Windows WMF Metafile Vulnerability fix from reverse engineer

Well is this is a good way to start 2006 Microsoft. A very serious exploit was found in Windows during last week, and this time its a 0day exploit which means there's no patch available from Microsoft yet. Actually Microsoft are advising people to unregister the shimgvw.dll which is not a fix in anyones wildest imagination.

But luckly some reverse engineer called Ilfak Guilfanov has reversed engineer the shimgvw.dll and written a patch which runs on all 32/64bit Windows (aka no 95, 98 or ME support). From what I've read, it sounds like the patch is pretty safe (llfak has actually open sourced the code I believe) so I would recommend you download this patch till Microsoft sort out an official patch. And honestly do it now as there are tons of worms written for this exploit and there coming from many different directions. IM, Email, Browser, etc, etc. Oh by the way theres a checker too.

Pass this information to as many people as you can…

Comments [Comments]
Trackbacks [0]

Geekdinner with Scoble and Dotben

Ben and Scoble pause for a quick photo

So the first Geekdinner I've been to which was on a weekend was great fun. The conversations I had were fantastic through-out the night. I met some great new people and spent a lot with Sheila chatting away about life, XML and the universe. So odd meeting someone so on your level its actually pretty spooky.
The Geekdinner should have been renamed the Geekdinner with Ben Metcalfe and Robert Scoble, Z list meets A list but it works out ok this time.

Anyhow, so it was great catching up with Scoble again. He obviously didnt remember who I was at first but he actually did remember after a couple of seconds once I mentioned RSS and working for the BBC World Service. Can I also say did anyone get a picture of Scoble doing a flaming shot at that champagne bar we all went to afterwards?

The Sheila and Myself at Geekdinner

So this is how the night went. I got to the Texas Embassy about 6:30pm, after finding somewhere just around the corner to park. I was hoping to get my hair cut but it never quite happened due to Saturday football crowds through Charlton, I must remember that next time.
I was at the bar and heard a couple of guys talking about Google Books and it actually turned out to be one of the guys behind Searchengine Watch. I also got talking with a student of Computer Science from De montfort. I and he was concerned that his course was not teaching anything about webservices, internet conectivity or even modern developent methods. And actually I got speaking to another student who had the same problems. Geez no wonder a lot of computer science students have such closed minds to such things?
Moving on. I'll drop out the conversations I had for now, as I want to elaborate on quite a few of them.

So after dinner which was the usual Tex-Mex type thing, Robert and Hugh did a little speech and actually opened it up to the crowd of about 150. The rest of the time was spent talking and drinking. By the time we got thrown out of the Embassy, the plan was hatched to head up to a Champagne Bar in Soho and Microsoft paid for us all. Yeah expensive champagne for about 30+ people, cheers Microsoft. After about a hour or so, we were being kicked out again. So Me, Sheila and Shahid from google ended up at a coffee bar in Soho and geeked about XML and related technologies. Its so great talking out loud about this stuff. XML will rule the world…

The champange bar afterwards paid for my microsoft

There's a Flickr pool for fun photos from the night.

So about those conversations.
Well he's a few I remember, this is good for my own memory as well as it might be of interest to others.

Talking to imp, she told me there was a problem with trackbacks on the BBC creative archive site and even on my own. I assured her that Trackbacks do work on cubicgarden (I get enough spam to know this for sure) but honestly I've never seen any from Haloscan.

I met Tim from dotnetsolutions, he's one of the guys from http://www.DHTMLcentral.com. It was quite late but from what I can gather there doing lots of Ajax type stuff now and leaning on there DHTML past to do creative and useable things. I've not really looked at that site for about 6/7 years but I do remember going there for scripts when Netscape 4.x just came out. That was also the days when I never use to think about cross-browser scripts and web standards. Gald things have changed for the better.

Trying to explain to Sheila what OPML was without any tools except handwaving while walking up a packed Saturday night charing cross road. Chris from Microsoft seemed to think it was a great standard, while I was trying to explain its not really a standard just happen to be the default way to share Blogrolls and subscriptions. I was going to mention XBEL and XOXO but never quite got around to it. I also noticed Uche has wrote a few XSL's to convert between OPML and XBEL and XOXO.

A brief talk and handshake with Dan Gillmor who of course wrote the hughly successful We the Media. I should have talked longer but I was just coming back from the toilet and caught him while he was making a move to leave it would seem. I know the Global voice's people were at the geekdinner but I didnt really get a chance to talk to anyone except Lucy Hoberman (BBC Creative R and D) before we went to the champagne bar and met Nicole. Nicole is a german woman who podcasts and blogs in German and English. We had a very interesting perspective talk about the differences and how your percived when writing and talking in another language online.

Spent quite a bit of time talking to Kosso and Dr Jo Twist about various things.

Comments [Comments]
Trackbacks [0]

Syncing podcasts and videos between machines

synctoy folder pairs

Slowly I've been adopting the use of FireANT for my podcasts and vlogs (video blogs?) downloads. I'm still mainly using Azereus with the RSS plugin for its TV RSS method which has saved me a lot of time and effort downloading TV shows and the like. It was very good today, finding Lost ep5 seeding without any human interaction on my behalf.

Anyhow, I have FireANT running on both my laptop and main workstation. They both use the same OPML file from Bloglines which means they both download the same media! This is not ideal and bandwidth killing as you can imagine, specially when you get some of the larger Channel9 videos downloading. So I was looking around and found Microsoft's synctoy.

Now although this Sync toy isnt as powerful as Rsync on the unix platforms its actually quite neat and has all the modes needed for full syncing.

  • Synchronize: New and updated files are copied both ways. Renames and deletes on either side are repeated on the other.
  • Echo: New and updated files are copied left to right. Renames and deletes on the left are repeated on the right.
  • Subscribe: Updated files on the right are copied to the left if the file name already exists on the left.
  • Contribute: New and updated files are copied left to right. Renames on the left are repeated on the right. No deletions.
  • Combine: New and updated files are copied both ways. Nothing happens to renamed and deleted files

You can also Schedule it using the standards Windows Scheduler, Preview a sync, use UNC paths, sync deep folders (perfect for backup) and tell it to move files to the recycle bin instead of deleting them.

So with all this in mind, I've setup Fireant to download and for Synctoy to sync across to my laptop before it downloads on my laptop. This seems to work, because the stupid file names are at least unique across all Fireants. I've been trying to convince the people behind Fireant that the human readable podcast download names are unique enough to do the same thing, but its still a on going debate. If the human readable filenames were in place, I could then sync files to my storage card, pocketpc, mobile phone and laptop without human interaction. Using filetype filtering in synctoy, its possible to sync audio files to the phone while videos files go to the pocketpc. Hey and if Fireant used human readable filenames and Synctoy regular expressions the limits would be endless.

fireant and synctoy working together

So in summary,

Microsoft's Synctoy should be renamed Synctool and should add regular expressions to the filetype filering. I'm also hoping syncing to the PocketPC's storage card will be a option soon and there certainly should be a option to divert sync if the removeable storage card is not in place.

Fireant can keep its sync option but should give people the option to automaticly save as human readable filenames.

Comments [Comments]
Trackbacks [0]

RSS enabled Windows Vista

PDC 2005 banner

So after a long wait details about Windows Vista's RSS ability are starting to emerge. Amar Gandhi (Group Program Manager of the Windows RSS team) presented “Windows Vista: Building RSS-enabled applications” at PDC 2005 just a few days ago. Sean is planning on putting more details on the Longhorn Team RSS blog soon. But till then I found the powerpoint presentation from Amar Gandhi online. Now if anyone has a video of the demo's that would be great.

On a related tip, Microsoft and Amazon have got together to launch A9 Open search into IE7. Two huge megacorps working together with open standards, this can't be happening? Or can it?

Comments [Comments]
Trackbacks [0]