Microsoft, not so good with programming

Microsoft, not so good with programming

It is a nightmare for web developers to make a website completely cross browser compatible whenever they think of Internet Explorer. It is still out of my mind (and a lot of lazy developers) that why people at microsoft are not making something that is compatible with others. It is fine for more of the developers to find webkit a little dissimilar to MOZ; but everything, even the size of pixels in most of the cases changes in Internet Explorer. Seriously, is it so difficult to measure pixels for Microsoft guys? What are they doing in there?
I think we know the answer a little. They are mostly the typical marketing people. They do not do anything good, they just do it and market it perfectly to capture maximum exposure. Unlike some other companies who develop good, and leave the rest on audience to search and get good stuff.
From the beginning of times till this day, it is not explained why IE is so slow and so pathetic when it comes to render CSS. Now let us see what are they going to include in windows 8. Frankly speaking, windows 8 looks way too complicated right now, but let us see what do they have to offer there …
Another example of their extreme ignorance is that they still does not support IMAP4 on hotmail. Yes it is a 100% true! I was just developing this new application when I came to know that they do not even support IMAP4 which was a compulsory thingi for my app! So either my customers think of it as a boycott or lazyness of MS guys, I am not going to include hotmail in this venture!



Reason: They are still working with pop3. pop3 does not even support folders, and pop3 also does not support to mark an email read if its contents are fetched. It is quite impossible to do something like marking the emails or labeling the emails that were fetched previously.
Either they are just so busy in making new marketing policies for their products, or very busy counting dollars and they have absolutely no idea of quality products.
However, this must be the time to grow up! The audience should know what is better than just a name.

Submitted by: Saif-ur-rehman(Pakistan)

Sap Software

Security company launches intrusion detection system for SAP software

SAP-SOFTWARE
Security company Onapsis issued on Wednesday a key product that ensures intrusion detection systems to unveil attacks against SAP applications holding vital financial and business data.
The product known Onapsis IPS, is a collection of signatures or tell-tale signs that a hacker may be attempting to exploit an SAP system, told by the Mariano Nunez, CEO of Onapsis, headquartered in Boston. Onapsis acts insight testing and vulnerability assessment for SAP software.
The major enterprises use SAP’s ERP and CRM software to handle payroll, invoices and supply chains, forming a fundamental part of how a business is electronically controlled. The applications control very sensitive information.
SAP software has come under raising scrutiny from security researchers last few years and hackers, according to Nunez. SAP has been introducing around 60% a month for its systems and has launched more than 2,000 security patches since 2010.
The number of bandages poses a problem for system administrators, who often must close down the software and test it to make sure the patches work. It is complicated work that requires long time.
“Many businesses don’t use SAP security patches promptly,” Nunez said. “Some of them don’t even apply them at all.”
The time in between when an attack comes across to public and when the patch is applied is an open window in which hackers could be able access successfully. Although many organizations have intrusion protection or detection systems (IPS/IDS), those systems are not operated to detect SAP attacks.
To resolve that problem, Onapsis has created Snort signatures, which can be imported into most IPS/IDS appliances across the market. Nunez revealed Onapsis thought it was better to write signatures rather than to create a separate appliance, according to him.
Once the signatures are imported, managements can take decision then whether they want to cease an attack or be sent an alert when one is under way, Nunez told. SAP attacks are rarely advertized on large scale, which has led to a lower awareness for enterprises even though a breach could have a vital impact on their business if data was compromised.
“What we discovered is many companies told us they have never been hacked, but they do not have any security auditing feature enabled,” according to Nunez. He further added, “The only truth is they really do not aware. The fact they have never visualize any alerts really does not purport it is not happening.”
Onapsis IPS will be available purchase as an annual subscription, with new signatures sent monthly, Nunez revealed. The price is based on the number of IP addresses linked to the SAP software, he stated.
One of the company’s other products is X 1, a tool that will offer companies to test their ERP software for vulnerabilities and presents how those problems could describe important business information and how to fix them.

Submitted by: Saif-ur-rehman(Pakistan)