Following Windows XP Service Pack 2 released in August 2004, Microsoft finallz releases the long waited Windows XP SP3 which includes all previously released Windows XP updates, including security updates and hotfixes, and select out-of-band releases.

Microsoft is not adding significant Windows Vista functionality to Windows XP through SP3. However, SP3 does include Network Access Protection (NAP) to help organizations that use Windows XP to take advantage of new features in the Windows Server® 2008 operating system. Further, Windows XP SP3 does not include Windows Internet Explorer 7

Previously Released Functionality

• MMC 3.0
• MSXML6
• Microsoft Windows Installer 3.1
• Background Intelligent Transfer Service (BITS) 2.5
• IPsec Simple Policy Update for Windows Server 2003 and Windows XP
• Digital Identity Management Service (DIMS) DIMS makes it possible for users who log on to any domain-joined computer to silently access all of their certificates and private keys for applications and services. Peer Name
• Peer Name Resolution Protocol (PNRP) 2.1
• Wi-Fi Protected Access 2 (WPA2)

New and Enhanced Functionality

• “Black Hole” Router Detection
• Network Access Protection (NAP)
• Descriptive Security Options User Interface
• Enhanced security for Administrator and Service policy entries
• Microsoft Kernel Mode Cryptographic Module
• Windows Product Activation

All details on Windows SP3 page

The 320 MB Windows XP SP3 is available for download here

InfoWorld published the 10 most common security land mines that experts say you need to avoid.

Many companies spend a small fortune and deploy a small army to secure themselves from the many security threats lurking these days. But all those efforts can come to naught when making any of these common mistakes. The results can range from embarrassing to devastating, but security experts say that all are easily avoidable.

And almost all can be done without spending one more dime.

1. A slip of the finger reveals the company secret

2. People give away passwords and other secrets without thinking

3. A trusted partner ends up not being so trustworthy with your data

4. Web-based apps can be portals to leaks and thieves

5. Hoping the worse doesn’t happen only makes it worse

6. Avoiding or diluting response leadership makes breaches worse

7. Handling breach details sloppily tips off the perp

8. Trusting "silver bullet" technology hides real threats

9. Spending unthinkingly wastes resources you might need for important threats

10. Don't save the wrong data

In short, weakest point in ICT technologies is always the same one… guess who ?

The full article is available here on InfoWorld

London police launched on 25th of February a new advertising campaign. Posters and TV ads are urging Londoners to turn in people who might be taking pictures of CCTV cameras.

"Thousands of people take photos every day.

What if one of them seems odd ?

Terrorists use surveillance to help plan attacks, taking photos and making notes about security measures like the location of CCTV cameras.If you see someone doing that, we need to know.

Let experienced officers decide what action to take." 

Other posters target households:

"you see hundreds of houses every day. What if one has unusual activities and seems suspicious"

as well as mobile phone users :

"Thousands of people have mobiles. What if someone with several seems suspicious?"

What's going on in London ? Is the Metropolitan police not busy enough ? did they become completely paranoiac ? or do they need some budget increase ?

Where is this so famous British phlegm ?

As a response, many people have already redesigned the posters to point out the absurdity of them. Some samples are available on BoingBoing.

Saw yesterday night on TV. 

Last Saturday, during powerful storm Emma,  39 years-old Lufthansa pilot attempted to land his Airbus A320 with 131 passengers in Hamburg’s Fuhlsbüttel airport.

Facing winds up to 90 km/h at the moment of the landing,  the left wing grazed the runway for a moment, but the pilot was able to stabilise the aircraft and take off.

The plane landed safely 15 minutes later on its second attempt.

All passengers and crew were unharmed and the aircraft was only slightly damaged. After having its wing tip replaced the A320 was expected to be back in service on Monday. 

Well Done Captain !  

Just after posting the article about new safety measures on US aircraft I found an interesting post on New York Times "Jet Lagged" blog titled "Airport Security Folies"

Here after a short excerpt of Patrick Smith article

" Six years after the terrorist attacks of 2001, airport security remains a theater of the absurd. The changes put in place following the September 11th catastrophe have been drastic, and largely of two kinds: those practical and effective, and those irrational, wasteful and pointless.

The first variety have taken place almost entirely behind the scenes. Explosives scanning for checked luggage, for instance, was long overdue and is perhaps the most welcome addition. Unfortunately, at concourse checkpoints all across America, the madness of passenger screening continues in plain view. It began with pat-downs and the senseless confiscation of pointy objects. Then came the mandatory shoe removal, followed in the summer of 2006 by the prohibition of liquids and gels. We can only imagine what is next…."

Continue reading it on NYT website 

On my own opinion, Airport security today is a mix between relevant and must have security measures on a side but also theatrical, annoying and ridiculous measures. Some of these measures are time consuming, put passengers and crew on their nerves for no safety added value. What does really justify them?

• Government "zero  political risk" (if something happens they will be able to tell that all possible protection measures were already taken) ?
• Fear factor = better military/law enforcement budget ?
• Security private experts / companies have highly increase their financial income since September 2001. They certainly not ready to give this golden egg away.
• Did I speak about million dollars detectors and scanners manipulated by low trained personnel ?    

but do you think air travels are safer to face well prepared, organized and motivated enemies ?

Passengers will no longer be able to pack loose lithium batteries in checked luggage beginning January 1, 2008 as new federal safety rules take effect. The new regulation, designed to reduce the risk of lithium battery fires, will continue to allow lithium batteries in checked baggage if they are installed in electronic devices, or in carry-on baggage if stored in plastic bags.

Common consumer electronics such as travel cameras, cell phones, and most laptop computers are still allowed in carry-on and checked luggage.  However, the rule limits individuals to bringing only two extended-life spare rechargeable lithium batteries, such as laptop and professional audio/video/camera equipment lithium batteries in carry-on baggage

The following quantity limits apply to both your spare and installed batteries. The limits are expressed in grams of “equivalent lithium content.” 8 grams of equivalent lithium content is approximately 100 watt-hours. 25 grams is approximately 300 watt-hours:

• Under the new rules, you can bring batteries with up to 8-gram equivalent lithium content. All lithium ion batteries in cell phones are below 8 gram equivalent lithium content. Nearly all laptop computers also are below this quantity threshold.

• You can also bring up to two spare batteries with an aggregate equivalent lithium content of up to 25 grams, in addition to any batteries that fall below the 8-gram threshold. Examples of two types of lithium ion batteries with equivalent lithium content over 8 grams but below 25 are shown below.
• For a lithium metal battery, whether installed in a device or carried as a spare, the limit on lithium content is 2 grams of lithium metal per battery.
• Almost all consumer-type lithium metal batteries are below 2 grams of lithium metal. But if you are unsure, contact the manufacturer!

Indeed this regulation will first be applicable on US registered aircrafts but as usual we may see this new regulation applicable on all International flights. 

Usually all electrical devices, including batteries, are subject to safety certification so either their are considered to be safe or manufacturer has to review quality and safety of its products. 

I really wonder on which basis these new rules are made from. Did anyone saw any incident statistics, reports etc.. (apart Sony made laptop batteries) or is it just one additional constraints air travel passengers will have to deal with.

After lighters and matches in 06, liquids in 07, 08 will add batteries to the restriction list.

All details are here as well as the complete list of items with air travel restrictions

TGV tests Wi-Fi + satellite link in three TGV trains on its Eastern network. If the experiment proves successful the new service should be generalized, from 2009, to all 52 oars network East.

With combines effort of satellite link and wireless network, in locations, such tunnels and train stations, where the satellite link cannot be established, the wi-fi network takes over to maintain the access to the Web without interruption.

French railways company SNCF previously conducted unsuccessful test using GPRS data network before launching a 2 years research and preparation program to implement this dual solution. Among technical difficulties to overcome are these related to 320 km/h TGV trains speed which causes instability and vibrations. 

The project is done in a partnership with Orange(France Telecom mobile operator), Capgemini, Alstom Transport and Eutelsat.

SNCF will put on board of its TGV a dedicated Web portal providing information about destinations, weather forecast, News, traffic information as well as a real time tracking service. From a technical point of view, TGV trains are fitted with a server where all portal content is loaded prior the journey in order to minimize bandwidth consumption due to its high cost. The tested system has been designed to provide simultaneous web connection for 14 per cent (50 users) of the total capacity of each TGV train (350).

The business plan is not defined yet, but the widespread of the system on TGV Eastern Europe network would represent an investment of 120 millions USD over 4 years. First price estimation given by SNCF Passenger service would be a flat 4-5 USD to access the Web portal during the whole journey and a 4-5 USD per hour to access the Internet.

A very interesting project and definitively a real challenge to maintain permanent web connectivity during a train journey at more than 300 km/h where the 16'000 volt power line running over the train may also create some electro-magnetic interferences and without mentioning all micro interruptions of the satellite link each time the train pass under a bridge or when dense foliage is found within the satellite's line of sight.

Any reader who already had the chance to test the reliability of the service ?

More infos (in French): Journal du Net, CNet France.

As previously announced on this site, Adobe released earlier this week, Lightroom 1.3 as well as Camera Raw 4.3.

At the same time Adobe Labs offers a public prerelease of its Software Development Kit (SDK) Lightroom 1.3 export. This kit allow developers to enable communication with Lightroom 1.3 and 3rd party tools, web sites and devices. More plugins will certainly available soon on Lightroom Exchange site.

Adobe Photoshop Lightroom 1.3 Export SDK comes with two very useful plugins: 

• FTP Export
• Flickr Upload.

Once dowloaded and uncompressed, plugin modules have to be installed on your computer on locations where Lightroom can find and load them.

• Windows XP: ..\Documents and Users\username\Application Data\Adobe\Lightroom\Modules
• Mac OS: ~/Library/Application Support/Adobe/Lightroom/Modules
• Windows Vista:..\Users\username\AppData\Roaming\Adobe\Lightroom\Modules

I just quickly tried the Flickr upload module and found it easy to use and indeed very convenient as it avoids to export files on a local folder and then upload them using Flickr Uploader page or tools.

Something tells me that these plugins will become very popular  

Adobe has just released the latest versions of Lightroom and Camera Raw.

Lightroom 1.3 comes with the following improvements:

New file formats supported in the 1.3 release are:

• Canon 1Ds Mark III
• Canon PowerShot G9
• Nikon D3
• Nikon D300
• Olympus E-3
• Olympus SP-560 UZ
• Panasonic DMC-L10

Following issues have been correct:

• Performance issue on writing XMP metadata
• Printing with the native resolution option enabled no longer sets the wrong dimension for portrait oriented images
• Bayer demosaic and luminance noise reductions algorithms
• Canon & Fuji compressed Raw formats supported.

New enhancements:   

• The import dialog now offers the option to render 1:1 previews   
• Export dialog layout has been enhanced
• Lightroom Preview Export SDK is available for developers to create and distribute Export Plug-ins.

This update also brings OS X 10.5.x compatibility with Apple’s new Leopard OS.

Windows version is here
Mac OS version is here

Camera Raw 4.3 has also been released.

Windows version update is here
Mac OS version is here
 

Searching the web, I found several online photo editors, and among there some which provide the possibility to upload your photos directly to your favorite site where you can share them.

It was not a surprise to discover that sites such Flickr and Facebook are the most integrated with these online photo editors, closely followed by Picasa and Photobucket. If all online photo editors propose basic editing tools such resize, crop, color balance, etc.. it's difficult to find one which propose all available options. Some tried to be as close as possible from Photoshop, proposing layer tools or distortion tool.

Fine tuning and precise corrections are difficult to obtain but at the opposite these tools, specially when you can edit an already published photo, give you the possibility to adjust your photos from any computer without having to purchase/install software on computers.

My 3 preferred ones are:

• Splashup (formerly Fausto) which is certainly the most complete one. Photoshop looks alike, so you feel comfortable with only if you have some knowledge about Adobe products. Loading a photo may be very slow from time to time (my ISP fault or are they victim of their success ?)

• PicNik which proposes an user friendly interface and does not require Photoshop knowledge. Advanced editing tools, touch-up tool, frames etc.. are only available with the Premium version which cost 25 USD/year. This editor seems to be the easiest and fastest editor available.
• Phixr is a simple one but fast and well integrated too with most usual image sharing sites but not providing preview of the photo you want to edit is a real problem if you do not have title on your photos.
• Some other solutions to may want to give a try : Cellsea, Pixer.us, Snipspot, Fotoflexer, Pikfix, Fanstudio, Online Phototool,  Flauntr, Fotocrib, etc..

  Soon, Adobe will also release an online version of its flagship software "Photoshop". Adobe Photoshop Senior Product Manager John Nack published on his blog earlier last month few lines about "Photoshop Express".

My 1st post about Flickr tools is here