A new Fixit for another Internet Explorer 0day

If you’re still using Internet Explorer 6 or 7, and haven’t upgraded to IE 8 or started using a better browser, you need to run over to Microsoft’s Security Advisory 981374 and apply the “Fixit” patch.

According to SANS Internet Storm Center, Microsoft posted the Fixit a few hours ago.

The Fixit disables something called the “peer factory” in IE6 and IE7. Apparently there’s working zero-day code running around that takes advantage of the security hole to run “backdoors” – programs that take over your computer, without your knowledge or consent.

Microsoft loses to i4i again

Just before Christmas I talked about Microsoft losing a patent lawsuit brought on by a small company called i4i.

On May 20, a federal jury in Tyler, Texas, found Microsoft guilty of violating the i4i patent, and order Microsoft to pay i4i $200 million. Microsoft appealed. On August 11, Judge Leonard (no relation) Davis, citing Microsoft’s lawyers’ hijinx, slapped another $40 million onto the judgment for willful infringement, and cited $37 million in pre-judgment interest. Microsoft appealed, and lost its appeal yesterday.

Microsoft appealed again – actually, asked for a re-hearing – and lost again last Friday. The BBC says:

In this second appeal, the court again re-affirmed the original ruling and spelled out why that decision was made. In court documents spelling out their reasoning, the three appeal court judges said there was evidence that Microsoft knew i4i technology was patented before it turned up in Office programs.

The appeal is not the last that Microsoft can make. The court documents are now being sent to the other appeal court judges who will decide if Microsoft has grounds for a wider review of the case.

Bill’s a half billion short

No doubt you’ve heard the news – Bill Gates is no longer the world’s richest man, according to data amassed by Forbes Magazine.

You have to ask yourself how Forbes determined that Carlos Slim Helu has $53.5 billion and Bill a paltry $53 billion, but the headline certainly drew a lot of attention.

Coming to Phuket?

Joi Hubertz just posted this message as a comment in an older thread:

Have just returned from a tremendous trip to Phuket, stayed at Palm Beach Inn in the northeast part which is less hetic than southeast areas, superior resort and wonderful bays. We hired a big motorbike for only 450 baht per day and would drive around the entire area. So many marvelous sites to eat, our favourite spot was Ahan thai Aroy which had the most tremendous view over the beach, the faculty was rather friendly and the food so delicious, we went for sunset drinks. My husband and I had a supreme time in Phuket Town and will be back for Songkran.

My response:

Joi, drop a line before you get here!

My wife and I renovated the townhouse next door to our house in Patong. As you know, Patong’s the ultimate party town, but we live in a quiet residential area up on the hill overlooking the north end. My 85-year-old Dad lives on the top floor.

We’re going to start renting out a flat that’s right next to my office – literally, right next door, connected with a deck overlooking the beach – big, two bedrooms, 1,000+ square feet, great views of Patong Beach, including several that are in my Dummies books! I call it “Khun Woody’s Retreat” because it’s an ideal setup for someone who wants to get away from it all – whether you need to get away from the phone calls and meetings to get a crunch project done, or if you simply want to chill in a fascinating place.

Of course, it has all the modern conveniences: fast wireless Internet, satellite TV, maid service, and I toss in a mobile phone and motorbike for good measure. Add and I can help you get to know Phuket like an insider (I’ve been here almost ten years now). Or we can set things up so you’re simply left alone, with everything you might possibly want brought to your door.

I haven’t advertised it yet, but should start shortly. My brother’s currently staying at “Khun Woody’s Retreat” with his wife and daughter, kind of beta testing the place.

Anyway, if you’re interested in staying in Patong, or know anybody who is, let me know and I’ll get you a post-beta-test deal…

MS-DEFCON 2: Lock down as Black Tuesday is here

Time to make sure Automatic Updates is turned off. Black Tuesday is just around the corner. With just two Security Bulletins this month, maybe we’ll be treated to a rather uneventful round of patches. But ya never know.

We’re moving to MS-DEFCON 2: Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don’t do it.

300,000,000 copies of Windows 7 sold by the end of the year?

It could happen. With 90,000,000 sold through the end of January, it might actually be fairly easy to hit the 300 million mark.

Microsoft announced that as their sales goal. Softpedia has the details.

Google buys DocVerse

This could be the start of something big.

Google is widening its net by buying a company with software that makes it easy to share Office documents online.

Note that I said Office – as in Microsoft Office – documents.

The acquisition of DocVerse fires yet another shot across the SharePoint bow. Remains to be seen if it’ll amount to much, but the Googlies continue to surprise me.

What’s really happening with Windows 7’s new Windows Activation Technologies

Ed Bott has put the new Windows 7 Activation Technology patch, KB 971033, through the paces, and found it to be pretty much as advertised. If you were looking for a re-run of the old Windows Genuine Advantage/Spyware debacle, you won’t find it here. Ed says:

I installed the KB971033 update on multiple systems using both the downloaded version and the one delivered through Windows Update. I also uninstalled the update and observed what happened.

From a technical standpoint, I was able to confirm that the WAT update does what Microsoft says it does. I was not able to read the contents of the signed, encrypted packets going across the wire, but I did locate the stored information in the registry and compared it to Microsoft’s published privacy policy.

Ed’s ZDNet post reads a lot like something from the Windows Engineering blog – which is both a compliment and an, uh, observation. It’s clear to me that MS will be thrilled by Ed’s results, and I wouldn’t be the least bit surprised if MS helped with the research. That said, I can’t find any fault with what he’s done: thorough, accurate, and surprisingly supportive of Microsoft.

Read it yourself and tell me if you disagree…