The Firehouse

This is sweet – finally, Microsoft has gotten rid of the pestering message Entourage displayed when it connected to an Exchange box and the SSL certificates were not set up in a very precise way, including having to employ SAN certificate workarounds. Here is the excerpt of the full release notes:

Reliability is improved when you try to securely connect to your mailbox on a computer that is running Exchange Server 2007. This update fixes an issue that occurs when you try to securely connect to your mailbox on a computer that is running Microsoft Exchange Server 2007 after you upgrade to the Office 2008 for Mac 12.1.2 update. You receive the following warning message:

Unable to establish a secure connection to mailbox_servername because the server name or IP address does not match the name or IP address on the server’s certificate. If you continue, the information you view and send will be encrypted, but will not be secure.

Just check out this page, which lists device & software manufacturers who have licensed Microsoft’s Exchange ActiveSync protocol (starting at a measly $100.000 a year!). Surprisingly, they don’t list Apple or the iPhone / iPod Touch. The last update on the page is March 2007, so it’s about time they check it over.

Some of you have already heard of the very nasty vulnerability recently discovered in Windows, which allows code injection when the hapless victim simply views an animated cursor on a HTML page or an email message. Microsoft has announced that due to the seriousness of this issue, it will publish an out-of-sync patch as soon as it is ready, i.e. they will not wait for Patch Tuesdayâ„¢. [Update: as I was writing this, I noticed this post which states that patch MS07-017 has been released].

What do you do when you have in your hands the best security distribution in the world? Use it! Here is the result of Mati Aharoni’s (aka Muts) impersonation of The Mexican – click the image to view the full video.

Kids, do not try this at home, and if you are using Windows, well…my sincere condolences. While you are at it, check out the home site for BackTrack.

Ars Technica reports that Microsoft is being sued by a company named PalTalk, which has two patents on a “Server-group messaging system for interactive applications”, original patent filings here and here. If you read through the patents, it becomes evident that they cover a hugely broad number of messaging systems, wether delayed or in real time.

The patents date back to 1998 and 2001, and I remember vividly using IRC during my university years (it was born late August 1988), and mailing lists even before that. Heck, remember BBSs over 1200bps modems? Well, these people at PalTalk seem to have patented just that. IRC and mailing lists. And by default, all other chat platforms that have come ever since – MSN, Yahoo, ICQ, Google, to name a few big ones, but miriads of smaller, targeted server-based chat mechanisms. Voice you say? I was using voice to talk to simulated ATC (yes, people actually acting as ‘virtual’ air traffic controlers, way cool!) while flying on a simulated airline in Microsoft Flight Simulator eons ago, when 800×600 was a decent resolution to run your games at.

Can anyone say ‘prior art’ and ‘patent trolls’? Further info on BusinessWire’s PalTalk press release.