Screaming Penguin - Source Does Matter

In Japan, they have replaced the impersonal and unhelpful Microsoft
Error messages with Haiku poetry messages. Haiku poetry has strict
construction rules.Each poem has only three lines, 17 syllables - five
syllables in the first line, seven in the second, five
in the third. Haikus are used to communicate a timeless message, often
achieving a wistful, yearning, and powerful insight through extreme
brevity. What better answer for the impersonal computer. Here is a
sample:

The Web site you seek
Cannot be located, but
Countless more exist.

This is some scary stuff, exactly the kind of stuff that I feel highlights the weaknesses in proprietary closed security models.

Microsoft has apparently had a rash of server compromises all over the place with Windows 2000. Its not a worm they say, rather it is hackers. Microsoft Product Support Services (PSS) told system administrators to be on the lookout for Trojan horses.

A bunch of flaws in a bunch of products are addressed by a new patch (series thereof) being released by Microsoft. Its "critical" stuff for IE and Office, etc.

Its quite funny as some slashdots posters have pointed out that the EULA for this patch and others apparently states (I have not read it, my patch is here) that Microsoft can apply updates at a later time without your further permission. The vulnerabilities allow hackers to execute arbitrary code, the update allows MICROSOFT to do so!

In an attempt to solve a legal problem caused by a March Sun lawsuit, Microsoft has decided to put a JVM back into Windows XP. XP service pack 1 will have a JVM.

However, and this is a big one, Microsoft has decided to try to obfuscate and infuriate things further by using their OWN JVM. This would not be so bad if it were a modern JVM but it isnt. Microsoft JVM is based on 1.1.4 and was released in 97. WAY BEHIND, WAY CRAPPY and probably has some extra crappiness built in (as if it were needed) just to make deface Java further.

Most revs of flash on windows have serious security flaws. Macromedia has released new revs. Check the details and get the updates via the linked eEye article.

Wow! The Windows XP license contains this fine blurb:

Except as otherwise permitted by the NetMeeting, Remote Assistance, and Remote Desktop features described below, you may not use the Product to permit any Device to use, access, display, or run other executable software residing on the Workstation Computer, nor may you permit any Device to use, access, display, or run the Product or Product\'s user interface, unless the Device has a separate license for the Product.

Microsoft has a nice letter up on its site: "An Open Letter Regarding Windows XP and Java Support."

Now many of you may have already seen this. I just got around to reading it. I basically knew the issues beforehand but it was still interesting to read. And on this one I am going to agree with Microsoft (yes folks, you read that right!)