Thursday, May 13, 2004

The 802.11 devices may be attacked by the DoS!


802.11 WiFi flaw discovered...



The Queensland University of Technology today has announced the discover of a new flaw in 802.11 wireless protocol

The vulnerability is related to the medium access control (MAC) function of the IEEE 802.11 protocol. Seems that an attacker using a low-powered, portable device such as an electronic PDA and a commonly available wireless networking card may cause significant disruption to all WLAN traffic within range, in a manner that makes identification and localisation of the attacker difficult.

Not a good news for WiFi I think... a low-powered device can cause DOS problems to a WiFi network? Terrible...

You can find more info here.

Wednesday, May 12, 2004

Cool tip for Adobe Acrobat.


Adobe Acrobat plug-ins tip



Here’s a tip from Chris Lieberman, who left a comment on my Make Acrobat Reader 6 load faster blog post:


To temporarily disable loading of plug-ins in Acrobat 6 press shift key immediately after starting Acrobat.

Testers are developers as well.


Why Testers Should Care About Specs



My team is still bogged down in Spec work, but we're getting close to being done. Over the past few weeks it's gotten pretty old. After all, this stuff isn't really all that fun. A lot of reading, a lot of nit-picky comments, a lot of discussions (sometimes arguments) in meetings. From time to time I wonder why I get so involved. I'm a tester, specs aren't my job right?


Sure, they're not my primary focus but specs are very important to me in two distinct ways. The first is simple, commenting on and contributing to the spec process is my best chance to add my input into what we build. Later on in the process, when test traditionally gets involved, the direction is set - and won't be changed. But here, early, we're still figuring out what the program is going to do and I get to add my input. This adds a lot of job satisfaction for me. Think about it, I get to have a say in how we build software that hundreds of millions of people will use. Thankfully it's not a very large say and is tempered with lots and lots of other opinions. Otherwise I fear what kind of silliness we would build. The point is that by being involved early in the spec process I get to have personal investment in the product. We all know that in this industry test often isn't given the same respect as development or management teams (yes, this happens at Microsoft too - but trust me when I say it's much, much better here) and by involving myself in the design phase I help close that gap.


But being involved in this phase is also important from a testing perspective. Here's the scenario: down the line development will be cranking away on some feature, then you'll load that code up and start testing it. You'll find something you think they did wrong and go talk to them, they'll say they did it right. You're now at an impasse. I guarantee this will hapen at least once in any product cycle you're ever involved in.


The easiest way to solve this problem is to go look at the spec. If the spec is sufficiently clear and detailed (as it should be for any user exposed features) you can use it to settle the disagreement. If the spec isn't sufficiently clear and detailed things will get ugly - you'll need some meetings, and some mediation by your management teams, and all kinds of other badness. And like everything in software, solving these problems earlier (like when the spec is written) is much cheaper then solving them later. Plus, with good work on the spec up front you can prevent lots of these misunderstandings from even coming up in the first place.


Developers should really be holding the line on this while the specs are being written. They should be in there demanding more detail. But in my experience they don't do this. In their heads they're already working on how to implement the feature. It gets hard to see the different ways something in the spec could be interpreted when you've already interpreted it yourself and started a plan for implementation. But it turns out testers are excellent at interpreting things all kinds of different ways, it's one of the things that makes us good at what we do.


So as a tester my job in the spec writing process is to keep pushing for clarity and specifics. Keep asking hard questions to be sure everyone is interpreting things in the same way and there isn't room for ambiguity. The more specific the spec, the easier our lives are down the road, and our overall cost is cheaper. It's just a hard process, so when I'm in it I have to keep reminding myself why it's needed.


With that, it's time to get back at it.

Why your last software project failed? Learn from this:

Software Estimation webcast notes



Notes from the Software Estimation webcast.



“The gap between the best software engineering practice and the average practice is… perhaps wider than in any other engineering discipline.”
Fred Brooks



Only 32% of projects were less than 20 percent late (including on-time). Average software project is 100 percent late (takes twice as long as expected).
Standish Group


Three parts to project success:



  • Good target setting – statement of real business need
  • Effective control – good project management controls
  • Accurate estimates – focus of the rest of the webcast

Understanding an Estimate’s Value

Why estimate?



  • Provides info on how many resources and how long it will take
  • Provides info on the risk/reward of a project
  • Insight into kinds project risks

Estimate Value



  • Is a function of the potential gain if correct and potential loss if incorrect
  • Have to balance the investment you put into an estimate with the value you get back

Average companies treat estimation as a black art. Best companies treat estimation as a specialized skill.


Embracing Uncertainty

Software developers generally need precision.


“Perfect is the enemy of the good!”


Just because it’s not precise does not mean it’s not valuable.


Cone of Uncertainty


Cone of Uncertainty


Average company practices:



  • Give precise estimate/commitment
  • Estimate once and never change it
  • Spend too much time estimating early when little info is available

Best company practices:



  • Provide estimates in ranges that reflect uncertainty
  • Use low-cost, low-fidelity methods at wide end of cone
  • Re-estimate as the cone narrows

Learn to Think in Size

How big is the project?


Estimation Workflow



  • Size -> Effort -> Schedule
  • Test of estimate: would you be willing to risk your job?

Size Measurements



  • Lines of code
  • Function points
  • Screens, reports, tables
  • Other (web pages, GUI components, classes)
  • What works best for you?

SLOC (source lines of code) - has many faults, but can still be useful:



  • Easy to collect
  • Nearly all estimation tools are based on SLOC
  • Effort per SLOC roughly constant across languages

Average companies:



  • Think in terms of effort and schedule, not size
  • Estimates based on gut feel than data
  • Create estimates that are hard to defend

Best Companies:



  • Use multiple size measurements
  • Use tools to help think in size
  • Able to defend estimates with data based on size measurements (i.e., XL modules = 10,000 LOC, which then takes x amount of time)

Collect and Use Historical Data



  • The use of historical data is the biggest differentiating factor between successful and unsuccessful estimation.
  • Use historical data to compute effort, then use historical data to compute schedule. An analytical process removes the emotion.
  • Productivity is an organizational characteristic that cannot be changed significantly from one project to another. Past performance is the best indicator of future performance.

For each project, the following is the minimum:



  • Collect size measurements (SLOC, FP, etc.)
  • Effort (staff months)
  • Time (calendar months)
  • Defects
  • The key is to be consistent across projects!

Can collect additional data that is more specific on each of the above.


Haven’t collected any data? Go back and “mine” it or estimate it.


Average companies:



  • Never collect historical data
  • Never learn from past experience
  • Repeat the same estimation errors over and over

Best companies:



  • Collect historical data from every project
  • Analyze data to learn from it
  • Improve ability to estimate over time, and prove it

Establish an Estimation Procedure


Benefits



  • Encourage uniform results
  • Allows retracing steps in case of failure
  • Protects against biases
  • Ensures proper use of historical data
  • Aligns expectations between estimate producer and estimate customer

Elements



  • Required and optional steps
  • Description of each step’s imprecision
  • Standard re-estimation points
  • How to combine multiple approaches (look for convergence)
  • Defines when an estimate becomes a commitment
  • Changes approaches depending on location in cone of uncertainty

See presentation for a detailed description of a “best in class” example.


For More Info


This Blog Hosted On: http://www.DotNetJunkies.com/
Tell MS what VB testing do you want?

Looking for training?



One of the things that I spent a lot of today thinking about was the best way to provide training for VB developers - both those who are already using VB .NET and want to take it to the next level and those who are using VB6 and want to kick the tires on this .NET thing.  VB@TheMovies has been a tremendous hit with more than 200K page views so far. But there's a lot more that we want to do.


Do you want walkthroughs?  Samples?  FAQs?  A curriculum that takes you through certain training?


Videos?  Webcasts? Papers?  Book chapters?


Windows?  Web?   Mobile?  Office?


Obviously, we're going to do some of each of the above, but I'll conduct an extremely unscientific survey and see what you're looking for.  The more specific the suggestion, the better.


BTW, for all of you who mail me asking how you can get a free copy of VB to go play with:  Go check out VB @ The Movies.  Yup, we're giving away a free copy of VB .NET Standard if you watch and rate 5 movies.  (Sorry, this is in the US and Canada only)

Avalon is cool in Longhorn. :)
Avalon 3D is officially real...



We hinted at the PDC that the new Windows Client Platform (codenamed Avalon) was going to include support for 3D that would blur line between the 2D and 3D worlds.  If you have been browsing the Longhorn SDK on MSDN you may have noticed from the documentation refresh that the first bits of 3D support in Avalon made their way into the Longhorn build we distributed at WinHEC.


JBeda posted a screenshot of a sample Avalon application which illustrates the effortless interleaving of 2D and 3D content that Avalon 3D makes possible.

Tuesday, May 11, 2004

Lots of SharePoint 2003 materials. Cool!

Read more...
Source: "Longhorn In-Depth" article from ExtremeTech



ExtremeTech has a nicely illustrated (via screenshots) article reviewing the WinHEC Release of Longhon.  This is one of the first articles I have seen talking about “Castles”, defined as “kind of mini-domain that offers many of the features of a full domain, but doesn't require a domain server”.  That sounds promising.  The article also brings up the fact that there will be three levels of support for the graphical display.


As supported by this White Paper Graphics Hardware and Drivers for Windows "Longhorn", there will be three different levels of experience:



  • Classic - For those of you worried about losing your Windows 2000 software rendered look.

  • Aero - minimum hardware acceleration and desktop composition

  • Aero Glass - the full monty, when solitaire looks better than UT2003, required DirectX9 compliant video card with recommended 128MB RAM
Via Bink:

Contrary to the remarks it made to the ComputerTimes, Microsoft now claims that it will not permit users who have obtained Windows XP illegally to upgrade to its latest service release. Instead, the software giant will continue to enforce compliance with its licensing.

In a nutshell, Microsoft group product manager Barry Goffe told ComputerTimes that Windows XP Service Pack 2 would not exclude pirated copies from upgrading, and that it was more important to keep user safe than to be "concerned about the revenue issue."

To clarify its position, a Microsoft spokesperson told BetaNews, "Press reports indicating Windows XP Service Pack 2 will install on pirated or illegal copies of Windows XP are not entirely true. Prior to installing, SP2 will check the OS' product ID (PID) against a list of known pirated PIDs. If a PID is found to be invalid, SP2 will not install." Continue at source



News Source: Betanews.com
MBF is an important product. Now it's delayed for Longhorn. Read from Tim Brookings blog post.



Its been a busy month.  We've been working furiously behind the scenes to sync up MBF with Longhorn.  Our previous plan of record had MBF being released in two phases.  The “business logic” portions of MBF were to release with Visual Studio 2005 (aka Whidbey).  Then the rest of MBF would ship with Longhorn.  


This plan was a compromise from the beginning.   As previous posts have noted, MBF has many interesting parts (SOA, Process...).   However, all of those “interesting” parts were not shipping until Longhorn.  We literally couldn't ship rich SOA support with Whidbey... we had to wait for Indigo.  We couldn't ship the kind of lightweight, embedded process support we need in Whidbey... we had to wait for a future version of the BizTalk Orchestration engine.


The only point of the MBF Visual Studio 2005 release was to enable developers to start coding their business logic.  This is actually a very worthwhile goal.  Business logic represents the largest portion of a business application.  Getting a head start coding the business logic is goodness... even if you have to wait for the Longhorn release of MBF to “finish” the application.


However, as the months have gone by it has become more apparent that collapsing MBF into a single release would be more beneficial for our customers.  By shipping portions of MBF early in Whidbey, we were cementing portions of MBF into a non-Longhorn model.  In case you've been living under a rock, Longhorn is <the> platform for the next decade.  Shipping new bits which aren't aligned with Longhorn is a disservice to ISVs who want to build business applications which will last through the next decade.


Here are some links to stories related to the MBF move to Longhorn.


http://www.informationweek.com/story/showArticle.jhtml?articleID=19502405


http://www.crn.com/sections/BreakingNews/dailyarchives.asp?ArticleID=49958


Personally, I have mixed feelings on this topic.  Software developers live to ship code.  So delaying the first release of MBF is painful.  However, as a Software Architect, I am absolutely convinced that this was the right choice.  Shipping part of MBF in Whidbey and part in Longhorn would have created a system which spans two technology eras. 


 


 

blog from w.bloggar.
cool!

Monday, May 10, 2004

On Saturday, Microsoft verified that its antivirus reward program, through which the company has pledged $5 million in reward money for information leading to the capture and conviction of electronic attackers, played a role in the capture of the Sasser worm's alleged author. The attacker created all four variants of the worm, which afflicted millions of computers last week. Microsoft commended law enforcement officers in Rotenburg, Germany, for the capture of the accused attacker, an 18-year-old teenager who allegedly also created the Netsky worm.

"As this case demonstrates, we will move quickly to support law enforcement worldwide to identify and hold responsible those who break the law by launching viruses and worms targeted at our customers," Microsoft Senior Vice President and General Counsel Brad Smith said. "The information leading to this arrest resulted in part from Microsoft's antivirus reward program, as well as new technical and investigative techniques we have developed during the past year to address precisely this type of situation." Continue at source



News Source: Wininformant

http://www.nextl3vel.net/Chris123NT/4074/LHGuide.html
Google Hacking Mini-Guide:
source: informIT


This will help you to use Google in a better way.
http://www.informit.com/articles/article.asp?p=170880

Sunday, May 09, 2004

I will get my work pc upgraded to 60GB hd X 2, 1GB memory. I think the VPC will run faster than now.
See why Brad Abrams came to Microsoft via Channel.

http://channel9.msdn.com/ShowPost.aspx?PostID=6590
Event the pirated Windows XP can install the SP2. In the name of security, that's what Bill want to say to the world.
I love the new site design. Well done, guys. :)

Monday, April 26, 2004

I love spring. It's nice and warm. You see green everywhere. You enjoy the sun shine and wind. ;-)

Wednesday, April 21, 2004

How's GMail works?