This coming Tuesday — August 10 — Microsoft will release a company record fourteen security bulletins to plug thirty-four vulnerabilities. Angela Gunn, a member of Microsoft’s Response Communications team, wrote: “For those who keep track of such things, this will be the most bulletins we have ever released in a month; we have released 13 bulletins on a couple of occasions. However, in total CVE count, this release ties with June 2010, so there’s no new record there.” Of the fourteen bulletins, eight are listed as critical and six are rated as important. Make sure to run your Windows Updates next Tuesday to get all the goodies.

[Via CNET]

Read

Today, Microsoft released an out-of-band patch for the Windows .lnk extension exploit that was announced several weeks ago. The exploit can allow unauthorized users to execute arbitrary code if an “icon of a specially crafted shortcut is displayed.” Microsoft said: “An attacker could disseminate a USB or other removable drive with a malicious shortcut file on it and when the target victim opens the drive in Windows Explorer or any other application that parses the icon of the shortcut, the malicious code would execute on the victim’s computer. An attacker could also embed malware in a malicious Web site, a remote network share, or in a Microsoft Word document.” Lately, the .lnk exploit, which is actually a vulnerability found in the Windows Shell, has been spreading via the Sality.AT virus, according to a Microsoft blog post. Regardless, the patch is out there and the bug is present in virtually all versions of Windows, if you’re a Windows user, we highly suggest you install it now.

Read

Microsoft seems to be in a bit of a pickle – it has a fancy, schmancy OS in Windows 7 but a majority of its prized business customers are still clinging onto the now nine years old Windows XP operating system. On Monday at Microsoft’s Worldwide Partner Conference, Tammi Reller, the CVP of Microsoft Windows, dropped the bomb that 74% of business PCs are still running Windows XP. The reason for this slow adoption was not provided but presumably it has to do with the poor reputation that has plagued Windows Vista and possibly its successor Windows 7, which, thought its not being adopted, has fared better than its counterpart in the reputation department. Economics may also play a part as businesses have apparently been slow to upgrade hardware with the average business computer boasting of 4.4 years of faithful service. Rather than take a pessimistic view, Microsoft is putting a positive spin on this circumstance and viewing it as an opportunity to compel businesses to jump into the latest generation hardware and software. Microsoft is pretty upbeat- according to CEO Steve Ballmer, the software giant expects to sell 350 million Windows 7 licenses in 2010 alone.

Read

On June 5th, Google researcher Tavis Ormandy notified Microsoft of a very serious bug in the Windows Help and Support Center of Windows XP. The report Ormandy provided to Microsoft detailed how arbitrary code could be executed by a remote attacker, and included a proof of concept exploit. Five days later, on June 10th, Ormandy released the vulnerability details to the public. The decision to divulge the exploit has sparked a debate about how such matters should be handled, and what responsibility, if any, security experts have. Orandy explains, “if I had reported the…issue without a working exploit, I would have been ignored,” he also went onto say that “responsible disclosure” was a farce, a tool used by companies to buy themselves time. “Those of us who work hard to keep networks safe are forced to work in isolation without the open collaboration with our peers,” Ormandy wrote. Security experts are weighting in on the situation with all sort of opinions. One camp is describing Orandy’s as, and engineer “going off half-cocked,” others see it as a clear shot ar Microsoft from Google. Either way, the zero-day exploit is now public knowledge and has the attention that Ormandy originally wanted. What do you think? A frustrated security engineer or a shot directly at Microsoft?

Read

It’s been a long time coming, but Flash Player 10.1 has finally been released. For Windows users with relatively new rigs this means that you’ll be able to put less of a strain on your system when watching streaming videos thanks to hardware acceleration for H.264 video. Sadly the Mac-specific version released today still lacks this feature, but it will be made available just as soon as Adobe is finished polishing up the “Gala” edition of Flash Player 10.1.

Read

Photo enthusiasts take note, as Adobe is rolling out the official retail version of Lightroom 3 today. Available as a public-beta since October 2009, the latest, official version of Lightroom features a brand new processing engine that improves performance and offers an enhanced, easier to use UI. Noteworthy features include: support for DSLR video files, improved noise reduction, lens correction and sharpening tools, and tethered shooting (with select Nikon and Canon cameras). Lightroom 3 is available for both Macintosh and Windows systems with a price point of $299; an upgrade licences retails for $99. You can grab a copy of this latest offering directly from Adobe today, or from a third party retailer in the near future.

Read

This morning, the crazy 16-month ride is over, as the ASUS Eee Keyboard has begun shipping via Amazon. Originally slated to be released in June of 2009, the Eee Keyboard was delayed until August, then October, and then fell off the face of the Earth until pre-orders finally kicked off last month. Running Windows XP, the Eee Keyboard packs an entire computer — complete with an Intel Atom N270 processor at 1.6 GHz, 1GB RAM, 16GB SSD, Wi-Fi b/g/n, HDMI out, built-in 5″ WVGA multitouch display and a battery rated for 4 hours — into the pretty tiny frame of a keyboard. Want in? That’ll be $599.

Thanks to our tipsters!

Read

Yesterday we got OS X 10.6.3 and today we have iTunes 9.1. The changes as stated in Software Update are some tweaks to Genius Mixes as well as the ability to sync and manage iPads. But the real news here is one major change that was not mentioned: jailbroken iPhones and iPod touches are now unable to sync with iTunes, or at least according to a bunch of feedback we’ve received (others report this is not the case). Bottom line: Unless you’re getting an iPad this Saturday, you might want to play it safe and not update to iTunes 9.1 until this is all cleared up.

Read

Dell’s popular Mini 10 netbook may be adding WiMAX to its long list of connectivity options as the latest iteration, model 1012, was spotted at the FCC rocking the Intel WiMAX/WiFi link 6250 chipset. The Mini 10 is highly customizable with the base computer including a 10.1 inch widescreen display with an HD resolution option, an Intel Atom processor, 1GB DDR2 SDRAM, Integrated Intel graphics, Wi-Fi, Qualcomm GOBI chipset with AT&T 3G or Verizon Wireless 3G, optional GPS, optional TV tuner and Windows XP or Windows 7 Starter edition. The FCC documentation does not hint at any exclusive WiMAX carrier but it would be nice to see the netbook offered by Clear, Sprint or one of the other WiMAX resellers with a generous subsidy.

[Via Liliputing and Wireless Goodness]

Read

January 11th was zero hour for Microsoft as the injunction against Word and Office 2007 went into effect. The software giant out of Redmond had indicated that it was prepared for the injunction and would have it products fixed and ready to roll on the injunction date. Despite its good intentions, Microsoft failed to deliver this update and has pulled most of its Office 2007 and Word 2007 products from the shelves of its online store. Microsoft informs customers that these affected Office and Word 2007 versions are being updated and will be returning soon. The software giant advises customers to purchase Office Ultimate for $679 or try out the beta version of Office 2010. Not interested in a suite of software that costs more than your monthly car payment? Hurry on over to Amazon, Newegg and other retailers who, for the time being, are still selling the affected products.

Read

The good folks at Best Buy hit us up and since it’s the holiday season and all, BGR is giving away an ASUS Eee PC netbook. That’s right, all you have to do to win is enter below, we’ll randomly select a winner, and the BGR team will ship it right out to you. You can even choose what color you’d like. Here are the exact specifications on the model we’re giving away followed by the giveaway rules:

• ASUS Eee PC 1005HAGB
• 10.1″ WXGA LED backlit screen
• 1.5GHz Intel Atom CPU
• 1GB RAM
• 150GB hard drive
• Webcam
• Wireless b,g,n

All you have to do to enter is simply drop a comment below and that’s it!

• To enter, you must be over the age of 18 and reside in the U.S.
• Leave a comment below letting us know why you think you deserve to win –and we’ll randomly pick a winner — hey, you never know!
• The contest will run for one week.
• The winner will be picked at random.
• Official rules are located here. Good luck!

If you’re a glutton for the punishment that Windows XP on a mobile phone likely is, then ITG has exactly what you need. The “world’s first mobile phone that runs Windows XP” is now available for pre-order from ITG’s English website. Looking rather big and boxy (is this a new trend?), the xpPhone packs some impressive specs inside its brushed aluminum frame:

• AMD Mobile CPU
• 4.8-inch, 800×480 pixel touchscreen display
• QWERTY keyboard
• 512Mb/1GB memory
• Dual hard drives: SSD (8/16/32/64GB) and HDD (30/60/80/120GB)
• Wi-Fi 802.11 b/g
• Bluetooth
• GPS
• WiMAX (optional)
• GSM/GPRS/EDGE/WCDMA (HSDPA/HSUPA), CDMA/CDMA2000, CMDA 1X/EV-DO, TD-SCDMA, TD-HSDPA
• 7 hours of continuous use with standard battery, 12 hours with extended battery
• Windows XP OS

The substantially-sized slider supports nearly all major 3G networks and can be configured from the ordering page to be compatible with AT&T, Vodafone or Orange. No word on pricing details or launch date for the time being, but is anyone out there thinking about taking the plunge?

[Via Pocketables]

Read

Following a report pinning October as the likely month ASUS’ highly anticipated Eee Keyboard would finally reach market, it looks as though Asustek CEO Jerry Shen has finally confirmed what we’ve been waiting to hear. The almost-all-in-one Eee Keyboard we’ve had an unhealthy obsession with since January is finally set launch next month in Europe and North America. While pricing is still forthcoming, we’re still under the impression that a base price under $500 should become a reality. Spec highlights include:

• Self-contained PC / keyboard combo with integrated 5-inch touchscreen display
• OS: Windows XP Home Edition (though the one benefit of the delays may end up being Windows 7 at launch)
• 1.6GHz Intel Atom microprocessor
• 1GB of DDR2 DRAM
• 16GB or 32GB SSD
• Wi-Fi 802.11b/g/n
• Bluetooth 2.0
• Ultra Wideband HDMI
• USB 2.0 x2, VGA, HDMI, headphone and mic ports
• Weight: 2 lbs

We’ll say it one last time: we need it.

Read

Netbook fans may be pleasantly surprised today — or perhaps disappointed — as a purported roadmap for ASUS’ US Eee PC offerings is currently making the rounds. Allegedly depicting the Eee PC launch schedule for the remainder of the year, this roadmap doesn’t offer too much in the way of excitement but at least those in need of a new netbook can get an idea of what ASUS will have to offer in the coming months. If it’s real, that is. Hit the jump for the details.

Thanks, Al-B!

• 1005HA-M: Intel Atom N270 processor, 250GB hard drive, 1GB of RAM, 802.11n Wi-Fi, XP  Home or Win7 Starter — $349, October launch
• 1005HA-P: Intel Atom N280 processor, 250GB hard drive, 1GB of RAM, Bluetooth, 802.11n Wi-Fi, XP  Home or Win7 Starter — $399, October launch
• 1202N: 12-inch display, Intel Atom N270 processor, NVIDIA Ion, 250GB hard drive, 2GB of RAM, 802.11n Wi-Fi, Win7 — $499, October launch

Beyond that, netbooknews.de adds details on some more models not covered in the alleged US roadmap:

• New Eee PC 1008HA models: the 1008HA-P (Atom N280 processor, 320GB HDD, 2GB RAM, BT, 802.11n Wi-FI) will cost $480 and the 1008HA-M (Atom N280 processor, 250GB HDD, 1GB RAM, BT, 802.11 n Wi-Fi) will run $430.
• Netvertibles: Eee PC T91MT (multi-touch) with a 32GB SSD is priced at $ 549
• The 1101HA is already approved in October and the 1008HA in November. Both models will then be replaced by the above variants.

[Via netbooknews.de]

Read

ASUS, we still love you and your snazzy Eee Keyboard but we have to level with you — our patience is wearing thin. We first saw this badass little PC back in January and at that point in time, we wanted it post haste. Don’t get us wrong, we’re still excited to see the Eee Keys hit the market but with each passing day seemingly comes a new and later launch time frame. First it was June, then August, and now DigiTimes is reporting it will drop in October or later with a price point in the $400-$500 range. Price: fair. October or later: lame. The Chinese paper is also reporting that ASUS will launch its Eee Top All-in-one PC in September for around $670 and the Eee Box will land in the same month for $300. Great. We want the Keyboard and we want it now.

[Via Giz]

Read