ERE I am to report about yet another critical Windows bug, which many others have blogged about already. This DLL-based exploit has floated about for quite a while. It has now grown tremendously in terms of its scale though.

The victimised user can be infected merely by opening an E-mail message with a graphics files embedded. Older versions of Outlook, for example, have no protection against that. A short visit to a Web site can lead to a malicious program installed on Windows workstations. This flaw was described can be ‘severe’ and it comes at a rather sensitive time of the year. This whole situation relates to a post of mine from yesterday.

As Matt Cutts put it:

…new exploit of the Windows WMF graphics rendering engine that applies to Windows versions from 98 to XP. This is a pretty nasty exploit… You’ll lose some thumbnail previews and such, but if you want to be safe until a patch is available, click Start->Run and then type “regsvr32 /u shimgvw.dll” to disable the vulnerable DLL.

Older related items:

• Windows Today Worse Than Windows in 2001
• Microsoft and Windows Zombies
• Yet Another Windows Patch
• Phishing Vulnerability
• 3 More Critical Flaws in Windows
• Internet Explorer Trojan

There are bugs that bug the user and bugs that lead to catastrophe. Below lie two examples of critically-buggy applications, which I recently decided are worth listing.

1. Windows 95 – Blue Screen of Death

I still remember, as a most classical example, the days of Windows 95. The operating system failed to cope with unhandled, misunderstood packets that ultimately gave the blue screen and required a reboot in most cases. Sooner or later people got hold of so-called ‘nuking’ software — one among virtually dozens of GUI-based free downloads. That little tool gave its owner the ability to unleash upon others the infamous ‘blue screen of death’.

IP address of the target computer was all one needed. It was easy to determine one’s IP address even when dynamically allocated by a dial-up ISP. Instant messengers (ICQ was new and hot at the time) simplified the process tremendously and tools that interacted with the IM existed as well. This gave your friends and foes the ability to ‘take you down’ whenever they desired.

Sooner or later, anti-nuke software was becoming mandatory. Yet another application to run in the background if you want to survive without rebooting and losing some invaluable work. Not good.

During the holiday, yet another critical flaw with Windows XP and Windows Server 2003 was found. Lessons have not been learned even 10 years later. The promise and efforts to make Windows more modular seem unfruitful.

2. Timely Example: WordPress 2.0 Bugs

I previously said that the release of WordPress would be premature. I said so as soon as rumours emerged. Matt Mullenweg spoke about an undetermined release that precedes Christmas. Boxing Day was the point when things took a gentle dive.

I now write about 40 messages a day in the WordPress support forums, making a voluntary contribution throughout the holidays, as promised. The pace of bug reports is worrisome. That aside, the WordPress Web site was not prepared for the demand either. There was a site migration issue on the very same date as the release and coding bugs emerged all too soon in the forums where they continue to resurface.

WordPress 2.0 was intended to be named after a Jazz musician, as always. ‘Stan Getz‘ was among the top contenders. I believe that WordPress should not be called Getz because it might give a favoured artist of mine a bad name. WordPress 2.0 is more like Milli Vanilli (sarcasm and an overstatement).

Earlier today a version database downgrader for WordPress was released. A few people regret the upgrade, but many are very happy with the new features. Whether the frustration supercedes the benefits is an important question. The answer is yet difficult to deliver and the situation hard to judge.

“Hurry! Hurry! Lotsa’ work to do, guys!”

I have found the following old page, from which I would like to borrow a snippet.

He’s (Bill Gates) a ferocious workaholic, who regularly puts in 80-hour weeks, and expects his employees to do the same. And although he’s something of a visionary, he’s not a particularly reliable one; he never meets product deadlines, and the goods he so tirelessly promotes are mostly vaporware. God, like Gates, owes his power and success less to the quality of his product than to his ruthless business sense. He’s created a near monopoly by outmuscling the competition. You might not like this universe, just as you might not like Microsoft’s clunky programs; but pragmatically speaking, where else do you have to go?

Related item: Roots of Authority

A 3-D visualisation of virtual desktops
switching under 3-D Desktop (click image above for homepage)

IRTUAL desktops are means of extending one’s workspace. Given the finite size of a monitor, one wonders if that size also imposes strict limits on the (in)visible window environment. Well, it does not. It is possible to treat the monitor as just a rectagular box or a a ‘sliding window’, which metaphrically glances at something much larger. It enables the user to view smaller segments of the whole at any one time. Most commonly, the user would watch only a quarter of the workspace at any one time.

Virtual desktop environments have been available for a long time to Linux user. They will also be officially introduced in Windows Vista, having encountered third-party software that achieved this in the past. Apple Macs have commercial add-ons that achieve the same thing — presenting the users with a pager to control multiple virtual desktops.

The Pager is a small widget which enables the user to select which segment of the screen should be viewed. More specifically, it enables switching from one virtual desktop to another. It often reflects on the content in all virtual desktops. In KDE, for example, the pager contains a schematic of active windows and their positions. In GNOME, it appears to even embed application icons. I used the Pager with virtual desktops about 4 years ago, but not excessively. I needed them when doing some programming jobs, but wasn’t competent with the corresponding CTRL+[1-4] shortcuts, which make the transition between one desktop to another very smooth and rapid.

On to page 2

Milestone reached: Firefox to be pre-installed rather than downloaded

ARLIER this week I mentioned Blake Ross; The context: the demise of the Windows brand name. Apart from this thought-inspiring quote from Blake, I now come to discover that Hewlett-Packard began bundling Netscape. More recently it was confirmed that Dell pre-install Firefox in the UK.

Next milstone: OpenOffice bundling with all desktops and laptops. This would enable users to work on documents and spreadsheets ‘out of the box’.

ALM have intended, for quite some time in fact, to ditch Palm OS in favour of the Linux kernel.Then again, there are independent efforts by individuals to boot and run Linux on Palm devices, regardless of Palm’s mainstream initiatives.

Two new examples:

• The Palm LifeDrive
• The Palm Tungsten T3

Related (older) items: Linux on the Tungsten E

Wallpaper from Houghi (click image above
to enlarge; non-lossy PNG version)

Below is the summary of an article on user interface revolution. It has motivated me to post links to relevant items of mine.

Will we be stuck with flat rectangles on our desktop forever or will we finally live in a 3D desktop? This article discusses some alternatives and proposes a framework in which future interface designs may be evaluated.

On 3-D desktops, interaction, and display:

• Spherical Desktop
• The Desktop Sphere
• Virtual Desktops in 3-D
• Spherical Display

A few related ‘leftovers’:

• Operating Systems Eye Candy
• KDE Pushed to the Limit
• KDE Plasma
• Next Generation of X