concerns over Vista licensing began several weeks ago when it was disclosed that Microsoft is limiting the number of machines to which users can transfer licenses to one as part of the changes.
'Indecipherable' Licenses
To be fair, the limitations on .Net Framework benchmarking are not new--they have been around since Microsoft introduced the development framework. But benchmarking and other limitations in Windows Vista brings to light a larger issue about the operating system's licensing in general, said Michael Cherry, an analyst with Directions on Microsoft in Kirkland, Washington.
"My bigger issue with the license in general is that it's just indecipherable," he said. "There are a lot of terms that are probably more important to me than benchmarking, but how do I find them among these obscure things that are unclear about what I can or cannot do?"
Joe Lindsay, chief information officer for Secured Funding, a mortgage firm in Costa Mesa, California, agreed that licenses for commercial software are getting particularly hard to understand, and he thinks it's driving more people to view open source as a viable alternative.
"These licenses are getting increasingly more confusing," Lindsay said. "Part of the reason people find open source so appealing is [they think,] 'I just want software. I don't need a lawyer, I need an OS, some hardware and a programming language and then leave me alone'."
Are Benchmarks Needed?
However, Lindsay said he wasn't troubled by any limits on Vista benchmarking, since "most people who've been around awhile know that benchmarks are not worth the paper they are printed on."
Similarly, Lindsay said he is unfazed by all the hype surrounding the imminent arrival of Vista, saying his company is looking at it but will only upgrade when they can "justify the cost."
"Vista is just an evolution of Windows XP," he said. "It still requires a mouse, a keyboard and a file system and it runs Office. Is it really that revolutionary? No. I want it to read my mind. When it can do that, then I'll be impressed."