Microsoft Fixes Vista SP1 Reboot Bug

(Check my blog for more interesting news)

Microsoft Monday said it has fixed a Vista SP1 reboot bug that had caused some users to suspend migrations and that the revised software will again be offered via automatic distribution.

The Vista Servicing Stack Update (SSU) was a prerequisite for installing Vista SP1 via Windows Update that was made available by Microsoft in February. The software, designed to ease installation, instead had the opposite effect by throwing some users into an endless reboot cycle.

At the time, Microsoft called negative reaction to the issue “a feeding frenzy.”

Microsoft says the problem is fixed and it will again offer the SSU prerequisite code starting April 8th. Users who have already successfully installed SSU do not need to reinstall it. In addition, users who have a copy of SP1 acquired by any means other than Windows Update do not need to install SSU.

Microsoft is fixing the problem by issuing a fix that installs prior to the installation of the SSU, a prerequisite for the prerequisite.

The new piece of code will ensure a “smooth install of the SSU by working to prevent the system from rebooting during the SP1 SSU installation,” according to the Microsoft Product Update Team Blog. The blog also says Microsoft made additional changes to the SSU installer code that will ensure the pre-SSU is installed before it attempts to load SSU.

The company said the original problem occurred during some “unknown and rare” instances when the SSU thought it needed to reboot when it did not. The resulting reboot try then touched off a never ending cycle of attempts and failures.

Microsoft says users with Windows Update activated do not have to take any action before April 8 to receive both the pre-SSU and the SSU code.

Adobe Patches ‘PWN To OWN’ Bug in Flash Player

Adobe Systems Tuesday plugged the Flash Player hole used by a hacker two weeks ago to take down a Windows Vista machine and claim a $5,000 prize in the “PWN To OWN” exploit challenge.

Adobe’s update to Flash Player — the popular program and browser plug-in used to view online content — patched seven vulnerabilities, including several that could be used by attackers to hijack machines running the flawed software. Among the seven was the one used to break into a Fujitsu notebook during the hacker contest sponsored by 3Com’s TippingPoint, which operates a bug bounty program called Zero Day Initiative.

Last week, Adobe claimed it had known about the Flash bug before it was used by Shane Macaulay of Security Objectives to hack one of the laptops up for grabs at CanSecWest, and would add a fix for it to a previously scheduled update this month.

Adobe had announced the April update about four weeks ago, but had left the timeline vague, saying only that it would refresh Flash sometime during the month.

The majority of the patches applied to Flash Player quashed bugs in how the software handled .swf files, the proprietary Shockwave Flash format. One of the .swf vulnerabilities had been reported to Adobe back in December 2007 by Google researcher Rich Cannings, who pointed out the format could be used to launch cross-site scripting attacks, which are commonly deployed by identity thieves and phishers.

Earlier, Adobe had issued updates to its Web developer tools that crank out .swf files, and told Web operators and site designers to make changes to their pages before it released yesterday’s end-user update. If they didn’t get rid of the older .swf files, they risked users being unable to access Flash content on their sites, Adobe warned.

Sun to Tout Hosting Platform

Sun will discuss on Thursday a research and development project intended to provide a hosting platform for delivering Internet-based services.

Called Project Caroline, the technology is on the agenda of a Sun Labs Open House taking place at Sun offices in Menlo Park, California. The platform comprises a programmatically configurable pool of virtualized compute, storage, and networking resources, according to Sun.

The Project Caroline Web page states that the project is designed to serve an emerging market of small and medium-sized SaaS providers.

“Anticipating needs driven by new SaaS business models and processes, Project Caroline helps SaaS providers develop services rapidly using high-level programming languages like the Java programming language, Ruby, Python, and Perl to update in-production services frequently and to automatically flex their use of platform resources to match changing runtime demands,” the Web page states.

Services can programmatically allocate, monitor, and control virtualized compute, storage, and networking resources via Project Caroline. Interfaces are featured for managing platform resources.

Developers can build services that update and flex platform resources usage. Project Caroline resources are exposed via high-level abstractions, including virtual machines, networks, and network-accessible file systems and databases. A horizontally scaled pool of distributed resources is presented as a single system to provide developers with a unified platform for allocating and controlling resources.

Also on the Open House agenda are OMS, pertaining to a royalty-free media system; Project Live, approaching software distribution and configuration by combining the firmware model with customization; and the Lively Kernel project for Web programming.

Other agenda items include: Project Wonderland, an open-source toolkit for building 3D virtual worlds for business and education collaboration; Project Darkstar, which is a gaming server; and Project MiRTLE (Mixed Reality Teaching and Learning Environment).

Adobe Rolls out Media Player With Video Content

Adobe Systems debuted a new media playing software, Adobe Media Player 1.0 (AMP) along with online programming instructional video content on how to use the company’s products, it said Wednesday.

The move makes Adobe the latest player to get into the online video space, offering not only software that rivals Apple’s Quicktime and Microsoft’s Windows Media Player, but also video content such as episodes of “CSI: Miami” and “CSI: New York,” along with other feature programming and music videos.

Based on Adobe’s Flash technology, Adobe Media Player contains both content creation and playback components, and is available for Windows and Mac.

Adobe Media Player may be downloaded for free at http://www.adobe.com/products/mediaplayer/. Pricing information for the video content publishing software was not immediately available.

Additionally, Adobe TV material can be viewed at http://tv.adobe.com. All of the instructional videos on the site were created using only Adobe software for the relevant components, the company said.

India Rejects Office Open XML Again

A technical committee in India has rejected Microsoft’s Office Open XML file format as a standard.

In the meeting of the Bureau of Indian Standards (BIS) technical committee Thursday, 13 members voted against the standard, while five members, including some outsourcing companies, and the National Association of Software and Service Companies (Nasscom) voted for making Open XML a standard.

Nasscom is in favor of multiple standards, including Open XML and ODF (Open Document Format), the association said in a statement. It added that technology neutrality and competition will lead to falling prices of IT products.

The technical committee was constituted by the Bureau of Indian Standards (BIS), India’s national standards body, after moves by Microsoft and other organizations to make Open XML a standard of the International Organization for Standardization (ISO).

BIS is a founder member of ISO, and represents India at the ISO.

The BIS committee had voted in August against making Office Open XML a standard, although some participants said at the time that Open XML may be again reconsidered as a standard by the technical committee and BIS after Microsoft makes the required changes to the document format.

The India vote comes ahead of a March 29 deadline for ISO members to reconsider their votes if they wished.

While disappointed by the decision of the BIS committee, Microsoft said Thursday that it was however encouraged by the support of IT industry players like Nasscom, Tata Consultancy Services, Wipro and Infosys who voted in favor of Open XML becoming an ISO standard.