<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Joy of Setup &#187; Etc</title>
	<atom:link href="http://www.joyofsetup.com/category/etc/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.joyofsetup.com</link>
	<description>Bob Arnson on setup and servicing with WiX and MSI</description>
	<lastBuildDate>Wed, 01 Feb 2012 05:01:28 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Getting shelf space in the Store</title>
		<link>http://www.joyofsetup.com/2012/02/01/getting-shelf-space-in-the-store/</link>
		<comments>http://www.joyofsetup.com/2012/02/01/getting-shelf-space-in-the-store/#comments</comments>
		<pubDate>Wed, 01 Feb 2012 05:01:28 +0000</pubDate>
		<dc:creator>Bob Arnson</dc:creator>
				<category><![CDATA[Etc]]></category>
		<category><![CDATA[Windows Installer]]></category>
		<category><![CDATA[best practices]]></category>

		<guid isPermaLink="false">http://www.joyofsetup.com/?p=304</guid>
		<description><![CDATA[Reading the Windows Store for developers blog recently, I was pleasantly surprised to see that desktop (i.e., non-Metro-style) apps would be allowed to show up in the Windows Store. Desktop apps won&#8217;t get the same treatment as Metro-style apps, of &#8230; <a href="http://www.joyofsetup.com/2012/02/01/getting-shelf-space-in-the-store/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>Reading the <a href="http://blogs.msdn.com/b/windowsstore/archive/2012/01/20/designing-the-windows-store-user-experience.aspx">Windows Store for developers blog</a> recently, I was pleasantly surprised to see that desktop (i.e., non-Metro-style) apps would be allowed to show up in the Windows Store. Desktop apps won&#8217;t get the same treatment as Metro-style apps, of course; instead of being able to install apps right from the Windows Store, desktop apps will have a similar listing page with a link to the developer&#8217;s site to handle download.</p>
<p>Still, it&#8217;s better than nothing &#8212; the Windows Store is likely to have a lot of window shoppers looking to buy apps.</p>
<p>However, a hurdle to get an app listing page is that the app must pass &#8220;certification.&#8221; In the past, this was known as the Windows Logo program and had many pages of technical requirements. In <a href="http://msdn.microsoft.com/library/windows/desktop/hh749939">Windows 8, the list is much smaller</a> and less prescriptive. For example, the Logo program for previous versions required the use of MSI, then required MSI or ClickOnce; for Windows 8, there are no technology restrictions.</p>
<p>Some requirements that struck me as interesting:</p>
<blockquote><p>1.2 Your app must not take a dependency on the VB6 runtime</p></blockquote>
<p>VB6, IE6 &#8212; anything v6 must go away. <img src='http://www.joyofsetup.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<blockquote><p>5.1 Your app must properly implement a clean, reversible installation</p>
<p>If the installation fails, the app should be able to roll it back and restore the machine to its previous state.</p></blockquote>
<p>If Windows 8 certification is anything like previous versions&#8217;, it will involve automated test suites that will highlight rollback that&#8217;s less than perfect.</p>
<blockquote><p>5.4 Your app must never block silent install/uninstall</p></blockquote>
<p>So don&#8217;t throw UI from custom actions and don&#8217;t rely on being able to prompt the user (i.e., also don&#8217;t break requirement #5.1).</p>
<blockquote><p>6.1 All executable files (.exe, .dll, .ocx, .sys, .cpl, .drv, .scr) must be signed with an Authenticode certificate</p></blockquote>
<p>MSI packages aren&#8217;t mentioned. But if you ship a Burn bundle or other bootstrapper .exe, that&#8217;s going to require signing.</p>
<blockquote><p>10.1 Your app must be installed in the Program Files folder by default</p></blockquote>
<p>There&#8217;s nothing mentioned that would exempt per-user apps in general from this requirement, though you can always request exceptions. Given the emphasis Metro places on per-user, restricted apps, perhaps this requirement will be extended/relaxed for per-user desktop apps too.</p>
<blockquote><p>10.6 Your app must write user data at first run and not during the installation in “per-machine” installations</p></blockquote>
<p>Long-time readers of <a href="http://wix.sourceforge.net/mailinglists.html#wix-users">wix-users</a> will recognize this as advice given again and again. Good to see Windows catching on. <img src='http://www.joyofsetup.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<blockquote><p>10.7 Exceptions and Waivers</p>
<p>A waiver is required for apps that write to the global assembly cache (GAC) .NET apps should keep assembly dependencies private, and store it in the app directory unless sharing an assembly is explicitly required.</p></blockquote>
<p>I suspect it&#8217;s a response to the GAC getting used too often when it&#8217;s not needed or very useful. (See also Rico Mariani&#8217;s <a href="http://blogs.msdn.com/b/ricom/archive/2012/01/31/ngen-or-not-the-rules-haven-t-changed-very-much-since-2004.aspx">blog post on using NGen</a>, which falls into the same boat.) Still, I&#8217;m mildly surprised to see it a requirement.</p>
<blockquote><p>12.5 App running under the WoW64 emulator should not attempt to subvert or bypass Wow64 virtualization mechanisms</p></blockquote>
<p>This one&#8217;s interesting, depending how struct &#8220;subvert&#8221; turns out to be. For example, several WiX custom actions make fairly trivial &#8220;subversions&#8221; of WoW64 to avoid the need for both 32-bit and 64-bit custom actions just to write to the right version of Program Files.</p>
<p>All in all, there&#8217;s nothing terribly surprising in this set of requirements. A lot of them just codify what&#8217;s already known as best practice for Windows apps in the age of UAC. Of course, this is just the first version of the certification requirements and Windows 8 isn&#8217;t yet shipping; there&#8217;s plenty of time for Microsoft to add, drop, or change requirements. In the end, you get to decide whether the effort of certification is worth having a presence in the Windows Store. Remember the Metro-style app folks, who have no choice in the matter: The Windows Store is the only way they can ship.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.joyofsetup.com/2012/02/01/getting-shelf-space-in-the-store/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Goodbye and hello again</title>
		<link>http://www.joyofsetup.com/2011/03/26/goodbye-and-hello-again/</link>
		<comments>http://www.joyofsetup.com/2011/03/26/goodbye-and-hello-again/#comments</comments>
		<pubDate>Sat, 26 Mar 2011 20:12:23 +0000</pubDate>
		<dc:creator>Bob Arnson</dc:creator>
				<category><![CDATA[Etc]]></category>
		<category><![CDATA[personal]]></category>

		<guid isPermaLink="false">http://www.joyofsetup.com/?p=263</guid>
		<description><![CDATA[This week was my last at Microsoft. After six and a half years, I decided it was time to resign from the collective and seek out new opportunities. What opportunities? Well, I have a few things in the works but &#8230; <a href="http://www.joyofsetup.com/2011/03/26/goodbye-and-hello-again/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>This week was my last at Microsoft. After six and a half years, I decided it was time to resign from the collective and seek out new opportunities.</p>
<p>What opportunities? Well, I have a few things in the works but for now here&#8217;s a vague Q&amp;A using an <a href="http://en.wikipedia.org/wiki/Magic_8-Ball">icosahedral decision-making device</a>:</p>
<p><strong>Q</strong> Are you resigning from the WiX community as well?<br />
<strong>A</strong> My sources say no.</p>
<p><strong>Q</strong> Are you going to work for a Microsoft competitor?<br />
<strong>A</strong> Don&#8217;t count on it.</p>
<p><strong>Q</strong> Will you be available for consulting?<br />
<strong>A</strong> You may rely on it.</p>
<p><strong>Q</strong> Are you going to write a WiX book?<br />
<strong>A</strong> Signs point to yes.</p>
<p><strong>Q</strong> More than one WiX book?<br />
<strong>A</strong> Outlook good.</p>
<p><strong>Q</strong> Will you develop additional tools, custom actions, or extensions for WiX?<br />
<strong>A</strong> Most likely.</p>
<p><strong>Q</strong> Will you contribute them to the WiX project?<br />
<strong>A</strong> Concentrate and ask again.</p>
<p><strong>Q</strong> Will they all be available as open-source?<br />
<strong>A</strong> Ask again later.</p>
<p>Stay tuned for details.</p>
<p>In closing, I&#8217;d like to thank <a href="http://robmensching.com/blog/">Rob</a> for creating WiX, doing the work to make it Microsoft&#8217;s first open-source project, and giving me an opportunity to contribute these past six-plus years. It&#8217;s safe to say it kept me moderately sane on more than one occasion. I got to know the original batch of core WiX developers and help the &#8220;next generation&#8221; come in. Along the way, I learned a lot, mostly (but not exclusively) about development, WiX, and MSI.</p>
<p>WiX was first released publicly a few months before I joined Microsoft and I was immediately intrigued. Then I joined Microsoft and helped ship WiX v2.0, v3.0, and v3.5. Now I&#8217;ve come back full circle, on the outside eagerly awaiting v3.6 and the opportunities it brings.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.joyofsetup.com/2011/03/26/goodbye-and-hello-again/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Mercurial/TortoiseHg installer now built with WiX</title>
		<link>http://www.joyofsetup.com/2010/03/06/mercurialtortoisehg-installer-now-built-with-wix/</link>
		<comments>http://www.joyofsetup.com/2010/03/06/mercurialtortoisehg-installer-now-built-with-wix/#comments</comments>
		<pubDate>Sat, 06 Mar 2010 19:24:21 +0000</pubDate>
		<dc:creator>Bob Arnson</dc:creator>
				<category><![CDATA[Etc]]></category>
		<category><![CDATA[WiX]]></category>

		<guid isPermaLink="false">http://www.joyofsetup.com/2010/03/06/mercurialtortoisehg-installer-now-built-with-wix/</guid>
		<description><![CDATA[I’ve been using Mercurial, a distributed version-control system, for a while now at home. Even without using a DVCS’s distributed nature, they make a great choice for a personal version control system: They all share the common trait that they &#8230; <a href="http://www.joyofsetup.com/2010/03/06/mercurialtortoisehg-installer-now-built-with-wix/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>I’ve been using <a href="http://mercurial.selenic.com/">Mercurial</a>, a <a href="http://en.wikipedia.org/wiki/Distributed_revision_control">distributed version-control system</a>, for a while now at home. Even without using a DVCS’s distributed nature, they make a great choice for a personal version control system: They all share the common trait that they keep all version history on the local system; most centralized VCSes keep only the latest versions locally with the historical versions kept only on the central server.</p>
<p>The latest release of Mercurial and TortoiseHg, a set of Windows shell extensions and GUI tools for Mercurial, was just released. This latest version (v1.5 and v1.0, respectively) includes both tools integrated into an MSI installer built with WiX. Previous versions were built with (the excellent but non-MSI-based) Inno Setup toolset. The WiX-based installer has the advantage of using a merge module for <a href="http://tortoisesvn.tigris.org/svn/tortoisesvn/TortoiseOverlays/version-1.0.13/Documentation.txt">TortoiseOverlays</a> (login as <strong>guest </strong>with an empty password), an icon overlay handler shared by shell extensions for several different version control systems: TortoiseHg for Mercurial, <a href="http://tortoisesvn.tigris.org/">TortoiseSVN</a> for <a href="http://subversion.apache.org/">Subversion</a>, <a href="http://www.tortoisecvs.org/">TortoiseCVS</a> for <a href="http://www.nongnu.org/cvs/">CVS</a>, <a href="http://wiki.bazaar.canonical.com/TortoiseBzr">TortoiseBZR</a> for <a href="http://bazaar.canonical.com/en/">Bazaar</a>, <a href="http://code.google.com/p/tortoisegit/">TortoiseGit</a> for <a href="http://git-scm.com/">Git</a>, and probably others.</p>
<p>As usual, I opened the TortoiseHg .msi in Orca before installing it on my workstation. I was pleasantly surprised by the low number of custom actions. I ran it through WiX v3.0’s Smoke.exe to run ICE validation; there were lots of errors and warnings but all but a few were from TortoiseHg’s use of the Visual C++ runtime libraries merge modules. (Is it ironic or just plain sad that they have so many ICE errors? Maybe both.)</p>
<p>Though we don’t use Mercurial for <a href="http://wix.sourceforge.net/">WiX</a> version control—yet, anyway—both <a href="https://sourceforge.net/apps/trac/sourceforge/wiki/Mercurial">SourceForge.net</a> and <a href="http://blogs.msdn.com/codeplex/archive/2010/01/22/codeplex-now-supporting-native-mercurial.aspx">Codeplex</a> support Mercurial for a project’s VCS.</p>
<ul>
<li><a href="http://mercurial.selenic.com/wiki/WhatsNew">Read the Mercurial v1.5 release notes.</a> </li>
<li><a href="http://bitbucket.org/tortoisehg/stable/wiki/ReleaseNotes">Read the TortoiseHg v1.0 release notes.</a> </li>
<li><a href="http://tortoisehg.bitbucket.org/download/index.html">Download the combined Mercurial and TortoiseHg installer.</a> </li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.joyofsetup.com/2010/03/06/mercurialtortoisehg-installer-now-built-with-wix/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Visual Studio 2010 RC now available</title>
		<link>http://www.joyofsetup.com/2010/02/08/visual-studio-2010-rc-now-available/</link>
		<comments>http://www.joyofsetup.com/2010/02/08/visual-studio-2010-rc-now-available/#comments</comments>
		<pubDate>Tue, 09 Feb 2010 02:16:41 +0000</pubDate>
		<dc:creator>Bob Arnson</dc:creator>
				<category><![CDATA[Etc]]></category>

		<guid isPermaLink="false">http://www.joyofsetup.com/2010/02/08/visual-studio-2010-rc-now-available/</guid>
		<description><![CDATA[If you’re an MSDN subscriber, go get it from MSDN Downloads.]]></description>
			<content:encoded><![CDATA[<p>If you’re an MSDN subscriber, go get it from <a href="https://msdn.microsoft.com/en-us/subscriptions/securedownloads/default.aspx">MSDN Downloads</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.joyofsetup.com/2010/02/08/visual-studio-2010-rc-now-available/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Thrilling tales of deployment</title>
		<link>http://www.joyofsetup.com/2009/08/29/thrilling-tales-of-deployment/</link>
		<comments>http://www.joyofsetup.com/2009/08/29/thrilling-tales-of-deployment/#comments</comments>
		<pubDate>Sat, 29 Aug 2009 14:17:02 +0000</pubDate>
		<dc:creator>Bob Arnson</dc:creator>
				<category><![CDATA[Etc]]></category>

		<guid isPermaLink="false">http://www.joyofsetup.com/2009/08/29/thrilling-tales-of-deployment/</guid>
		<description><![CDATA[One of my requirements when researching places to live when I moved to Boston was nearby public transit. If you’ve ever driven in Boston, you know the traffic can be dense and intense and WTF?! THERE ARE 80 CARS BEHIND &#8230; <a href="http://www.joyofsetup.com/2009/08/29/thrilling-tales-of-deployment/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>One of my requirements when researching places to live when I <a href="http://www.joyofsetup.com/2009/03/17/on-becoming-cantabrigian/">moved to Boston</a> was nearby <a href="http://www.mbta.com/">public transit</a>. If you’ve ever driven in Boston, you know the traffic can be dense and intense and WTF?! THERE ARE 80 CARS BEHIND YOU AND IT’S ILLEGAL TO TURN LEFT THERE DURING RUSH HOUR!!</p>
<p>OK, so driving was not in the picture for my daily commute to the <a href="http://www.microsoftcambridge.com/Default.aspx">Fortress of NERDitude</a>. Currently, my daily commute takes about half an hour of waiting for a bus or a train and sitting/standing while someone else does the driving. Doing nothing is much more relaxing than driving in Cambridge traffic, of course, but even with good music, doing nothing gets boring pretty quickly.</p>
<p>I could just bring along my trusty <a href="http://www.nintendo.com/ds/lite">Nintendo DS</a> but I figured that would get boring eventually too. Plus, I figured I could be a bit more mature than that and do something, I dunno, <em>productive </em>like read mail or blogs…</p>
<p>I considered just browsing the Web on my phone, but rejected that idea:</p>
<ul>
<li>Web latency over 3G networks is painful. </li>
<li>3G networks aren’t terribly reliable underground. </li>
<li>Web UIs are painful on small screens. </li>
</ul>
<p>A laptop or even <a href="http://www.microsoft.com/windows/products/winfamily/umpc/default.mspx">UMPC</a> is out, because I knew I’d frequently need to work one-handed, keeping the other handy for not falling over during the less-than-smooth parts of the <a href="http://www.mbta.com/schedules_and_maps/subway/lines/?route=RED">Red Line</a>.</p>
<p>No, I needed a small, handheld device that could sync mail and blogs and let me read them offline.</p>
<h4>No, it’s not an iPhone</h4>
<p>After some research, I bought an <a href="http://www.apple.com/ipodtouch/">iPod touch</a>. (Perhaps in a couple of weeks, my implant will kick in and I’ll do this all again on a <a href="http://www.zune.net/en-us/mp3players/zunehd/default.htm">Zune HD</a>.) I also bought <a href="http://www.phantomfish.com/byline.html">Phantom Fish’s Byline</a> RSS reader, which syncs to <a href="http://www.google.com/reader">Google Reader</a>. Once I supplied my account name and password, reading blogs using Byline is easy:</p>
<ul>
<li>Tap the sync button to download the latest blog posts.</li>
<li>Read posts and mark some for later follow-up once I’m back online.</li>
<li>Before heading home, sync to update Google Reader with the posts I read and to download the latest blog posts.</li>
<li>Once I’m back in range of my home WiFi, sync again.</li>
</ul>
<h4>Please, sir, may I have some more?</h4>
<p>Buying apps from Apple’s App Store is simple; the hardest part is typing a strong password into the on-screen keyboard:</p>
<ul>
<li>Start the App Store app. </li>
<li>Search or browse for an app. </li>
<li>Tap the price and it turns into a BUY NOW button. </li>
<li>Tap BUY NOW. </li>
<li>Enter your iTunes password. </li>
<li>The app is downloaded and installed. </li>
</ul>
<p>Updates are handled in much the same way:</p>
<ul>
<li>Start the App Store app. </li>
<li>Tap the Updates button. </li>
<li>If there are any updates, tap the Update All button to download and install the updates in the background. </li>
</ul>
<p>Because I have an iPod touch instead of iPhone, all my interaction with the App Store happens over WiFi at respectable speeds. (Even better, it doesn’t require interaction with iTunes, which continues to amply demonstrate that Apple has yet to master setup development on Windows.)</p>
<p>I’ve purchased many apps since buying my iPod touch and “purchased” many more free apps. In all cases, downloading and installing those apps was painless.</p>
<h4>Knew you’d get to installation eventually</h4>
<p>Well, yeah. Here are my takeaways; yours might differ:</p>
<ul>
<li><strong>Mobile != connected. </strong>Even though 3G coverage is decent from the major carriers, there will always be dead zones, slow zones, and underground zones.</li>
<li><strong>Rich clients + local processing power == goodness. </strong>Sure, Web 2.0 and HTML5 will finally kill the idea of running local apps. Bah. Latency, especially problematic with 3G networks, kills the user experience (see, for example, <a href="http://www.cooper.com/insights/books/">About Face</a> and other UX books). Rich clients can largely avoid the problem.</li>
<li><strong>Sync data that lives in the cloud. </strong>If your data lives in the cloud, rich clients can sync it, keeping multiple devices up to date. In my case, I prefer to use a laptop or desktop PC to read blogs and mail when I can because, not surprisingly, a big screen is better for reading (or scanning) lots of text. </li>
<li><strong>Bulletproof installations rock.</strong> Would anyone disagree it’s better to have bullet-ridden installation? </li>
<li><strong>Making it easy to buy apps makes it easy to make money.</strong> The App Store had “<a href="http://www.apple.com/itunes/billion-app-countdown/">over 1 billion downloads in just nine months</a>” and “<a href="http://www.apple.com/pr/library/2009/07/14apps.html">1.5 billion in First Year</a>.” Naturally, with so many free and almost-free apps in the App Store, it doesn’t necessarily follow that we’re talking about a <em>lot</em> of money, depending on your definition of “a lot,” as <a href="http://gigaom.com/2009/08/27/how-big-is-apple-iphone-app-economy-the-answer-might-surprise-you/">estimates put the revenue at $2.4 billion a year</a>. But imagine extending the App Store experience to more expensive apps, say on your PC. </li>
<li><strong>Making it easy to service apps makes it easy to keep customers happy.</strong> Servicing deliverables themselves <a href="http://www.joyofsetup.com/2008/12/30/paying-for-upgrades/">aren’t too hard</a> to get right but making users aware of them and getting them to the user still is. It’s led to way too many auto-start local-system updater services one vulnerability away from total system <a href="http://en.wikipedia.org/wiki/P0wnage">p0wnage</a>.</li>
</ul>
<h4>Best of both worlds</h4>
<p>One of the big reasons Web apps became so popular, for both consumers and the enterprise, is that they don’t suffer from the reliability problems common to installing client apps. Naturally, these aren’t <em>inherent</em> problems with client app installation but are complexities that easily turn into problems—especially without engineering attention to setup. </p>
<p>Web apps avoid the problem by not installing on the client. (Note that I’m skipping the complexities of setting up Web servers and the pseudo-installation provided by Silverlight and Flash.)</p>
<p>iPhone/iPod touch apps avoid the problem by:</p>
<ul>
<li>Working in a limited number of well-known environments. (Though the iPhone 3GS adds a second hardware base and there are many rumors about a so-called “<a href="http://www.bing.com/search?q=Apple+tablet">Apple tablet</a>.”) </li>
<li>Working in a locked-down environment. </li>
<li>Requiring a particular deployment model. </li>
<li>Supporting a simple update model. </li>
<li>Requiring review and approval before getting published. </li>
</ul>
<p>These might seem pretty limiting to most Windows developers. But it’s hard to argue against the success the App Store has achieved because of—probably not in spite of—those limitations.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.joyofsetup.com/2009/08/29/thrilling-tales-of-deployment/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Security update for Visual Studio</title>
		<link>http://www.joyofsetup.com/2009/08/02/security-update-for-visual-studio/</link>
		<comments>http://www.joyofsetup.com/2009/08/02/security-update-for-visual-studio/#comments</comments>
		<pubDate>Sun, 02 Aug 2009 20:43:08 +0000</pubDate>
		<dc:creator>Bob Arnson</dc:creator>
				<category><![CDATA[Etc]]></category>

		<guid isPermaLink="false">http://www.joyofsetup.com/2009/08/02/security-update-for-visual-studio/</guid>
		<description><![CDATA[Last Tuesday, Microsoft released atypical, out-of-band security updates for vulnerabilities in ATL. Michael Howard discusses them on the Security Development Lifecycle blog. The security update page contains links to patches and upgrades for affected Visual Studio components, going back to &#8230; <a href="http://www.joyofsetup.com/2009/08/02/security-update-for-visual-studio/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>Last Tuesday, Microsoft released atypical, out-of-band security updates for vulnerabilities in <a href="http://en.wikipedia.org/wiki/Active_Template_Library">ATL</a>. Michael Howard discusses them on the <a href="http://blogs.msdn.com/sdl/archive/2009/07/28/atl-ms09-035-and-the-sdl.aspx">Security Development Lifecycle blog</a>. The <a href="http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx">security update page</a> contains links to patches and upgrades for affected Visual Studio components, going back to Visual Studio .NET 2003. If you&#8217;re using Visual Studio 2008 SP1, you&#8217;ll be interested in the following:</p>
<ul>
<li><a href="http://www.microsoft.com/downloads/details.aspx?familyid=2051a0c1-c9b5-4b0a-a8f5-770a549fd78c&amp;displaylang=en">Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package ATL Security Update</a>, which contains upgrades for the Visual C++ runtime assemblies. There are three, one for each platform (x86, x64, and IA64), each under 5MB.</li>
<li><a href="http://www.microsoft.com/downloads/details.aspx?familyid=294de390-3c94-49fb-a014-9a38580e64cb&amp;displaylang=en">Visual Studio 2008 Service Pack 1 ATL Security Update</a>, which contains a 365MB patch for SP1.</li>
<li>Wait.</li>
<li>365MB? As in <a href="http://en.wikipedia.org/wiki/Mebibyte">megabytes</a>?</li>
<li>Oh yes.</li>
</ul>
<p>I&#8217;m downloading this once and sharing it on my network rather than downloading it from Microsoft Update <em>n</em> times.</p>
<p><a title="http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx" href="http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx">&#160;</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.joyofsetup.com/2009/08/02/security-update-for-visual-studio/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>On becoming Cantabrigian</title>
		<link>http://www.joyofsetup.com/2009/03/17/on-becoming-cantabrigian/</link>
		<comments>http://www.joyofsetup.com/2009/03/17/on-becoming-cantabrigian/#comments</comments>
		<pubDate>Wed, 18 Mar 2009 02:29:27 +0000</pubDate>
		<dc:creator>Bob Arnson</dc:creator>
				<category><![CDATA[App-V]]></category>
		<category><![CDATA[Etc]]></category>

		<guid isPermaLink="false">http://www.joyofsetup.com/2009/03/17/on-becoming-cantabrigian/</guid>
		<description><![CDATA[In January, I got to participate in a first-of-its-kind event. Unfortunately, the event was Microsoft&#8217;s first-ever mass layoff. As was wildly reported, Microsoft closed ACES Studio as part of that layoff. As ACES was my home away from home (and, &#8230; <a href="http://www.joyofsetup.com/2009/03/17/on-becoming-cantabrigian/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>In January, I got to participate in a first-of-its-kind event. Unfortunately, the event was Microsoft&#8217;s <a href="http://blog.seattlepi.nwsource.com/microsoft/archives/160076.asp">first-ever mass layoff</a>. As was <a href="http://www.gamasutra.com/php-bin/news_index.php?story=21981&amp;qsrc=2870">wildly reported</a>, Microsoft <a href="http://www.fsinsider.com/news/Pages/AMessageFromAces.aspx">closed ACES Studio</a> as part of that layoff. As ACES was my home away from home (and, on occasion, more home than my home&lt;g&gt;) for the last two years, I found myself freshening my resume in a <a href="http://www.bea.gov/newsreleases/national/gdp/gdpnewsrelease.htm">less-than-stellar economy</a>. Luckily, I remained an employee and was able to continue working on WiX while looking and interviewing for jobs.</p>
<p>Long story short: Later this week, I join the <a href="http://www.microsoft.com/systemcenter/appv/default.mspx">Microsoft Application Virtualization</a> team. App-V, as it&#8217;s known, provides an alternative to traditional setup and servicing by isolating applications inside a &quot;virtual bubble.&quot; </p>
<p>For apps that fit in an App-V bubble, delivering a ready-to-run package with no &quot;setup step&quot; is enticing. Add in streaming updates that avoid many of the pains of patching and you can see why I&#8217;m convinced that App-V has a big future in application deployment. </p>
<h2>Fifty degrees of separation </h2>
<p>The App-V team is based in <a href="http://microsoftcambridge.com/">Cambridge, Mass.</a> (How can you not love the <strong>N</strong>ew <strong>E</strong>ngland <strong>R</strong>esearch &amp; <strong>D</strong>evelopment Center name?) Over the next few weeks I&#8217;ll be loading up my <a href="http://en.wikipedia.org/wiki/Bag_of_holding">bag of holding</a> and moving from <a href="http://stable.toolserver.org/geohack/geohack.php?pagename=Redmond,_Washington&amp;params=47_40_10_N_122_7_26_W_type:city(46391)_region:US-WA">Redmond</a> to <a href="http://stable.toolserver.org/geohack/geohack.php?pagename=Cambridge,_Massachusetts&amp;params=42.373611_N_-71.110556_E_type:city_region:US&amp;title=Cambridge%2C+Massachusetts">Cambridge</a>. As I used to live in New England, I&#8217;m excited to live in the Boston area. It does, however, mean a change in my participation in the WiX community.</p>
<p>The work I routinely do for WiX will continue as before—after all, that needs only a computer and a compiler. But as <a href="http://robmensching.com/blog/posts/2009/2/8/Distributing-culture-is-hard">Rob pointed out</a>, the WiX virtual team has historically been Microsoft developers working together in weekly face-to-face meetings. Those weekly meetings were how volunteers kept engaged, designed features, brainstormed bug fixes, wrote code, scheduled releases, discussed the latest rumors, and generally gelled as a team. Being 3000 miles away and three time zones ahead will make it more difficult for me to participate that way. (I can either stay up really late or get up really early!)</p>
<p>One possibility is setting up a WiX team in miniature for those on the east coast interested in contributing. (We&#8217;ve dubbed that theoretical group &quot;WiX East&quot; and are already preparing for the inevitable <a href="http://en.wikipedia.org/wiki/West_Side_Story">musical turf wars</a>.)</p>
<p>We&#8217;ll see how it goes, pick what works, and drop what doesn&#8217;t.</p>
<p>In the meantime, I&#8217;m looking forward to starting my new job with an impressive team on an exciting product. And along the way I&#8217;m sure we&#8217;ll find some interesting intersections between App-V and WiX…</p>
]]></content:encoded>
			<wfw:commentRss>http://www.joyofsetup.com/2009/03/17/on-becoming-cantabrigian/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>Code reviews</title>
		<link>http://www.joyofsetup.com/2009/02/27/code-reviews/</link>
		<comments>http://www.joyofsetup.com/2009/02/27/code-reviews/#comments</comments>
		<pubDate>Fri, 27 Feb 2009 09:56:28 +0000</pubDate>
		<dc:creator>Bob Arnson</dc:creator>
				<category><![CDATA[Etc]]></category>

		<guid isPermaLink="false">http://www.joyofsetup.com/2009/02/27/code-reviews/</guid>
		<description><![CDATA[[OSNews, via Coding Horror] At WiX night, code reviews never include the phrase WTF. Well, almost never…]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.osnews.com/story/19266/WTFs_m"><img title="wtfm" style="border-top-width: 0px; display: inline; border-left-width: 0px; border-bottom-width: 0px; margin: 0px; border-right-width: 0px" height="491" alt="Units of code quality?" src="http://joyofsetup.com/images/GoodandbadThursdaysatWiXnight_12853/wtfm.jpg" width="520" border="0" /></a> </p>
<p>[<a href="http://www.osnews.com/story/19266/WTFs_m">OSNews</a>, via <a href="http://www.codinghorror.com/blog/archives/001229.html">Coding Horror</a>]</p>
<p>At WiX night, code reviews <em>never</em> include the phrase <a href="http://thedailywtf.com/Default.aspx">WTF</a>. </p>
<p>Well, almost never…</p>
]]></content:encoded>
			<wfw:commentRss>http://www.joyofsetup.com/2009/02/27/code-reviews/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Installing Windows 7 beta from a USB stick</title>
		<link>http://www.joyofsetup.com/2009/01/18/installing-windows-7-beta-from-a-usb-stick/</link>
		<comments>http://www.joyofsetup.com/2009/01/18/installing-windows-7-beta-from-a-usb-stick/#comments</comments>
		<pubDate>Mon, 19 Jan 2009 06:08:12 +0000</pubDate>
		<dc:creator>Bob Arnson</dc:creator>
				<category><![CDATA[Etc]]></category>

		<guid isPermaLink="false">http://www.joyofsetup.com/2009/01/18/installing-windows-7-beta-from-a-usb-stick/</guid>
		<description><![CDATA[I&#8217;m enjoying the Windows 7 beta – I&#8217;ve installed it on four machines so far. (That&#8217;s four more than the last beta OS I had the opportunity to install.) I&#8217;ve done two installs from DVD, one from network boot (via &#8230; <a href="http://www.joyofsetup.com/2009/01/18/installing-windows-7-beta-from-a-usb-stick/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>I&#8217;m enjoying the Windows 7 beta – I&#8217;ve installed it on four machines so far. (That&#8217;s four more than the last beta OS I had the opportunity to install.) I&#8217;ve done two installs from DVD, one from network boot (via <a href="http://msdn.microsoft.com/en-us/library/aa967394(VS.85).aspx">Windows Deployment Services</a>), and my most recent install was my first from USB media. </p>
<p>My <a href="http://h40059.www4.hp.com/hp2133/">HP 2133</a> netbook is a great little machine. It&#8217;s small but has a keyboard that is exactly as small as it can get and still be usable. WXGA on an 8.9-inch display is tiny but perfectly readable. I even wrote most of the <a href="http://www.joyofsetup.com/2009/01/17/msi-v50-features-in-wix-v30/">MSI 5.0 features in WiX</a> using it last Thursday.</p>
<p>With 1GB of RAM, the 2133 runs XP just fine, so I was interested to see how well Windows 7 ran on it. I brought it into the office to do a network install but it was taking significantly longer than I had time for. (It turns out Windows 7 is popular inside Microsoft too.) </p>
<p>My external DVD drive wasn&#8217;t handy so I went looking for instructions on creating bootable USB installer media. I ended up <a href="http://thelazyadmin.com/blogs/thelazyadmin/archive/2009/01/08/installing-windows-7-via-usb-or-sd-media.aspx">here</a>, which has instructions that were simple enough to create the image. I used a random 4GB USB flash drive, so I wasn&#8217;t expecting blazing performance.</p>
<p>I was surprised, however: Even on a relatively underpowered netbook, installing off USB flash media was significantly faster – and quieter! – than installing from DVD.</p>
<h2>Green betas</h2>
<p>Another advantage <a href="http://thelazyadmin.com/blogs/thelazyadmin/archive/2009/01/08/installing-windows-7-via-usb-or-sd-media.aspx">the instructions I used pointed out</a> is that USB media is reusable. Call it eco-friendly beta testing: No more burned DVDs that need to be recycled at the end of the beta.</p>
<p>At the end of the installation, I have a netbook running Windows 7 beta. The beta didn&#8217;t come with drivers for the 2133&#8242;s integrated video but the Windows Vista drivers work flawlessly and are good enough to support Aero.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.joyofsetup.com/2009/01/18/installing-windows-7-beta-from-a-usb-stick/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Windows 7 &amp; Server 2008 R2 betas now available on MSDN</title>
		<link>http://www.joyofsetup.com/2009/01/07/windows-7-server-2008-r2-betas-now-available-on-msdn/</link>
		<comments>http://www.joyofsetup.com/2009/01/07/windows-7-server-2008-r2-betas-now-available-on-msdn/#comments</comments>
		<pubDate>Thu, 08 Jan 2009 06:16:41 +0000</pubDate>
		<dc:creator>Bob Arnson</dc:creator>
				<category><![CDATA[Etc]]></category>

		<guid isPermaLink="false">http://www.joyofsetup.com/2009/01/07/windows-7-server-2008-r2-betas-now-available-on-msdn/</guid>
		<description><![CDATA[Get &#8216;em here. If you&#8217;re not an MSDN (or TechNet) subscriber, they&#8217;ll be available for the masses on Friday. Check The Windows Blog for details. No sign yet of a matching Windows SDK, which will come in handy to figure &#8230; <a href="http://www.joyofsetup.com/2009/01/07/windows-7-server-2008-r2-betas-now-available-on-msdn/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p><a href="http://msdn.microsoft.com/en-us/subscriptions/default.aspx">Get &#8216;em here.</a> If you&#8217;re not an MSDN (or TechNet) subscriber, they&#8217;ll be <a href="http://www.microsoft.com/windows/windows-7/">available</a> for the masses on Friday. Check <a href="http://windowsteamblog.com/blogs/">The Windows Blog</a> for details. No sign yet of a matching Windows SDK, which will come in handy to figure out the new MSI 5.0 features…</p>
]]></content:encoded>
			<wfw:commentRss>http://www.joyofsetup.com/2009/01/07/windows-7-server-2008-r2-betas-now-available-on-msdn/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

