Intel, Numonyx create breakthrough in phase-change memory

Intel Corp. and Numonyx B.V. announced a breakthrough in the development of phase-change memory today that has the potential to allow developers to stack multiple layers of chips atop each other, thereby greatly increasing the density of the nonvolatile memory medium. Greg Atwood, a senior technology fellow at Numonyx, said the breakthrough in stackable PCM, which is being called PCM-stackable (PCMS), has the potential to create products that can replace DRAM, NOR and NAND flash memory because it will have better bandwidth, greater density and a cost per gigabyte of capacity comparable with today's solid state disk (SSD) drive products. "We believe it enables the possibility of combining the functionality and performance of phase-change memory with more NAND-like cost structure," Atwood said. "And, it's of particular interest given the challenges the existing non-volatile memory technologies are facing over the next decade as well as the continued expansion of [PCM] usage." The two companies have been working on development of PCM products since 2000, and a stackable PCM product since 2002. Al Fazio, an Intel fellow and director of memory technology development, said it's not unusual for a new memory type to take as many as 10 years to develop. Calling the discovery a "milestone" in phase-change memory (PCM) development, the researchers said they have so far only been able to build a single-layer, 64Mbit chip with the potential to be stacked with other 64Mbit chips. Atwood said that because the stacking breakthrough builds on top of PCM, a technology already in production, "it's a leading candidate amongst the various stackable memory concepts, most of which have no basis in a proven technology." Other non-volatile memories in development include graphite memory , and race track memory . Atwood added that Intel and Numonyx have no current time line for bringing PCMS products to market.

Current NAND flash memory lithography technology resides at the 32-nanometer level. Phase-change memory is made up of a glass-like material called chalcogenide that can be can be switched between a crystalline and random state using very low-voltage electricity. Future roadmaps scale NAND flash to 20 nanometers, but physical limitations present a barrier to creating anything more dense than that. The structure of a typical non-volatile memory cell includes a storage element combined with a selector element. PCM, however, currently has the ability to scale to 5 nanometers in size, and the potential of even greater densities, Fazio said.

The function of the storage element is nonvolatile storage of data and the purpose of the selector element is to connect storage elements into a cross-point array of cells. Unlike NAND flash memory, which requires a entire block of memory cells to be rewritten each time new data is stored on a device like a SSD drive, PCM allows for single bits to be changed, greatly increasing the efficiency and performance of a device. "It has features of a low-latency memory and high bandwidth so we can combine many of the good attributes ... of NAND flash, DRAM and NOR flash," Fazio said. The connection allows for the selection of a single storage element inside of a large array of cells - a billion or more. The breakthrough in stacking PCMS came with the use of a thin film selector substance that is in the same class of materials as chalcogenide and is built above the silicon substrate. It has a low current in the off state and a high current in the on state," Atwood said. "Combining the OTS with the thin film storage material, a similar material used in phase-change memories today, enables a cell that can be stacked multiple layers high." Additionally, since the silicon substrate that isn't being used as a selector, as it is in today's PCM product, can now be used for building the support circuitry used that's required to decode, read and write to the cells. "So the combination of these two advantages results in a much smaller die size that's a lower potential cost structure for the memory," Atwood said. The companies are calling the thin film selector an Ovonic Threshold Switch (OTS), which acts like a resister between the stacked layers of PCM chips. "This switch demonstrates a diode-like behavior.

On Dec. 9, the two companies plan to present a paper on their discovery at the 2009 International Electron Devices Meeting, titled "A Stackable Cross Point Phase Change Memory."

Study: MySQL use to drop under Oracle ownership

Usage of the open-source MySQL database is set to decline if Oracle succeeds in buying the software's owner, Sun Microsystems, according to new data released by analyst firm The 451 Group on Friday. While 82.1 percent of respondents use MySQL today, that figure will drop to 72.3 percent by 2014, the study found. The firm polled 347 open-source software users. Fifteen percent said that if Oracle buys Sun, they would be less inclined to use MySQL. Only 6.3 percent indicated they would be more likely to use the database under Oracle's stewardship.

Officials there have expressed particular concern over the fate of MySQL under Oracle's ownership. Oracle announced plans to buy Sun in April, but the deal has been held up while European authorities conduct an antitrust review. But some observers have argued that MySQL and Oracle's own database aren't direct competitors, meaning Oracle would have little reason to stifle it. PostgreSQL usage will get a bump as well, growing from 27.1 percent of all users to 30.5 percent by 2014. As for MySQL, some respondents want it to be maintained outside of Oracle. 32.6 percent called for it to be given to an independent organization that would further its development. In addition, MySQL's code base would live on through offshoot projects like MariaDB. According to the 451 Group study, MariaDB usage is expected to rise from zero today to 3.7 percent of all users by 2014, according to the study. Still, only 4.3 percent said Oracle should be made to sell the database off to another software company. "We do not believe that Oracle would see any of the alternatives to divesting MySQL as any less of a last resort and we do not expect Oracle to offer any concessions," 451 Group analyst Matthew Aslett said in a statement. "However, we believe that Oracle might be more inclined to open up the development of the MySQL database under its own terms in order to encourage more widespread adoption." Meanwhile, Oracle's bid to buy Sun recently received a potential boost from prominent open-source legal expert Eben Moglen, founder and executive director of the Software Freedom Law Center.

Moglen issued the opinion after a request from Oracle's legal team, according to a statement. Moglen sent a letter to the European Union on Nov. 19, telling regulators the open-source license used by MySQL, General Public License Version 2, provides adequate protection for parties outside Oracle to develop and redistribute MySQL. "Without expressing any opinion on any other aspect of the Commission's ongoing merger investigation, I believe that the issues raised concerning the GPLv2 status of the MySQL codebase do not warrant a conclusion that this transaction threatens significant anti-competitive consequences," he wrote in part.

Bookmarks for iPhone

Question: When are 2.6 million bookmarked Web sites not enough? It's a great big Web out there-worldwide, they say. Answer: When you can't find the site you're looking for, of course.

When everybody has a niche interest, why, even a collective brain sometimes falls just short of omniscient. The Open Directory Project, if you are unfamiliar, claims the title of the largest, most comprehensive, human-edited directory of the World Wide Web. And so, odds are, the 2.6 million Web sites listed by the Open Directory Project won't be enough for everyone. It's Wiki-like, curated by a globe-spanning community of volunteers. Lukas Renggli'sBookmarks for the iPhone and iPod touch aims to put the Open Directory Project in the palm of your hand. And it's mighty big, with close to 3 million sites catalogued under 410,000 categories, give or take.

The app is more flawed than the Open Directory Project itself. You can browse thousands upon thousands of categories at your leisure or use the app's integrated search engine to look for specific pages or topics. Bookmarks features a spare and unlovely but perfectly straightforward user interface. You can view any site through the app's internal browser, or launch the page in Safari where you can, of course, save the page to your own list of bookmarks. And the app lets you separate your favorites-or, rather, your favorites among that narrow and limited group of 2.6 million sites.

You can also e-mail any URL or copy the address to your device's clipboard. Naturally, the app requires a Wi-Fi, 3G, or EDGE connection to function. I was surprised to discover in the virtual infinity of the Open Directory Project, the Infinite stopped at the letter H. Turns out, the limits of the Infinite appears to constrain only the Bookmarks application. An app such as Bookmarks is not so much a Web browsing utility, as it is a dare to those of us whose favorite pastimes include finding omissions and poking holes. A search at www.dmoz.org returned 305 sites beginning with the word "Infinite," compared with just 50 in a search through the app.

Bookmarks suffers from a dearth of options-and not just the number of sites that a search returns. If it looks like a bug and acts like a bug, it's usually a bug. The watchword for anyone developing an iPhone application such as this one should be "customizable." That isn't the prettiest word in the English language, but as a technical matter, users should be free to add and subtract content as they see fit. But why make that kind of commitment? Sure, you could join the cadre of Open Directory Project editors and fill in the holes you discover. The Bookmarks app could simply include a feature that lets you add your own bookmarks to your own list of favorites.

Feel free to e-mail him.] Honestly, how difficult would that be? [Ben Boychuk is a columnist and freelance writer in Rialto, Calif.

FCC chairman calls for formal net neutrality rules

The U.S. Federal Communications Commission will move to create formal net neutrality rules prohibiting Internet providers from selectively blocking or slowing Web content and applications, FCC Chairman Julius Genachowski said Monday. It is vital that we safeguard the free and open Internet." The notice of proposed rulemaking will look not only into net neutrality rules on traditional wired broadband networks, but also explore whether to impose new rules on broadband networks offered by mobile phone carriers, the FCC said. Genachowski announced a notice of proposed rulemaking, a process to formalize a set of broadband policy principles that the FCC has embraced since August 2005. In addition to the four policy principles, Genachowski called for two additional principles to be included in a formal set of net neutrality rules. "The Internet is an extraordinary platform for innovation, job creation, investment, and opportunity," Genachowski said in a speech before the Brookings Institution. "It has unleashed the potential of entrepreneurs and enabled the launch and growth of small businesses across America. Genachowski said he wants all six principles to apply to all platforms that access the Internet.

The FCC has enforced the existing broadband policy principles on a case-by-case basis, but it has never made formal net neutrality rules. Mobile broadband services offered by carriers such as Verizon Wireless and T-Mobile have not been subject to the FCC's net neutrality principles. Broadband provider Comcast filed a lawsuit challenging the FCC's authority to enforce the principles after the agency ruled last August that Comcast had to stop slowing peer-to-peer traffic in the name of network management. Comcast argued that the FCC needs to create a rule or get authority from the U.S. Congress to enforce net neutrality. The Comcast lawsuit was filed late last year, and a ruling is pending. In addition to Genachowski's new rulemaking, a bill pending in the U.S. Congress would give the FCC that authority.

But Genachowski said there have been examples in recent years of broadband providers blocking or slowing applications, including peer-to-peer software and VoIP (voice over Internet Protocol) service. Several broadband providers have opposed formal net neutrality rules, saying they could hamper provider efforts to roll out new services and manage their networks, and to protect against attacks and bandwidth hogs. There has been one example of a broadband provider blocking political content, he noted. "Notwithstanding its unparalleled record of success, today the free and open Internet faces emerging and substantial challenges," he said. "The rise of serious challenges to the free and open Internet puts us at a crossroads. Or we could take steps to preserve Internet openness, helping ensure a future of opportunity, innovation, and a vibrant marketplace of ideas." A Comcast spokeswoman said the company would comment soon. We could see the Internet's doors shut to entrepreneurs, the spirit of innovation stifled, a full and free flow of information compromised. Representatives of AT&T, Verizon Wireless and CTIA, a trade group representing mobile carriers, weren't immediately available for comment.

In addition, Genachowski proposed two new principles. There are four existing broadband principles that would be formalized: - Consumers are entitled to access the lawful Internet content of their choice. - Consumers are entitled to run applications and use services of their choice, subject to the needs of law enforcement. - Consumers are entitled to connect their choice of legal devices that do not harm the network. - Consumers are entitled to competition among network providers, application and service providers, and content providers. The first would prevent Internet access providers from discriminating against particular Internet content or applications, while allowing for reasonable network management. Genachowski will seek to launch a notice of proposed rulemaking during the FCC's October meeting. The second principle would ensure that Internet access providers are transparent about the network management practices they implement. The notice will ask the public and interested companies for feedback on the proposed rules and their application, such as how to determine whether network management practices are reasonable, what information broadband providers should disclose about their network management practices and how the rules apply to differing platforms, including mobile Internet access services, the FCC said.

Avaya's Nortel buy might not power it over Cisco

Even after it buys Nortel, Avaya won't dominate Cisco in the battle for business-communications customers, according to a new study. The rise and fall of Nortel   The numbers released Monday put Cisco ahead with 28.7% of sales, followed by Avaya with 18.4% and then Nortel with 9.9% - a combined total of 28.3%. The numbers are for North American sales. IntelliCom Analytics says that in the third quarter of this year, Cisco scored No. 1 in sales of business communications gear, outstripping number two Avaya and number three Nortel's revenues combined.

Global numbers are due out in a week or so. At the VoiceCon conference this fall, analyst Alan Sulkin, president of TEQConsult Group said, "They're going to be a powerhouse. Analysts have said that one key reason for Avaya buying Nortel is that the deal would give the combined entity a dramatic lead in the race for business customers. The last time somebody had a marketshare like this was AT&T in 1900." At the same show, analyst Zeus Kerravala of the Yankee Group, quoted the combined Avaya/Nortel as holding 42% share of the North American market. While Avaya clearly improves its position either way, how much is open to interpretation, says Frank Stinson, partner and senior analyst with IntelliCom, who wrote "Intellicom Market Performance Dashboard 3rd Quarter 2009." Both measurements are muddy because VoIP PBXs and peripheral systems aren't as cleanly measurable as were traditional PBXs and the phones that connected to them, he says.

The difference between the numbers discussed at VoiceCon and those from IntelliCom is that the stats quoted at VoiceCon referred to numbers of phone line equivalents each vendor shipped vs. the total sales reaped for the products as measured by Intellicom. VoIP servers can be sold as software with hardware from a separate vendor a range of peripheral hardware and software. A long-term communications vendor such as Avaya might encourage its customers to upgrade to a hybrid of traditional TDM gear with VoIP products whereas Cisco, which never sold TDM gear, would encourage its customers to rip and replace, he says. So a customer could buy a VoIP server but keep its traditional PBX in service via a gateway and make continued use of the old handsets, he says. That can also skew numbers, he says. "It's not apples to apples," Stinson says. "I think what the numbers show is it gives Avaya a good shot at giving Cisco a run for its money." As for IntelliCom's new study, it doesn't mark the first time that Cisco's No.1 ranked revenues outstripped the combined total for Avaya and Nortel. Regardless, Cisco has held the No.1 spot consistently since the second quarter of 2007, he says.

It achieved that mark in the third and fourth quarters of last year as well, Stinson says. Regardless of the horse race for the first-place ranking, there is a battle going on for Nortel customers, he says. Its competitors, including Cisco, want to use the uncertainty caused by Nortel's bankruptcy as leverage to grab away as many of those customers as they can. Avaya clearly wants to capture as many as it can through the purchase of Nortel. Stinson says that Nortel customers ought to write down their immediate communications needs and their likely communications needs in the future.

At that time, they should see how well needs match up with Avaya plans and decide whether to stick with Nortel or to look elsewhere, he says. It should compare those needs with the road map that Avaya says it will issue within 30 days after its purchase of Nortel is complete. They should look at specifics of the road map such as what Nortel devices Avaya will continue to support, which ones it won't and what its migration path is for replacing the products it cancels, he says.

Lotus goes after Microsoft's 'ridiculous and fabricated' figures

Lotus Software GM Bob Picciano has grown tired of the "hot wind" blowing out of Redmond carrying claims that Exchange is displacing Notes and is singling out CEO Steve Ballmer and COO Kevin Turner as the main culprits spreading "ridiculous and fabricated" information. They are still utilizing capabilities from other aspects of the Lotus portfolio," said Picciano. Exchange alternatives: Front ends and back endsA look at Exchange 2010 "Microsoft is making claims in the marketplace around 4.7 million people have exchanged e-mail from Notes to Exchange and that is just a ridiculous fabricated figure," said Picciano, who took the reins at Lotus in 2008. "Every time they sell a [client access license] they count that as a competitive migration." "People need to recognize that Kevin Turner and Steve Ballmer have blown a lot of hot wind from Washington and there is not much substance or truth to what they are espousing in the marketplace," Picciano said. "They were so bold as to say there are entire countries that have migrated off of Notes and that is utterly ridiculous." Picciano says all the talk has "got me pretty worked up that they would be so bold to make such erroneous statements and not be challenged." The Lotus Software GM says many of the reference companies cited by Microsoft when it made its "4.7 million people" comment in July "are still licensing Lotus Notes technology and still utilizing e-mail and applications from Lotus. At Microsoft's annual meeting this summer for financial analysts, Turner heaped on more numbers during his presentation at the event. "We've taken out almost 13 million Lotus Notes [seats] the past three years. … Now, the thing that I would tell you is there's still 15 — we count — there's still 15 million out there." He cited SharePoint Server as the "fastest-growing, hottest product in the history of Microsoft," and pegged it as a catalyst in the fight against IBM. Picciano said the counter was last week's news that U.S. Bank was replacing Microsoft's SharePoint platform by standardizing on the Notes 8.5 client and would roll out Lotus Connections social networking tools, the Sametime real-time platform and Lotus Quickr, which is IBM's alternative to SharePoint.

He said PNC Bank and Continental Tire are joining U.S. Bank in getting rid of Microsoft's Exchange, Office and SharePoint. On Tuesday, Picciano threw out his own numbers saying a total to 15,421 companies have picked IBM over Microsoft since 2008 in the worldwide integrated collaborative environment market as defined by IDC. In addition, Picciano says customers are expanding their investment in Lotus software and he cited as examples Accenture, BASF, Chrysler, Coca-Cola, Colgate-Palmolive, Continental AG, Finishline, General Motors, GlaxoSmithKline, Gruppo Amadori, KBC Bank, Nationwide, Novartis, Phillips Electronics and PNC Bank. In January, Picciano said more than 12,000 new companies in 2008 bought their first Notes/Domino licenses. People understand what Kevin's motivation is and the prancing around in front of partners and talking about this. And he said half of the Fortune global 100 are Notes/Domino users. "It's important to put [Microsoft's claims] into perspective and call it what it is, a bunch of fabrication," Picciano said. "Kevin is feeling that he is under a bit of pressure.

It's duplicitous and overshadows the real truth." Follow John on Twitter.

What's With Microsoft's FUSE Social Networking Lab?

Microsoft has created a research group to look into how the company can extend its reach into social networking. The new group was announced in an e-mail sent to Microsoft employees by Chief Software Architect Ray Ozzie, who will oversee the project, according to TechCrunch. The new research team will be called Future Social Experiences (FUSE), and will be headed by Microsoft General Manager Lili Cheng. FUSE reportedly merges three existing research groups within Microsoft into a larger collaborative group.

In Ozzie's world, social networking is transforming how we use computers including our computer's operating system. Ozzie's memo explaining the project is scarce on details, and only emphasizes broad concepts that will guide the new research lab. So FUSE will focus on products "where 'social' meets sharing; where 'social' meets real-time; where 'social' meets media; where 'social' meets search; where 'social' meets the cloud plus three screens [PC, mobile device, television and online] and a world of devices." That last quote may sound like a bunch of nonsense, but it does give us a vague idea of what Microsoft might be trying to do. Microsoft is already trying things like this with Office 2010's SharePoint Workspace collaboration software, as well as Office 2010's Web apps. Clearly, Microsoft isn't too interested in creating another Facebook or MySpace competitor; instead, Microsoft's concept of social is more likely to focus on collaboration and sharing information instead of posting photos and sending pokes on a Website.

We could also see items similar to the Xobni plug-in for Outlook that turns your e-mail client into a social networking hub. These may be just guesses, but you can bet that unlike Facebook, Twitter, or other social networks, Microsoft is interested in introducing products that it can sell and make money from on day one.   So whatever FUSE does work on, I think it's safe to assume the group's projects for everyday consumers will be tied to new or existing desktop programs, with a focus on Microsoft's productivity applications.

NASA: With Atlantis docked, work begins today

With the NASA space shuttle Atlantis successfully docked at the International Space Station this afternoon, hatches have been opened and work has begun 210 miles above the Earth. Atlantis is carrying some 27,250 pounds of spare parts. The shuttle, which lifted off from the Kennedy Space Center on Monday afternoon, arrived and docked at the space station at 11:51 a.m. EST this morning. The load is more than any other current space vehicle could handle.

The shuttle brought up two equipment-carrying platforms. The Atlantis crew is now ready to work with the robotic arms onboard both the shuttle and the station to begin unloading some of that gear, according to NASA. The robotic arm on the shuttle will reach into its own payload bay and lift out one of the equipment carriers and hand it off to the robotic arm on the space station. Both will be attached on either side of the station's truss or backbone during the 11-day mission. The astronauts running the inspection used a suite of cameras and lasers designed to give them 3-D views of the shuttle's heat shield. On Tuesday, the Atlantis crew spent about five hours using the shuttle's 50-foot-long robotic arm, along with its 50-foot-long orbiter boom sensor system, to take pictures of the shuttle craft's wings and nosecap, to inspect for damage that might have occurred during takeoff.

This morning, as the shuttle approached the space station, Atlantis Commander Charlie Hobaugh rotated the vehicle backwards so astronauts on the space station could take pictures of the shuttle heat shield with 800 millimeter and 400 millimeter lenses. The equipment being delivered during this mission is considered critical to the operation of the space station, according to NASA. At this point, there are only six flights left for the space shuttle fleet before it's scheduled to be retired. All of the images will be sent back to ground control, where engineers will inspect them for any problems with the shuttle's thermal protection system, which will be needed to protect the craft during the blazing temperatures it will encounter during re-entry into the Earth's atmosphere. The equipment that needs to go up is being delivered in order of highest priority. The astronauts are expected to make three space walks to unload the parts from the shuttle and connect them to the sides of the station's truss . Since this is the first mission to deliver what scientists hope will turn into a trove of spare parts, they're taking up the most important pieces.

New gadgets, prototypes to debut next week in Japan

Japan's biggest electronics and gadgets show, Ceatec, runs all of next week and many new technologies and prototype gadgets are expected to be on show. Originally developed by Toshiba, IBM and Sony for use in the PlayStation 3 games console, the Cell is expected to bring functions like real-time upscaling and processing of recorded videos. The first big news is expected on Monday afternoon when Toshiba unveils its first commercial LCD TV that includes the Cell multimedia processor, after showing a prototype of the television last year.

Panasonic will also focus on TV technology and showing a 50-inch plasma TV that can display images 3D. At the IFA electronics show in September the company said it planned to launch such a set next year, so Ceatec will provide more insight into what consumers can expect. The camera is aimed at content producers, not consumers, but the technology could eventually scale down into more compact cameras. Sony is also pushing 3D and will use Ceatec to show a new video camera that can record 3D images through a single lens. In the cell phone arena, NTT DoCoMo is planning to show a cell phone with a wooden rather than plastic case. The phone uses surplus cypress wood from trees culled during thinning operations to maintain healthy forests.

The prototype phone was made in conjunction with Olympus, which has developed a method for wooden casing, and Sharp. DoCoMo and its partners are also expected to show their progress in developing a cell-phone platform for future LTE (Long Term Evolution) wireless services. Meanwhile Fujitsu will show a new cell phone with a built-in golf-swing analyzer. The company is working with Panasonic, NEC and Fujitsu on development of a phone that can download data at up to 100M bps and upload at half that speed. The phone's sensors feed motion data to a 3D sensing program that analyzes the swing and then provides advice.

One of the hits from last year's Ceatec, Murata's unicycling robot, is due to make an appearance and show off a new trick. Each swing can also be compared against past swings. The latest version of the robot is capable of cycling at about 3 times the speed of last year's model. Specifically, the company plans to show off a technology that allows several cars to automatically follow a lead car. Nissan will also be at Ceatec showing off some of its latest research into advanced automotive IT systems. The futuristic system, which will be demonstrated in robot cars, could one day be used to allow cars to automatically move along roads in "trains" of vehicles with little input from the driver.

The exhibition, which is now in its tenth year, attracted just under 200,000 visitors last year. Ceatec runs at Makuhari Messe in Chiba, just outside of Tokyo, from Tuesday until Saturday.

10 Tried-and-True Tips for Switching Industries

With the economic recession wreaking havoc on the financial services, automotive, retail and other industries, many IT professionals in those markets who've been laid off are considering an industry switch to open up their job searches. They say diversifying one's job search will increase their odds of landing a new job more quickly. Indeed, many career experts are urging job seekers to apply for jobs in the few industries that are growing or are poised for growth despite the recession, such as green energy and technology, education, and healthcare.

But switching industries can be an uphill battle for IT job seekers. Hiring any executive is a high-risk and costly endeavor, so employers want to make sure that whomever they hire is right, can hit the ground running, and doesn't need to come up to speed. Companies often don't want to hire executives outside of their industries because it increases their risk. Consequently, that often means that employers seek candidates with experience specific to their industry. (Of course, there are times when a company specifically seeks an industry outsider to bring in a fresh perspective.) Despite the challenges associated with switching industries, doing so is not impossible. Recently, I moved from healthcare to educational publishing.

I have worked in multiple vertical markets, including broadcasting, retail, manufacturing and education. I found this particular transition very challenging, but from this-and other-experiences, I learned several valuable lessons about moving from one industry to another. Consulting or unpaid internships are options to consider if you have the opportunity and the means. I hope my lessons will help you move into a new industry and make your transition a seamless one. 1. Immerse Yourself If you're hunting for a job in a new vertical market, consider spending a week or two in the new environment. As an experienced IT leader, your expertise is extremely valuable to many organizations.

That large-scale project management expertise sets you apart. Have you overseen an ERP conversion? For every vertical market, there is a company struggling with a problem you've already solved. I had experience that a company in those markets found beneficial, and a conversation with the head of each organization led to those opportunities. This is how I got into publishing, health care and education. Start by reaching out to your existing professional network.

Through those conversations, I got the chance to guest-lecture for one of my professional colleagues as an IT industry expert. When I engineered my transition to higher education, I sought out colleagues who taught at colleges and universities, and I talked to them about their experiences and challenges. I thoroughly enjoyed the experience, and it led to further introductions to other professors, more discussions about higher ed's needs, and gave me the opportunity to explain how my work in publishing applied to their needs. Using Twitter and LinkedIn, I connected with educators all over the country and learned what troubles were universal. If you can't find connections in your professional network, social networking tools like LinkedIn and Twitter are great places to find professionals working in the vertical market you wish to enter. With those insights, I developed a pitch that expressed how my experience could help them.

They introduced me to their peers, and a new professional network was born. Specifically, I explained how my experience with open source tools, web publishing and marketing was valuable to admissions professionals in higher education and how I helped colleagues build tools to measure and improve the effectiveness of their social media campaigns. About two weeks into my social media campaign, I started to get recognized as an industry expert, even though I had never worked in the industry. With the economy being what it is, your target market is likely experiencing a major shortage of training and development dollars. I simply joined the conversation, contributed where I could, and respected those who were already there. Figure out what you can offer folks in that target market and get out there. 2. Practice Nemawashi Nemawashi is a Japanese term that literally translates to "going around the roots." The concept of nemawashi is so engrained in the Japanese culture that it is difficult to translate into English, but it is most often translated as 'laying the groundwork.' As it was explained to me, nemawashi is an informal process of quietly laying the foundation for a change by talking to the people concerned, gathering their support and feedback before any formal steps are taken, and maintaining the harmony and credibility of those involved.

This is a critical practice for gathering information about your new industry and identifying ways to help prospective employers in it. It's similar to our concept of getting buy-in, but the primary difference is that nemawashi is done quietly-almost covertly-before the idea for the desired future state is formed. I wish I had practiced nemawashi during the early stages of my current career transition. The amount of paperwork he had to do to open an IRA account was staggering. I was spending a lot of time with Jeremy, the branch manager at my local bank, to get my personal finances in order.

I helped Jeremy a few times with some simple Windows shortcuts as he was trying to copy and paste information from one form to another. It was enough for Jeremy and I to retire on. I did a little math in my head and realized that for this bank, the 20 minutes of work Jeremy was doing, multiplied by the number of IRA accounts they open (which Jeremy estimated for me) worked out to be a very large dollar figure. I shared my calculation with Steve, a colleague who was doing some programming work for Jeremy's bank. Steve liked my ideas, but said it wasn't quite practical for the bank for security reasons.

I also shared my ideas on how to trim some costs from the process. Had I practiced nemawashi with Jeremy and Steve, I could have learned about the security risk before suggesting the possible change, and perhaps I could have worked with Steve to refine and revise the idea so it more closely matched the needs of the bank. Nemawashi can help you gain support in the rookie stages, win allies, and most importantly, influence an organization in the right direction. 3. Establish Your Credibility I met Chris Brogan and Julien Smith during my days in publishing, when they were working on a book, Trust Agents, about using the web and social media to build influence, reputation and trust. Whether you have five or 50 years of experience under your belt, in a new industry, you are the rookie. One of the core premises of their book is that to have credibility in a social network, you must be "one of us." For example, if a soft drink company is trying to sell a new cola to an online community of gamers, the company can't just join the conversation with, "Hey guys, check this out." Only if an existing, valued member of the group says, "Check this out," will the recommendation have any merit.

I don't know how many times I had ideas shot down because I didn't have experience in the industry, simply because "that's not how it's done." It didn't matter that I was hired to improve things; I had no credibility with the audience and met resistance at every step. Brogan and Smith's notion of "one of us" applies to switching industries. When I moved into education and health care, though, things were different. Staff management is probably the area where this is most true. I was a trusted member of the group from the get-go because I had practiced nemawashi without even realizing it. 4. Don't Assume Your Experience Transfers Not all of your leadership experience is going to apply from one industry to another.

The industry you're in will impact the types of people your company will attract and retain, and this will shape the culture of your department more than any other factor, even when the fields seem similar. Certain aspects of budgeting can also vary from industry to industry. For example, I found that certain management techniques, such as mentoring and motivating employees with challenging projects, worked well in an advertising agency, but were completely ineffective in publishing, where a much heavier management style was necessary. One of the most common mistakes I've seen-and made myself-is miscategorizing information assets and liabilities on balance sheets and improperly valuing the assets stored on a company's IT infrastructure. This made asset categorization very clear and easy.

I learned quickly that in healthcare, an information asset has a fixed shelf life that's normally mandated by a governing body. This was also the case in broadcasting. The morale of this story? But it was not the case in publishing, as I once learned the hard way, after spending a pretty penny to store assets that had little value to the company. Understand the business as well as you can before you categorize your company's assets. 5. Don't Assume Your Experience Doesn't Transfer Some disciplines are stable enough that the differences between vertical markets are barely discernible.

A basic rule of thumb is that if an IT function is frequently outsourced, your experience in that area will be transferable. 6. Learn the Industry's Concept of Customer If you take only one thing from this list, make this it: Who is the customer for your organization or industry? Telephony, application delivery, helpdesk service, and project management easily transfer from one industry to another. In healthcare, our customer varied from conversation to conversation: It's the patient, the insurance company, the government, the referring physician, the patient's employer, and the patient's family. The reason it's so important to know the customer is because the customer truly is your boss. We all understood that it was the patient who chose our practice, and all the other customers were also working for the patient. They can fire you (and your organization) simply by taking their business elsewhere.

What's more, your understanding of the customer guides every decision you make. I've found that the most successful companies are the most customer-centric. Knowing who your organization is ultimately accountable to-and demonstrating this from the earliest point possible-will ensure that your transition is successful. I also recommend you ask prospective employers during your job interviews with them who their customer is. I recommending asking yourself, "Who is my customer," every day. If their answer ever varies, take this as a huge warning sign.

While I was consulting for a media company, the IT staff I was working with pulled me aside to tell me about one person in particular who was troublesome. If the organization can not agree on the central concept of customer, it will have an identity crisis about who it serves and will always struggle to provide exceptional customer service to its ultimate customer base. 7. Identify and Win the Troublemakers Once you're in your new job in a new industry, you have a short amount of time to identify the influential troublemakers and make them your ally. They advised me to avoid that person at all costs. I wanted to know why the IT staff felt the way they did, and if there was any merit to their feelings. Instead, I sought her out immediately. I didn't ask her those questions specifically, but I asked her what she felt the IT organization was doing right and wrong.

By having an open and honest conversation with her, I made a very powerful strategic ally, and in the process, I identified a number of solutions to some of the key issues the IT department was facing. We talked for two hours. We went on to make some great progress together, and those accomplishments were critical in helping me understand the industry, the company, and most importantly, to quickly identify where big progress could be made in a short amount of time. There is a delicate ecosystem of cash flow, and it can be disrupted at many different places. That was several years ago, and this person's name is still on my reference list. 8. Learn the Industry's Revenue Streams Who actually pays for your product or service? Do you clearly understand the industry's revenue stream?

Luckily, I was young when I made it, and I have tried to avoid it ever since. The biggest mistake of my career came in this area. My first "real" job out of college was in radio broadcasting. It was my job, I thought, to entertain the listeners and keep them tuned in to the station as long as possible. I went to work for a large FM radio station.

According to the ratings, I was pretty good at it. There was a partial power failure in the area, and about one-third of the building was without power. One evening when I came in for my shift, I found the afternoon air personality sitting in a dark control room. The transmitter was on, but we weren't able to put anything on the air or to control the transmitter. I knew the station's cash flow relied on our ability to play commercials to our audience, so I proceeded to reschedule every commercial that was missed during the previous hours. Using extension cords, power strips and wirenuts, I managed to put us back on the air nearly five hours before the power was restored.

I thought my program director would be ecstatic; I had saved several thousand dollars of revenue. I had gotten the station back on the air and reestablished our link to the audience, but the audience had turned to other stations when we fell silent a few hours before my shift began. As it turned out, I was only half right. Commercials that should have aired to a few hundred thousand people aired only to a few thousand. In the end, I was credited with saving a large portion of the revenue and making the best out of a bad situation, but I only understood a small portion of the equation that made up our revenue stream. It took nearly a week for our ratings to return to their normal levels.

I never forgot that lesson. Is it directly by the customer, or is it like the health care system where the customer has multiple agents (many with different goals and objectives) serving them and their needs, and therefore funding your cash flow? How is your industry's revenue stream supported? A clear understanding of that cash flow process well help you identify where your IT team can best contribute. 9. Acceptable Risk Always Varies You've probably had a directive from a CEO after a server malfunction that sounded like this: "We simply can not afford any more down time. The conversation immediately following sticker shock is where you and your CEO decide what is the acceptable risk-level for the organization.

Fix the problem!" So you proposed a clustered server, a disaster recovery site, or some other topology proven to increase reliability and uptime, and presented it to the CEO. That's when sticker shock sets in. Basically, it's the amount of risk the enterprise is willing to tolerate in exchange for the cost to mitigate that risk. Healthcare, for example, has a low risk tolerance for data loss: It can't afford to lose historic patient data. And you can not assume that the level of risk an organization in one industry tolerates will be the same for an organization in another industry. But comparatively, publishing has a higher risk tolerance for data loss. 10. Keep an Open Mind Just as individual organizations are at different stages in their IT systems maturity, some industries are categorically ahead or behind the curve. Keep an open mind as you move from one industry to another.

As technical folk, we find it difficult to imagine that magnetic tape is still used as a primary storage medium; however, many broadcasters are just now moving to hard disk and optical-based storage media from tape drives. J. Marc Hopkins is a Cincinnati, Ohio-based veteran of small business technology leadership in a variety of industries, including higher education, healthcare and media. He currently teaches at DeVry University and can be reached through his blog on CIO.com, LinkedIn and Twitter. He specializes in infrastructure design and consolidation, staff development, business intelligence, and business process improvement for non-profit and mission-focused businesses.

Programmer slip-up produces critical bug, Microsoft admits

Microsoft acknowledged Thursday that one of the critical network vulnerabilities it patched earlier in the week was due to a programming error on its part. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights," read the MS09-050 security bulletin released Tuesday. The flaw, one of 34 patched Tuesday in a massive security update , was in the code for SMB 2 (Server Message Block 2), a Microsoft-made network file- and print-sharing protocol that ships with Windows Vista, Windows 7 and Windows Server 2008. "Look at the two array references to ValidateRoutines[] near the end," said Michael Howard, principal security program manager in Microsoft's security engineering and communications group, referring to a code snippet he showed in a post to the Security Development Lifecycle (SDL) blog. "The array index to both is the wrong variable: pHeader->Command should be pWI->Command." Howard, who is probably best known for co-authoring Writing Secure Code , went on to say that the error was not only in new code, but a "bug of concern." The incorrect variable - "pHeader" instead of "pWI" - produced a vulnerability that Microsoft rated critical, its highest threat ranking. "An attacker who successfully exploited this vulnerability could take complete control of an affected system.

Attackers could trigger the bug by sending a rigged SMB packet to an unpatched PC. As he did in July when he admitted an extra "&" character in a Microsoft code library created a widespread vulnerability in most company software - and software crafted by third-party developers such as Sun, Cisco and Adobe - Howard argued that the SMB 2 mistake was virtually impossible to catch without a line-by-line review. "There is only one current SDL requirement or recommendation that could potentially find this, and that is fuzz testing," said Howard. "The only other method that could find this kind of bug is very slow and painstaking code review. Humans are fallible, after all." Fuzzing - subjecting software to a wide range of data input to see if, and where, it breaks - did uncover the bug "very late in the Windows 7 development process," Howard said. This code was peer-reviewed prior to check-in into Windows Vista; but the bug was missed. Although the preview versions of Windows 7 that Microsoft handed out to the public - both the beta from January 2009 and the release candidate posted in May - included the bug, Microsoft caught it in time to patch the RTM, or release to manufacturing, final code that will officially ship next Thursday. That vulnerability, which received attention because exploit code went public , also affected Windows 7 prior to the RTM build.

The SMB 2 bug in question was not the one that Microsoft publicized last month in a security advisory. Howard also said that he thought Microsoft's SDL process has handled the "low-hanging bugs" in the company's code, leaving what he called "one-off bugs" that are difficult to detect using automated tools. "The majority of the bugs I see in Windows are one-off bugs that can't be found easily through static analysis or education, which leaves only manual code review, and for some bug classes, fuzz testing," he said. "But fuzz testing is hardly perfect." Most analysts this week urged Windows users to put the MS09-050 patches on a high-priority list, if only because exploit code for one of the three SMB 2 vulnerabilities was public knowledge. Microsoft echoed that in its monthly deployment recommendations . This month's security updates, including MS09-050, can be downloaded and installed via the Microsoft Update and Windows Update services, as well as through Windows Server Update Services.

Boise State ditches Cisco DNS

Boise State University, the largest university in Idaho, has replaced its aging Cisco Network Registrar software with appliances from BlueCat Networks that it says are easier to manage and less expensive to operate for Domain Name System  and Dynamic Host Configuration Protocol services. The fiber-optic backbone network is being upgraded to 10G Ethernet in December, with 100Mbps bandwidth to the desktop. Boise State's network links more than 170 buildings spread across its 175-acre campus in downtown Boise. The network carries data and voice traffic, and it supports 2,300 IP-based phones.

But when it comes to core network infrastructure services such as DNS and DHCP, the university decided Cisco's Network Registrar was too expensive to operate. Boise State is a Cisco shop; the university uses all Cisco switches, routers, IP phones, wireless access points and wireless controllers on its network, which supports 21,000 students, faculty and staff. Case study: The Google-ization of Bechtel   Boise State isn't the only organization to discover that it could save money by switching from DNS software to DNS appliances. Boise State had the same problem. The Nevada Department of Corrections recently bought DNS appliances from BlueCat rival Infoblox to replace DNS software from Novell that was requiring too much time from network administrators. Until this summer, the university was running an old edition of Cisco Network Registrar - Version 5.5, which was at the end of its life - on a Windows server for its DNS and DHCP services. "It was very limited as far as what was actually in the database for DNS and DHCP, and what you could see through the [graphical user interface]," says Diane Dragone, network engineer at Boise State. "There was no easy way to see what was really in the database except through command line tools." In addition, Boise State had to do custom coding in order to make this older version of Cisco Network Registrar work with all the vendor tags needed for DHCP. Boise State needed to upgrade the Cisco Network Registrar software, but that option was too expensive, Dragone says.

Dragone explored several alternatives, including DNS software from Novell, Microsoft and Men & Mice. Cisco ended support for Cisco Network Registrar Version 5.5 in May 2006, and it is now selling Version 7.0 of the software. "We didn't want to pay the price for upgrading the software; it became extremely expensive," Dragone says. But eventually she zeroed in on appliances, and ended up testing devices from BlueCat and Infoblox. The retail cost of the two appliances was $26,000. "It came down to cost," Dragone says. "Plus, there were a couple things in the [interface] of the management system that I liked better, but they were very small." Dragone said installation of the Adonis 1000s was easy. "I spent a few weeks on my own learning the interfaces on the Adonis system, the GUI interface and the command-line interface, until I had a good comfort level. Boise State bought two BlueCat Adonis 1000 appliances, which are set up to be redundant to each other. Then I did a testbed of two small buildings…to roll them onto the system for DNS and DHCP so we could test our Active Directory integration and our VoIP to make sure we had no issues," she explains.

She says she can patch the appliances in the middle of the work day, rather than scheduling off-hours maintenance. Dragone said it took three weeks to migrate the entire campus network to the DNS and DHCP services from the BlueCat appliances. "We had no helpdesk calls as a result of the conversion," she says. "People didn't really know it happened." Dragone's favorite features of the Adonis system are the search capabilities and the instantaneous replication between the master and slave systems. Boise State hasn't experienced any outages or other significant problems with the BlueCat appliances. "I have no complaints whatsoever," Dragone says. "I like all the reports that you can look at. That has really come in handy." Operating modern appliances is a lot easier than keeping aging software running, Dragone says. "There are savings headache wise," Dragone says. "I spent an entire week in December trying to figure something out that never got resolved. The other thing I really like is the tool for checking your DNS database before you deploy your configuration. There were a lot of band-aid fixes on the old system to the point where we were shuffling around where the DHCP was coming from." Cisco declined to comment for this article.

Among BlueCat's higher ed customers are UC Berkeley, UCLA, the University of Michigan and the University of Calgary. Branko Miskov, director of product management at BlueCat Networks, says more universities like Boise State are migrating to appliances for DNS and DHCP services. This segment now represents more than 10% of BlueCat's sales. "We've actually had some pretty significant traction in the higher ed market…in the last 18 months," Miskov says. "They're a little more diverse in terms of the feature sets they use, whereas a lot of enterprises are pretty much uniform. The dorms have different requirements than the university buildings, so they really use the full extent of our gear." Miskov says universities are upgrading their core network services in response to the explosion of IP devices in dorm rooms, such as computers, PDAs and gaming consoles. "Each dorm room might require three or four IP addresses, and that's not even thinking about the faculty requirements," Miskov says. "For those that are rolling out VoIP, that introduces a whole slew of new IP addresses into the mix and makes it harder to manage."

Gonzalez pleads guilty to TJX, other data heists

The man described by federal authorities as the mastermind of the massive data thefts at TJX Companies Inc., Heartland Payment Systems and other retailers today pleaded guilty to charges in a 19-count indictment that include conspiracy, wire fraud and aggravated identity theft. That case was being prosecuted separately in New York but was merged with the case in Boston under a plea agreement negotiated with prosecutors a few days ago. Albert Gonzalez, 28, of Miami, also pleaded guilty to one count of conspiracy to commit wire fraud related to a data theft at Dave & Buster's restaurant chain.

Gonzalez is scheduled to be sentenced Dec. 8 by U.S. District Court Judge Patti Saris in Boston. Under the plea agreement, Gonzalez will serve between 15 and 25 years for both cases and will be fined as much as $250,000 for each of the charges. He faces a maximum of 25 years in prison for the charges in Boston and 20 years for the case in New York. Gonzalez will also forfeit more than $2.7 million in cash as well as multiple pieces of real estate and personal property, including a condominium in Miami, a BMW and several Rolex watches that he is alleged to have acquired through his ill-gotten gains. Gonzalez was arrested in Miami in 2008 along with 10 other individuals on charges relating to the thefts at TJX, Dave & Busters, BJ's Wholesale Club, OfficeMax, Boston Market, Barnes & Noble, Sports Authority, Forever 21 and DSW. In August, federal authorities in New Jersey indicted Gonzalez on charges involving breaches at Heartland Payment Systems, Hannaford, 7-Eleven Inc. and two other unnamed retailers. About $1 million of the money being forfeited was recovered from a container buried in Gonzalez' back yard, according to a statement released today by the U.S. Department of Justice.

Prosecutors alleged that Gonzalez, along with two unnamed Russian conspirators, stole more than 130 million credit and debit cards from the five retailers. It is not clear if Gonzalez was the leader of a worldwide criminal gang or merely acting at the behest of powerful crime gangs based in Russia and East Europe. Today's plea brings to an end, for the moment, to the career of a hacker who federal authorities say has been the mastermind of the biggest data thefts in U.S. history. But his actions, which his lawyer has claimed stemmed from a computer addiction , have caused millions of dollars in losses to his victims. In addition, some of the companies that were Gonzalez's victims have had to pay fines to Visa and the other card brands for being noncompliant with the credit card industry's Payment Card Industry Data Security Standard and to spend more money to revamp their security controls. TJX has publicly estimated that costs to the company from the data breach will touch $200 million . Heartland has already spent or set aside more than $12 million and is facing numerous lawsuits from affected institutions.

No 'confirming or denying' by Verizon, but Motorola's Tao Android phone spotted at CTIA

SAN DIEGO - Verizon Wireless and Google Inc. this week announced Android phones , but an earlier report that Motorola's new Tao Android smartphone (photo, below) might be announced by Verizon on Oct. 6 has not come true. At Motorola's booth at CTIA, a Motorola worker smiled Wednesday when asked about Tao, but then said, "We're not confirming anything about that, only that there will be more Android phones" in addition to the recently announced Cliq . The Cliq was on display for the first time, drawing excited attention from visitors, and will be sold by T-Mobile USA for $200. Pre-orders of the Cliq for existing T-Mobile customers begin Oct. 19, and store sales will begin nationwide on Nov 2. The Tao has excited mobile enthusiasts because it is reportedly the thinnest slider QWERTY-keyboard smartphone, measuring 13.7 mm thick (about half an inch) and sporting a 3.7-inch touchscreen display, and 16 GB of internal storage. A Verizon spokesman said Wednesday, "We are not confirming or denying" a report carried recently by MobileCrunch that predicted Verizon would likely announce the Tao on Oct. 6 , and would ship the device on Dec. 1. However, Verizon is apparently at work with Motorola on the Tao (also dubbed Sholes or Droid), based on comments from several analysts and other observers at the wireless trade show International CTIA, who confirmed they had seen the device. MobileCrunch said it is supposed to run the next generation of Android 2.0, code-named Eclair, but that release is not going to be available until the second quarter of 2010, said Gartner Inc. analyst Ken Dulaney, meaning it would be too late for the Tao if released Dec. 1.

Microsoft's CodePlex Foundation leader soaks in stinging critique

After a stinging critique from a noted expert in establishing consortia, the leader of Microsoft's new CodePlex Foundation says such frank evaluation is welcome because the open source group's structure is a work in progress. The CodePlex Foundation's aim is to get open source and proprietary software companies working together. Sam Ramji, who is interim president of the CodePlex Foundation, was responding to last week's blog by Andy Updegrove, who said the group has a poorly crafted governance structure and looks like a sort of "alternative universe" of open source development. Updegrove, a lawyer, noted expert on standards, and founder of ConsortiumInfo.org, laid out in a blog post five things Microsoft must change if it wants CodePlex to succeed: create a board with no fewer than 11 members; allow companies to have no more than one representative on the Board of Directors or Board of Advisors; organize board seats by category; establish membership classes with rights to nominate and elect directors; and commit to an open membership policy.

He added, however, "There are some best practices [for running the boards of non-profits] that we are not as familiar with as we would want to be." Slideshow: Top 10 open source apps for Windows  Stephanie Davies Boesch, the foundation's secretary and treasurer, is the only board member with experience sitting on a non-profit's board. Despite the stinging tone in Updegrove's assessment, Ramji says he is thankful for the feedback. "Andy's been incredibly generous with his expertise and recommendations," Ramji says. "It is the kind of input and participation we were hoping to get by doing what is probably non-traditional for Microsoft but not necessarily non-traditional for non-profit foundations, which is to basically launch as a beta." For instance, Ramji says that the decision to go with only five people on the board came from Microsoft's experience that larger groups often have difficulty with decision making. Ramji says Updegrove's suggestion to have academic representation on the board was "outstanding. And basically it is re-writable. We did not think of that." And to Updegrove's point on becoming an open membership organization, Ramji says, "our goal is to become a membership organization and Andy has some excellent recommendations for that."He says the fact that Updegrove took the time to respond "in the format that he did is more proof that there is something worth doing here." Ramji, compares the Foundation's formation to the early days of a software development project. "We have said in these first 100 days we are looking at everything as a beta.

Obviously, there are some areas like contributions and licensing agreements we put a lot of time into but even those can be modified." Microsoft announced the foundation Sept. 10 with a stated goal "to enable the exchange of code and understanding among software companies and open source communities." The company seeded the group with $1 million and Microsoft employees dominated the interim board of directors and board of advisors. One is a call for a broad independent organization that can bridge cultural and licensing gaps in order to help commercial developers participate in open source. Ramji says the foundation has spent the past couple of weeks listening to feedback in "Twitter messages, email, and phone calls in order to understand what people hope this can be." Within that feedback two patterns have emerged, Ramji says. The other focuses on creating a place where open source .Net developers can gain strong backing. "Look at projects related to Mono, you also can look at NUnit, NHibernate, we really feel optimistic that the Foundation could help them gain a higher level of credibility in the open source community. Miguel de Icaza, the founder of the Mono project and the creator of the Gnome desktop, is a member of the Foundation's interim board of directors. They feel they have been lacking that strong moral support," Ramji says.

From a high level, Ramji says the Foundation stands as a sort of enabler that helps independent developers, companies and developers working for those companies navigate the nuances and practices of open source development so they can either contribute source code to projects or open source their own technologies. "One suggestion has been that the Foundation should house all the best practices we have seen software companies and open source communities use," said Ramji. "We want to have a place where everyone interested in how to participate can come and read and if they choose they can use our license agreements or can use the legal structure of the Foundation to grant patent licenses and copyrights for developers and derivative works." Those licensing agreements have a distinct focus, Ramji said, on the rights that are related to code that is being contributed and on how to contribute the patent rights on that code. Ramji says the goal is to service multiple projects, multiple technologies and multiple platforms rather than having one specific technology base, which is how most current open source foundations are structured. "It's early days and we have received a lot of good ideas from experts in a variety of fields from law to code to policy that is what we had hoped for," says Ramji. "Someone wrote it is nice to see Microsoft engaging early on without all the answers and to have the community solve what they would like to see. Once those issues are settled, code would be submitted using existing open source licenses. That is satisfying for me and refreshing to others. This is the right way to proceed." Follow John on Twitter

Microsoft's CodePlex Foundation leader soaks in stinging critique

After a stinging critique from a noted expert in establishing consortia, the leader of Microsoft's new CodePlex Foundation says such frank evaluation is welcome because the open source group's structure is a work in progress. The CodePlex Foundation's aim is to get open source and proprietary software companies working together. Sam Ramji, who is interim president of the CodePlex Foundation, was responding to last week's blog by Andy Updegrove, who said the group has a poorly crafted governance structure and looks like a sort of "alternative universe" of open source development. Updegrove, a lawyer, noted expert on standards, and founder of ConsortiumInfo.org, laid out in a blog post five things Microsoft must change if it wants CodePlex to succeed: create a board with no fewer than 11 members; allow companies to have no more than one representative on the Board of Directors or Board of Advisors; organize board seats by category; establish membership classes with rights to nominate and elect directors; and commit to an open membership policy.

He added, however, "There are some best practices [for running the boards of non-profits] that we are not as familiar with as we would want to be." Slideshow: Top 10 open source apps for Windows  Stephanie Davies Boesch, the foundation's secretary and treasurer, is the only board member with experience sitting on a non-profit's board. Despite the stinging tone in Updegrove's assessment, Ramji says he is thankful for the feedback. "Andy's been incredibly generous with his expertise and recommendations," Ramji says. "It is the kind of input and participation we were hoping to get by doing what is probably non-traditional for Microsoft but not necessarily non-traditional for non-profit foundations, which is to basically launch as a beta." For instance, Ramji says that the decision to go with only five people on the board came from Microsoft's experience that larger groups often have difficulty with decision making. Ramji says Updegrove's suggestion to have academic representation on the board was "outstanding. And basically it is re-writable. We did not think of that." And to Updegrove's point on becoming an open membership organization, Ramji says, "our goal is to become a membership organization and Andy has some excellent recommendations for that."He says the fact that Updegrove took the time to respond "in the format that he did is more proof that there is something worth doing here." Ramji, compares the Foundation's formation to the early days of a software development project. "We have said in these first 100 days we are looking at everything as a beta. Obviously, there are some areas like contributions and licensing agreements we put a lot of time into but even those can be modified." Microsoft announced the foundation Sept. 10 with a stated goal "to enable the exchange of code and understanding among software companies and open source communities." The company seeded the group with $1 million and Microsoft employees dominated the interim board of directors and board of advisors.

One is a call for a broad independent organization that can bridge cultural and licensing gaps in order to help commercial developers participate in open source. Ramji says the foundation has spent the past couple of weeks listening to feedback in "Twitter messages, email, and phone calls in order to understand what people hope this can be." Within that feedback two patterns have emerged, Ramji says. The other focuses on creating a place where open source .Net developers can gain strong backing. "Look at projects related to Mono, you also can look at NUnit, NHibernate, we really feel optimistic that the Foundation could help them gain a higher level of credibility in the open source community. Miguel de Icaza, the founder of the Mono project and the creator of the Gnome desktop, is a member of the Foundation's interim board of directors. They feel they have been lacking that strong moral support," Ramji says. From a high level, Ramji says the Foundation stands as a sort of enabler that helps independent developers, companies and developers working for those companies navigate the nuances and practices of open source development so they can either contribute source code to projects or open source their own technologies. "One suggestion has been that the Foundation should house all the best practices we have seen software companies and open source communities use," said Ramji. "We want to have a place where everyone interested in how to participate can come and read and if they choose they can use our license agreements or can use the legal structure of the Foundation to grant patent licenses and copyrights for developers and derivative works." Those licensing agreements have a distinct focus, Ramji said, on the rights that are related to code that is being contributed and on how to contribute the patent rights on that code.

Ramji says the goal is to service multiple projects, multiple technologies and multiple platforms rather than having one specific technology base, which is how most current open source foundations are structured. "It's early days and we have received a lot of good ideas from experts in a variety of fields from law to code to policy that is what we had hoped for," says Ramji. "Someone wrote it is nice to see Microsoft engaging early on without all the answers and to have the community solve what they would like to see. Once those issues are settled, code would be submitted using existing open source licenses. That is satisfying for me and refreshing to others. This is the right way to proceed." Follow John on Twitter

Users Want Answers on Oracle-Sun Future

When Oracle Corp. Analysts said the arrival of the jointly built package shows that engineers at Oracle and Sun Microsystems Inc. have started working together in advance of the closing of Oracle's $7.4 billion acquisition of Sun , now expected in January. CEO Larry Ellison hosted a webcast last week to unveil the next generation of his company's Exadata appliance , a label reading "Oracle-Sun" was prominently displayed on the high-end database and storage system. But Ellison and webcast co-host John Fowler, executive vice president of Sun's systems business, only touted the joint engineering effort that created the Exadata Database Machine Version 2. They said nothing about the postmerger plans for the products of either company, keeping users mostly in the dark about the future of Oracle and Sun offerings.

Oracle did take an unusual step two weeks ago by running advertisements promising to spend more on Solaris software and UltraSparc hardware development than Sun does now. Oracle had hoped the deal would be closed by now, but it was held up earlier this month when the European Commission opened an in-depth investigation in response to what it called "serious concerns" that Oracle's ownership of Sun's MySQL database could blunt competition in the database market. The ads came in the midst of aggressive efforts by Hewlett-Packard Co. and IBM to court Sun's customers. He also acknowledged that he has concerns about Oracle's plans for Sun's open-source offerings. "In the open-source community, Oracle doesn't have a particularly friendly reputation," he said. The ads somewhat reassured Richard Newman, president of Reliant Security Inc., which uses Solaris-based systems to deliver data security products and services to retail industry customers. "We're crossing our fingers that what [Oracle] stated in print is in fact going to happen," he said.

Nathan Brookwood, an analyst at Insight64 in Saratoga, Calif., called Oracle's ad "a very unequivocal statement of support for the Sun hardware." However, Brookwood added that he doesn't expect the move to placate Sun's customers. "It's not time to stop biting your nails," he said. Richard Toeniskoetter, technology director at the W.A. Franke College of Business at Northern Arizona University in Flagstaff, said he wants to know Oracle's plans for Sun's Virtual Desktop Infrastructure software and its Sun Ray thin clients. "We are already running a fairly mature VDI model, and we just want to see Oracle recognize that it's a viable platform," Toeniskoetter said, adding that NAU is also interested in Oracle's plans for MySQL. This version of this story originally ran in Computerworld 's print edition. Among the Sun customers most in need of quick answers are resellers, such as PetroSys Solutions Inc., which sells repackaged systems for the government and education markets. "A lot of our clients are nervous," said Irene Griffith, who owns PetroSys. "They want to know what's going to happen." Sun's sales representatives have been mum on the subject. "They're not talking to us, they're not reaching out to us," Griffith said. It's an edited version of an article that first appeared on Computerworld.com.

Skype Founders Sue eBay: What's Going On?

The founders of Skype are suing eBay for copyright infringement, a move that could block eBay's deal to sell a majority stake in Skype to a group of private investors for $1.9 billion. The sale was seen as a big failure because the company was not able to further monetize the potential of the VoIP service in the years to come. eBay purchased Skype back in 2005 for $2.6 billion, but failed to acquire Joltid, the company supplying the core technology behind Skype, also owned by the founders of the VoIP software.

So eBay sold a 65 percent stake in Skype two weeks ago to an investment group for $1.9 billion, managing to get back some of the money it invested initially. At the core of the suit is a peer-to-peer technology called "global index", which is used by Skype's software to route calls over the Internet instead of traditional phones lines. But it's not all good for Skype, as Skype's original founders are now suing eBay, seeking damages for copyright infringement. This technology is owned by Joltid, which is still owned by the founders of Skype. Now moving to the U.S. courts, Joltid is seeking an injunction against Skype, which could affect Skype's operation.

As if it wasn't complicated enough, eBay licensed "global index" from Joltid for continued use in Skype, but Joltid terminated the license in March and have been battling eBay in U.K. courts ever since. The trial could jeopardise the closing of the Skype sale to the private investors, who are also named as defendants by Joltid. What's even more ironic is that that the money Joltid is using to sue eBay is probably the money they got from eBay when they sold Skype. While eBay is working on its own technology to replace Joltid's, Skype could be forced to close down its operation if Joltid wins the trial.

Microsoft greasing Windows 7 skids with early release of desktop tools

With the hope of sparking Windows 7 upgrades, Microsoft is planning an early release of its suite of desktop deployment tools.  The tools were originally slated to ship in early 2010, but Microsoft hopes to give customers the software in late October for use in rollouts of Windows 7 across corporate desktops. The news of the early release was announced by Ran Oelgiesser, senior product manager for MED-V, on the MDOP blog. The catch is that the Microsoft Desktop Optimization Pack (MDOP) R2 2009 is only available to volume licensing customers with Software Assurance contracts.

Slideshow: Snow Leopard vs. All the tools in MDOP R2 2009 will include support for Windows 7 except MED-V. Support for the new OS in MED-V 1.0 SP1 will come early in 2010, wrote Oelgiesser. Windows 7 Windows 7 is slated to ship to commercial customers on Oct. 22, but corporate users with volume licensing contracts have had access to Windows 7 since last month. MED-V runs multiple versions of Windows or applications concurrently without having to open multiple virtual machine sessions. The suite is a major part of Microsoft 's Optimized Desktop strategy, which addresses centralized management and deployment of physical and virtual resources.

The software complements another MDOP tool called App-V, which is used for managing and deploying virtual PCs. The MDOP lineup also includes Asset Inventory Service; System Center Desktop Error Monitoring; Advanced Group Policy Management (AGPM) for change management via group policy objects; and the Diagnostics and Recovery Toolset, which helps in recovering a crashed PC. MDOP is composed of software from Microsoft's purchases of Softricity, Kidaro, AssetMetrix, Winternals Software and DesktopStandard. According to Oelgiesser, App-V 4.5 SP1 will have various integration points with 32-bit versions of Windows 7, including with the AppLocker, Branch Cache and BitLocker ToGo features. The 64-bit version, App-V 4.6 will be available in the first half of 2010. Advanced Group Policy Management 4.0 features two new capabilities targeted at Windows 7. One allows users to manage group policies across different domains, and the other provides new search and filtering to ease tracking of group policy objects. In addition, the software will support 32-bit version of XP, Vista and Windows Server. Follow John Fontana on Twitter 

China's Alibaba expects India joint venture this year

Top Chinese e-commerce site Alibaba.com aims to announce an Indian joint venture this year as the company expands its global footprint, it said Friday. A deal in India, where Alibaba.com recently surpassed 1 million registered members, would be the latest in the site's efforts to grow abroad. "I've got a lot of confidence in India," said Jack Ma, CEO of Alibaba Group, the parent company of Alibaba.com. Alibaba.com is in talks with an Indian reseller about forming a joint venture, CEO David Wei told reporters at a briefing. Alibaba.com is a platform for small and medium businesses to trade everything from lumber and clothes to iPods and PC components.

Alibaba.com already works with Indian publishing company Infomedia 18, its likely joint venture partner, to promote its platform in the country. Its main member base is in China, but the site also has 9.5 million registered users in other countries and facilitates many cross-border trades. The site also has a joint venture in Japan and recently launched a major U.S. advertising campaign to attract more users there. Ma said Alibaba knows it needs to "do something" in Latin America as well. Ma and other top Alibaba executives visited the U.S. early this year for meetings with potential partners including Amazon.com, eBay and Google.

When asked if the company would also seek to expand in Eastern Europe, Ma said, "I will be there." Alibaba will not hold a majority stake in joint ventures it forms, instead taking a share similar to the 35 percent it has in its Japan operation. "Our global strategy means partner with local people," Ma said. "We want partners and we want partners to control their business." Users place total orders of more than US$200 million each day on the Alibaba.com international platform, Wei said. About 50 percent of those orders go to Chinese exporters, he said.

Government informant is called kingpin of largest U.S. data breaches

A government informant who helped put away nearly 30 fellow hackers five years ago, is considered by U.S. law enforcement officials to be the kingpin of the biggest data breaches in U.S. history.

Albert Gonzalez, 28, of Miami, Fla., was indicted yesterday for the third time in connection with the separate major data breaches. Gonzalez and two Russian citizens Monday were indicted by a grand jury in New Jersey on charges of running an international scheme to steal more than 130 million credit and debit card numbers, along with personally identifying information from five companies, including Heartland Payment Systems Inc., 7-Eleven Inc. and Hannaford Brothers Co.

Federal investigators and prosecutors are calling yesterday's third indictment of Gonzalez a coup for the government.

The latest indictment is far from the Miami man's first brush with the law.

Gonzalez, who is being held in a detention center in Brooklyn, N.Y., was indicted in the Eastern District of New York on May 12, 2008, and the District of Massachusetts on August 5, 2008, on charges related to separate data breaches at TJX Companies, Dave & Busters, BJ's Wholesale Club, OfficeMax, Boston Market, Barnes & Noble, Sports Authority, Forever 21 and DSW. Before the Heartland hack was disclosed, the TJX breach had been considered the largest ever, with 45.6 million credit and debit card numbers stolen.

Gonzalez had became an informant for the U.S. Secret Service after his 2003 arrest in New Jersey on on charges of ATM and debit card fraud, according to an official at the U.S. Department of Justice, who asked not to be named.

In 2004, Gonzalez provided information that helped the U.S. Attorney's Office in Newark, N.J. bust up what at the time was one of the largest online centers for stolen identity and credit card information. The online underground marketplace, dubbed the Shadowcrew group was charged with trafficking more than 1.5 million stolen credit and ATM card numbers.

Twenty-eight people were arrested and 27 pled guilty in connection with that incident. One man fled and became a fugitive.

Scott Christie, a former federal prosecutor who now leads the information technology group at law firm McCarter & English LLP, said it is clear that Gonzalez had been a leader of the Shadowcrew ring. Christie, who worked as a prosecutor on the Shadowcrew case, would not comment on any work that Gonzalez may have done for the government or why he was not arrested for his alleged role in the ring.

The DOJ official did confirm that Gonzalez acted as an informant in the case. However, according to this week's indictment, Gonzalez was allegedly continuing to work as a criminal hacker at the same time he was cooperating with the government.

The fact that federal authorities were unable to prevent Gonzales from carrying out the attacks on Heartland, Hannaford and other retailers despite his previous record speaks both to his tenacity and his apparently extensive ring of accomplices, said Avivah Litan, an analyst at Gartner Inc.

"Gonzalez appears unstoppable, and likely has many cronies lined up to help him in his endeavors," she said.

Assistant U.S. Attorney Erez Liebermann, who is prosecuting the case against Gonzalez in New Jersey, said that in addition to his alleged hacking skills, Gonzalez is a great organizer. He noted that Gonzalez is alleged to have worked with a different crew in each of the three incidents he's been indicted for. He is alleged to have worked with one crew to hack into Heartland and Hannaford systems, another in the TJX attack and yet another to illegally access data from Dave & Busters and other New York-based businesses.

"He was a person capable of hacking and then bringing people together to complete the task at hand," said Liebermann.

Christie said that Gonzalez clearly had "his hand in many pies."

"He seems to be the Bernie Madoff of online data theft," said Christie. "If it's all true, he would be one of the most prolific of the online data thieves that we know about. [The indictments] certainly are a big deal for consumers who charge purchases on their debit and credit cards every day. It's definitely good news for people who want to keep their good credit."

Richard Wang, manager of SophosLabs U.S., said that online data theft, especially in cases as massive as Heartland, Hannaford and TJX, take great coordination and that stopping them requires law enforcement to shut down the criminal organizations coordinating hacks.

Clinton Looks to Allay Indian Tech-Trade Fears

U.S. Secretary of State Hillary Clinton last week pledged to work with Indian government and business officials to improve high-technology trade relations but offered no specifics about how that goal can be accomplished.

During a visit to India that ended early last week, Clinton agreed with officials there to continue talking, "with the objective of facilitating smoother trade in high technology between the two economies."

The talks have been dubbed the High Technology Cooperation Dialogue.

Clinton's statement appears to be an effort to lessen Indian concerns about U.S. protectionism that were triggered by a number of recent events. For instance, President Barack Obama in May commented that the U.S. has developed a tax code "that says you should pay lower taxes if you create a job in Bangalore, India, than if you create one in Buffalo, N.Y."

In an interview on Indian television, Clinton defended Obama, noting that he "has said we do not want a return to protectionism. Outsourcing is a concern for many communities and businesses in my country, so how we handle that is something that we're very focused on doing in a way that doesn't disrupt the great flow of trade and services that go between our countries."

Atul Vashistha, chairman of IT services consulting firm NeoIT Inc. in San Ramon, Calif., suggested that Clinton is trying to assure Indian officials and businesses that services export issues will be addressed in the talks. Indian IT companies want "all voices [to] be heard prior to any big decision," he added.

Vashistha said that India's IT leaders "believe that [Clinton's] comments make it clear that there is a push toward protectionism in the U.S. and that she'll be addressing it via [the] Dialogue."

U.S. officials must also mitigate fears among the Indian high-tech community that have been sparked by proposed U.S. legislation that would place a number of restrictions on overseas companies seeking H-1B visas, observers said.

The bill would also enable the U.S. Department of Labor to conduct random audits of employers that use H-1B visas and more closely investigate H-1B applications.

This version of this story originally appeared in Computerworld 's print edition.

Imagine Cup winners design software to solve global problems

Microsoft wrapped up its seventh annual Imagine Cup and announced the worldwide winners of the challenge Tuesday. At the four-day event in Cairo, Romania's Team SYTECH won the coveted software design award, South Korea's Team Wafree won for embedded development and Brazil's Team LEVV It won the game development contest.

This year's Imagine Cup challenged high school and university students to address the lofty United Nations Millennium goals, which include ending poverty and hunger, providing universal education and combating AIDs. Winning teams share up to US$25,000. A total of 444 students from 149 teams and 70 countries competed in nine categories that also included robotics and algorithm, photography and design.

The team from Romania built UpCity, a program that connects government agencies and cities by getting people involved at the grassroots level. The platform is planned to be used in the team's hometown of Iasi, Romania, and they hope to deploy it elsewhere soon. Adrian Buzgar, the team leader, said in a statement, "The project will be developed for the city hall of our city at the end of this month. Then we are going to try to build a company."

Ray Ozzie, Microsoft's chief software architect, said students have been important for technology innovation, starting companies like Microsoft, Google, Yahoo and Facebook. "Students have an unbounded amount of energy. Students tend to be very idealistic. They look at the world how it is and see how'd they like to change it," he said at a press conference.

One of the teams representing the U.S. in Cairo had showcased a project called MultiPoint at the U.S. finals in May. It allows a computer to be used by several people simultaneously.

James Dickinson, the team leader and a student at Georgia State University, called it "a set of educational mini-games that allow multiple children to use the computer at the same time. It is also Web-based, and the advantage of it being Web-based is that you don't have to install anything," he said.

MultiPoint is built on Silverlight, but Microsoft's MultiPoint SDK did not support Silverlight or the Web, according to Dickinson. "We wrapped that in ActiveX and it communicates through Javascript directly to Silverlight," Dickinson said.

While the games are aimed at elementary school students and are somewhat basic, the team hopes that if the software gains traction, students and teachers will develop more content that can be shared with other users.

Organizers of the Imagine Cup hope it teaches students about more than just technology. "We focus on the business planning just as much as the technology. So it's those skills that we develop that they can use later on in their lives in addition to the competition element," Anthony Salcito, general manager of Microsoft's U.S. Education division, said during the U.S. finals.

The next Imagine Cup Worldwide Finals will be held next summer in Poland.

Debate heats up over Apple threat to disable iTunes sync with Palm Pre

A debate is heating up over Apple Inc.'s apparent threat to kill the iTunes sync feature on the new Palm Pre and other non-Apple digital media players.

Some Palm Pre owners said today they are disappointed by Apple's move but could also see how Apple wants to protect its iPhone and iPod technology.

"It's unfortunate what Apple's doing," said Richard Rosmarin, who bought his Pre on June 6, the first day the devices went on sale.

Rosmarin said he couldn't understand why Apple would allow iTunes to sync with a PC or to burn a CD, but would not allow iTunes to sync with a handheld device, such as the Pre, that's not made by Apple.

"I guess it's not a total surprise, given Apple's propensity to keep their world more closed than other vendors," he said.

Palm suggested today that if the iTunes sync with the Pre is stopped in a future version of iTunes, Pre users should simply stick with the current version of iTunes, use a direct cable connection to a desktop containing their music, or find another application to do the sync.

For several Pre owners, the iTunes sync was a nice feature, but wasn't the reason they bought the Pre.

If the sync is prevented, "it's not a life-changing event for me," said Anne-Marie Kenney, a Palm Pre owner who bought the device on the first day of sale and quickly synced hundreds of her iTunes songs to the device just in case the capability was stopped.

"It will be interesting to see when and if it happens, because I will still need to update my Pre with new songs," she said. Kenney said she would remain on the current iTunes version to update her Pre with new songs. She said staying with an older version of iTunes is not a big concern because most iTunes updates are not major.

Jeremy Hill, another Pre owner, also said he would stay with the current iTunes version to update his Pre's songs as well as his iPod Nano. "Unless I update, how will [Apple] remove the functionality?" Hill asked. "And as a registered Apple product owner [of the Nano], I can't really see [Apple] forcing me to update when what I have currently works."

Apple's sync comment on its support Web site has several Pre enthusiasts concerned about what other controls Apple might try to deploy for all kinds of competing devices.

"I guess I can rationalize what Apple is doing and why it makes a difference to them, because the Pre is using something they've created," Kenney added.

Ken Dulaney, an analyst at Gartner Inc., took a harder stance against closed technologies in general. "I would have to take Palm's side on this [sync issue]," Dulaney said. Many closed systems don't work out for vendors and eventually fold, he said.

Still, Dulaney acknowledged Apple's situation. "Apple has built an environment and deserves to take it where they will. They are looking at the experience they provide their customers and don't want that to be compromised by third parties."

Kris Keilhack, associate editor for the Palm Infocenter Web site, has used Palm devices for years and was surprised when he heard weeks ago that iTunes would sync with the Pre, especially because Apple could be counted on to fight back. "I didn't want to get my hopes up because I would be disappointed" if the sync was threatened, he said.

"The possible loss or disruption of iTunes sync won't mean much to me, but the real question is whether this is the tip of the iceberg," he added, explaining that Apple could be squaring off with Palm on a number of technology areas where it doesn't want to compete.