Security update for Visual Studio

Last Tuesday, Microsoft released atypical, out-of-band security updates for vulnerabilities in ATL. Michael Howard discusses them on the Security Development Lifecycle blog. The security update page contains links to patches and upgrades for affected Visual Studio components, going back to Visual Studio .NET 2003. If you’re using Visual Studio 2008 SP1, you’ll be interested in the following:

I’m downloading this once and sharing it on my network rather than downloading it from Microsoft Update n times.

 

Posted in Etc

On becoming Cantabrigian

In January, I got to participate in a first-of-its-kind event. Unfortunately, the event was Microsoft’s first-ever mass layoff. As was wildly reported, Microsoft closed ACES Studio as part of that layoff. As ACES was my home away from home (and, on occasion, more home than my home<g>) for the last two years, I found myself freshening my resume in a less-than-stellar economy. Luckily, I remained an employee and was able to continue working on WiX while looking and interviewing for jobs.

Long story short: Later this week, I join the Microsoft Application Virtualization team. App-V, as it’s known, provides an alternative to traditional setup and servicing by isolating applications inside a "virtual bubble."

For apps that fit in an App-V bubble, delivering a ready-to-run package with no "setup step" is enticing. Add in streaming updates that avoid many of the pains of patching and you can see why I’m convinced that App-V has a big future in application deployment.

Fifty degrees of separation

The App-V team is based in Cambridge, Mass. (How can you not love the New England Research & Development Center name?) Over the next few weeks I’ll be loading up my bag of holding and moving from Redmond to Cambridge. As I used to live in New England, I’m excited to live in the Boston area. It does, however, mean a change in my participation in the WiX community.

The work I routinely do for WiX will continue as before—after all, that needs only a computer and a compiler. But as Rob pointed out, the WiX virtual team has historically been Microsoft developers working together in weekly face-to-face meetings. Those weekly meetings were how volunteers kept engaged, designed features, brainstormed bug fixes, wrote code, scheduled releases, discussed the latest rumors, and generally gelled as a team. Being 3000 miles away and three time zones ahead will make it more difficult for me to participate that way. (I can either stay up really late or get up really early!)

One possibility is setting up a WiX team in miniature for those on the east coast interested in contributing. (We’ve dubbed that theoretical group "WiX East" and are already preparing for the inevitable musical turf wars.)

We’ll see how it goes, pick what works, and drop what doesn’t.

In the meantime, I’m looking forward to starting my new job with an impressive team on an exciting product. And along the way I’m sure we’ll find some interesting intersections between App-V and WiX…

Installing Windows 7 beta from a USB stick

I’m enjoying the Windows 7 beta – I’ve installed it on four machines so far. (That’s four more than the last beta OS I had the opportunity to install.) I’ve done two installs from DVD, one from network boot (via Windows Deployment Services), and my most recent install was my first from USB media.

My HP 2133 netbook is a great little machine. It’s small but has a keyboard that is exactly as small as it can get and still be usable. WXGA on an 8.9-inch display is tiny but perfectly readable. I even wrote most of the MSI 5.0 features in WiX using it last Thursday.

With 1GB of RAM, the 2133 runs XP just fine, so I was interested to see how well Windows 7 ran on it. I brought it into the office to do a network install but it was taking significantly longer than I had time for. (It turns out Windows 7 is popular inside Microsoft too.)

My external DVD drive wasn’t handy so I went looking for instructions on creating bootable USB installer media. I ended up here, which has instructions that were simple enough to create the image. I used a random 4GB USB flash drive, so I wasn’t expecting blazing performance.

I was surprised, however: Even on a relatively underpowered netbook, installing off USB flash media was significantly faster – and quieter! – than installing from DVD.

Green betas

Another advantage the instructions I used pointed out is that USB media is reusable. Call it eco-friendly beta testing: No more burned DVDs that need to be recycled at the end of the beta.

At the end of the installation, I have a netbook running Windows 7 beta. The beta didn’t come with drivers for the 2133′s integrated video but the Windows Vista drivers work flawlessly and are good enough to support Aero.

Posted in Etc