piątek, marca 04, 2005

Największy sekret G - jak poradzic sobie z psujacymi się PC-tami?

Google's secret of success? Dealing with failure

By Martin LaMonica
http://news.com.com/Googles+secret+of+success+Dealing+with+failure/2100-1032_3-5596811.html

Story last modified Thu Mar 03 04:00:00 PST 2005

BURLINGAME, Calif.--The technical wizardry behind Google's successful search engine may come down to a blindingly obvious insight: PCs crash.

On Wednesday, Urs Hoelzle, a vice president of engineering and of operations at the search giant, shed some light on how Google's data centers operate. Many people consider the company's operations expertise more valuable than the actual search algorithms that launched the enterprise.

Hoelzle spoke at EclipseCon, a conference for application programmers that's going on till Thursday here.

What's new:
At EclipseCon, Urs Hoelzle, a vice president of engineering and of operations at the search giant, shed some light on how Google's data centers operate.

Bottom line:
According to Hoelzle, Google has inexpensively built out its computing infrastructure by using thousands of "commodity" servers, instead of fewer high-end, and high-priced, machines. The trick is to make these racks of hardware work together and to ensure that the failure of one machine doesn't derail an operation.

The way Google has been able to build out its computing infrastructure for millions, rather than tens of millions, of dollars is by buying relatively cheap machines. Looking at hardware costs, company engineers saw that purchasing a few high-end servers, with eight or more powerful processors, costs significantly more than dozens of simpler "commodity" servers. The trick is to make these racks of hardware operate in tandem and to ensure that the failure of one machine does not derail an operation, such as returning a search query or serving up an ad. Consider a home PC, Hoelzle said. Optimistically, a consumer PC might crash once in three years from a software glitch or hardware problem. "At Google scale...if you have thousands of PCs, you can expect one (failure) a day," he said. "So you better deal with that in an automated way, or you will have service outages." Google, known for its rigorous hiring practices aimed at attracting the brightest minds in computer science, has created a number of software tools to handle its computing installation. The company wrote its own file system, called Google File System, which is optimized for handling large, 64 megabyte blocks of data. Significantly, the file system was designed to assume that a failure, such as a failed disk or unplugged network cable, can happen at any time. Data is replicated in three places, and there is a "master" machine that can locate copies of a piece of data, such as a keyword index, if the original is out of commission. "You make the software tolerate failures. If you can expect failures, then this is what makes cheap commodity PCs viable for Internet services," Hoelzle said. Google's PC servers, which number in the thousands, run a stripped-down version of Linux, which is based on the Red Hat distribution but is really just the operating system kernel modified for Google, he added. The company has also devised a system for handling massive amounts of data and returning rapid responses to queries. Google splits the Web into millions of pieces, or "shards" in Google tech speak, which are replicated in case of failure. Not surprisingly, the company creates an index of words that appear on the Web, which it stores as an array of large files. But it also has document servers, which hold copies of Web pages that Google crawls and downloads. Another important engineering feat done by Google is to make writing programs that run across thousands of servers very straightforward, according to Hoelzle. Normally, building applications to run in a "parallel" configuration of servers requires specialized tools and skills. Google's programming tool, called MapReduce, which automates the task of recovering a program in case of a failure, is critical to keeping the company's costs down. "Cost is really the sum of what the equipment you need to do the work costs and how much programming time you need to put into getting something useful," Hoelzle said, adding that Google has started using MapReduce more widely over the past year. Finally, Google has created "batch" job scheduling software that acts as a sort of taskmaster for millions of operations. Called the Global Work Queue, it breaks up computing jobs into many smaller tasks and distributes them across machines. For all its built-in redundancy in case of failure, the system doesn't address all problems, Hoelzle revealed. During the presentation, he showed a photo of six fire trucks responding to an emergency at a Google data center in an undisclosed location. He would not reveal any specific details on the mishap except to say that "it wasn't about one machine going down." In a follow-up interview with CNET News.com, Hoelzle said the cost of power is another important factor in Google's data center designs. "The physical cost of operations, excluding people, is directly proportional to power costs," he said. "(Power) becomes a factor in running cheaper operations in a data center. It's not just buying cheaper components but you also have to have an operating expense that makes sense."

Microsoft Nets BI Vendor ActiveViews

Microsoft Corp. announced Monday that it has acquired ActiveViews, a small, privately held maker of a business-intelligence platform based in Provo, Utah. The announcement, made at Gartner Business Intelligence Summit 2004 in Chicago, did not include information on how much money traded hands.

According to Tom Rizzo, Microsoft's director of product management for SQL Server, the motivation behind the sale was to satisfy enterprise demand for getting a simple-to-use reporting tool into the hands of end users.

This is only the latest in a series of bold moves into the field of business intelligence on Microsoft's part. The company has been adding BI functionality to its SQL Server relational database since Version 7.0.

It continued in the SQL Server 2000 version, and since January, the company has been making its SQL Server Reporting Services BI tool available for free download to customers who have either the standard or the enterprise level of the SQL Server license.

PointerClick here to read Microsoft's partners' take on how Reporting Services will cut costs.

During the past three months, downloads of Reporting Services have been in the "tens of thousands," Rizzo said. Customer response has been that the tool is "a great, robust developer environment for enterprise reporting, [but] they also wanted the ability for the end user to develop very rich reports," he said.

With ActiveViews, end users will be able to employ simple drag-and-drop editing to tweak and customize reports originally created by developers. Rizzo said. The skills required to use the tool will be similar to those needed to understand Microsoft applications such as Outlook or Excel, he said. Administrators will set up data sources, for example, so that end users won't need to know what the name of a given database is.

PointerThe BI sector has been shrinking ever since Microsoft entered the ring. Read all about the vendor shakeup in eWEEK.com's special report on business intelligence.

End users also will be able to publish reports to share with colleagues or to send back to administrators who, in turn, can further tweak the reports.

As part of the deal, Microsoft also acquired two ActiveViews developers from a company staff that was "around five people overall," Rizzo said.

Microsoft is not disclosing details about a product-shipping schedule, licensing or pricing.

Adobe releases open-source interface software | CNET News.com

Adobe releases open-source interface software | CNET News.com: "Adobe releases open-source interface software
Published: March 2, 2005, 3:48 PM PST
By Stephen Shankland
Adobe releases open-source interface software
Published: March 2, 2005, 3:48 PM PST
By Stephen Shankland
Staff Writer, CNET News.com

Graphics software giant Adobe Systems has released some components of its commercial products as open-source software, a move intended to help others ease a tedious but important part of programming.

The San Jose, Calif.-based company released two packages, Adam and Eve, that it uses for the creation of the interface people use to control software. The packages were posted last week on the company's Web site.

Adobe said it released Adam and Eve "to give back to the wonderful open-source community which gives us so much" and to enlist the help of others in improving the packages.

The majority of Adobe's products are proprietary, but the company is edging closer to the open-source realm. Its flagship products run only on Windows and the Mac OS today, but in 2004 Adobe started evaluating Linux more seriously. And a beta version of its latest Adobe Reader, a program for viewing Portable Document Format, or PDF, files, runs on Linux.

Adam and Eve are libraries that can be used by other software packages. Eve eases creation of interface elements such as dialog boxes and lets the computer manage their placement on a display. Adam automates how interface elements are modified according to changing circumstances.

"Ask nearly any software engineer what they hate doing most and the answer will be, 'Building the human interface,' and even with Eve, that work is onerous," Adobe said in an overview of the technology. "The code associated with the human interface accounts for nearly one-third of the code necessary to implement a feature within Adobe applications."

Eve first debuted in prototype form in Adobe's Photoshop 5 and now is being updated as Eve2, Adobe said. Adam is being added to several Adobe programs. Both can be used with any operating system.

Adam and Eve are part of a larger software effort called the Adobe Source Libraries, or ASL, underway at the Adobe Software Technology Lab. The ASL software is covered by a liberal open-source license, the MIT License.

In addition, Adobe indicated that it would release software related to the XMP standard, which lets "metadata" describing a file be incorporated directly into that file.

Adobe representatives weren't immediately available for comment.

PHP developer app to go open source - ZDNet UK News

PHP developer app to go open source - ZDNet UK News: "
News > Software > Developer

Friday 4th March 2005

PHP developer app to go open source
Matt Loney
Builder UK
March 02, 2005, 15:45 GMT

Talkback
Tell us your opinion
Builder: Maguma says it will make its integrated developer environment available under an open source licence later this month




An Italian developer of PHP tools plans to make its entry-level application open source.

Maguma, based in Bolzano, will make the source code of Maguma Studio available for free download and for 'community participation' according to marketing director Alexander Comploj.

Comploj said Maguma will continue to make money from sales of its Workbench software, which is marketed as a more heavyweight development environment with a number of customisable plug-ins. Maguma Studio comes with a CVS Manager, FTP handler, project management component and coding aids for PHP and HTML. The open source version of Studio will be called, simply, OpenStudio.

Maguma currently licenses its studio software on a per-workstation basis, using MAC addresses to identify distinct machines.

OpenStudio is part of Maguma's strategy to move towards open source, said Comploj, though he did not say if or when Workbench would be made open source, and if so how Maguma would then make money.

Maguma has its roots in open source: co-founder Tobias Ratschiller previously worked on PHPMyadmin, the MySQL admin tool"

BetaNews | Windows Veteran Jumps Ship to Google

BetaNews | Windows Veteran Jumps Ship to Google: "Windows Veteran Jumps Ship to Google
By Nate Mook, BetaNews
March 3, 2005, 10:51 AM

Windows Veteran Jumps Ship to Google
By Nate Mook, BetaNews
March 3, 2005, 10:51 AM

A top Windows architect has left his Redmond home to join the ranks at Google, although it's not clear what his new position will involve. Marc Lucovsky, a 16-year Microsoft veteran, joins a number of high profile developers hired by the search giant, including Mozilla programmers Ben Goodger and Darin Fisher.

According to the Microsoft Watch newsletter, Lucovsky voluntarily left his Microsoft position last November. Coming from a post at Digital Equipment Corporation, he was involved in the creation of Windows NT and the Win32 kernel. Most recently, Lucovsky was named chief software architect for the now-defunct Microsoft's .NET My Services, or "Hailstorm," project.

Google's recent hiring blitz has sparked a wave of speculation regarding the company's closely held future plans. Rumors range from Google developing a Web browser to topple Internet Explorer, all the way to a Google operating system. In his new Web log, Lucovsky offers no hints, but has lambasted his former employer.

"Being a 16 year Microsoft veteran, a Distinguished Engineer, key architect and code writer for windows, architect of the largest source code control and build system ever attempted, I deeply believed that Microsoft knows how to ship software," Lucovsky wrote. "I am not sure I believe anymore."

"When a Microsoft engineer fixes a minor defect, makes something faster or better, makes an API more functional and complete, how do they "ship" that software to me? I know the answer and so do you," said Lucovsky. "The software sits in a source code control system for a minimum of two years (significantly longer for some of the early Longhorn code)."

Beyond the criticism, Lucovsky's words offer insight into possible reasons he abandoned Microsoft for a young, fast-moving company such as Google.

"I would argue that Microsoft used to know how to ship software, but the world has changed," he added. "The companies that "know how to ship software" are the ones to watch. They have embraced the network, deeply understand the concept of "software as a service", and know how to deliver incredible value to their customers efficiently and quickly."

FileForum | Netscape Browser

FileForum | Netscape Browser: "Netscape Browser 8.0 Beta beta
Publisher's Description:

Netscape Browser provides more security options, streamlines more standard browsing tasks and arms internet users with more timesaving solutions to their browsing needs than any other browser. Netscape Browser includes two separate layout engines, so you can choose to view a web site like Netscape Browser or like Internet Explorer. Tabbed browsing is included, along with advanced privacy features. You can also set Netscape Browser to block popups, cookies, images, java, and other behaviors that you would rather not allow. Also, you can easily over-ride and save custom settings for individual web-sites.
Latest Changes:

* The deficiencies noted in Firefox 1.0 are inherited in Netscape 8 Beta in most cases. Patches to the Firefox code base will be imported into Netscape 8 Beta as they become available and are tested for compatibility"

czwartek, marca 03, 2005

Open Source CMS

Open Source CMS
Blogs
Aaron Skonnard http://skonnard.com/
Anil Dash
Bruce Prochnau
Dan Gilmor http://weblog.siliconvalley.com/column/dangillmor/
David Galbraith
Ideas in Tech
Jeremy Allaire
Joi Ito
Jon Udell http://weblog.infoworld.com/udell/
Joseph Martins
Kevin Lynch
Lou Rosenfeld
Mark Harrison
Mark Pilgrim http://diveintomark.org/
Movable Type
Nick Aster (646)
Nick Denton
Noam Chomsky http://blog.zmag.org/ttt/
Paul Everitt
Sam Ruby
Sig Weber
Stefan Goßner http://blogs.msdn.com/stefan_gossner
Steve Krug
Steve Rubel
Tanya Rabourn
Tim Bray http://www.tbray.org/ongoing/
Tim O'Reilly http://www.oreillynet.com/weblogs/author/27
by BlogRolling http://www.blogrolling.com/

środa, marca 02, 2005

SharePoint

Technikalia SharePointa

Strony microsoft.com dla deweloperów prezentują materiały techniczne dotyczące Windows SharePoint Services i SharePoint Portal Server. Oprócz przedstawienia technologii i produktów Microsoft SharePoint, omówiona została intergracja pakietu Office z usługami Windows SharePoint Services dostępnymi w systemie Windows Server 2003 oraz wykorzystanie SharePoint Portal Server 2003 w zadaniach. Zapraszamy do lektury:

Link Platforma Microsoft SharePoint Products and Technologies: Przegląd techniczny
Link Integracja Windows SharePoint Services z Microsoft Office
Link Przewodnik po integracji środowiska Windows SharePoint Services z aplikacjami pakietu Microsoft Office 2003
Link Microsoft Office SharePoint Portal Server 2003 w zadaniach

Data publikacji: 14-01-2005 :: Autor: Jacek Kolonko :: Źródło: Microsoft Polska :: Komentarze (0)
Ocena informacji: 57,14% Interesująca 42,86% Mało ciekawa (głosów: 63)

Sir Bill Gates? Chyba nie.

Bill Gates to be Knighted by Queen
By David Worthington, BetaNews
March 1, 2005, 9:29 PM
The world's wealthiest man is about to obtain a new honor commemorating his contribution to private enterprise and efforts to reduce poverty around the world. Microsoft Chairman and co-founder Bill Gates will soon be knighted by Queen Elizabeth at Buckingham Palace in the United Kingdom.
Gates will join the Most Excellent Order of the British Empire as a Knight Commander, but will not be granted the title "Sir," which is reserved exclusively for the Queen's subjects.
News of the impending knighthood was first announced last year and resulted in Microsoft saying that Gates was, "absolutely delighted." Gates will also be honored in public by British Foreign Secretary Jack Straw who had consulted with The Queen to knight Gates.
"Finally someone found something appropriate to give to the world's richest man. After all, a knighthood is something money can't buy," quipped Jupiter Research senior analyst Joe Wilcox. "What is the proper etiquette? Will Microsoft employees now call him Sir Bill, or Sir BillG?"
Other Americans have received Britain's top honor including Nobel prize-winning scientist James Watson, George Bush Senior, former Mayor of New York Rudolph Giuliani, and Hollywood director Steven Spielberg.

Computerworld | IBM, Zend lift PHP in development deal

Computerworld | IBM, Zend lift PHP in development deal: "BM, Zend lift PHP in development deal

Ed Scannell, InfoWorld

28/02/2005 08:31:51

BM, Zend lift PHP in development deal

Ed Scannell, InfoWorld

28/02/2005 08:31:51

Hoping to spur its open source development strategies, IBM has announced a deal with Zend Technologies to create what it believes is the first integrated programming solution using the Web-based PHP language. IBM also committed to delivering at least 30 existing software projects to open source developers.

The agreement with Zend calls for the integration of two open source technologies, namely IBM's Cloudscape database and Zend's PHP development environment. The combined technologies will create Zend Core for IBM, which will serve as an "out-of-the-box" PHP development and production environment that allows corporate users to develop, deploy, and manage open source applications.

Officials from both companies also announced they will work jointly to include database integration frameworks and improved PHP Web services standards.

IBM officials hope their endorsement of PHP will serve to drum up support among developers for Cloudscape. They contend that PHP now accounts for more than 40 percent of the overall Web programming language market and about 70 percent of the Unix-based Apache Web platform market.

"As we see now where the PHP community can take 5.0 with its addition of Web services and XML support, it is one more community we want to embrace. It has been successful among professional Web site developers and the SMB market, and as we look at where SOAs and On Demand are going, this gives us one more technology that helps link solutions together," said Rod Smith, IBM vice president in charge of Internet-based emerging technologies.

Some open source developers appeared heartened by the alliance.

"We think having out-of-the-box solutions for database application development and deployment is tremendously significant. We see this partnership as a solid commitment to organizations that have built their business around PHP," said Chris Stephens, lead developer with The Selling Source.

Based on PHP 5.0, Zend Core for IBM integrates the Cloudscape Server, DB2, and adds native support for XML and Web services. This combination could help encourage corporate and third-party developers to gravitate toward the adoption of SOAs (Service-Oriented Architectures), as well as laying down a foundation for database-driven applications and services, IBM officials said.

Zend Core for IBM is expected to be available as a free download sometime during this year's second quarter from DB2 and Cloudscape product sites.

The 30 or so software projects that IBM will contribute to the open source development community will be moved to SourceForge.net. One project includes IBM's Jikes, a Java-based reference compiler that speeds development time, and another is the Life Science Identifier, which helps programmers specializing in health care to build applications for that industry, company officials said.

wtorek, marca 01, 2005

Wraca WS jak bumerang

Web Service Integration with MS Office

Up until now, Office Automation mainly involved writing macros that took information between Office applications and solved business problems across a LAN.

Not surprisingly, Microsoft is targeting its Web services as the next area where Office Automation should make an impact. Databases in Access or Excel will be able to seamlessly (a favorite Microsoft word) integrate with Web services created with Visual Studio. An entire conference pretty much dedicated to this concept is taking place in Redmond in February.

So far, I've been ecstatic if I could automate a chart in Excel appearing in PowerPoint; I am not really a programmer, and Web services are a bit beyond my area of expertise. But I have a feeling that that may change, because the proliferation of applications that run on the Web, not just on a Microsoft network, is exploding. For example, MSN is offering a free version of Outlook 2003 for business users who want to share calendars and contacts online, without MS Exchange, called Outlook Live. That program is currently in beta and expected early next year.

To me, that's probably the mother of all Web services: Outlook and MSN together, based on one of the original Web services (Exchange).

Look for ways to implement similar solutions by using macros in Office and connecting to server-based applications created in-house, and not just at Microsoft.

poniedziałek, lutego 28, 2005

SitePoint Blogs : Stylish Scripting

SitePoint Blogs : Stylish Scripting: "2005: The year of the DOM
Jan 5th, 2005

Jeffrey Zeldman popularised the concept of the 'three legged stool' approach to web design in his book, Designing with Web Standards. The three legged stool consists of XHTML for content and structure, CSS for presentation and JavaScript and the DOM for 'behaviour'. CSS and XHTML have had an excellent couple of years in 2003 and 2004, but what of JavaScript and the DOM?

I think that 2005 will be the year that proper use of the DOM really takes off. Most JavaScript on the web still hails from the late '90s, but change is in the air. Netscape 4 is practically dead and gone, and the current crop of browsers all offer excellent DOM support (even Opera has caught up). There are very few reasons not to take the DOM seriously, and a great deal of effort is being invested in exploring new, effective ways of taking advantage of client-side scripting technology.

The challenge, of course, is accessibility: while JavaScript technologies allow for much improved interactivity they remain unavailable to a significant portion of user agents. The solution is to treat JavaScript as a tool for enhancing the user experience for those who can benefit from it, while avoiding cutting off access to others. A classic example is Google Suggest - it's great if you have JavaScript turned on, but you can still use Google's primary search function without it.

Google Suggest also demonstrates what I think will be a key theme for 2005: XMLHttpRequest. Loading additional data interactively from the server has been a dream of client-side developers for years, and XMLHttpRequest finally provides an 'official' method for doing exactly that (previous remote scripting efforts had revolved around ingenious hacks). GMail and Google Suggest have sparked a huge interest in this technique and it's certain that we'll see a lot more of it over the next 12 months. The ObjectGraph Dictionary is another example.

Joel Spolsk"

HTML Utopia! Design Websites Without Tables - Parts 1 and 2 [CSS Tutorials]

HTML Utopia! Design Websites Without Tables - Parts 1 and 2 [CSS Tutorials]: "Good luck and May The Source Be With You.
Resources:

A List Apart:

http://www.alistapart.com


The List Apart article that inspired this article:

http://www.alistapart.com/stories/tohell/

WaSP - The Web Standards Project:

http://www.webstandards.org

WaSP Tips for including an upgrade message:

http://www.webstandards.org/upgrade/tips.html

Some more great css tips and tricks:

http://www.bluerobot.com/web/layouts/

A very comprehensive collection of this subject matter:

http://glish.com/css/
Browser Stats

http://www.upsdell.com/BrowserNews/stat.htm

http://www.w3schools.com/browsers/browsers_stats.asp"

piątek, lutego 25, 2005

IE Security Zones

IE Security Zones
IE Security Zones
Greetings. My name is Mike Friedman. I’m on the Internet Explorer Security Test Team. In IE, the different areas of the Web are partitioned into a set of security zones. The topic I would like to talk about is programmatically adding sites to those zones. Zones were introduced in IE4 as a way to give users and admins more control, to strike a balance between user experience and gradations of risk. If you have a high degree of trust in a site, placing it in a lower-security zone can reduce the number of warnings and prompts the user will encounter. Conversely, placing a site you are concerned about into a higher-security zone can provide additional protection. For security management or as part of a product installation, it’s sometimes useful to be able to add some sites to a security zone programmatically. Of course a website can't manipulate which sites are in which security zones; it can only be done by code running on the user's machine. I am going to show you how to write a C# application to place sites into security zones.

First, some background: IE, WebBrowser applications, and other participating applications use the Internet Security Manager to determine what zone an URL is in and what actions can be performed in that zone. The security zones are:

*

Local Intranet Zone—content located on an organization's intranet. Because the servers and information is within an organization's firewall, a user or organization can assign a higher trust level to the content on the intranet.

*

Trusted Sites Zone—content located on Web sites that are considered more reputable or trustworthy than other sites on the Internet. Users can use this zone to assign a higher trust level to these sites to minimize the number of authentication requests.

*

Internet Zone—Web sites on the Internet that do not belong to another zone. This default setting causes IE to prompt the user whenever potentially unsafe content is ready to download. Web sites that are not mapped into other zones automatically fall into this zone.

*

Restricted Sites Zone—Web sites that contain content that can cause, or may have previously caused, problems when downloaded. Users can use this zone to cause Internet Explorer to alert them whenever potentially unsafe content is about to download, or to prevent that content from downloading

*

Local Machine Zone—The Local Machine zone is an implicit zone for content that exists on the local computer. The content found on the user's computer, except for content that IE caches on the local system, is treated with a high level of trust. However, in XPSP2 the Local Machine Zone Lockdown feature causes IE to apply additional security that is even more restrictive than the default Internet Zone settings.

Each zone is assigned an equal level of permissions and starts out with a default security level (template) of High, Medium, Medium-High, or Low. The user can change the security level of each zone through the Security tab of the Internet Options UI, available in Internet Explorer by selecting Tools | Internet Options and accessible from the Control Panel as well. Starting with IE5, a Medium-Low template is available as well. The user can also use the UI to customize zone security settings except for the Local Machine Zone. A user can assign Web sites to some of the security zones. Besides the Internet Options UI, sites can be added to zones using the Internet Explorer Administration Kit (IEAK).

When adding sites to a zone, the user specifies an URL pattern. An URL pattern can be a fully specified site URL like http://www.microsoft.com, or it can contain asterisks as wildcards, for example http://*.msn.com . While browsing, users can tell what security zone a site is in by looking at the bottom right-hand corner of the IE window.

Each zone has an associated set of URL action policies. An example of an URL action is "Access data sources across domains." The possible policies for this URL action are "Disable," "Enable," and "Prompt." Ultimately, each zone's URL patterns and URL action policies reside in the registry. Theoretically, an application can use the registry to query or manipulate the URL-to-zone mappings or the per-zone URL action policies. However, this is not a good idea, as the location and format of this information can change. The proper way to work with this information is through interfaces that the Internet Security Manager exposes. If you write your own control or web application, you'll want to make use of the Internet Security Manager to conform your software's security policies with IE's.

The IInternetSecurityManager interface enables client applications to modify the security settings. This interface is part of the URL Security Zones API, which allows developers to manage URL security zones and create custom URL security zone managers. If an application wants to place a pattern into a specified security zone, it would use the method IInternetSecurityManager::SetZoneMapping(). The syntax for the method looks like this:

HRESULT SetZoneMapping(DWORD dwZone, LPCWSTR lpszPattern, DWORD dwFlags)

The dwZone parameter specifies the security zone; lpszPattern specifies the pattern, and dwFlags indicates whether to create or delete the mapping.

For further information, see the MSDN reference for this method. (Note that in Windows Server 2003 and higher there is a regular and Enhanced Security Configuration version of each zone and you need to set a flag if you're addressing the Enhanced Security Configuration version.)

I have written a simple C# application that illustrates the use of SetZoneMapping(). Here is a screen shot of the application:



In the “Site Pattern” field you enter an URL containing possible wildcards. You choose one of the radio buttons to designate the zone you want to place the pattern into. Then you push the “Add” button. A message box will come up saying whether the pattern was successfully added to the zone or not. You can repeat this however many times you wish. Push the Close button to end the application.

The complete Visual C# project is available to download here: SetZoneMappingDemo.zip.

To see how the app works, let’s zero in on two code snippets that contain the meat of the program:

The constructor for the form creates the Internet Security Manager COM object and obtains a reference to the IInternetSecurityManager interface:

Type t = Type.GetTypeFromCLSID(CLSID_InternetSecurityManager);
_securityManager = Activator.CreateInstance(t);
_ism = (IInternetSecurityManager) _securityManager;

The handler for the Add button calls SetZoneMapping() and pronounces the result:

int result = _ism.SetZoneMapping((UInt32)_ctrl.Tag, txtPattern.Text, SZM_CREATE);
if (S_OK==result)
{
MessageBox.Show("Pattern \""+txtPattern.Text+"\" successfully added to " + _ctrl.Text + " zone.");
}
else
{
MessageBox.Show("Could not add pattern \""+txtPattern.Text+"\" to " + _ctrl.Text + " zone.");
}

An obvious extension to this application would be a Delete button. The handler for that button would look very similar, except you’d pass SZM_DELETE to SetZoneMapping() instead of SZM_CREATE.

Adding an URL pattern to a security zone is only effective for the particular user that runs the application. You can learn more about security zones and how to work with them programmatically in the MSDN topic URL Security Zones .
This posting is provided "AS IS" with no warranties, and confers no rights. Use of included code samples is subject to the terms specified at http://www.microsoft.com/info/cpyright.htm .

Table Rendering

Table Rendering
Table Rendering

A comment from Dave P on this blog touched on the interesting aspect of table rendering.

Dave said “IE renders pages differently from, say firefox. One of the noticeable differences is that IE waits for the entire page before displaying it.“ Actually this is not true and you can se from going to many pages that Internet Explorer does support progressive rendering of content as it arrives. This is true however for table rendering. When Internet Explorer encounters a table it measures all the content of the table before rendering so that it knows what the widths of the columns are to render the content correctly. On the other hand Firefox uses a different algorithm in that it renders the table contents progressively before it has all been passed. There are pros and cons to both approaches. In the case of progressive rendering a table it can result in an experience where content is initially displayed and then moved as the browser progresses creating a clunky and poor quality feel. On the other hand if we parse the entire table content first then it can take some time to display in the case of heavily nested tables. I’ve heard user feedback supporting both arguments and more than a few people have mentioned that they find Firefox’s rendering a little off putting in this regard.

There is actually a solution that should improve the performance of browsers whichever table parsing algorithm they use and that is for web developers to make use of the table-layout attribute in CSS. This was first introduced with Internet Explorer 5 and is now part of CSS2 and CSS2.1. This attribute will force the table to honor the declared widths of columns rather than size to fit. I’m assuming that Firefox does support this attribute but there is a lack of documentation on exactly what is supported in that particular browser.

Now you may be asking why tables didn’t just honor the specified widths to start with and the answer is our old friend compatibility. When developing Internet Explorer 4 there was another browser called Netscape Navigator 3 that was the most used browser in the world. We knew then that if people were to adopt a different browser then we had to render content exactly as they were used to. So we spent a great deal of time in IE4 emulating the parsing and rendering of tables that Netscape had implemented. That was some time ago but we continue to be able to render pages that make use of this rendering functionality. In recent years many people have moved to using CSS for layout in preference to tables and there are certainly advantages to that although there has also been some interesting debate about the benefits of a purely CSS based approach.

Tables have been used to position content on a page for many years but the truth is that they were never originally intended for that purpose. The wonderful thing about the web is that people will make use of functionality in new and interesting ways, they become reliant on bugs and strange behavior. As a result it becomes difficult to change without breaking existing content. The consideration of compatibility goes back to almost any platform, for example there was a great deal of work undertaken in Windows 95 before its launch to ensure that programs written for Windows 3.1 continued to work. As we move forward we need to be careful to ensure that existing web content continues to function. That doesn’t mean we cannot move forward though. In Internet Explorer 6 we introduced support for the strict doctype to allow us to improve our CSS support without breaking existing content. We expect to use this same technique in the future to allow us to make further improvements.

Thanks

IE content-type logic

IE content-type logic

IE content-type logic

This being my first post on the IE blog, I should introduce myself quickly. My name is Vishu Gupta; I am a developer on the IE team.

There have been several posts in the recent past asking for more information on how does Internet Explorer sniff the content-type of a downloaded file. The whole thing looks totally inconsistent or should I say...non-compliant! Before reaching any conclusions here, let’s dig just a little bit deeper.

During XPSP2, we gave a real hard look at the IE's content-type handling code path and how to make it more secure and reasonable. The whole idea of the mime-sniffing logic was to make it easier for an average Joe to put up a personal website without worrying about mimetype details even when web servers and ISPs have random default configurations. IE does mime-sniffing only if either the server doesn't specify a content-type or if the server claims that the file is something that IE knows about. For example, if there is a new mimetype abc/xyz and the server reports that to IE, IE will consider the mimetype of the file to be abc/xyz only. In addition to the content-type sniffing, IE also does clsid sniffing, which actually decides which component handles the file within IE. The clsid can be either sniffed from the document itself or it can be obtained from the mimetype (decided previously with or without sniffing) or can be obtained from the extension. For example, if the mimetype abc/xyz doesn't have a clsid corresponding to itself in the registry, IE will try to obtain the clsid from the extension or from the document itself, and use that to host the file. If it cannot find the clsid, the file will be Shell Executed and shell will use the extension to determine the application to handle the file.

Now comes:
The question: "Do we really need to sniff a file if the server says it is text/plain?"
Short answer: No.
Long answer: Probably, we do.

During XPSP2 betas, we had the mimesniffing mitigation enabled in all zones by default. We tested the waters with applying the "server knows best, so treat the server-suggested mimetype as authoritative" concept for text/plain mimetype. This led to an outcry on the newsgroups about different file types being rendered as text on XPSP2, and we had to disable the mitigation in the internet zone. One can only imagine the app-compat backlash if we stopped sniffing for all reported mimetypes. Yes, instead of handling that by sniffing in the browser, we could go about asking everybody to fix their servers but not everyone can do that easily. In addition to this, several apps depend on IE to launch them after sniffing the correct clsid from their compound file (OLE structured storage). Its one thing to ask new apps to do the right thing, but a whole different ball-game if you want to switch the entire installed base.

Mimesniffing doesn't mean that there is no way for a server to control how a file is handled. header enables a server to do precisely that. With this however, IE makes sure that the user gets prompted with the file type information (based on the extension specified by the server here) before the file is opened/saved.

-Vishu

posted on Tuesday, February 01, 2005 7:22 AM

wtorek, lutego 22, 2005

BetaNews | MS: No Updates for Virtualized Windows

BetaNews | MS: No Updates for Virtualized Windows: "Microsoft's Windows Genuine Advantage (WGA) validation initiative has set off a firestorm of protest throughout the open source community after programmers uncovered a special function in the software dedicated to detecting Wine, a compatibility layer for running Windows programs in non-Windows environments.

WGA authentication is set to become mandatory for all non-critical Windows updates starting in the second half of 2005. Customers must run a program that verifies their Windows license, or they will not have access to Windows Update or the Microsoft Download Center."

piątek, lutego 18, 2005

Kolejny indeks TIOBE

TIOBE Programming Community Index for February 2005
February Headline: Fourth increase in a row for both Java and C#

The TIOBE Programming Community index gives an indication of the popularity of programming languages. The index is updated once a month. The ratings are based on the world-wide availability of skilled engineers, courses and third party vendors. The popular search engines Google, MSN, and Yahoo! are used to calculate the ratings. Observe that the TPC index is not about the best programming language or the language in which most lines of code have been written.

The index can be used to check whether your programming skills are still up to date or to make a strategic decision about what programming language should be adopted when starting to build a new software system.
Position (Position) Programming Language Ratings (Ratings) Status
1 C 19.820% +1.63% A
2 Java 18.340% -4.22% A
3 C++ 11.337% -4.37% A
4 PHP 10.278% +3.02% A
5 Perl 8.861% -0.61% A
6 (Visual) Basic 7.102% -2.04% A
7 SQL 3.373% -0.14% A
8 Python 2.506% +1.50% A
9 C# 2.363% +0.19% A
10 Delphi/Kylix 1.895% +1.17% A
11 JavaScript 1.779% -0.36% A
12 SAS 1.378% +0.66% A
13 COBOL 0.874% +0.13% A
14 IDL 0.686% +0.31% A--
15 ABAP 0.678% +0.51% A--
16 Lisp 0.656% +0.20% B
17 Pascal 0.556% +0.06% B
18 Fortran 0.518% +0.03% B
19 Ada 0.462% -0.04% B
20 MATLAB 0.402% +0.17% B
Legend

Some columns need extra explanation:

*

(Position). This column indicates the difference in position with respect to last year.
*

Ratings. The search query '+" programming" -tv' is used to calculate the TPC Index. This query is executed for the regular Google, MSN, and Yahoo! web search and the Google newsgroups for the last 12 months. The formula that is applied is #(normalized Google web hits) + #(normalized MSN web hits) + #(normalized Yahoo! web hits) + #(normalized Google newsgroup hits). The term "normalized" means that the sum of all web hits of the first 50 languages for a query is taken and evenly distributed.
*

(Ratings). This column indicates the changes in ratings for the last 12 months.
*

Status. Programming languages that have status "A" are considered to be mainstream languages. Status "A-" and "A--" indicate that a programming language is inbetween status "A" and "B". From a supportability point of view, it is strongly advised to stick to mainstream languages for industrial, mission-critical software systems. If a programming language has a rating that is higher than 0.7% for at least 3 months it is rewarded status "A". The first two months the programming language will receive status "A--" and "A-" respectively. The opposite holds for languages that go from status "A" to status "B".

Sending us artefacts or ideas how to improve the way the TPC index is calculated are very appreciated

Nowa wersja StarOffice ma nowy format zgodny z wymaganiami OASIS


StarOffice 8 Learns From MS Office
By David Worthington, BetaNews
February 17, 2005, 8:10 PM

Basking in the limelight of LinuxWorld, Sun used the occasion to show off a working mock-up of the next version of its StarOffice productivity software. In many ways, StarOffice 8 represents the suite's continued maturation.

Built-in usability enhancements conform to the look and feel of industry standard functionality, configuration options and language support is enhanced, and interoperability with Microsoft Office is more comprehensive. Sun has also has thrown in a newly redesigned database engine and software development kit (SDK).

In its quest to produce a substitute for MS Office, Sun has taken care to soften the transition. Usability enhancements are intended to make the software easier to learn and use, reducing migration and training cost. Features such as toolbars and menus, down to headers and footers, resemble Office and have adopted Office terminology.

For instance, "AutoPilot" has been renamed "Wizard." Notable changes were made to mail merge and a new feature named "Format Paintbrushes" preserves copy and paste styles like Microsoft Office Smart Tags.

What's more, StarOffice has been programmed to behave as a native application -- with native widget rendering -- for every supported operating system such as Solaris, Linux and Windows.

No matter how successful it is at erasing any observable differences between StarOffice and Microsoft Office, Sun must labor to ensure seamless compatibility under the hood. The 8.0 release of StarOffice now has the same set of AutoShapes that Microsoft provides in PowerPoint, and has vastly improved handling of Excel spreadsheet files.

Despite it emphasis on Office, Sun has not forgotten third parties. StarOffice 8.0 has improved PDF support, which for the first time allows quality selection for images, as well as well PDF exports. Some new formats such as Xforms are also supported.

Under Sun's guidance, StarOffice has continued to adhere to open standards. The default file extension for StarOffice files has been changed to the OASIS (Organization for the Advancement of Structured Information Standards) Open Document Format (.odx). Sun maintains backward compatibility to StarOffice 7.0 and previous versions.

In addition, Sun has updated its database engine to HSQLDB, which is open source and Java driven, and has moved to a new front end. Sun claims that it is now much easier to create forms, queries and reports. The software supports most major database types and connectors.

In an appeal to the enterprise, a configuration manager will be bundled with the Java Desktop Configuration Manager. This tool helps manage user settings such as profiles, policies, security and authentication, and access controls.

Since StarOffice fares well overseas and has a broad base of supported languages, the software also has a multi-language installation feature that can be selected during installation.

Lastly, Sun has continued its push -- which began with StarOffice 6.1 -- to court the enterprise sector with extended customization that allows customers to include more functionality or change interface elements. The updated SDK has included API concepts and sample code written in several popular 3G languages.

StarOffice 8 is a free public download.

czwartek, lutego 17, 2005

środa, lutego 09, 2005

Drukowanie ...

Today's focus: Printing from a Linux client via a Windows
server

By Steve Blass

Our 2003 Windows terminal client server can connect with any
Windows client via the Internet - it provides connection, sound
and printing services back to the client. We have a Linux client
that we can connect to the server and do everything except
print. Any help?

Printer redirection through remote desktop is a feature of
Version 5 of the Remote Desktop Protocol (RDP). The Unix
rdesktop client distribution release package (rdesktop 1.3.1)
supports only Version 4 of RDP, so you would need to set up your
local Linux printer as a network printer on your terminal server
to print to it.

The good news is the development version of rdesktop, available
through the Concurrent Versions Systems (CVS) repository on
SourceForge, does support Version 5, including printer
redirection (instructions are at the
).

After downloading the source with CVS you can build rdesktop
with the standard GNU build command sequence 'configure'
followed by 'make' and then 'make install.'

If you aren't familiar with building from CVS, rdesktop is a
straightforward project to get started with.

wtorek, lutego 08, 2005

Nowa przeglądarka AOL wraz z wyszukiwarką

AOL Opens Browser, PC Search Beta
By Nate Mook, BetaNews
February 7, 2005, 2:26 PM

Furthering efforts to attract fresh users to its services, America Online has opened beta testing for its standalone AOL Browser and Desktop Search to anyone with an AOL or AIM screen name.

Initially available only to internal testers, the AOL Browser beta utilizes Microsoft's Internet Explorer engine, but packs on additional features such as tabbed browsing and advanced pop-up blocking. The browser also integrates AOL's Desktop Search to scour local files, including Microsoft Office, PDF, HTML, and WordPerfect documents. BetaNews has learned that AOL plans to expand its search to index previously viewed Web pages and AIM chat logs saved as text.

AOL joins a growing list of companies investing in desktop search as a way to increase brand reach beyond the Web. Rivals Microsoft and Google have launched beta desktop search products, along with Yahoo and Ask Jeeves. For its own software, AOL partnered with third party desktop search developer Copernic.

AOL has shifted its focus to attracting consumers with free Web services in the face of increasing competition and a declining AOL subscriber base. As first reported by BetaNews, AOL beta tested its AMP media player as a standalone release in December, with sources citing plans for a public preview.

Both AMP and AOL Browser were components of AOL's Fanfare suite, an alternative client for broadband users that has since been disbanded. But despite reviving Netscape in November with the help of Mozilla Firefox, AOL has continued to make progress on its own IE-based Web browser.

AOL Browser takes many features from current browsers, but also includes some innovations of its own, such as "tear-off tabs." Tear-off tabs can be rearranged or pulled away from their original window and spun off into a new window. Additionally, AOL has added thumbnail preview images of Web pages that pop-up when the mouse cursor hovers over a tab, or the Back and Forward buttons.

Part of its "Power Browsing" feature, AOL includes added privacy options to remove any "footprints" left while browsing the Web, including cookies and cached files. Page zooming, high contrast viewing and enhanced information tools are also included in the Power Browsing menu.

AOL has not offered a final release timeframe for AOL Browser or Desktop Search. However, a company spokesperson told BetaNews last year, "This beta test is part of our continual efforts to test concepts and technologies."

AOL Browser with integrated Desktop Search is available for download via FileForum.

Narzędzie webowe do Linux'a

Pojawiło się świetne narzędzie do administrowania systemami Linuxo-podobnymi webadmin autorstwa Jamie Cameron.

Błąd w przeglądarkach innych od IE

Błąd polega na niewłaściwych kodowaniu i wyświetlaniu znaków diakrytycznych różnych języków. Skutkiem tego wizualny adres strony nie jest zgodny z adresem pod który wejdzie przeglądarka. O zgrozę przyprawia fakt, że nie można tego sprawdzić (do tej pory taka sytuacja miała miejsce w IE, ale ktoś czujny mógł sobie sprawdzić czy jest zgodność adresów (w polu URL i we właściwościach strony) adresy są takie same ponieważ są w obu przypadkach źle wyświetlane - mogą totalnie zmylić u żytkownika i uśpić jego czujność. Błąd tkwi w złej implementacji IDN (internet domian name), której nie implementuje IE. Twórcy innych przeglądarek na razie proponują wyłączyć IDN. Opera twierdzi, że ten błąd jej nie dotyczy.

MS się otwiera ku deweloperom

Microsoft explores opening up to developers

08/02/2005 13:41:20

Seeking to be more transparent to developers, Microsoft is weighing plans to make available more early versions of its software and share more source code, company representatives said Monday.

Speaking to an audience of developers at the VSLive conference in San Francisco, Soma Somasegar, corporate vice president of the Developer Division at Microsoft, said he wants to work closely with external developers for the benefit of the end user.

"I really want to think about you as an extension to my product development organization so that together you and us, as a product group, can combine forces and help develop and deliver the right products for our customers," he said in a keynote address on Monday.

Somasegar wants to make available every software build that Microsoft compiles and involve developers in just about all decisions he makes regarding products that come out of the developer division, such as Visual Studio and the .Net Framework.

"Last year, with the release of community technology previews, we took a huge step forward in transparency, and that was only the first step," Somasegar said. "Every build that comes (out) of the main build lab, I want to be able share with you; every spec or specific document that I like, I want to be able to share with you; every feature decision that I make, I want to be able to get your input and involve you in the process."

Additionally, Microsoft is debating whether it should make the source code to Windows Forms available to developers. Windows Forms is part of Microsoft's .NET Framework, and developers use it to build client applications. The source code can help developers resolve problems when building applications. Uwaga gdzieś przeczytałem, że w Longhorn zachęca się aby aplikacje pisać z wykorzystaniem WF a nie Forms-ów internetowych.

Shawn Burke, a manager on the Windows Forms team, wrote in a posting on his Web log last week that he wanted to make the code available but there were issues to resolve. These issues include intellectual property rights and scrubbing the code of inappropriate comments. Also, not everybody at Microsoft backs the idea, he wrote.

Many developers commenting on Burke's Web log said they are eager to see the code. However, it is far from certain that the Windows Forms code will be made available, said Christopher Flores, a lead product manager in Microsoft's Developer Division, in an interview on Monday at VSLive.

"Shawn started a lively discussion. Certainly there are people inside of Microsoft discussing the pros and cons of doing this, but as far as I know, today, we have no plans to share the Windows Forms code," Flores said

sobota, lutego 05, 2005

Nowe slogany Gates'a

Gates Promises Interoperable Software

By Nate Mook, BetaNews

In a letter to customers this week, Microsoft Chairman Bill Gates made a promise to design software that is interoperable with other systems. Although Redmond is traditionally known for its closed formats and code, Gates said communication between applications is critical for business.

He also took a swipe at open source, saying such development hinders interoperability.

E-mails directly from Gates usually signify the start to major initiatives within Microsoft. His letters have previously focused on security issues and changes to Redmond development policies to better protect customers. But now, Gates has shifted his attention toward industry standards.

"Microsoft has been working with the industry to advance a new generation of software that is interoperable by design, reducing the need for custom development and cumbersome testing and certification," said Gates. "These efforts are centered on using XML, which makes information self-describing - and thus more easily understood by different systems."

Gates cited the use of XML in Office 2003 as one example of how Microsoft is pushing interoperability. "Office documents, spreadsheets and forms can be saved in an XML file format that is freely available for anyone to license and use. Office also supports customer-defined XML schema beyond the existing Office document types," he said.

However, the company's Office formats have become a point of contention, as although Microsoft makes use of the open XML architecture, its formats are closed and encumbered by licensing restrictions. The state of Massachusetts recently found itself unsure of how to classify Microsoft's Office formats under its new "Open Standards" policy.

"I think Microsoft is premature trumpeting the open-format messaging. And to be clear, by any definition typically applied to file formats, Office isn't open," Jupiter Research senior analyst Joe Wilcox told BetaNews.

But Gates made clear in his letter that interoperability does not equate to open source. He said that interoperability is about how different software systems work together, regardless of licensing and development. Gates claimed that open source could actually have a detrimental effect on making software interoperable.

"The open source development approach encourages the creation of many permutations of the same type of software application, which could add implementation and testing overhead to interoperability efforts," Gates argued.

środa, stycznia 26, 2005

Ciekawe linki

Strony dla developerów:
  • www.nonags.com
  • www.jumbo.com
  • www.sqljunkies.com/HowTo/B197B9E7-EF3D-4D70-9B5E-47B74E57EF38.scuk
  • mcpmag.com/columns/article.asp?editorialsid=883
  • www.aspobjects.com/ASP_Components/Utilities/
  • www.sqldts.com/?302
  • www.dameware.com/products/dexp/

Narzędzia do administracji serwerami SQL

Pod tym adresem zanjdują się odwołania do narzędzi.

Jak można sprzedawać złe wiadomości

Vulnerability alerting services - ten termin jest określany na usługi związane z udostępnieniem informacji na temat zagrożeń bezpieczeństwa związanych z wykorzystaniem internetu oraz oprogramowania. Zawiera informacje na temat kiedy powstało zagrożenie, jakeigo produktu dotyczy, czym jest to zagrożenie oraz jak można je obejść. Niby proste ale jak uwzględnić ilość takich raportów w ciągu roku (w roku 2004 było ich 889) to może być kłopot z terminową obsługą i reakcją na te zagrożenia. Dlatego wiele firm udostępnia płatny serwis informujący o tych zagrożeniach. Najlepszą z firm okazał się Symantec z produktem "DeepSight Alert Service". Inni to: Co-Logic Security, Cybertrust, PivX Solutions, SecurityMob, SecurityGlobal.net, Secunia. Ciekawe, że firmy autorskie danego oprogramowania udostępniają te raporty bezpłatnie np.: Microsoft, Cisco, IBM. Wadą tych rozwiązań jest to, że mimo ich statusu bezpłatności ograniczają się do swoich tylko produktów. No z wyjątkiem Microsoft, który pokrywa znacznie więcej produktów i ma dodatkowo KB. Więcej na ten temat można znaleźć tu.

MS zaciska pętlę na piratach

Od 7 lutego rusza program blokowania dostęu do aktualizacji MS Windows dla uzytkowników nielegalnych kopii zwany - Genuine Advantage program. Dodatkowo, posiadacze legalnego systemu MS Windows mogą uzyskać rabaty oraz dostęp do atrakcyjnych programów.

wtorek, stycznia 25, 2005

IBM dalej rozwija usługę biurową Workplace

IBM's Lotus unit on Monday updated Workplace, its collaborative software line, with enhanced development tools and a hosted document-management service offering. The announcements were timed to coincide with the Lotusphere conference taking place this week in Orlando, Fla.

The company introduced Workplace Collaborative Service, a set of Web-delivered collaborative programs, including e-mail, calendering and electronic learning tools, which IBM will sell as a single bundle. Workplace is IBM's line of Java-based productivity applications that run with the company's WebSphere Portal software. To help the transition from its current Notes and Domino to Workplace, the company released tools aimed at simplifying Workplace application development. It also added a hosted service to manage and collect reports required by Section 404 of the Sarbanes-Oxley Act. In a release, IBM said that version 7 of Notes and Domino will be available this summer.

Kody AIX do przejrzenia przez SCO

BM ordered to reveal source code to SCO
IBM has been ordered to hand over source code of its AIX and Dynix operating systems to SCO, in the latest installment of the long-running Linux intellectual property rights legal case between the pair.
A federal court in Utah has ordered that IBM must supply the code by 11 February after a successful application from SCO, which wants to examine it to see if any of its code was used in IBM products.
The legal feud started in spring 2003 when SCO claimed its code had been used to develop various commercial Linux products, and IBM was the subject of a multibillion-dollar lawsuit.
Other firms supplying Linux products are also being threatened by SCO. SCO claims parts of its Unix System V operating system have been used by other companies to develop Linux and other types of software products.
IBM denies any infringement to SCO’s intellectual property, and the outcome of the case will have a huge impact on the Linux open-source market.
Many users of Linux products are now seeking indemnity from their suppliers against prosecution from SCO.
The full trial is not expected to begin until the end of the year.

Usługi sieciowe (WS) i MS SQL Server

At the formal release of the Microsoft .NET Framework, Bill Gates promoted Web services by demonstrating the SQL Server 2000 Web Services Toolkit, which comes with XML for SQL Server 2000's third Web release (SQLXML 3.0). The Web Services Toolkit is a jewel, letting you graphically create a Web service that exposes database objects such as stored procedures and user-defined functions (UDFs). If you're handy at T-SQL and stored procedures, SQLXML 3.0 turns you into a Web services wizard with practically no learning curve.
SQL Server Magazine has chronicled SQLXML 3.0 since its inception. Brian Moran, for example, described how to get started creating Web services with the initial release of SQLXML 3.0 in his February 21, 2002, SQL Server Perspectives column, "Use the SQL Server 2000 Web Services Toolkit to Get Started with .NET" (InstantDoc ID 24206). Since then, Microsoft has released two service-pack updates to SQLXML 3.0. You can find the latest update, Service Pack 2 (SP2), as a free download at http://www.microsoft.com /downloads/details.aspx?familyid=4c8033a9-cf10-4e22-8004-477098a407ac&displaylang=en. In this article, I take you beyond the basics of building a Web service. The sample telephone-directory Web service application demonstrates how to invoke stored procedures and UDFs by passing parameters and capturing return values. Learning how to build the sample application will equip you to create flexible Web services solutions that expand the uses for existing SQL Server database objects. In addition, some organizations might find the sample application a quick and easy solution for an online telephone directory that runs behind a firewall

czwartek, stycznia 13, 2005

Usługi w Windows XP są po to aby je wyłączyć

Services You Can Disable
Updated 10/30/03
There are quite a few services you can disable from starting automatically. This would be to speed up your boot time and free resources.They are only suggestions so I suggestion you read the description of each one when you run Servicesand that you turn them off one at a time.Some possibilities are:
Alerter - Sends alert messages to specified users that are connected to the server computer.
Application Management - Allows software to tap directly into the Add/Remove Programs feature via the Windows Installer technology.
Background Intelligent Transfer Service - The Background Intelligent Transfer service is used by programs (such as Windows AutoUpdate) to download files by using spare bandwidth.
Clipbook - ClipBook permits you to cut and paste text and graphics over the network.
Error Reporting Service - Allows applications to send error reports to Microsoft in the event of an application fault.
Fast User Switching - Windows XP allows users to switch quickly between accounts, without requiring them to log off.
Help and Support - Allows the XP Built-in Help and Support Center to run.
IMAPI CD-Burning COM Service - You don't need this if you have other software to create CDs.
Indexing Service - Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language.
IP SEC - Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. If you are not on a domain, you likely don't need this running.
Messenger - Transmits net send and Alerter service messages between clients and servers. This is how a lot of pop-up windows start appearing on your desktop.
Net Logon - Supports pass-through authentication of account logon events for computers in a domain. If you are not on a domain, you don't need this running
Network DDE - Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers.
NT LM Security Support Provider - Provides security to remote procedure call (RPC) programs that use transports other than named pipes.
Performance Logs and Alerts - Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If you don't need to monitor your performance logs, then you don't need this service.
Portable Media Serial Number - Retrieves the serial number of any portable music player connected to your computer
QOS RSVP - Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets.
Remote Desktop Help Session Manager - Manages and controls Remote Assistance. If you are not using Remote Desktop you don't need this service.
Remote Registry - Enables remote users to modify registry settings on this computer.
Routing & Remote Access - Offers routing services to businesses in local area and wide area network environments. Allows dial-in access.
Secondary Login - Enables starting processes under alternate credentials. This is what allows you to run an application as another user.
Smart Card - Manages access to smart cards read by this computer.
Smart Card Helper - Enables support for legacy non-plug and play smart-card readers used by this computer.
SSDP Discovery Service - Enables discovery of UPnP devices on your home network.
TCP/IP NetBIOS Helper - Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. This should not be needed in today's network environment.
Telnet - Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients.
Uninterruptible Power Supply Service - Manages an uninterruptible power supply (UPS) connected to the computer.
Universal Plug and Play Device Host - Provides support to host Universal Plug and Play devices
Upload Manager - Manages synchronous and asynchronous file transfers between clients and servers on the network.
Volume Shadow Copy Service - Manages and implements Volume Shadow Copies used for backup and other purposes.
Web Client - Enables Windows-based programs to create, access, and modify non-local files across the Internet.
Wireless Zero Configuration - Provides automatic configuration for the 802.11 adapters
WMI Performance Adapter - Provides performance library information from WMI HiPerf providers.

Zmiana twarzy w OpenOffice

The latest OpenOffice.org Snapshot reveals an office suite that includes a personal DBMS (database management system), similar to Microsoft Access. OSDir takes us for a quick tour of OpenOffice.org 1.9.69 Base. Yahoo reports - Microsoft Office, with which OpenOffice is often compared, comes with the Access database. Starting with 2.0, however, OpenOffice will include the open-source HSQL database engine. HSQL is a Java-based database. It is an SQL (structured query language) DBMS engine that's also designed for use with JDBC (Java DataBase Connect). As such, it's a database designer tool, not an office-worker tool.

czwartek, stycznia 06, 2005

Zabezpiecz w rejestrze zmiany zawawansowane MS IE

** Restricting Access
Let's suppose that you would like to keep the Microsoft Internet Explorer Advanced Settings tab inaccessible to others. You can do this by editing the system Registry. However, we decided to create a Reg. file that will do the editing for you. To create the file, run Notepad and type in the following text. (Where you see PRESS ENTER HERE, just press Enter. If you type in PRESS ENTER HERE, your Reg file won't work.)
REGEDIT4 (PRESS ENTER HERE) [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel] "AdvancedTab"=dword:00000001 (PRESS ENTER HERE)
Now choose FileSave As. When the Save As dialog opens, name your file NoAdv.reg, locate a folder to save it in (or accept the default folder) and click Save. Double-click the new file to merge it into the Registry. You'll get a dialog box asking if you're sure about this. Click Yes. You'll get another dialog box telling you that the merge is complete. Click OK. Run IE and choose ToolsInternet Options. You'll find that the Advanced tab no longer exists. To get the tab back, copy the Reg file and change the line
"AdvancedTab"=dword:00000001
to
"AdvancedTab"=dword:00000000
Name this Reg file AdvOn.reg and save it. Double-clicking the new file will return the Advanced tab.

środa, stycznia 05, 2005

Perełki internetowe

Bardzo ciekawe adresy:

Obrona IE

Phil Windley says that corporate IT infrastructures are created to be extremely homogeneous as a form of self defense. True, heterogeneous environments can be more expensive to maintain and user support can be more difficult. However, Windley points to a hidden cost for the homogeneous mentality --corporate IT users are "unable to use many of the more innovative products and applications that consumers use everyday. As an example, Windley quotes from an article about the reluctance of IT vendors to put the widely popular --and more secure than Internet Explorer-- Firefox Web browser on the desktop when they sell to corporate IT department. In addition, many IT executives are reluctant to give up the problematic Internet Explorer because Firefox is lacking in other features, as Meta Group points out:

Despite all the media noise around the Firefox browser, we do not believe the majority of IT organizations will decide to support it for a number of key reasons. These include the lack of subcomponent administration (for desktop lockdown), compatibility, and integration with other desktop applications. Compatibility is an interesting one. While IE has been criticized by purists for its poor adherence to standards, it is also the browser most sites have customized their development for. Many of the features talked about with Firefox are red herrings (e.g., tabbed browsing, ad blocking, extension architecture). However, some IT organizations have noticed stunning performance benefits in using Firefox with specific applications and will therefore likely support it in limited release - but only where performance is a more important consideration than the combination of all other factors. If consumer take-up of Firefox reaches the vast majority of users, then IE in the corporate environment will be reconsidered, but for now, the benefits of migration do not stack up.

Pożyteczne programy do wykorzystania

  • FireFox - ciekawy artykuł na temat pozycji tej przegladarki, sugestie: wsparcie dla ActiveX oraz "niestandardowych" rozszerzeń MS IE. Spełnienie ich pozwoli opanowąć w większym stopniu rynek,
  • AbiWord - ok, jako niewielki i prosty edyt or z możliwością tworzenia tabel, brak możliwości exportu/importu plików MS Word,
  • AEdix - świetny edytor programistyczny, podświetla składnię m.in. asp, python, sql, html
  • Sqlplus - podpięcie się do bazy oracle, wywołanie: sqlplus user/pass@deva_blade01
  • Netcraft toolbar - narzędzie musowo do zaintstalowania w MS IE, pokazuje czy strona na którą weszliśmy jest wiarygodna (na pasku pokazuje statystykę informacji o danej stronie)

poniedziałek, stycznia 03, 2005

Odchudzić... Windows XP

Lista jest na stronie
Artyluł na ten temat
Ciekawe download-y
Inne rekomendacje:
Service What it does
Portable Media Serial Number Retrieves the serial number of a portable music player attached to your PC.
Task Scheduler Schedules unattended tasks to be run. If you don't schedule any unattended tasks, turn it off.
Uninterruptible Power Supply Manages an Uninterruptible Power Supply (UPS) connected to your PC.
Automatic Updates Automatically checks for Windows updates. (You can check manually by going to http://windowsupdate.microsoft.com/.)
Telnet (service available on XP Pro only) Allows a remote user to log in to your computer and run programs. (This will not be found on all versions of XP Pro.)
Wireless Zero Configuration Service Automatically configures a Wi-Fi (802.11) network card. Disable this only if you're not using a Wi-Fi network card.

Nowy ROK, nowe problemy

  • Udało mi się w końcu przemigrować dane z MS SQL Servera 2000 do Oracle 9i. DTS nie działa prawidłowo: dodaje do nazwy tablicy nazwę użytkownika "WAWRZYNCZYK_M"."TABLICA" (można to wyprostować przez zmianę nazwy "TABLICA" poleceniem "rename 'TABLICA' to tablica"), w haśle podłączenia do bazy zmienia nazwę uzytkownika na duże litery ("WAWRZYNCZYK_M"). Po długiej walce udało się utworzyć pustą tablicę SPRZET.
  • Dalej pomógł mi VFP 8.:
  1. stworzyłem połączenie do oracle (poprzez DSN),
  2. stworzyłem widok zdalny 'komputery' bazujący na w/w tablicy w MS SQL,
  3. stworzyłen widok zdalny 'ora_sprzet' do takiej samej tablicy w Oracle, trzeba pamiętać o wypełnieniu zakładki 'UPDATE',
  4. otworzyłem widok 'USE ora_sprzet' i wykonałem ' INSERT INTO ora_sprzet SELECT * from komputery' i działa! Mam teraz dane w Oracle.
  • Jeszcze jedna uwaga - mój serwer MS Windows 2003 nie pozwala na podłączenie się do zdalne bazy w ASP (MS IIS), nie wiem jak skonfigurować IIS.

piątek, grudnia 31, 2004

Koniec usługi MS Passport dla firm

Dzisiaj właśnie odpadł ostatni klient korzystającyu z uwierzytelniania swoich klientów poprzez mechanizm MS Passport. Usługa ta planowo została wygaszona dla zewnętrznych firm. Będzie nadal stosowana do dostępu do MSN oraz innych witryn MS (np. MSDN). Większość firm opowiada się za mechanizmem "federated" tzn. podobnie jak państwa świata, każda firma ma swój "paszport" i decyduje czy uznać "paszport" innej firmy. Najpopularniesze wdrożenie takiego machanizmu to Liberty Alliance firmowany przez SUN-a. Mechanizm ten popierają firmy Fidelity and American Express i konsortium to ma około 150 członków.

poniedziałek, grudnia 27, 2004

Nowy artykuł na DNJOnLine

Tim Anderson interviews Craig Symonds, general manager of the Visual Studio product team, on forthcoming versions of Visual Studio, Microsoft's relationship with the Open Source community, the problems of migrating from Visual Basic 6.0, and whether Visual C++ really is faster than C#. Visit http://dnjonline.com to find out more.


You are being sent this email because you have registered with us in the past. As a registered user you can view the 'locked' articles on our site using your unique login details:

Your user ID is: 5022
Your Password is: ivjxmcm

Please take this opportunity to update your registration details with us. If you would prefer not to receive emails from us, please email remove@mattmags.com with the subject line 'opt-out'.

I hope this email has been useful to you,
Matt Nicholson, Editor DNJ Online

ODBC żyje nadal

ODBC is not dead

One of the .NET Framework features often highlighted is its new data access model, ADO.NET. Some of its improvements over its predecessors include scalability, speed, and its disconnected nature features. A .NET data provider is used to access a database system; a good example is the Oracle Data Provider for .NET. One problem is some systems don't have a data provider available, so, thankfully, you can easily add support for the older ODBC (Open DataBase Connectivity) technology. ODBC is an established industry standard with ODBC drivers available for most systems in use.

Working with ODBC

ODBC is a uniform interface standard that you may use to access database systems. It's a database access library that enables applications to work with data contained in a database. One aspect of ODBC is that you may use it to access almost any type of database, albeit Oracle, Access, Sybase, mySQL, spreadsheets, text files, and so forth. It's a mature technology, so locating an ODBC driver for a particular database system is usually not a problem.

ODBC .NET Data Provider

The ODBC .NET Data Provider is an add-on component to the Microsoft .NET Framework Software Development Kit (SDK). It provides access to native ODBC drivers the same way that the OLE DB .NET Data Provider provides access to native OLE DB Providers. The ODBC .NET Data Provider is intended to work with all compliant ODBC drivers, but the Microsoft site states that it has only been tested with the Microsoft SQL ODBC Driver, Microsoft ODBC driver for Oracle, and the Microsoft Jet ODBC driver.

ODBC setup

ODBC consists of a driver and driver manager. The driver is specific to a database vendor's product. For instance, Oracle provides a driver for working with an Oracle system. The driver manager is used to install the necessary driver files and configure data sources (that take advantage of the driver) to be used in applications. On Windows-based systems, the ODBC Data Source Administrator is used to create and maintain ODBC connections. You may utilize an ODBC driver in a .NET application once it is property installed and set up.

ODBC classes

Once you install the ODBC .NET Data Provider, you can utilize it in an application. If you're using Visual Studio .NET, you may add a reference to its dll file, Microsoft.Data.Odbc.dll. If you're developing from the command line, you can add a reference during compilation or copy the dll file into the application's bin directory.

The ODBC classes are contained in the Microsoft.Data.Odbc namespace. It includes the following classes:

  • OdbcConnection: Used to connect to an ODBC data source. The name assigned to the ODBC data source, during its setup, is used to access it.
  • OdbcCommand: Used to execute a command against a connection.
  • OdbcDataReader: Allows you to loop through the results of a query against a data source.
  • OdbcParameter: Used to bind a parameter to a command.
  • OdbcDataAdapter: Used to fill a DataSet object from an ODBC data source.
  • OdbcCommandBuilder: Creates default Insert, Update, and Delete statements for an ODBC data adapter.

The next example takes advantage of a few of these classes. It utilizes a previously established ODBC data source (aptly called Test). The DSN name is used in the connection string, along with the user id and password to access the database. A basic SQL statement is used to retrieve all rows from the Customers table with the column values displayed. Finally, the connection is closed and all other objects are disposed. The C# code follows:

using System;
using Microsoft.Data.Odbc;
namespace BuilderODBC {
class TestClass {
static void Main(string[] args) {
string connectionString = "DSN=Test;UID=Chester;Pwd=Tester;";
string sql = "SELECT CustomerID, ContactName, ContactTitle FROM Customers";
OdbcConnection conn= new OdbcConnection(connectionString);
conn.Open();
OdbcCommand comm = new OdbcCommand(sql, conn);
OdbcDataReader dr = comm.ExecuteReader();
while (dr.Read()) {
Console.WriteLine(dr.GetValue(0).ToString());
Console.WriteLine(dr.GetValue(1).ToString());
Console.WriteLine(dr.GetValue(2).ToString());
}
conn.Close();
dr.Close();
comm.Dispose();
conn.Dispose();
} } }

The equivalent VB .NET code follows:

Imports Microsoft.Data.Odbc
Module Module1
Sub Main()
Dim conn As OdbcConnection
Dim comm As OdbcCommand
Dim dr As OdbcDataReader
Dim connectionString As String
Dim sql As String
connectionString = "DSN=PracticalLotusScriptTest;UID=Chester;Pwd=Tester;"
sql = "SELECT CustomerID, ContactName, ContactTitle FROM Customers"
conn = New OdbcConnection(connectionString)
conn.Open()
comm = New OdbcCommand(sql, conn)
dr = comm.ExecuteReader()
While (dr.Read())
Console.WriteLine(dr.GetValue(0).ToString())
Console.WriteLine(dr.GetValue(1).ToString())
Console.WriteLine(dr.GetValue(2).ToString())
End While
conn.Close()
dr.Close()
comm.Dispose()
conn.Dispose()
End Sub
End Module

Dealing with ODBC errors

The Microsoft.Data.Odbc namespace includes the OdbcException class for handling any errors that may occur when interacting with ODBC data sources. We can alter our example to utilize this class to handle any runtime exceptions that may occur. The altered C# code follows:

using System;
using Microsoft.Data.Odbc;
namespace BuilderODBC {
class TestClass {
static void Main(string[] args) {
string connectionString =
"DSN=PracticalLotusScriptTest;UID=Chester;Pwd=Tester;";
string sql = "SELECT CustomerID, ContactName, ContactTitle FROM Customers";
OdbcConnection conn = null;
OdbcCommand comm = null;
OdbcDataReader dr = null;
try {
conn= new OdbcConnection(connectionString);
conn.Open();
comm = new OdbcCommand(sql, conn);
dr = comm.ExecuteReader();
while (dr.Read()) {
Console.WriteLine(dr.GetValue(0).ToString());
Console.WriteLine(dr.GetValue(1).ToString());
Console.WriteLine(dr.GetValue(2).ToString());
}
dr.Close();
}
catch (OdbcException oe){
Console.WriteLine("An ODBC exception occurred: " + oe.Message.ToString());
} catch (Exception e) {
Console.WriteLine("An exception occurred: " + e.Message.ToString());
} finally {
if (conn.State == System.Data.ConnectionState.Open) {
conn.Close();
}
comm.Dispose();
conn.Dispose();
} } } }

You'll notice the ODBC objects are declared outside the try/catch block, so they may be utilized in the finally block. ODBC exceptions are handled separately from generic errors. The connection is checked to see if it is open before closing it.

Every data source available

ODBC has been around for numerous years. Consequently, ODBC drivers exist for almost any data source imaginable. The ODBC .NET Data Provider providers ODBC access within .NET applications through the Microsoft.Data.Odbc namespace. Use this data provider when you cannot find a native data provider for the data system used in your application.

Tony Patton began his professional career as an

Mocniejszy Linux w teście miodowej pułapki

Unpatched Linux systems are surviving longer on the Internet before being compromised, according to a report from the Honeynet Project released this week.

The data, from a dozen networks, showed that the average Linux system lasts three months before being compromised, a significant increase from the 72 hours life span of a Linux system in 2001. Unpatched Windows systems continue to be compromised more quickly, sometimes within minutes, the Honeynet Project report stated.

The results are probably due to two trends, said Lance Spitzner, president of Honeynet, which develops software for deploying computer systems as bait for online attackers. The default installations of new Linux systems are much more secure than previous versions of the open-source operating system, he said. Secondly, attackers seem to be much more concentrated on Windows systems than on Linux systems, and on attempting to fool desktop users, of which the vast majority use Windows.

"Everybody is focused on Windows," Spitzner said. "There is more money (for an attacker) to be made on the Windows systems."

The study is the latest data on the relative security of Linux systems versus Microsoft Windows. Last week, students found dozens of flaws in software that runs on Linux systems, and a research report stated that a thorough analysis of the Linux kernel turned up hundreds of flaws. However, in relative terms, those numbers are low compared to commercial applications.

Honeynets, a term coined by the project, are networks of computers that are placed on the Internet with the expectation that they will be compromised by attackers. The networks are heavily monitored, and the data is used to research the latest tactics of online miscreants.

While some of the Windows XP systems on the honeynets used for the latest study were compromised within minutes of being placed on the Internet, newer versions of the Linux operating system from Red Hat failed to be compromised by random attacks for more than two months.

Debbie Fry Wilson, director of product management for the security response center at Microsoft, told CNET News.com that the company's latest operating system is more secure than the report suggests.

"While it is not clear which version of Windows was used during the study, we feel that a Windows XP SP2 configuration with the Windows firewall enabled is the most resilient client operating system available in the market and can withstand attack much longer," Wilson said. "We are pleased that the report indicates that two Windows-based honeynets in Brazil withstood attack for several months. However, we are not certain that the report provides conclusive data based on a controlled and scientific study comparing the two operating systems."

Every Windows system compromised during the study had its security breached by a worm.

However, Spitzner stressed that the Honeynet Project does not have enough Windows systems deployed to offer meaningful data on that operating system's security. Moreover, the report does not specify what version of Windows XP had been running on the systems that had been compromised and whether any Service Pack upgrades had been installed.

The study did find that more recent versions of the Linux operating system lasted longer on the Internet without patching.

Dla moich dzieci

  • http://www.pcworld.pl/witryna/1321/17.html - serwis "starych" gier, które można pobrać legalnie
  • różnorodne wtyczki do Total Commander (iso, przeglądarka plików graficznych, odtwarzacz wielu formatów muzycznych, ściąganie stron, dostęp do ext oraz raifs)
  • serwer z MS SQL - konto marekw/Trava16
  • serwer T-SQL - konto marekw/piotrola
  • cacheman - optymalizator dla pamięci CACHE w XP, serwer - outertech.

niedziela, grudnia 26, 2004

Różnica między profesjonalistą a pracownikiem

n this section I'll cover the things every professional Database Administrator should know: business matters that are outside the strictly technical realm.

What separates a professional from the average employee? An employee feels that work is useful, and normally appreciates at least the social aspects (and the paycheck) of his job. He is not usually interested in the subject of their work outside of the office or place of work, but is quite competent at their job.

The professional feels that her work is important. She spends time outside her job learning more about the craft. She tries out new ideas, and is highly motivated to promote her part of the whole.

But there's more to being a professional than extensive subject knowledge and enthusiasm. Professionals are defined by what they do, not just what they know. Professionals respect themselves and others, and are always looking for the best solution to the problem at hand, even if it's not their solution. They don't care whether they "win" or not; they only care whether the problem is solved.

In this section, we'll explore ways to develop your professional database administrator career. I use the term DBA to refer to the development, administration, and data architect roles of the job. This section has less to do then with pure technical knowledge than it does with other professional aspects of database technology.