Microsoft confirms name and price for next version of Windows

After much speculation, Microsoft has finally announced a name for the next version of Windows: Windows 8.1. Up until now, the working name for the new version was Windows Blue.

Anyone currently using Windows 8 will be able to install the new version as an update for free. This sounds a lot like what Microsoft used to call a Service Pack. Well, whatever they want to call it, as long as it’s free, I’m all for it.

The new version is expected to bring back some aspects of the Start button, the Start menu and the traditional desktop, but the details remain unclear.

Firefox version 21 released

Another new version of Firefox was released today. Version 21.0 fixes several security vulnerabilities and other bugs.

As usual, the release notes for version 21 don’t mention the version except in a note about contributors, but the list of fixes seems to be relevant to the new version.

Clicking the ‘complete list of changes‘ link on the release notes page now goes to the Firefox bug tracking site, but the list of bugs shown includes issues that were resolved long before version 21 appeared, which is still very confusing.

On a brighter note, the release notes page now includes this entry:
21.0: Security fixes can be found here
Clicking the associated link shows a page titled “Known Vulnerabilities”, which clearly shows the version in which particular security vulnerabilities were fixed.

Update for Adobe Flash

Adobe just announced an update for Flash, version 11.7.700.202. As usual, the update fixes vulnerabilities in Flash that could cause instability or allow remote control of affected computers.

Microsoft, which maintains Flash separately for Internet Explorer 10, released an update for that browser with the latest fixes. The patch is available from Windows Update.

Likewise for Google, which released a corresponding patch for its Chrome browser. Chrome will update itself automatically.

Patch Tuesday for May 2013

The month’s updates include fixes for vulnerabilities in Windows, Internet Explorer, .NET and Office. The main bulletin has all the technical details, and the Microsoft Security Response Center has a more reader-friendly summary, entitled “Microsoft Customer Protections for May 2013”.

The expected patch for recently-discovered vulnerabilities in Internet Explorer 8 is included in this month’s patches as MS13-038. According to Microsoft, you can install this patch whether or not you previously installed the emergency “Fix-It” released by Microsoft.

Advance notification for May 2013 Patch Tuesday

As usual, Microsoft has issued an advance notification for this month’s Patch Tuesday. The updates will become available on Tuesday, May 14 at about 10am PST.

There are ten bulletins this month, two of them flagged Critical. In total, 34 vulnerabilities in Windows, Office, Internet Explorer, .NET and server software will be addressed.

Update 2013May11: The upcoming patches will include a fix for the Internet Explorer 8 vulnerability recently discovered.

Internet Explorer 8 vulnerable to new web-based attack

Update 2013May09: Microsoft has issued a ‘Fix-It’ for this problem. This is a temporary, band-aid solution to the problem. It will be superseded by an actual patch at some point. The original bulletin about this issue has been updated to include information about the ‘Fix-It’.

Microsoft recently announced a new attack, targeted at a specific version of Internet Explorer, being exploited in the wild. More details are provided in the associated security advisory from Microsoft.

Only Internet Explorer version 8 is vulnerable to this attack, which begins when someone using IE8 is tricked into visiting a compromised web site. Once infected, the user’s computer can be remotely controlled by the attacker.

Anyone using Internet Explorer 8 is strongly urged to upgrade to IE9, or – if using Windows 7 or 8 – to IE10. If upgrading Internet Explorer is not an option, you can reduce the risk of infection by increasing the level of protection provided by the browser, as follows:

Set Internet and local intranet security zone settings to “High” to block ActiveX Controls and Active Scripting in these zones. This will help prevent exploitation but may affect usability; therefore, trusted sites should be added to the Internet Explorer Trusted Sites zone to minimize disruption.

Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and local intranet security zones. This will help prevent exploitation but can affect usability, so trusted sites should be added to the Internet Explorer Trusted Sites zone to minimize disruption.

Ars Technica has additional details.

I talked to Google Support! (but didn’t like what I heard)

One of the most common complaints about Google has always been that it’s almost impossible to get real live in-person support from them. Sure, they have support forums and feedback links, and occasionally you’ll even hear back from them when you report a problem. Clearly they do have support staff. But actually talking to Google support on the phone? No way.

Don’t get me wrong – I understand why Google has chosen not to have a general support call center: it’s expensive. Just ask Microsoft. When most of the services you offer are free, providing live support is going to kill your bottom line. As long as Google’s services are both excellent and free, and there are useful alternatives to live support, I’m happy to let Google slide on this.

So imagine my surprise, this morning, at being offered an option to have Google support staff call me on my phone and provide live, in-person assistance!

Here’s what happened: if you run a business and you care about your online presence, you are almost certainly familiar with Google Places. It’s a Google service that allows business owners to create listings that then appear on Google Maps and elsewhere. Recently, Google moved the public side of these listings to Google+, calling it Google+ Local. This is where your business listing now appears. Okay, I can live with that.

Or not. I recently discovered that not all of the details entered on a Google Places page end up on the public Google+ Local page. Missing items for me include images (in particular, the company logo), payment types accepted, email address, and additional details (free wireless, parking, etc.) What’s going on?

I poked around in the Google Places help for a while, but didn’t find anything about this problem. What I did see surprised me: an offer to speak with Google support staff about a problem with my Places listing. Recognizing that this was a rare opportunity (akin to sighting an extinct animal), I jumped at the offer. Within seconds, my cell rang, and I was talking to an actual Google support person.

I quickly explained the problem. I was told the following:

  • Some elements of the Places listing don’t appear in Google+ Local; apparently a mysterious Google algorithm decides what is relevant and shows only that.
  • Suggested workarounds:
    • Submit changes using the public page (Google+ Local).
    • Just wait to see what happens.
    • Stuff all the details into the business description.

Really? None of that makes any sense. If not all the Places information gets to the public listing, shouldn’t that be obvious when you’re filling it out? And what’s the point of entering something if it never appears anywhere? What criteria are used to decide what appears in my listing, and why should that decision be anyone’s but mine? If it’s easier (and much faster, apparently) for a random Internet user to update my business listing than it is for me to do it myself, something is seriously broken. If I stuff the missing information into the description, then it magically appears later on where it should have been in the first place, the information will be redundant. Worse still, the description is limited to 200 characters.

So my first ever conversation with Google Support left me with mixed emotions: happy to talk to a real live Googler, but dismayed at the mess that Google Places has now officially become.

Problematic update re-issued by Microsoft

Microsoft today released a new version of the update that caused so many problems this past Patch Tuesday, MS013-036.

The new version is KB2840149, and it replaces the update originally associated with MS013-036, KB2823324.

The new update will be installed automatically on computers with auto-update enabled. Anyone using manual updates should install the new version by visiting the Windows Update site or the KB2840149 page.

Rants and musings on topics of interest. Sometimes about Windows, Linux, security and cool software.