Beating Microsoft to the Punch

There was an interesting story earlier this year about a Russian guy who created a patch for the Windows Meta file (I've linked to the original above).

Here's the introduction to the ZDNet interview with Ilfak Guilfanov...

"In a rare move, security experts at the SANS Institute's Internet Storm Center and at F-Secure are advising people to download Guilfanov's patch, which aims to fix a flaw in the Windows Meta File.

This vulnerability has spawned a torrent of exploits that seek to take advantage of the wait while Microsoft works on its own patch. The software company has said it will release a WMF patch on Jan. 10, as part of its monthly security update cycle. That would come 14 days after the flaw was first publicly disclosed.

People eager to download the unofficial patch inundated Guilfanov's personal Web site, which had to be temporarily shut down as a result. He has since reduced his home page to its bare minimum.

In this case, Guilfanov, a senior developer at DataRescue in Liege, Belgium, has gained the trust of security companies, which usually are reluctant to suggest that customers use a patch from someone other than the original maker of the software.

BUT, what's interesting is that an "open source" patch is now being recommended by MICROSOFT. Pinch me. Has the world changed overnight? Alternate universe? What's going on, people? Where's the profit in this?

Microsoft iPod parody

How MS would do the iPod packaging and marketing -- incredibly, this was done internally at Microsoft.... to what end, I wish I knew!