Thursday, March 8, 2012

Chrome breached for first — and second — times



Chrome breached for first -- and second -- timesYou’ve got to hand it to Google. Only they could celebrate a significant flaw being found in their browser, costing them $60,000.
There have actually been two separate hacks of Chrome this week: one at the annual CanSecWest security conference and one announced through a Google bounty program.


You’ve got to hand it to Google. Only they could celebrate a significant flaw being found in their browser, costing them $60,000.
There have actually been two separate hacks of Chrome this week: one at the annual CanSecWest security conference and one announced through a Google bounty program.
That appears to be exactly what a Russian student named Sergey Glazunov (who has previously contributed to Chromium, the open source project behind the Chrome browser) has done, earning himself a $60,000 reward. Google says a fix is in the works and will be sent out via auto-update as soon as its ready. The company is putting a positive spin on the discovery, calling it “exciting” and saying it looks forward to more bugs being discovered.
In a weird piece of timing, the second confirmed full hack of Chrome came on the same day, this time at the CanSecWest’s Pwn2Own contest. In fact Chrome was the first browser to be violated at the event, with a team of hackers named Vupen using a specially created website to force Chrome’s calculator to run outside of the sandbox.
Vupen isn’t making the details of its successful hack public yet. It may be based on an exploit it submitted to Google that was turned down for the bounty program as it involved third-party code (thought to be Flash.)
It should be noted that Vupen members believe Chrome is still the most secure browser. It appears they picked it as a target because it seemed most likely that no other competitors would be trying out a similar solution.

Sunday, March 4, 2012

Windows 8 turns shutting down your PC into a convoluted process


Just one example of how inefficient the Metro user interface is.

Think Microsoft has done a good job of making the Metro UI in the Windows 8 Consumer Preview easy to use with a mouse and keyboard? Just take a look at how many steps it takes to do something as simple as shut down or reset a PC.
Here are the steps.
First, you take the mouse to the lower-right corner and wait for the on-screen menu tab to appear before clicking on Settings.
Next click on the Power button.
Then you finally get to click on Shut Down or Reset.
This is just one example of how inefficient the Windows 8 Consumer Preview user interface is, compared to the Classic interface where you can accomplish the same thing with two clicks.
Come on Microsoft, are you seriously expecting people to figure this stuff out on their own? And what is it with having to go through so many clicks and mouse movements to get to something as basic as shut down or restart?

Windows 8 Consumer Preview: a fresh start for Microsoft


With today’s release of the Windows 8 Consumer Preview, Microsoft is finally ready for the public to pass judgment on its most important software release in nearly two decades. Here’s what to expect.

Windows 8 Consumer Preview
Windows 8 Consumer Preview

A modern computing device must do certain things, right out of the box. It must connect you to the web and to social networks. It must enable communications with your friends and family and co-workers. It must play music and video. It must provide a framework for extending its capabilities with apps that are easy to discover and install.
Those capabilities require a blend of hardware, software, and services that collectively add up to anexperience, which is much more than a list of features or a page of specs or a collection of screenshots.
Microsoft has been talking about experience for a long time. (The XP brand, introduced in 2001, came from the word eXPerience.) But it has taken a full decade for the company to turn its talk into something real. Windows 8 is the first operating system that Microsoft has consciously designed to work in harmony with hardware, apps, and services to deliver that consistent experience.

SEE ALSO

Although you won’t see the word beta in the Windows 8 Consumer Preview, that’s exactly what it is. It’s too early to run benchmarks or pass final judgment on a product, but this milestone is solidly built and feature-complete. It’s a good time to assess Microsoft’s progress with what is arguably its most consequential product release in nearly two decades.
I’ve been running Windows 8 Build 8250 for about a week on a Samsung tablet identical to the one developers received at Microsoft’s BUILD conference last September. (The hardware and preinstalled software were provided on a loan from Microsoft. The equipment will be returned before the final release of Windows 8 is available to the public.)
The Samsung slate is a well-built tablet that shows off Windows 8’s touch capabilities impressively. My review unit also included a docking station, which made it possible for me to connect to a 24-inch monitor, attach a keyboard and mouse, and evaluate this release the way most people are likely to use it in the near future: on a conventional PC, without touch capabilities.
If you dabbled with the Developer Preview edition of Windows 8, released nearly six months ago, you experienced bits and pieces of what Windows 8 would eventually become. But that incomplete release lacked the polish—not to mention the apps—that would have made it suitable for sustained use by nondevelopers.
With today’s unveiling of the Consumer Preview, the picture becomes considerably clearer. Microsoft says they’ve made “more than 100,000 changes” since the Developer Preview release, and it shows. It’s still a work in progress, but there’s no question that this release is ready for enthusiasts, early adopters, and especially skeptics to evaluate critically.
Dozens of small changes (and a few large ones) address complaints about the Start and search screens. You can manage groups of icons more easily (and optionally assign names to those groups) using the semantic zoom feature. (For an overview of what’s new and changed, see “A closer look at the Windows 8 Start screen,”)
There’s considerably more polish in the keyboard/mouse interface than was evident in the Developer Preview. It took me a day or two to adjust to a handful of new navigation techniques. With that brief period of adaptation out of the way, though, I find that many tasks are indeed faster and easier than in Windows 7.
On the Windows 8 desktop, the most obvious change is the absence of the Start button in the lower left corner. It’s not gone, though. If you move the mouse to the top or bottom corner on the right side of the display, you’ll see the Windows 8 Start icon in the center of the Charms bar shown below. (In fact, all four corners play a crucial role in using a mouse with Windows 8, as I explain in “How Windows 8 works,” later in this review.)
(By the way, there are at least three visual puns hidden in that default background. For details, check out the comprehensive screenshot gallery I’ve put together, which digs deeper into the bits and pieces of Windows 8.)
The Developer Preview included a motley collection of demo apps that had literally been built by student interns working at Microsoft over the summer. In the Consumer Preview, those apps are gone, replaced by a much more useful suite of 18 Metro style apps. Mail, Calendar, and Messaging are there, as are the media apps that were missing from the developer preview: Music, Video, and Photos. You’ll find connections to services from Microsoft (Hotmail, Skydrive, Xbox Live) and third parties (Gmail, Facebook, Flickr). I’ve got more details in a screenshot gallery that lists all 18 apps.)
Third-party Metro style apps will also be available via the Windows Store, which is scheduled to open when the Consumer Preview bits are made available to the public. I didn’t have early access to those apps.
A week is just enough time to scratch the surface of something as detailed, complex, and still incomplete as Windows 8. I fully expect a nontrivial number of Windows users to absolutely hate this radical reimagining of a product that wipes out a decade’s worth of muscle memory. The big question is whether the general public will come to a different conclusion after they experience it for themselves.

Windows 8 Consumer Preview: A closer look at the Windows 8 Start screen


Windows 8 Consumer Preview: a fresh start for Microsoft


A closer look at the Windows 8 Start screen

You’ll get used to it. You might even learn to like it.
The Start screen is the first thing every Windows 8 user will see after logging on. It’s a program launcher, a dashboard, and an app switcher that unifies functions that are distributed along different parts of the Windows 7 taskbar.
Out of the box, the Windows 8 Start screen consists of a mass of brightly colored blocks identified with white icons. But after you customize the Start screen and connect individual apps to online services, it takes on a completely different character.
Here’s a before-and-after look. That’s the default Start screen on top, and a fully customized version below it.
Yes, the garish green background of the Developer Preview is gone. You can replace the Start screen background with a combination of colors and textures (but not an image). When you connect new apps to web services, the live tiles light up with pictures and updates from those apps: unread messages, upcoming appointments, what album or tune is playing in the background, and so on.
Although shortcuts to Metro style apps dominate the default layout, you can pin anything to the Start screen: individual files and folders, local or network drives, Control Panel snapins, shortcuts to Windows desktop program, links to web pages—in short, just about anything you would pin to the Windows 7 Start menu or taskbar. (You can’t assign friendly names to pinned file-system items on the Start screen, however.)
Just as in Windows Phone 7, you can also pin individual items within an app to the Start screen, as long as that app supports it. So, if you follow someone on Twitter or Facebook, you can visit that person’s page in the People app and pin it to Start for live updates and one-click-or-tap access.
In the Consumer Preview, options for grouping icons on the Start screen are far more robust than they were in the Developer Preview. That’s important, because the number of icons you can pack onto the screen increases dramatically as available display size increases. (On a 24-inch display, you can show up to seven rows of tiles, with an unlimited number of groups.)
To manage those groups, use the pinch gesture on a touchscreen or hold down Ctrl as you use the mouse wheel to zoom the display so you can zoom out to see all tiles—an option calledsemantic zoom. You can drag any group to move it into a new position. Selecting a group displays a Name group option in the app bar. The name you enter appears above the group when you return to normal view.
On smaller displays, screen real estate is far more limited. At 1366×768, for example, you get three rows of tiles, with no more than three groups (plus a hint of a fourth) visible on the Start screen. You can use the mouse wheel to scroll to the right to show hidden tiles, but it’s much easier to just bump the edge of the screen with the mouse pointer; in the Consumer Preview, that simple action automatically pans to show you what’s off the screen—no clicking or scroll bars required.
The Start screen also turns into Search as soon as you begin typing, and there are now a full assortment of search-enabled apps that you can use to change the scope of a search.
If you’re hoping for a way to replace the Start screen with a Windows 7–style Start menu, I have bad news for you. That option will not be there. It’s not in the Consumer Preview, and it won’t be in the final release. And the registry hack that temporarily enabled the Start menu in the Developer Preview doesn’t appear to work in this release.
Much (far too much, in fact) has been written about the demise of the Start button and the Start menu on the Windows 8 desktop. While it’s true that the familiar Windows flag is no longer present at the left side of the taskbar, Start is not gone. Indeed, you’ll find its successor in two different places in the new Windows 8 user interface, as I explain on the next page.
from zdnet.com

Windows 8 Consumer Preview: How Windows 8 works


Windows 8 Consumer Preview: a fresh start for Microsoft


How Windows 8 works

It’s not just for tablets.
It’s no secret that part of the big “reimagining” of Windows 8 is a massive effort to optimize the entire user interface so that it works well on touchscreens and tablets. But that doesn’t mean the mouse and keyboard have gotten short shrift. The touch interface was largely complete in the Developer Preview—a logical decision, given that the goal of that release was to encourage BUILD attendees to create touch-friendly Metro style apps.
With the Consumer Preview, the mouse and keyboard get their turn in the spotlight.
The touch UI in Windows 8 is all about edges—swipe from the right to reveal the Charms bar, swipe from the left to switch between running apps.
If you use a mouse, the UI is all about corners. Aim the mouse pointer in the lower left corner of any running app (including the Windows desktop) and you’ll see this hint to let you know you’ve found the secret grave where Microsoft buried the Start button. Click that corner to switch to the Start screen.
I was initially confused a bit by this  new behavior. I wanted to move the mouse to the Start screen hint, thinking it was a tile/icon to be clicked. But moving the mouse away from the target in the corner—roughly 16 pixels square—makes that hint disappear. Just click in the corner to make the switch.
The upper left corner functions in similar fashion, showing a thumbnail of the next running app in the queue (counting the Windows desktop as a single app). Aim the mouse pointer at that corner and click to achieve the same effect as swiping in from the left on a touchscreen.
Those corners on the left also lead to a clever new app-switching alternative. Aim at either corner and then move the mouse pointer along the left edge toward the center of the screen. That gesture reveals a row of thumbnails, each representing an open app—with the Windows desktop considered a single app.
You can switch to any app with a click of its thumbnail. The keyboard shortcut for this new app switching bar is Windows key+Tab; you can still use Alt+Tab if you want to see an expanded list of apps where each desktop app gets its own thumbnail.
Aiming the mouse pointer at either corner on the right side displays a ghosted version of the Charms menu. Move the mouse pointer up or down to change the menu background to black and display the labels for each of the five icons, one of which is conveniently labeled Start. (See the side-by-side screenshots at the right.)
So the fastest way to get to search with a mouse is to bump the pointer into the top right corner, slide it down to the Search charm, and click. For Settings, start in the lower right corner and move up to the Settings charm. Clicking Start, of course, has the same effect as pressing the Windows key on a keyboard (or the Windows button on a slate).
Or you could use keyboard shortcuts. If anyone tries to tell you that Windows 8 is only useful on a tablet or other touch-enabled device, you can counter with the fact that Windows 8 has more keyboard shortcuts than any previous version of Windows. According to the Windows development team, every possible combination of the Windows key and the letters and numbers on a standard keyboard are assigned to system shortcuts.
Here are a few Windows 8–specific shortcuts that are worth noting:
  • Windows key + C Open Charms bar
  • Windows key + I Open Settings pane
  • Windows key + Q Search Apps
  • Windows key + F Search Files
  • Windows key + W Search Settings
  • Windows key + period Snap current app to right side
  • Windows key + Shift + period Snap current app to left side
  • Windows key + comma Peek at the Windows desktop
  • Windows key + Z Display app bar for Metro style app
As in the Developer Preview, the Settings pane is context-sensitive. When you click the Settings charm or press Windows key + I, a black pane slides in from the right side of the display.
The six icons on the bottom offer quick control over current settings; click the volume or display brightness icons, for example, to see a slider that lets you adjust either one. The More PC settings link at the bottom of the pane takes you to the Metro style Control Panel.
Options at the top of the Settings pane are specific to the app you’re currently working with—in this case, you can add or change accounts and see permissions for the Mail app.
In fact, this consistency in design—you can find the settings for any Metro style app in the same location, accessed with the same gesture—is one of the big benefits of the new app format.
The coolest new UI feature of all is one that you might not discover right away. How do you close a Metro style app—or for that matter, the Windows desktop, which is just another app? Microsoft argues that you shouldn’t need to worry about using Task Manager, because Windows 8 is vigilant about memory and resource usage with Metro style apps. But if you’re done working with an app or you want to end the desktop session, just aim your mouse pointer at the top of the window until it turns to a hand icon (with a touchscreen, just grab the top of the app). Pull down, and the app shrinks to a smaller window in the center of the screen. Keep dragging to the bottom of the window and the app disappears.
Like so many new features in Windows 8, I can tell you about it, but you really need to experience it for yourself.

Windows 8 Consumer Preview:What’s next?


Windows 8 Consumer Preview: a fresh start for Microsoft


What’s next?

This is a major milestone, but it’s not the end of the road.
As I said at the beginning of this review, Windows 8 is designed to enable entire experiences. It’s an important building block, but it’s not enough on its own. So what’s still missing?
For starters, there are the apps. Although the 18 Metro style apps included with the Consumer Preview are generally polished and useful, they’re far from complete. Microsoft refers to them as App Previews—with a bright gold label at the top of some apps, like this snippet of the SkyDrive app shown here.
With many of the App Previews, I found myself slightly frustrated and occasionally annoyed by missing or incomplete features.
In Calendar, for example, I discovered that Windows Live had cluttered up the display almost beyond redemption by adding 400+ birthdays from my Windows Live and Facebook friends and followers. The only way to unclutter things was to visit Windows Live on the web to remove the Birthdays calendar. The Settings tab showed me which accounts were connected but didn’t let me adjust them in any way.
The Music app is visually glorious, but navigation was slow—probably because my very large collection (nearly 30,000 tunes) is located on a network server and not on a local disk. The app insists on mixing content from the Microsoft music store with my local collection. There really should be an option to show one or the other.
Some apps don’t scale well as they move to larger screens. Both the Weather and Finance apps do a great job of using the entire screen, with more content a swipe away. Others, like the People app, are practically a sea of white space, especially on a large desktop monitor. Someone really needs to figure out how to increase the information density of that app.
The good news is that those problems can be solved easily, and the availability of an app store makes it possible to push updates in the background, without disrupting the user’s experience.
You can see hints in the Consumer Preview that Microsoft is trying to simplify its often-confusing branding, with the Windows Live and Zune brands receding quietly into the background. When you tap About in the Settings pane for the Music or Video app, for example, you’re directed to Xbox.com. There’s a bundled Xbox Companion app as well, which includes a Play to Xbox option for music and videos:
The combination of a Windows 8–powered slate and an Xbox console is a potent competitor to Apple’s AirPlay. It’s about time Microsoft began leveraging the Xbox platform and brand.
And then there’s the hardware. Samsung’s slate is a good reference design, and the current crop of Ultrabooks should be superb performers with Windows 8. But there’s a whole next generation of hardware—including ARM-based devices—that will really allow Windows 8 to shine.
For now, the biggest surprise for me is how well Windows 8 works on a conventional desktop, using my familiar assortment of desktop apps in combination with a handful of new Metro apps. In part, that combination works because of the ability of Metro style apps to snap into a pane along the side of the display, leaving the bulk of the display for another app or the desktop. Here, for example, I have a Gmail inbox snapped into place on the left while I work with a Word document in the Windows desktop on the right:
On a widescreen display, that combination is even more effective.
After a week of continuous use, I’m finding more and more to like in Windows 8, and I’m eager to begin using it as my full-time working environment. And I’m even more interested in hearing about your experiences.

Shortcuts and surprises in the Windows 8 Consumer Preview


After a couple days of poking around in the Windows 8 Consumer Preview on multiple PCs, I’ve found a few shortcuts and surprises. If you’re a Windows 8 power user, these five tips are for you.

I’ve had a chance to poke around in the Windows 8 Consumer Preview on multiple PCs for 48 hours now (after spending a week with the beta on a Samsung tablet identical to the one that developers received at Microsoft’s BUILD conference last September).
In that time, I’ve discovered a few useful little shortcuts and surprises. If you’ve installed the Consumer Preview, you might find these tidbits useful:

Fast access to system-management tools

If you aim the mouse pointer in the lower left corner and click, you go straight to the Start screen. But what happens if you move the mouse pointer to the extreme lower left corner and then right-click? Aha! You get this menu, packed with shortcuts that any power user or administrator will  appreciate:
Those are all desktop tools, but this shortcut works from any Metro app, from Start, or from the Windows desktop.
If you don’t want to take your hands off the keyboard, use this shortcut: Windows key + X. (That key combination used to be reserved for Windows Mobility Center on notebooks; that feature is still there, but its shortcut has been reassigned.)

Capture a screenshot

For the first time in its long history, Windows has a shortcut that allows you to capture screenshots directly, without requiring extra steps or third-party utilities. In previous editions (including Windows 7), you could press PrtScr to capture the current screen to the Clipboard, but you needed to open an image editor to save the screen. In Windows 8 Consumer Preview, press Windows key + PrtScr. That keyboard shortcut copies the current screen and saves it as a PNG file in the default Pictures folder. Each file has the generic name Screenshot, followed by a sequential number.

Save a custom refresh point

This is one of the coolest tricks of all. Windows 8 includes a Refresh option, which you can use to restore your system to an earlier point, without wiping out your data files. By default, the refresh image is the clean install that your PC started with.
But you might prefer to roll back to a different state—after you’ve set up your favorite programs and tweaked them to your liking, for example.
To create a custom refresh image, you need to use the Windows 8 command line, specifically  the Recimg utility. Using this tool lets you create an image that includes Windows desktop programs and settings as well as all Windows system files in their current state. It doesn’t include Metro style apps or synced settings, which are restored when you log in with a Microsoft account.
To create a custom refresh image, open an administrative Command Prompt window (it’s an option on the power menu when you right-click in the lower left corner), and enter this command:
recimg /createimage directory
where directory is the local folder in which you want to install the image.
On my test system, I created a folder called Recover, in the root of the C: drive. Here’s what the output looked like:
The file it creates is a Windows Installer image. Because the image doesn’t include any data files, it’s relatively small. On a clean installation of Windows 8 Consumer Preview, it occupied less than 7GB.

Enable Windows 8’s backup tool, File History

Since Windows Vista, Windows has had the capability to create regular backups of data files on the fly. This feature was called Previous Versions, but it was barely used because most people don’t know it exists.
In Windows 8, the user interface is simpler, and the feature gets a name change. You’ll need a separate drive from your Windows system drive—an external hard drive works great, as does a large enough USB flash drive.
To turn on File History, press Windows key + W and then type File History in the search box. Click or tap the File History shortcut. You can explore the options for yourself (I’ll have more details in the next update to my Windows 8 book). Here’s what it looks like when enabled:

Check the Windows Experience Index

This one surprised me when I first saw it, because Microsoft made no mention of it in the Building Windows 8 blog or in review materials it provided.
The maximum rating available for subscores in the Windows Experience Index has been boosted past the 7.9 maximum in Windows 7. Here’s the score I got from one test system; look at the rating for Memory:
If you’ve got a top-of-the-line gaming system, you might see similar high numbers in the CPU and video scores. If you’re seeing higher ratings in Windows 8 than you did in Windows 7, leave a note in the Talkback section.