dans.blog


The miscellaneous ramblings and thoughts of Dan G. Switzer, II

Phillips MiraVision TV - Part TV, Part Mirror

Phillips has a new line of televisions they call MiraVision TVs. The basically idea is that, when turned off, the televisions act like a mirror. This is actually a really cool idea. It allows you to completely disguise your television when it's turned off. Would look real nice in a living room.


Thunderbird-Tray v1.2 - Systray Launcher for Thunderbird

With the release of Thunderbird v1.5, I also found that I needed to update my version of Thunderbird-Tray from v1.1 to v1.2.

TB-Tray is a launcher for Thunderbird, which stays in memory and will "hide" Thunderbird to the systray instead of the taskbar. It actually has a lot of configurable options for a launcher. I've been using it in one form or another for almost a year. I really hate having my E-mail client show up in the taskbar. It's one of those applications that I almost always leave running and just don't see a need for it eating up a spot on my taskbar.

If you use Thunderbird, I'd highly recommend this application.


Thunderbird v1.5 Released!

Thunderbird v1.5 was released today. I use Thunderbird for my day job and have been anxiously awaiting the next release. Here's a break down of some of the new features from the Mozilla website:

Here's what's new in Thunderbird 1.5:

  • Automated update to streamline product upgrades. Notification of an update is more prominent, and updates to Thunderbird may now be half a megabyte or smaller. Updating extensions has also improved.
  • Sort address autocomplete results by how often you send e-mail to each recipient.
  • Spell check as you type.
  • Saved Search Folders can now search across multiple accounts.
  • Built in phishing detector to help protect users against email scams.
  • Podcasting and other RSS Improvements.
  • Deleting attachments from messages.
  • Integration with server side spam filtering.
  • Reply and forward actions for message filters.
  • Kerberos Authentication.
  • Auto save as draft for mail composition.
  • Message aging.
  • Filters for Global Inbox.
  • Improvements to product usability including redesigned options interface, and SMTP server management.
  • Many security enhancements.

The Rumbling Edge has more detailed lists of new features and notable bug fixes.


Microsoft releases "official" WMF patch

A follow up from my blog post on Wednesday. Looks like peer pressure really got to Microsoft. An official patch to the WMF vulnerability was released late yesterday. If you don't have your PC set to automatically update, make sure to go visit the Windows Update site (make sure you're using Internet Explorer) and patch your system ASAP.

So much for Microsoft sticking to their patch release schedule. Personally, I'm glad they didn't wait. They should be releasing patches as they're available. If corporations want to wait and release things on a schedule, that's fine, but let us contractors and personal users fix our computers as quickly as possible.


WMF Hotfix for nasty Windows vulnerability

This isn't exactly breaking news, but there's a very nasty bug in Windows 2000, XP and 2003 that has just recently been revealed being called the "WMF vulnerability." The bug has to do with a vulnerable function in GDI32.DLL library that can allow a malicious hacker/web site to install a virus/spyware on your computer.

What makes this bug extremely dangerous is any program that views images (such as Internet Explorer, Firefox, etc) is vulnerable.

Microsoft is claiming that there will not be an "official" patch for this bug until next week. However, this thing is nasty enough that everyone running Windows 2000, XP or 2003 should take some kind of action now.

more…


Commodore - Don't Call It A Comeback...

Apparently Commodore, yes that Commodore, has got a new line products coming out. They've already got some portable media players on the market, and they're getting ready to release three new products: the Commodore Multimedia Tower, the Commodore MediaBox and the Commodore Navigator.


Compare prices with a picture phone with SCANBUY

I was watching the local news last night when they did a quick blurb on a mobile phone service called SCANBUY. This company looks to have been around for a while and I can't understand why the idea hasn't been talked about more.

The basic concept behind the SCANBUY service is that you run an application (via your wireless carrier) on your picture phone. When you're at a major retail store, you can take a picture of the bar code of the product. SCANBUY will then report back the pricing of that item at other local area stores. That way you know if the asking price is in par with other stores in the area.

This is a really great idea that will hopefully catch on. It's on available on a limited number of phones right now. In addition to the software being available for your phone, you wireless carrier must also provide the service. In my case, they list the Motorola v710 phone as being supported, but Verizon doesn't currently offer the service—which sucks.

more…


Firefox - Upgrade JavaScript Console Extension

Jim Rutherford over at Digital Media Minute blogged about a next generation JavaScript console which is a Firefox v1.5 extension called Console².

This extension adds a lot of necessary functions to the Firefox JavaScript Console window (which is renamed "Error Console") such as: sorting errors, filtering errors by type (CSS, JS, XML) and you can even search over the errors.

One tip, the "Clear" button isn't on the toolbar by default. To add it you'll need to right-click the toolbar and choose "Customize". Not sure why they didn't add the "Clear" button by default—seems like a button that's absolutely necessary. I know it's a button I use pretty much any time I have the JavaScript console open.


Cool Firefox Extension - foXpose

The Viamatic foXpose plug-in is an extension for Firefox v1.5 that will show all your open tabs in single window with thumbnail previews of the window.I've seen this blogged about a lot recently, but finally tried it out based upon an IM from Cameron Childress.

I was worried that the plug-in would be too CPU intensive, but it does really seem to negatively affect my performance in Firefox. Plus, it's really slick being able to see thumbnails of all my open tabs.

You can activate foXpose by either pressing [CTRL]+[SHIFT]+[X] or by clicking the pane icon in the lower-right hand corner of the window.


Possible Buffer Overflow Bug in Firefox v1.5

John Dowdell posted about a possible buffer overflow bug in Firefox v1.5.

I'm not sure why you wouldn't cap the document.title object at 256 or 1024 characters. There's really no reason why you should be able to dump that many chars into that property anyway.

So, if you find Firefox v1.5 is crashing everytime you start the application, try deleting your history.dat. Actually, I'd recommend renaming it to history.bak that way you don't lose everything if it doesn't fix the problem.


TIP: Adding "Command Prompt Here" Context Menu

I often find myself needing to open up a command line on a specific directory. Since Windows Explorer is almost always open on my machine while I'm developing, it makes perfect since that I'd want to use Windows Explorer to open up a command line prompt in a specific directory via the context menu. How can you do this you ask? You edit the registry.

This is not a new tip. It's been around since Windows 95. There's even been a Microsoft PowerToy that does this for every version of Windows, but essentially all it does is create some registry entries for you. I prefer manually editing the registry, as I then have complete control over how I want the listing to appear.

  1. Open regedit
  2. Navigate to HKEY_LOCAL_MACHINE/Software/Classes/Folder/Shell
  3. Create a new key called command prompt
  4. Your default value should be Command Prompt Here
  5. Create a new key called commandunder the command prompt key
  6. Your default value should be cmd.exe /k pushd %L

more…


A FPS Shooter Example Using Firefox v1.5 Without Plug-ins!

I caught this on Blogzilla. If you have Firefox v1.5, this is very cool. The <canvas> tag looks pretty slick, but since only Firefox supports it, I can't see much use for it right now.

New in Firefox 1.5 is support of the <canvas> tag, which is a new HTML element that can be used to draw graphics using JavaScript. It's not SVG, even though it overlaps functionality with SVG.

Rafael Robayna has created a simple painter demo. A little more detailed is the first-person shooter demonstration.

While both are a little slow and not so smooth, it's still cool to see something like this is possible.

More on <canvas> tag:
Mozilla Developer entry for Canvas
Mozilla Wiki entry for Canvas


Cool App: True Launch Bar

I was just recently tipped off about a pretty cool replacement for the Windows Quicklaunch bar called True Launch Bar v3.2. Overall, it seems to be a really good enhancement to Windows XP. The only thing I've found that I dislike is that I haven't found a good way to apply configuaration changes across different toolbars (you have the ability to customize each toolbar to behave differently--which is great, but often I want to make the same change across multiple toolbars.) I'm sure there's probably a way to do this and I just haven't figured it out.

I've always used multiple toolbars, I usually have the default "Quick Launch" toolbar and then a couple others for Remote Desktop Connections, VPNs Connections and Games. The nice thing about the True Launch Bar is you can configure a bunch of different virtual folders on a toolbar to really customize how Windows XP works. They even have "plug-ins" which are active items that run in a toolbar.

So, I've broken my taskbar into 3 different toolbars. The "Quick Launch" bar, a "Virtual Folders" bar and a "Plug-ins" bar. The Quick Launch bar shows the default items in the Quick Launch bar. I use these for the applications I use every single day that I want one-click access to. The "Virtual Folders" bar consist of icon shortcuts that pop-up a folder of shortcuts (which can contain subfolders.) Basically think of this as a bunch of specialized "All Program" folders. My "Plug-ins" bar currently has two plugins in it—the Battery Life and Wireless Signal plug-ins. These give me live feedback on my battery status and my WiFi connectivity.

more…


Firefox v1.5 Released

Firefox v1.5 is being released today. The website still says RC3 is the latest build, but you should see an official announcement later today (probably between 6pm-9pm EST.)

Download Firefox v1.5 (English) now.


MD5 Collision Attack Code Released

I missed this on Slashdot (since I rarely read it anymore,) but thanks to Cameron's blog post I caught this piece of news. The first code has been released that shows how to find collisions in the MD5 algorithm. Essentially this means two completely different source files can be salted to produce the same string. In a nutshell, if you're relying on an MD5 hash to gaurentee the integrity of a file, you have problems—especially if you're relying on it producing unique, secure hash strings.

For a good layman explanation of the problem and the exploit, Magnus Daum & Stefan Lucks have published a really good article over at CITS titled Attacking Hash Functions by Poisoned Messages "The Story of Alice and her Boss".