Bad Recipes: 'Windows Application Quality Cookbook'
|
News Commentary. Yum. Developers, it's time to put on your chef's hats and fire up the Windows 7 and Windows Server 2008 R2 grill. But will you burn the food? |
[Editor's Note: Posts will be shorter today because of the U.S. presidential election. Please stop in often for quick reads in between following the election coverage.]
The 45-page, revised "Windows Application Quality Cookbook" is dated Oct. 28 but was released to the Web today, Nov. 4. This new version adds compatibility information useful for developers working with prebeta code for the next desktop and server Windows versions. The contents on Page 44 really surprised me, because of what I would call Microsoft's laissez-faire Windows 7 logo policies. From the document:
In the Windows timeframe, we want to continue building on the success of Windows and expand the logo program so that it is more relevant to customers. Based on partner and customer feedback, the Windows 7 logo program will focus on ensuring that devices, systems, and applications are compatible, reliable and can perform to meet Windows standards. The proposed program for Windows 7 will have only one logo for systems, devices, and applications.
One logo to rule them allgreat. It's a good approach.
In addition, the process for gaining certification has been improved. Microsoft will not require developers to have their applications tested for certification by authorized testing authorities. Instead, Microsoft is developing a test kit you can use to ensure your application meets the certification requirements. We have significantly reduced the number of requirements. Similar to the hardware program, we have created some policies; while not linked to specific test cases, these policies will be enforced. All requirements must be met and all policies must be observed to gain Windows 7 certification.
WTH? Self-testing? I've long had problems with Microsoft's Windows logo program and expressed my misgivings about self-testing during Windows Vista development. Self-testing is a bad idea and contradicts other stated Microsoft positions about third-party applications. For starters, Microsoft has made application and device compatibility one of Windows 7's top priorities. What assurance does the logo give customers about application compatibility when developers self-test? Not enough, I say.
More importantly, Nov. 3 Microsoft released its "Security Intelligence Report" for the first half of 2008. Among the key findings: Applications accounted for 90 percent of security vulnerabilitiesat least those disclosed. If Microsoft is so serious about security, then why isn't security part of the logo program and why doesn't Microsoftto hell with third partiescertify applications?
If Microsoft is truly serious about application compatibility and security, then self-testing is the wrong approach. There is inherent conflict of interest. The coveted logo is a tempting prize. Does the Department of Motor Vehicles let people self-test for written or driving exams to obtain a license? Hell no. Neither should developers test their own products to obtain a Windows logo.
The approach isn't consistent with Microsoft's other legitimate priorities around application compatibility and security.
[Please send your tips or rumors to watchtips at live.com]


Comments (25)
Joe says:
"If Microsoft is truly serious about application compatibility and security, then self-testing is the wrong approach."
----------------------------------------------------
Thank you Joe Willcox for addressing this, the worst problem for Windows users, malware and the lack there of, security, as opposed to the alternative non-Microsoft Operating Systems.
Microsoft is not serious about security, and is only doing the bare minimum it has to on each new version of Windows, to just try and get by without massive government intervention. Which should have happened long ago, and almost did after the event of the Blaster Worm. Microsoft is more interested in selling its very bad "Onecare" anti-virus to users than it is fixing the problems it mainly create by no to terrible security in the windows setup. I'd be looking at how much cash Onecare generates for MS, as I am sure MS did look at how much Norton and MacAffee were, and wanted some of that.
What can you say about an company that charges for protection from the problem that they mostly created?
Posted by chips b malroy | November 4, 2008 3:04 PM
Does anyone actually write Windows applications anymore besides MS? Seems like everyone else is going for web applications. If the only thing you need is a browser and URL, then this is all irrelevant. Why should developers put up with the constant churn in the Windows API? One of the main reasons I hear of people moving away from .Net is that their applications are constantly be being broken, not only by new versions of Windows, but by continuous security updates in Windows Update to the .Net runtime. Very difficult when you have an enterprise application deployed and a random Windows update breaks it. Very costly. Only real solution seems to be Browser based applications with zero client install (no plug ins, no silverlight, no .net, no Windows API, no flash, etc).
Posted by smist08 | November 4, 2008 8:03 PM
Oh the hype! Oh the humanity! I'm sick of Windows 7 already. It's the same old Microsoft silly cycle again!
Posted by mgo | November 4, 2008 8:14 PM
I get it.. Chips ahoy boy must be Joe's brother and runs Linux-watch. How big of a moron can you be. Microsoft is more concerned (and doing something about it) about security than any open source project and Apple. And the numbers don't lie. There are much less security vulnerabilities for Windows than for Linux and OS/X. And Windows eclipses them in numbers. That is truely sad for both the Apple and penguin lovers. The only reason you hear anything different is becuase nobody is using the other systems, so why would you attack them. But don't be fooled, they are still being attack with greater success then Windows, but nobody hears about it becuase nobody cares and/or is using it. And for Onecare, Microsoft had to charge for it otherwise the government would come crushing down on them (again). Nobody has the government scrutnity against them like Microsoft. They can't create anything or add anything that would cause a competitor to go out of business. Thus they have to make it a thrid party app and charge for it. I would argue with anyone that with Vista, you don't even need Antivirus. But it is Google, Apple, and the open source scaredy cats that call mother Government anytime Microsoft wants to put something into the OS. Antivirus would only make sense, but since that would put Norton and McAfee out of business, the government wouldn't allow it. And boy oh boy Google, Apple, and/or open source people would be crying to the government. So bring your security argument against Microsoft. You have nothing to stand on because niether Apple or Linux are more secure. JUST LESS USED, so from a hacker persepective "why waste your time". But if they were, GOD HELP US ALL from a security stand point!
Posted by chips is a dip-sh$t | November 4, 2008 8:35 PM
Quote "I would argue with anyone that with Vista, you don't even need Antivirus."
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Really? Havent you read where if you go without antivirus on the net it takes a whopping 20 seconds for a windows vista box to be compromised. And thats normal browsing nothing special just normal websites like this one. If your gonna defend vista get your facts right cause everyone here knows when you lie. Chips b Malroy is actually very well informed and you should do some research you windows drone.
Posted by KattyMatty | November 4, 2008 8:58 PM
@smist
If you're pushing out updates without testing your apps on them, then you should not be in this industry. I don't care if it's OSX, Linux(distribution flavor of the week), Unix or some other OS.
Posted by Jim | November 4, 2008 9:13 PM
@Katty,
Can you tell me which OS was comp'd first in the Pwn2Own contest? nvm, let me help you with that one... it was OS X. Most vuln's target the easiest vector; the browser and Safari is a giant pile of turd.
Posted by Jim | November 4, 2008 9:19 PM
@Jim
If you remember there were certain conditions on the constestants because Vista was so new you couldnt use Kernal hacks because they thought nobody knew them at the time along with some other stupid rules that mean nothing in the real world. It was only a browser hack that compromised OSX not a kernel hack or other OS attack. If you look at the real world and not a stupid friggin kids game then you see the results of Vistas poor poor security model. More updates than you can imagine, more vulnerablilities than you would ever expect. Really just open your eyes.
Posted by KattyMatty | November 4, 2008 10:11 PM
"There are much less security vulnerabilities for Windows than for Linux and OS/X."
----------------------------------------------------
Can you back up this statement? Links? Quotes? Facts?
Posted by Ralph | November 4, 2008 10:34 PM
A guy named Steve Ballmer reckons Dimdows 7 is going to have to struggle to beat Vista's level of success.
http://www.theinquirer.net/gb/inquirer/news/2008/11/03/vista-going-hard-top-ballmer
Posted by Lawrence D'Oliveiro | November 5, 2008 12:53 AM
@Jim
I guess as soon as exploits are released we can hack all your computers while you test your internal applications.
You're kinda between a rock and a hard place with the updates. Either delay to do testing and risk getting all your systems hacked, or deploy and risk getting things broken. Our IT policy is to immediately deploy all security updates and clean up the mess afterwards.
Kinda an ugly world in Windowsland.
Posted by smist08 | November 5, 2008 2:13 AM
Cycle of this website.
criticism from Joe<>Comments of microsoft haters.
again and again and again...
Posted by Aria | November 5, 2008 2:38 AM
Quote chips is a dip-sh$t "Microsoft is more concerned (and doing something about it) about security than any open source project and Apple. And the numbers don't lie. There are much less security vulnerabilities for Windows than for Linux and OS/X."
-
MS is doing something about it alright. It expects you to buy Virus/Malware/Spyware/firewall software on top of the OS because it isnt up to the job.
If you believe that when 500,000 people recently lost their card details to a Windows security problem is better than a Linux system which doesnt need any of the above packages, then you are sillier than the name you chose to post here with.
-
I liked your comment about "and the open source scaredy cats" the only person scared here is MS and people with a financial interest. They used to threaten with "patent power" now that looks as if its a bit of a dud, so they go on the "indefinate" loan of PC's to get people on side. IMO the message is obvious even to a casual reader of this blog, people dont trust MS, people dont want MS but worse of all, MS doesnt even notice (or doesnt want to) The MS shillers are probably the most detrimental thing in this whole sorry affair, whilst spreading the half truths, they open up a platform (no pun intended) for the shortcomings of MS to be exposed for all to see.
-
and to the chips imposter, if you want to join in with the adults, please try to behave like one.
Posted by Goblin | November 5, 2008 2:43 AM
Heres another example of how wrong our childish poster "chips is a dipshit" can be (and also poorly timed)
-
Universities and K-12 school districts in 29 US States and 10 countries around the world move to Linux.
-
http://www.omni-ts.com/newsroom/linux-in-education.html
-
Yep, there sure looks like alot of scared open source users.
Posted by Goblin | November 5, 2008 2:59 AM
Goblin : wrote
"Universities and K-12 school districts in 29 US States and 10 countries around the world move to Linux.
-
http://www.omni-ts.com/newsroom/linux-in-education.html
-------------------------------------------------------
Adding to the mix is Russia which now mandated open source in all schools in all regions. And any school who wants proprietary software, must raise the money for the license fees themselves. Russia is a fairly huge country when I last looked. But of course the astroturfers never talk about this.
Posted by Ralph | November 5, 2008 5:13 AM
Yeah agreed, but thanks to the posts of the shillers it gives us a forum to put them for all to see!
-
Ive been looking at other tech blogs/news sites to see if the anti-ms feelings here are unique to Microsoft Watch. They are not. With the exception of Microsofts own site it seems that the vast majority of posters have reached the limit of what they are prepared to put up with.
-
Unlike Andre, I dont post without backing up the claim and its very simple to find the results I have simply by using the product that MS has never been able to get the better of: GOOGLE.
Posted by Goblin | November 5, 2008 5:22 AM
Want the facts. Then read and stop going to your same ole MS-bashing sites for your incorrect information. These little stats are undisputable. You can try and I am sure you will because that is what you live for. But facts are facts. You are nothing more than Linux salesman (or should I say Kia salesman).
http://blogs.csoonline.com/windows_vista_6_month_vulnerability_report
And for Katty fatty. Read your own article post. Not a single one of those schools have switched. They have an initiatives to look at open source and hey all the better as they will see for themselves they cannot switch. Not a single one of the states has cancelled their MS aggreements either. So that article is nothing more then more Linux FUD trying to get you geeks excited. But the truth is in the numbers.
Posted by chips is a dip-sh$t | November 5, 2008 7:36 AM
@chips is a you know what (Also suspicious of being Andre da Costa. Check the spelling error, BTW doesn't IE have a spell checker for textinputs?)
Andre/Chips please click on the name of the author of the article you cite and you'll find the following "Jeff Jones is a Security Strategy Director in Microsoft's Trustworthy Computing group."
Andre I congratulate you on working to get links and references to your claims. I understand you might want to beta test this concept anonymously (BTW is it beta or pre-beta, now that Microsoft has redefined the Greek alphabet I'm a bit confused) Anyway I digress. What I'm trying to say is good work on getting references, but please try to get them a little less biased next time.
A source I'm checking (secunia.com/advisories/product/ 13223/?task=statistics_2007) shows 17 advisories for 2007, 88% patched and 6% unpatched. The remainder are workarounds or partial fixes.
Posted by Gerardo Tasistro | November 5, 2008 8:39 AM
Any comment and commenter with some more logical comments rather than the same old beating about the bush for the last 10 years i.e. MS is:
1. blahhh...
2. Blahhhh...
3. Blahhhhhh
Please concentrate on your work rather than wasting time on putting bad comments on Microsoft and missing even a single oppurtunity for the same.
Posted by Big Cat | November 5, 2008 12:12 PM
Big Cat :wrote
"Please concentrate on your work rather than wasting time on putting bad comments on Microsoft and missing even a single oppurtunity for the same."
----------------------------------------------------
Yes, maybe we should have Andre da Costa run this column. This way no one would see any critical comments or any comments for that matter. Maybe then we could change the name of the column to "Microsoft Shill" and everyone can read about the "endless richness" of the Vista and Windows 7 experience.
lmao
Posted by Ralph | November 5, 2008 4:05 PM
Big cat,Ill start with you. Im sorry, your post is mostly incoherent and if you think its blah, then why do you come here and feel the need to respond? MS seem to be reaping the rewards of the last 10 years, and since when in MS history has MS had so many different product battles going on and not seeming to get the upper hand in any?
-
@ the chips impersonator. I mention about the migration of large organisations to open source, you respond with a Vista vulnerability report. Maybe ive missed your point, but I dont really see that as a response
-
You have failed to answer any of the questions put to you, and if I and people like me are Linux (salesmen) then why do I also support the Mac, and admit to owning (and being happy with Xbox)?
-
I have, and repeatedly said, that I am not for any platform to have the edge, Im merely after people having the knowledge and freedom to choose what is most suitable for them.
From looking at the amount of anti-ms feeling I think its pretty clear the way the wind is blowing.
-
Its funny that you mention incorrect "facts" the king of the MS misrepresentation is Andre, and not even the MS fans can support his outlandish claims. If you are calling the site owner that I linked to a liar, I will pass that on.
Are you calling him a liar?
Are you calling any site that isnt praising the mention of the MS name a liar?
How about then standing up for what you believe in and identifying yourself, and openly challenging all the sites you claim are run by liars?
Posted by Goblin | November 5, 2008 4:17 PM
@chips impersonator
Please list for me all the OS X viruses spreading--or have spread at any time in the past--as a result of normal day-to-day operations on and between the computers of unsuspecting Mac users.
We'll wait.
:crickets chirping:
Thank you. I think that takes care of the "Macs are just as vulnerable as Windows" canard.
WildList.org, the antivirus researchers organization that tracks and validates such data, currently lists 762 viruses that currently meet the In-The-Wild criteria. All are Win32 except for one Visual Basic Scripting virus (still MSFT).
Posted by Dev | November 5, 2008 9:11 PM
Hi Dev,
-
You wont get an answer! We are talking about Andre Da Co$ta here.
-
A quick message to all those who imply that Linux users are hobbyists. Find linked below an article, about the Vista opinion. But of course PCWorld is wrong aswell (according to MS Shillers) infact according to MS shillers, every site that posts something negative is wrong. Thats alot of wrong people out there.
-
http://www.pcworld.com/article/153292/windows_what_is_next.html?tk=rss_news
Posted by Goblin | November 6, 2008 4:26 AM
Oh I agree, chips is highly opinionated and often outspoken. This may give people who use and promote Linux in a bad light. There is no doubt that chips is a linux shill, who cares.
I use linux and have been for some time, I have to use windows and macs too, big deal. Maybe those complaining about microsoft the most are those forced to use it. Get a new job, better yet, start a new business where you have only linux machines, and tell us how that's working for you.
Posted by chips$x | November 6, 2008 8:50 PM
@Chips$x
-
I find it funny how all the pro MS posts (and yours is, its an attempt to be clever with the trademark MS fudge) have handles that are variations of the user chips. You would think you people could be creative. Oh no, scrub that, you cant (sorry I forgot I was talking to an MS-shiller)
-
Funny you should say about "get a new job" in the context of switching to Linux. I dont need to, our firm is in the process of switching to open source applications to replace the expensive MS ones that offer no extra features to us.
-
Ive been called a Linux shill, which is quite bizarre since I have stated my wife has a MAC (which Im impressed with) Ive never pimped exclusively one Linux distro (instead encouraged people to try out a few from distro watch) and I also admit to owning (and liking) an Xbox 360. Ive also promoted trying all options and then choosing the best one for YOU.
-
How exactly have I got anything to gain, how do I shill? Maybe you could explain. Or maybe you will just do what Andre does and that being, if you dont want to answer the question, post an advert.
-
Oh and please, if you want to be taken even slightly seriously stop with the modifications on chips's handle. Its not big or clever and is doesnt do anything for your case.
-
Remember, folks, if you havent tried open source or indeed alternatives, do so. If they were not a threat to MS ones, we wouldnt get the Andre's of this world posting here. What have you got to loose? Nothing! What do you have to gain? A better computing experience!
Posted by Goblin | November 6, 2008 9:30 PM