Office 2008 for Mac available on for January 2008

Microsoft has put up yet another preview of Microsoft Office 2008 for Mac, giving a glimpse of some improvements to Excel, but the main good news in accompanying press release is the phrase "on the eve of Release to Manufacturing (RTM)," which means that Office for Mac looks to be on schedule for its January 2008 release.

There’s still no demo version available, nor will there be. For now you’ll have to make do with the preview site, which today added a showcase demonstrating some new Excel features like Formula Builder, Formula AutoComplete and support for increased rows and columns.

Of course if previews don’t do it for you a little bird tells us that copies of the private beta are floating around on BitTorrent sites if you’re into that sort of thing.

Still, despite the lack of a public beta, the announcement that Office for Mac is about to reach RTM status is good news for Mac users waiting on the Mac equivalent to Office 2007, which will be over a year old by the time the Mac version hits the shelves come January.

Of course, despite the efforts of the Mac for Office team it's hardly surprising that the majority of Microsoft seems to view Mac users as second class citizens. The software is, after all, an important part of a competitor's platform, and what better way to take a jab at your competitor?

 

{via blog wired}

Microsoft releases security updates for XP and Vista

Once in a month Microsoft releases their so called Security Bulletins in which they announce security updates for several of their operating systems and other products. The current Security Bulletin for December lists seven vulnerabilities that have been fixed including three critical and four important ones.

Every user should head out immediately and use either Windows Updates or browse the Microsoft website manually to download the security patches. I have added the download links to all security patches at the end of the article to make things easier for you.

A quick glance at the security vulnerabilities revealed that five patches have to be downloaded for both Windows XP and Windows Vista. Take a look at the Microsoft Security Bulletin overview site if you are using a different operating system to find out what has been patched for it.

Windows Vista:

Microsoft Security Bulletin MS07-063 – Important (Vulnerability in SMBv2 Could Allow Remote Code Execution (942624))

Microsoft Security Bulletin MS07-064 – Critical (Vulnerabilities in DirectX Could Allow Remote Code Execution (941568))

Microsoft Security Bulletin MS07-066 – Important (Vulnerability in Windows Kernel Could Allow Elevation of Privilege (943078))

Microsoft Security Bulletin MS07-068 - Critical (Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 and 944275))

Microsoft Security Bulletin MS07-069 - Critical (Cumulative Security Update for Internet Explorer (942615))

Windows XP:

Microsoft Security Bulletin MS07-064 – Critical (Vulnerabilities in DirectX Could Allow Remote Code Execution (941568))

Microsoft Security Bulletin MS07-065 – Important (Vulnerability in Message Queuing Could Allow Remote Code Execution (937894))

Microsoft Security Bulletin MS07-067 – Important (Vulnerability in Macrovision Driver Could Allow Local Elevation of Privilege (944653))

Microsoft Security Bulletin MS07-068 - Critical (Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 and 944275))

Microsoft Security Bulletin MS07-069 - Critical (Cumulative Security Update for Internet Explorer (942615))

{via ghacks}

Mandriva Regains Nigeria Deal From Microsoft

A decision to wipe 11,000 machines of their shipped Mandriva Linux operating system and replace it with Windows XP for Nigerian schools received a reversal that should please Mandriva's CEO.

Someone break out the champagne for Francois Bancilhon, CEO of Mandriva. He had blogged his anger with Microsoft counterpart Steve Ballmer over what Bancilhon suggested were dirty tactics in gaining business with Nigeria.

Bancilhon's Mandriva won the contract to place its OS on thousands of arriving Intel Classmate PCs. But a change took place that vexed Bancilhon: Nigeria would pay for the Mandriva licenses as agreed, but the OS would be wiped and replaced with Windows XP.

That change meant Mandriva would lose out on maintenance agreements, which would contribute an ongoing revenue stream to the company. Open Source companies like Red Hat and others have demonstrated this business model can make "free" software profitable.

Now the winds of fortune have shifted in Bancihlon's favor. InfoWorld reported the company that planned to do the OS change before distributing the computers won't be doing so.

A government official from the agency funding the computer purchase said in the report, "we are sticking with (Mandriva)," but offered no other details.

The motivation for the original shift will have to remain a matter of speculation, despite Bancilhon's hinting of back-door shenanigans taking place.

[via webpronews]

Nokia to Include Windows Live Services

Under the deal, Nokia will start offering Windows Live Hotmail and Windows Live Messenger on its most powerful Series 60 handsets this year. Later in the year or early next year, the services will be made available on Series 40 phones. The services will initially be free, though the two companies may later charge for them, splitting the revenue.

"We look at where the market is," said Steve Berkowitz, senior vice president of Microsoft's online services business. "Nokia is the largest handset maker."

It's not the first sign of detente between the two companies. Nokia has for some time licensed Microsoft's ActiveSync technology for connecting to an Exchange e-mail server. Earlier this month, Nokia also said it had licensed Microsoft's PlayReady mobile digital rights management technology. The handset maker also includes Microsoft's Live Search in its mobile search service.

Berkowitz said Microsoft will continue to develop versions of Windows Live services for its own Windows Mobile operating systems as well as slimmed-down WAP (Wireless Application Protocol) versions that can run on a wide array of phones.

As for whether it would develop any sites tailored for Apple's iPhone, Berkowitz quipped, "If the iPhone were ever to get any distribution, maybe."

He added that the company will go where the marketplace and its customers demand. "Our best place to invest is where the reach is," he said. "Nokia is a great example of that."

The latest deal has been in the works for more than a year, the companies said.

"It's taken a bit of time and a bit of learning on both sides," said Nigel Rundström, Nokia's vice president of multimedia experiences.

Longhorn arriverà nel 2008, e non sarà solo

Denver (USA) - Tra meno di un anno Microsoft si prepara a ripetere quanto fatto lo scorso novembre, quando ha introdotto contemporaneamente sul mercato corporate tre prodotti di punta come Windows Vista, Office 2007 e Exchange 2007. La prossima "ondata di lanci", come la chiama BigM, è stata fissata per il 27 febbraio 2008, data in cui faranno il loro debutto ufficiale Windows Server 2008 (nome in codice Longhorn), Visual Studio 2008 (Orcas) e SQL Server 2008 (Katmai).

L'annuncio è stato dato in occasione della Worldwide Partner Conference, dove Microsoft ha chiarito la propria visione sul futuro del software tradizionale e dei web service: due realtà che, secondo il colosso di Redmond, sono destinate a convivere ancora per molti anni.

Il fatto che il lancio di Windows Server 2008 avverrà a fine febbraio potrebbe spiazzare molti: negli ultimi mesi sembrava ormai certo certo che il nuovo sistema operativo di Microsoft sarebbe stato rilasciato verso la fine di quest'anno. In realtà una cosa non esclude l'altra: similmente a quanto fatto con Windows Vista, Microsoft conta di rendere disponibile la Release to Manufacturing di Windows Server 2008 già nel corso di questo autunno, e di presentare ufficialmente il prodotto sul mercato qualche mese più tardi. In quest'occasione verranno organizzati oltre un centinaio di eventi in tutto il mondo. A quanto pare Microsoft ha ormai preso l'abitudine di distinguere il rilascio del sistema operativo a partner e grandi aziende dal lancio del prodotto sul mercato di massa: due momenti a cui l'azienda vuole evidentemente dedicare risorse e campagne più mirate.

Windows Server 2008 potrebbe rivestire un ruolo molto importante anche nel trainare le vendite del fratellino Vista: secondo alcuni analisti sono numerose le aziende che hanno deciso di affrontare la migrazione a Windows Vista in contemporanea a quella di Windows Server 2008. La cosa ha senso non solo dal punto di vista logistico, ma anche da quello tecnico: i due sistemi operativi sono pensati per operare in stretta simbiosi.

Alla conferenza di Denver Steve Ballmer, CEO di Microsoft, ha affermato che Windows Server 2008, Visual Studio 2008 e SQL Server 2008 rappresenteranno la piattaforma su cui costruire i web service di prossima generazione. "Tutti nell'industria stanno riconsiderando la relazione tra software e servizi", ha dichiarato Ballmer. "Noi crediamo che il futuro sia nel software più i servizi, una combinazione che fornisce ai clienti più opzioni e fornisce ai partner le migliori opportunità".

Microsoft dunque non crede nella visione di quei produttori che vedono nel Web 2.0 le potenzialità per spazzare via il software tradizionale. Kevin Turner, COO di Microsoft, ha assicurato che Windows Vista e Office 2007 non saranno gli ultimi prodotti del loro genere: le prossime versioni, Windows Seven e Office 14, saranno ancora software complessi e sostanzialmente monolitici, e tuttavia sempre più integrati con i servizi della piattaforma Windows Live.

http://punto-informatico.it/

Vista feature helps VXers trick surfers

Microsoft's trustworthy computing initiative is five years-old but the software giant is still making bone-headed design decisions that favour usability over basic security.

A good example comes from the folks at F-Secure who noticed that Vista continues to hide extensions for known file types by default, just like older versions of Windows. This is a bad idea because it allows virus writers to create malware with double extensions - such as LOVE-LETTER-FOR-YOU.TXT.VBS - to run malicious code, Mikko Hyppönen, chief research officer at F-Secure, notes.

"This sucks," he addds.

Microsoft's decision to retain this feature on default installs is galling because the company's mantra is that should not be blamed unless malware exploits specific vulnerabilities in its software.

But if Microsoft fails to take basic precautions to block well-known social engineering exploits used for years by malware authors, then all the hard work that's gone into making Windows more secure in other respects is squandered
c by the register

Microsoft still dominating the market, commissioner says

European Competition Commissioner Neelie Kroes believes Microsoft is still benefiting from abusing its dominant position in workgroup servers.

Kroes told the European Parliament that Microsoft was continuing to gain market share despite being found guilty by the European Court three years ago.

Kroes said: "Microsoft is constantly gaining market share and that is what is worrying me in the work group server operating market. As a consequence of your abusive behaviour you are getting positive results for the company - that's not acceptable in my opinion," according to Reuters.
As part of the original verdict, Microsoft was ordered to sell a version of Windows without a bundled media player and open up access to its protocols.
Microsoft appealed the case in the Court of First Instance last year and is still waiting for a verdict. In court it insisted that it had done more than enough to open up access to the protocols needed by rivals to make products which interact effectively with its servers.

Kroes has taken a firm line with the software giant - earlier this month she said Microsoft was charging too much for access to its protocols which are not innovative enough to justify the high price.

c the register.com

IE7 phishing bug nets concern

Security researchers have discovered a vulnerability in Internet Explorer 7.0 that might lend itself towards the creation of more convincing phishing attacks.

The cross-site scripting (XSS) bug creates a means to replace local page displaying a "Navigation to the webpage was canceled" message with a "Refresh the page" link. "This might be useful in a phishing attack, but it does sound rather complex and requires the user to jump through the hoops," the SANS Institute's Internet Storm Centre notes

The flaw is perhaps more noteworthy for been among the first to affect IE 7 rather than the immediate threat it poses. Microsoft is investigating reports of the bug.

Meanwhile SANS has added the flaw to its list of unpatched Microsoft security vulnerabilities, as a secondary concern. The most pressing flaw remains a Word vulnerability that permits remote code execution, discovered in February.