Oracle has developed prebuilt integration software for its CRM On Demand product and the on-premise Siebel CRM, providing customers with a single view of their CRM data, the company announced Wednesday.

Companies can benefit from a hybrid approach to customer relationship management, because the on-demand model allows companies to more easily add new users, while enabling data from both systems to be analyzed at once, Oracle said. The integration software employs Oracle's Application Integration Architecture framework and Fusion middleware. Pricing was not disclosed.

[ Discover the top-rated IT products as rated by the InfoWorld Test Center. ]

Oracle's news release on the product stressed its benefits for customers. But the vendor's real goal is to fend off competition from Salesforce, which has based its entire strategy on pushing the benefits of on-demand software, analysts said.

"This is how you sell against Salesforce," said analyst Bruce Richardson of AMR Research. "You talk about that as a dead-end silo while selling end-to-end business processes."

"I don't think it will lead to an increase in demand for Siebel," he added.

Denis Pombriant of Beagle Research largely echoed Richardson, while noting that Salesforce offers Salesforce to Salesforce, a means of integrating with fellow Salesforce customers, and also has strong capabilities for tying into systems such as Siebel.

" I expect this is a strategy by Oracle to keep its Siebel customers from looking outside of the barn," he said.

On the whole, Oracle has taken a cautious approach to on-demand software. During an earnings conference call in May, CEO Larry Ellison told analysts that while the company has been selling on-demand products for nearly 10 years, it only recently began making money at it.

"The entire industry has to get better at making money selling on-demand ... That's what we're focused on before we scale the business," Ellison said at the time.

Salesforce's stock dropped sharply following its recent quarterly earnings report, which saw the company beat analyst expectations for revenue but also indications that business is slowing down.

The IEEE has completed 802.11r, a standard that lets Wi-Fi devices roam quickly between access points, improving the performance of VoIP on enterprise LANs.

The IEEE 802.11 standards were originally defined with single access points in mind, but in offices multiple access points are needed. Devices can move from one access point to another, but it takes around 100ms to re-associate, and several seconds to re-establish authenticated connections using 802.1x.

[ Keep up on the latest networking news with our Networking Report newsletter. And discover the top-rated IT products as rated by the InfoWorld Test Center. ]

The new standard, 802.11r, known as Fast Basic Service Set Transition, allows the network to establish a security and QoS state for the device at the new access point, before it roams between the two, so the transition can take place in less than 50ms - the standard required for voice roaming.

The IEEE has been working on 802.11r for four years, and the concept has been solid since 2005, but the standard was formally approved and published by the IEEE this summer.

Till now, vendors have either used lower security options on Wi-Fi VoIP (using WEP encryption for instance) and put VoIP traffic on separate VLANs to protect the rest of the network, or implemented technology close to the eventual 802.11r standard.

Other vendors, including Meru and Extricom, has built networks where there is no roaming because all the access points are on the same channel.

IEEE 802.11r could open up a bottle-neck in enterprise Wi-Fi VoIP installations, and should allow VoIP certification to move ahead. Although the Wi-Fi Alliance, delivered a VoIP brand, known as Wi-Fi Certified Voice-Personal in June, this has had limited success, and the Alliance is expected to follow up with a Voice-Enterprise brand, including 802.11r, in 2009.

Cisco and Meru branded enterprise-grade equipment under the Voice-Personal brand, but other business Wi-Fi companies have shunned it.

"We primarily address the enterprise market, so we would certainly look for voice-enterprise when it comes out," said Roger Hockaday, Aruba's director of marketing EMEA.

"[Voice-Personal certification] is for low range stuff and SME equipment," said Alistair Mutch, worldwide business development director for Wi-Fi switch vendor Trapeze (now being acquired by Belden). "We have not submitted to the low end one as we felt it was really not worth it."

Techworld is an InfoWorld affiliate.

The popularity of low-cost PCs around the world is driving "explosive growth" for SSDs (solid-state drives), Samsung said Wednesday as it announced three new models of the device.

SSDs are made from NAND flash memory chips and are used to store software, songs, pictures, documents, and other data on computers. The drives hold several advantages over common HDDs (hard disk drives), including being speedier, lighter, quieter, and using far less power.

[ Stay ahead of advances in hardware technology with InfoWorld's Ahead of the Curve blog and newsletter. ]

The market for low-density SSDs will grow by 57 percent per year annually until 2011, due mainly to brisk demand for low-cost PCs, Samsung said.

The company said it will start mass producing three new low-capacity drives -- 8GB, 16GB, and 32GB SSDs -- next month. The storage drives are each about 30 percent smaller than 2.5-inch HDDs, a small size normally used in low-cost PCs and netbooks, or mini-laptops.

The new SSDs will also run faster than older-generation SSDs made for low-cost PCs, Samsung said, because they include high-performance SATA II (serial advanced technology attachment) controller technology inside.

Samsung's latest SSDs can all read data at 90MBps, while writing at speeds varying from 70MBps for the 32GB SSD, to 45MBps for the 16GB SSD, and 25MBps for the 8GB SSD.

These speeds mark an improvement over the company's first SSDs aimed at small devices, which were launched in 2006. Those devices, 32GB and 16GB SSDs, could read at 57MBps and write at 32MBps.

Samsung is the world's largest memory chipmaker.

The most popular style of low-cost PC on the market today that use SSDs are mini-laptops, or netbooks, such as the Eee PC by Taiwan's Asustek Computer.

The devices are a new style of mobile PC that weigh less than 1 kilogram (2.2 pounds), sport 7-inch to 10-inch LCD screens, carry long-lasting batteries, and connect wirelessly to the Internet. They generally cost far less than the average notebook PC as well, between $199 to $599.

Global netbook shipments are forecast to reach 8.02 million this year and then more than double to 18.3 million units in 2009, according to Taiwan's Market Intelligence Center (MIC).

Acer, the world's third-largest PC vendor, has said it expects to ship 5 million to 6 million of its Aspire one netbooks this year, while Asustek has forecast Eee PC sales at 5 million this year.

An experimental extension to Mozilla Firefox lets people substitute simple text commands for complex Web tasks such as putting links to maps in e-mail messages.

On Tuesday, Mozilla Labs released its first version of Ubiquity, which is related to software called Enso that was developed at a small Chicago company called Humanized. Mozilla hired three executives of Humanized in January, and Aza Raskin, the former president of that company, introduced Ubiquity 0.1 in a Mozilla Labs blog entry on Tuesday. Raskin is now head of user experience at Mozilla Labs.

[ Discover the top-rated IT products as rated by the InfoWorld Test Center. ]

Ubiquity is designed to help ordinary people create something like mashups and to do it on a personal basis instead of in the form of a public Web page. The commands that users type in Ubiquity, such as "map" and "e-mail," find resources on the Web and can gather information from those sources in one place.

For example, someone inviting a friend to dinner could highlight the name of the restaurant, type "map," and instantly call up a Google Map showing the location of the restaurant. The user could then edit that map and place it in the body of the e-mail message. Similarly, typing "yelp" and the name of the restaurant would bring the text of reviews from Yelp.com right into the message.

In an interview, Raskin compared it to a search engine, except that Ubiquity users type in what they want to do instead of what they want to find.

Other commands that are already available include "defi," which brings up a definition for a highlighted word; "trans," which translates any highlighted text; and "twit," which takes the highlighted text and puts it up on Twitter.

It's easy to create new commands, so average users can do it without advanced Web development skills, according to Raskin.

"You don't have to wait for a developer to think of a user case. ... You can do it for yourself," Raskin said.

Users who created commands for Ubiquity can post them on the Web and allow others to subscribe to them for free.

Ubiquity may or may not be added as an extension to Firefox. Mozilla Labs is designed to be an open test environment for new ideas, with participation by anyone, in which some ideas will graduate to use in Firefox and others won't, Raskin said.

-- Additional reporting by Elizabeth Montalbano in New York.

It's a typical business scenario. Several people on a project have to create a set of documents: a report in Microsoft Word, a budget spreadsheet in Microsoft Excel, the final presentation to the board using Microsoft PowerPoint. One person writes the draft, and wants input or changes from other project participants. So far, so good. But that's when productivity-not to mention disk space-heads down a rat hole.

All too often, people share documents by sending the files around in e-mail. Everyone involved adds his own changes (using revision marking, if the leader is lucky), and then e-mails back that unique file. The project leader has the unenviable job of incorporating all those changes, or there's a flurry of confusion when everybody waits for Jane to finish with the file so Joe can add his own text. And never mind that the security of your document is practically nonexistent as well; what would you do if your competition happened to latch on to your latest and greatest project description? Or your sales presentation for a key client? As a byproduct, the team creates huge attachments (often with no consideration given to file size-and PowerPoint files can reach 40MB in a hurry).

[ Discover the top-rated IT products as rated by the InfoWorld Test Center. ]

It's terribly inconvenient -- especially when there's a better way. And it takes only a few moments to learn.

In short: keep the Microsoft Office documents on a network drive to which all participants have access. Microsoft Office manages access to the files, far better than you can. If Jane has the file open when someone else attempts to bring it up, Microsoft Word will say that the document is in use (by Jane) and give Joe the option to open it as read-only (which sometimes is all that's needed) or to be notified when the file is unlocked again. (Unfortunately, none of the options include "automatically send Jane an e-mail message to tell her to hurry up already," but that cattle-prod technology has not yet been perfected.)

The benefit: Everyone works on one version of the file, so it's impossible for things to get out of sync. Your e-mail inbox (and mail server ) isn't stuffed with contradictory versions of important documents. And, since-presumably-your network servers are backed up on a regular basis (far more so than are most users' laptop computers), the documents may be more secure as well.

The downside: It requires the document editors to be connected to the office network and to be logged into the VPN. That's not especially helpful for mobile executives who imagine that the best time to work on a PowerPoint presentation is on the flight to the board meeting . Those individuals need to think ahead, and to grab a copy of the latest version from the server before they leave on their trip.

This may sound like a "Well, duh!" tip-unless you didn't know it already. I've watched too many otherwise savvy business staff blithely send huge files in e-mail-a dozen times a day.

CIO.com is an InfoWorld affiliate.

Private information stored in Apple's iPhone and protected by a lock code can be accessed by anyone with just a few button presses.

The iPhone, like most mobile phones, can be locked with a four-digit code, but where other phones in their locked state only permit calls to emergency service numbers such as 911 (in the U.S.), 999 (in the U.K.) and 112 (throughout Europe), a locked iPhone can be used to make a call to any number.

[ Learn how to secure your systems with Roger Grimes' Security Adviser blog and newsletter, both from InfoWorld. ]

However, that's not all you can do with a locked iPhone running the latest version of Apple's software, 2.0.2.

Pressing the emergency call button at the unlock screen, followed by two taps on the home button, takes you to the iPhone's private 'favorites' page without the need to enter the unlock code. If the owner of the phone has favorite entries in their address book containing URLs, e-mail addresses or mobile phone numbers, then those entries can be used to launch the browser, mail application or SMS (Short Message Service) software, and gain access to private Web favorites, e-mail messages, and text messages stored in the phone, again without entering the unlock code.

The security flaw, revealed by a member of the MacRumors.com forum, came as a surprise to an Apple spokeswoman in London, who said she would look into the matter.

One way to avoid such unauthorized access to e-mail messages or Web favorites would be not to add e-mail addresses or URLs to favorite address book entries.

Apple pushed version 2.0 of its iPhone software as being more enterprise-friendly: some businesses had been reluctant to adopt the first version of the iPhone because it did not adequately protect corporate information stored in the device.

China has stepped up investment in its homegrown Godson microprocessor and hopes to build its first petaflop-class supercomputer using the chip in 2010, one of the country's senior engineers said on Tuesday.

China made a decision 20 years ago not to invest in microprocessor development, and it was only in 2001 that it reversed course and began to make a serious effort in this area. As a result, its technology trails far behind that of world leaders like Intel, Advanced Micro Devices, and IBM.

[ Stay ahead of advances in hardware technology with InfoWorld's Ahead of the Curve blog and newsletter. ]

But China has now made a long-term commitment to Godson and since 2006 has increased funding for it "quite a lot," said Zhiwei Xu, CTO of the Institute of Computing Technology at the Chinese Academy of Sciences.

The country still lags behind its international rivals in chip development but is doing its best to catch up, he said in a presentation at the Hot Chips conference in Palo Alto, California.

China has produced four Godson processors, the latest being the Godson 2f. It struck a deal last year with STMicroelectronics to manufacture and sell the chips, and they are now used by 40 companies in set-top boxes, laptops and other products, Xu said. The commercial name for the chips is Loongson.

Next month China will complete the design of a new version of the chip, the Godson 2g, which integrates more functionality on the silicon. Next year it hopes to include graphics capabilities on the same silicon as the main processor, much as AMD and Intel are doing today.

China is also hard at work on the Godson 3, which is aimed primarily at servers and will be the first Godson to use a multi-core design. A version of the chip due in 2009 will have four general-purpose cores, and four specialized cores for tasks like scientific computing. The general-purpose cores will run at 1GHz and be similar to those on the Godson 2, Xu said.

China hopes the Godson 3 will allow it to build a high-performance computer in 2010 that can perform at one petaflop per second, Xu said. That would match the IBM system based on an advanced Cell processor that led this year's Top500 list of the world's fastest supercomputers.

Asked after his speech if the goal is realistic, Xu said, "it's possible, but it will be hard." Besides developing the system, China will have to find markets to sell it to, he noted. The U.S. is skittish about buying Chinese equipment for government-related work for security reasons.

Godson's use in PCs has been held back by the fact that it is based on a MIPS core, as opposed to the x86 design used by Intel and AMD. To run Windows it has to use translation software to achieve x86-compatibility, and the Godson loses a lot of its native MIPS power in the process.

The Godson 3 adds new instructions that speed the x86-to-MIPS translation by a factor of 10, Xu said. "Our goal is to eventually reach 80 percent of the native MIPS performance," he said. "Right now we are at 40 percent, so we have a long way to go."

Tom Halfhill, a senior analyst at In-Stat, said the goal of a petaflop computer in 2010 might be realistic. "Why would they set a target they don't think they can achieve? That would only embarrass them," he said.

Halfhill was given an overview of the Godson in Beijing about two years ago. China was developing applications to run on Godson PCs, he said, including productivity software based on OpenOffice.

With its huge population, China can become a significant player in the microprocessor market even if it sells only domestically, he said.

"What China wants to do is develop its own technologies so that its manufacturers aren't dependent on paying licenses and other fees to other countries," he said.

Fujitsu is developing an eight-core version of its Sparc64 processor, which should give a performance boost to the Sparc Enterprise Servers that Fujitsu jointly develops with Sun Microsystems.

Fujitsu's Takumi Maruyama mentioned the chip briefly at the end of a presentation at the Hot Chips conference in Palo Alto, California, Tuesday but he provided few details, including when the processor will ship.

[ Stay ahead of advances in hardware technology with InfoWorld's Ahead of the Curve blog and newsletter. ]

It will succeed the four-core Sparc64 VII processor released in servers from Fujitsu and Sun in July. The Sparc Enterprise Servers use Fujitsu's chips and Sun's Solaris 10 operating system. The companies develop the systems together but market and sell them separately.

The eight-core processor is code-named Venus and will be manufactured using a 45-nanometer process, Maruyama said, a step up from the 65-nanometer process used for the quad-core Sparc64 VII.

It will have an embedded memory controller and offer peak throughput of 128Gflops (floating operations per second), he said. He said it is being designed for the age of "petascale computing."

"I hope I can tell you more about it at Hot Chips next year," Maruyama said.

The chip will be likely be welcomed by Sun, which confirmed in a separate presentation that its own Rock processor won't ship until the second half of 2009, about a year later than originally planned.

Rock is a 16-core processor that Sun has billed as a dramatic step forward in chip design. It will be able to address very large amounts of memory and uses innovative data "pre-fetching" techniques to achieve high levels of parallelism.

Sun says the chip will offer lightening-fast performance for databases and other enterprise applications. However, the newness of the design may have contributed to the chip's delay, which Sun disclosed earlier this year.

With its new JavaFX technology for rich Internet applications, Sun Microsystems hopes to leverage the strength of the Java development base and Java's ubiquitous presence on devices to make a strong run in a race it has entered very late -- and where Adobe Systems and Microsoft have a huge head start.

If this competition were a race between Olympic runners, it might be broadcast like this:

"In Lane 1, we have Adobe with its Flash and attendant Flex technologies, downloaded millions of times and popular on high-profile sites like YouTube."

"In Lane 2, it's AJAX (Asynchronous JavaScript and XML), the popular RIA technique used in countless Web sites."

"In Lane 3, its up-and-comer Silverlight, backed by software giant Microsoft and used by NBC's prominent Olympics Web site."

"And in Lane 4, we have Sun's JavaFX used by Web properties such as -- well, it's still in development."

[ The InfoWorld Test Center rates the preview version of JavaFX as promising but not yet competitive with Flash and Silverlight. See why. ]

Sun believes JavaFX has a strong chance because it doesn't see there being just one winner. "This isn't the type of market where only one technology is going to win," says Jacob Lehrbaum, senior product line manager for JavaFX. But Lehrbaum acknowledged the course will be tough: "Clearly, we do have to compete for developer mindshare."

Forrester Research analyst Jeffrey Hammond thinks Sun has a shot, especially in the burgeoning market for applications running on mobile devices: "I think Sun has the opportunity to catch up very quickly in that space."

"I would say that the JavaFX platform looks very good. It has a lot of potential," said Andres Almiray, a software developer at Oracle. "It probably should have been announced three, four, five years ago," Almiray said. "The good thing is that it's finally here."

An anonymous blogger identified only as "geekycoder" lauded the technology: "Technically, JavaFX enables me to leverage [the] Java skill set and Java technology that I am more comfortable with to deliver a compelling RIA solution. Because synergy between JavaFX and Java is excellent and the fact that JavaFX is built on the Java platform means that I can ensure that I have one of the best and supportive platforms to work in. In addition, JavaFX will enable me to be more productive in making it easier and quicker to create RIA solutions," for Web 2.0.

The JavaFX road map First revealed at the JavaOne conference in May 2007, JavaFX still is a work in progress. The official JavaFX Web page describes the project as "a powerful client technology for creating rich Internet applications with immersive media and content across the multiple screens of your life." It features the JavaFX Script scripting language for building rich Internet applications for desktop, mobile, TV, and other consumer platforms.

"JavaFX Script, the language of JavaFX, doesn't replace Swing, the core Java GUI toolkit, but provides an alternative way of programming that hopefully will bring Java technology to the masses," according to geekycoder.

A preview version of a software development kit for JavaFX for desktop applications, supporting Windows and Macintosh, was released late last month. Further deliverables are planned. JavaFX for Desktop 1.0, featuring a profile for desktop and browser deployments and a general-release SDK, is due this fall. JavaFX for Mobile 1.0, adding mobile support, is planned for spring 2009 release. TV support also is planned.

The JavaFX runtime is to be distributed with the Java VM. Licensing plans for device manufacturers also are to be revealed next spring. When manufacturers license Java Micro Edition, they will get the JavaFX mobile runtime.

JavaFX offers plug-in capabilities similar to Flash and Silverlight, but it also has a standard runtime -- the Java Virtual Machine -- to run applications outside a browser, Lehrbaum said. Other plug-in technologies will let developers use existing tools such as NetBeans or design tools such as Adobe Photoshop or Illustrator with JavaFX.

Why Sun thinks JavaFX will catch on With JavaFX, Sun looks to build on the presence of Java on more than 2 billion handsets. Lehrbaum acknowledges that Java has been difficult to use, so those Java-based phones don't offer the kind of rich Internet experience found on Apple's iPhone, Palm's Palm OS, or Microsoft's Windows Mobile. He claims that "JavaFX takes that momentum and the advantages we have with Java but makes it much easier to create rich interactive and immersive experiences."

For example, JavaFX Script offers a declarative scripting language for developers to build interfaces in the way that they think about them, Lehrbaum says. "It matches the way they think about interfaces in their head and is very intuitive," he says.

JavaFX also revives the notion of client-side applets, which had been envisioned as the big win for Java in the mid-1990s. (Instead, Java took root as a dominant server-side technology.) With JavaFX, developers could build applet widgets for information access or a stock ticker.

To enable the applets revival, the Java Standard Edition SE 6 Update 10 release, due this month, will let developers write a single version of an application and run it on the desktop or in a browser. Lehrbaum claims the update will also make applet loading faster. JavaFX, meanwhile, makes it easier to build rich immersive experiences for such applets, he adds.

What early users think of JavaFX The Java SE 6 Update 10 and JavaFX do in fact solve deployment issues for Java, says Jim Weaver, president of Java trainer jMentor, such as letting a Java or JavaFX application begin executing before the entire Java Runtime Environment has been downloaded.

Weaver describes JavaFX and the update as a "one-two punch." The update enables rich client Java to become a reality, Weaver says, whereas JavaFX Script provides the necessary simple scripting language.

JavaFX compiles down to byte code and runs anywhere the JVM runs. "You can use any Java classes within JavaFX," Weaver says. "You can leverage your Java skills with JavaFX."

"The platform promises a lot of new APIs and new abstractions to make the harder things simpler and the simpler things very easy," says Oracle's Almiray. For example, APIs and libraries take care of establishing the correct order of a drawing on the screen, he notes. JavaFX Script does offer some features not in Java, such as data-binding into the language, Almiray says. But he notes that some Java features -- such as annotations, generics, and inner classes -- are lacking in JavaFX. Almiray expects that JavaFX will succeed in the mobile arena, but says it will be tough to compete with Flex in rich Internet applications.

A muddled open source message JavaFX initially was proclaimed to be a fully open source effort. But Sun has backed away from that stance. An FAQ page on a Sun Web site this spring reported that tools such as the compiler, runtime engine, player, and tools currently under development would not be open source.

The compiler, however, has been made open source, as have parts of the graphics libraries and some tools.

Sun plans to clarify its open source strategy for JavaFX with the Desktop 1.0 release, Lehrbaum says.

Google is considering allowing users of its search engine to tinker with query results by re-ranking them and commenting on them.

The company has already run public tests on its search-results pages that contain up and down arrows next to listed links, as well as buttons that allow users to append comments to results.

[ Keep up on the latest tech news headlines at InfoWorld News, or subscribe to the Today's Headlines newsletter. ]

"At this point, I can't say what we expect from this feature; we're just curious to see how it will be used," wrote Ben Gomes, a Google Distinguished Engineer, in the company's official blog on Tuesday.

A screenshot of one of these test pages also shows "x" buttons next to results to apparently remove them from view, although this isn't addressed by Gomes.

Should Google decide to incorporate these as default features, the change would be a significant step by the company in giving people power to interact with its search-results pages.

There are a number of customization and personalization options that Google grants to users who open a Google account, such as keeping a log of their search and browsing activity via a service called Web History, as well as bookmarking and annotating site links with a service called Notebook.

However, in this test, the new functionalities apparently would be available to any user, not just those who are signed in to their Google accounts. The screenshot resembles a test described in a Google Labs Experimental Search page , although the experiment requires users to sign in to their Google accounts. It is not currently listed on the main Experimental Search page and is described as probably available for only a few weeks, so it is not clear whether it's still available for testing.

Google has often been criticized for having a search engine that depends too much on mathematical algorithms while giving little room for users to offer feedback and contribute to the process of rating, ranking and evaluating results. These knocks have become more and more common as the popularity of Web 2.0 services has grown, since they all champion the building of user communities.

As a reaction to the Google approach, a variety of search engine projects have emerged over the years that attempt to give people more participation, such as Jason Calacanis' Mahalo , Yahoo's Delicious social bookmarking service and Jimmy Wales' Wikia Search .

At Wikia Search, for example, anyone, whether registered with the site or not, can add, delete and rate search results, as well as edit the content of a search result URL by modifying its headline and description. In true wiki fashion, changes are reflected immediately and don't go through an approval process, counting on the community to police itself and establish, at least in theory, its collective wisdom.

Google declined to comment further about Gomes' posting. "Unfortunately, because the examples he provides are still only experiments, we cannot talk in length about how they work. If we end up rolling out this experiment for all users, we would definitely be able to talk in more detail. Right now we are experimenting with a number of factors so we can't really explain how the final product would work," a Google spokeswoman said via e-mail.

Thus, it's not known whether Google would factor the rearranging of results by users into the overall computation for ranking results for those specific queries. It's also not clear whether search result comments would be made available to anyone to read.

In the posting, titled " Search experiments, large and small, " Gomes presents several other examples of public tests that Google has run on its results page.

Unlike the test to re-rank and comment on results, which is visually prominent, others are subtle and hard to notice, such as slightly varying the amount of white space between one result and another, or making a symbol look more or less thick.

The bottom line, wrote Gomes, is that "we test almost everything, even things that you would think are so small that we could not possibly care -- nor could they possibly matter. In fact, small changes do matter, and we do care."

Microsoft has updated software that verifies whether a copy of Windows is genuine in its Windows XP Professional edition, making it similar to the notification in Windows Vista and thus more persistently visible to users.

In a blog posting attributed to Alex Kochis, a Microsoft director of product marketing and management, the company said it made the changes to the Windows Genuine Notification (WGA) alerts for XP Pro because it is "the product edition that is most often stolen."

[ Discover the top-rated IT products as rated by the InfoWorld Test Center. ]

Now when a version of Windows XP Pro is found to be pirated or counterfeit, the next time a user logs on to the system, the desktop screen background will be black, replacing whatever custom desktop may have been set by the user. This will reappear every 60 minutes, even if a user resets the screen's background. Previously, this was not a part of the WGA notification for Windows XP Pro.

Another new feature of the alert system is to put the PC into "persistent desktop notification" mode, with a banner at the bottom of the screen informing the user that the copy of Windows is not genuine. The notification is translucent and users can interact with any objects underneath it; however, it will continue to appear on the screen until a user installs a genuine copy of Windows.

Microsoft said the update to WGA also simplifies the installation of the alert system on Windows XP Pro. In addition, the company has improved its ability to detect non-genuine copies of Windows.

Users have had mixed reactions to the WGA program, which Microsoft launched two years ago as part of an aggressive program to eliminate counterfeit and pirated versions of Windows. While some think it's a good way for Microsoft to prevent use of non-genuine Windows software, others found the program irksome and an intrusion, particularly when it would peg systems they knew to be genuine as pirated or counterfeit.

The program even at one point was thought to be acting like spyware by sending information from people's computers back to Microsoft. However, Microsoft said it only provides information about whether the copy of Windows is genuine, not any other information about the user or the PC.

Microsoft first distributed WGA only to users of Microsoft's download services who wanted to install add-on software, excluding security releases, for Windows XP. Eventually, it became an automatic part of Microsoft's update services and then was built directly into Windows Vista as the company developed that OS.

Alcatel-Lucent is delivering a new family of Gigabit Ethernet switches that fit into its architecture for blending data, voice and wireless connectivity and are designed for small and midsize businesses.

OmniSwitch 6400 comes in six models that can be stacked so a single logical switch supports a maximum of 384 ports. Individual chassis support 24 and 48 ports, and can support either unpowered, Power over Ethernet or fiber ports. (Compare access switches .)

[ Keep up on the latest networking news with our Networking Report newsletter. And discover the top-rated IT products as rated by the InfoWorld Test Center. ]

The switches support routing information protocol (RIP) and intermediate system to intermediate system (IS-IS) and could be used in branch offices as the local switch as well as the WAN router, Alcatel-Lucent says.

The switches support high availability so if one control module on a stacked array fails, a secondary control module takes over with no loss of data or network connectivity. If the backup module fails the switches continue to function based on their existing address and route tables.

Security on the switches includes denial-of-service protection and 802.1s port authentication as well as Access Guardian, an Alcatel-Lucent feature that enables setting access rights for groups of user. The switches can work in conjunction with a separate Alcatel-Lucent application called Quarantine Manager that can reset the virtual LAN assignment for a port generating suspicious traffic to quarantine the device from the rest of the network.

The switches can be managed individually via browser-based element management or under Alcatel-Lucent's OmniVista management platform. They can also be managed by the company's Service Aware Manager for carriers that use the devices as customer premises equipment.

The company claims the switches consume 40% to 50% less power than comparable Cisco 2960 and 3560 switches.

Prices for the OmniSwitch 6400 series switches range from US$2,000 to $5,200.

The Mac clone maker sued by Apple Inc. last month fired back today with a countersuit charging Apple with restraint of trade, unfair competition and other violations of antitrust law.

Psystar Corp., a Doral, Fla.-based seller of Intel -based computers, said it has filed paperwork with a San Francisco federal court answering Apple's July 3 lawsuit and replying with one of its own.

[ Keep up on the latest tech news headlines at InfoWorld News, or subscribe to the Today's Headlines newsletter. ]

"We're alleging restraint of trade, among other things," said Colby Springer, one of three lawyers from the firm of Carr & Ferrell LLP representing Psystar , in a press conference held at its Palo Alto, Calif. offices today. "We're going to let the court decide."

Springer said the countersuit accuses Apple of violating the Sherman Antitrust Act and the Clayton Antitrust Act, in particularly for tying its Mac OS X operating system to its own hardware in the end-user licensing agreement (EULA). Because the EULA bars users from installing the OS on non-Apple hardware, Springer said, it's unlawful restraint of trade.

"Apple makes a good operating system, we don't deny that," said Springer. "This is about bringing Leopard [Mac OS X 10.5] to the masses."

Rudy Pedraza, the president and co-founder of Psystar, said somewhat the same thing. "It's not that people don't want to use Mac OS X, but they're not open spending an exorbitant amount of money for something that's essentially generic hardware."

Psystar, which has sold Intel-based OpenComputer desktops starting at $555 since April, and OpenServ servers since June, was sued by Apple last month on the basis of the Mac OS X EULA. In the lawsuit, Apple charged Psystar with copyright and trademark infringement, breach of contract and unfair competition because the Florida firm preinstalled its operating system on systems.

One expert in intellectual property (IP) litigation said last month that an Apple victory would probably put Psystar out of business, since if victorious, Apple would demand Psystar recall the machines it's sold to customers. At the time, Carole Handler, a partner in the IP department of Wildman, Harrold, Allen & Dixon, predicted Psystar would play the antitrust card .

In an interview earlier this month , Springer hinted that Carr & Ferrell's defense would include antitrust elements.

Today, Springer denied reports that Psystar was pirating or modifying Apple's software. "Every single copy of the OS is a purchased copy," said Springer. "Despite the allegations that there's a'master disc,' that's not the case. And allegations that Psystar has somehow modified [Mac OS X's] code to run on non-Apple systems, that's also not the case.

"There is no modification of any proprietary code of Apple's," Springer claimed. Psystar, however, has modified some of the open-source code that ships with Mac OS X, Springer acknowledged, but maintained that any modifications were under the licenses of each open-source component.

Pedraza, who spoke publicly about the case for the first time, echoed Springer. "We purchase copies of Mac OS directly from Apple or from an Apple authorized dealer," he said.

When asked if the countersuit cited any specific precedent in Psystar's favor, Springer responded: "No specific precedent, but we wouldn't be filing this if we didn't believe we could support it."

Psystar's countersuit asked for unspecified damages, which, if the case reaches trial, would be set there, Springer said. "We're not trying to shut down Apple," he said. "What we want to do is provide an alternative to Apple's hardware."

Apple already faces antitrust charges in a lawsuit first filed in 2006 over tight links between the iTunes music store to iPod players. That case, which is seeking class-action status, is similar to Psystar's, said Springer, in that both allege illegal tying.

Also at the press conference, Pedraza said that Psystar was working on a mobile system able to run Mac OS X, although he declined to provide details of the potential notebook.

Apple officials did not respond to a request for comment on the Psystar countersuit.

Instant messaging (IM) has become an increasingly useful business tool for modern corporations. Data from a Forrester Research survey suggests that 71 percent of businesses will invest in real-time messaging this year.

For many organizations, however, IM security is still a nascent topic. Given the phenomenal increase in IM adoption and the business difficulty of limiting the usage strictly to internal use, organizations are beginning to explore security capabilities that support instant messaging and other real-time communication applications.

[ Read more about workplace IM and security in Roger Grimes' Security Adviser blog. ]

To choose an appropriate IM security product, organizations should follow these four steps:

1. Determine the types of IM-related risks and threats that are relevant to your organization.

For example, if IM is used strictly inside the corporation, the threat of SpIM (instant messaging spam) may not be relevant, but archiving or data leaks may be. This step helps you narrow down the set of security requirements. In a typical enterprise deployment, you should consider products that support real-time virus scanning, deep content inspection and SpIM prevention.

2. Determine whether traffic logging and content archiving are important to you.

Compliance and legal needs drive logging and archiving. Look to products that offer either native support for archiving or integration with third-party storage products. FaceTime Communications provides integration with EMC's Centera for IM archiving, while IMlogic, a Symantec company, offers its own archiving product. A bonus capability here is archive search and management.

3. Determine what IM usage policy is relevant to your organization.

It's quite common to have a policy that states that IM communications are blocked for certain groups but permitted for others. Some policies may dictate whether to allow public IMs and file transfers and whether to allow external parties to use your corporate IM. These policies will determine whether you need inline filtering or passive monitoring .

4. Determine any fine-grained controls for IM filtering.

Examples of such controls include filtering based on user identity, IP address, file attachment type and embedded URLs. One customer of FaceTime is an organization with 180,000 users, of whom 12,000 are deemed "regulated employees." It's extremely important for this company to monitor and archive the communications of those regulated personnel and at the same time use a lighter approach for others. The cost of doing otherwise would be prohibitively expensive. For fine-grained filtering, consider products that offer expressive policy definition and configuration and integration with user directories.

Instant messaging is a major enabler of real-time business communication that connects workers across multiple locations . As IM becomes increasingly critical to business operations and progressively converges with other communication platforms, you should include it as an integral part of your content security framework.

Chenxi Wang is a principal analyst at Forrester Research, where she services security & risk management professionals. Download a complimentary copy of Forrester's recent report on IM security.

In a survey of its experts, Forrester Research unveiled last week what its analysts believe are the hottest roles in IT.

The survey is directed at CIOs and is meant to help them determine who they should either "hire, cultivate or rent." For IT workers, it may be a way to insure a long and successful career in IT.

[ Worried about your tech job moving abroad? See InfoWorld's special report on offshoring yourself and working overseas. ]

Analysts were asked to analyze the hot roles within their own coverage areas by incorporating such data as drivers, demand, and influence of roles.

Forrester put 16 such roles in categories designated "hot, very hot, extremely hot, hottest."

What's hot Rather than classifying jobs by title, the report identifies hot areas by job description -- that is, the function within IT.?

Six IT roles are identified as hot: account manager, desktop virtualization expert, mobile operations devices expert, service manger, business process analyst, and storage director.

Account manager: Acts as the interface between IT and the business; includes initiating projects, IT planning, project monitoring.

Desktop virtualization expert: In this role, an IT worker would oversee the implementation of desktop virtualization. Moving from desktop to datacenter also requires knowledge of back-end infrastructure operations.

Mobile operations and devices expert: Responsibilities include wireless networks, the interface between IT networks and carrier networks, knowledge of devices, and a level of knowledge about compliance regulations as they affect mobile security.

Service manager: Defines services IT offers, monitor SLAs and business continuity.

Business process analyst: Must be able to understand business process requirements and reinterpret these requirements into specifications for a technical staff.

Storage director: Responsible for all parts of storage including staff and infrastructure.

What's very hot Enterprise application strategist: In charge of long-term application strategy for the enterprise; must define ongoing and future business processes.

IT planner: Prioritize and manage IT investments and integrate IT plans with business plans and forecasts.

Network architect: Design network solutions on a micro and macro level, oversee quality assurance and testing before network is put in production.

Enterprise project manager: Define project management superstructure or framework, manage outsource providers, and provide hands-on management of large projects.

What's extremely hot Data/content-oriented business analyst: Responsible for designing components for the creation, classification, and access to unstructured data.

Business architect: Define business processes, integration, and technology needed to support the processes.

Enterprise architect: Manage the governance of enterprise architecture, including processes, data structures, and deployment of enterprise-wide applications.

Vendor management expert: In charge of pre-and-post contract management.

What's hottest Information/data architect: Must have the ability to describe and monitor an organization's approach to shared information, create enterprise data model and related artifacts; may include the design of data marts and warehouses.

Information security expert: "define, implement, and oversee risk management and compliance policies."

The Forrester analysts also found five attributes that prospective candidates who would like to fill one of the above roles should have:

* Local knowledge of the business industry or region. * Cross-discipline knowledge; understanding both management practices and customer groups. * Those willing to take on high-risk roles that, if successful, will have a major impact on the business. * Limited external supply; that is, while an outsourcer may be willing to supply 500 coders, the benefits of finding you a half-dozen enterprise architects is not worth their while. * Consistency with technology, vendor, or industry direction, meaning rapid changes in technology; an example is how mobile put a higher demand on real experts who have domain-specific knowledge.

Nvidia's Tegra system-on-chip will allow portable devices to play high-definition video for more than 10 hours, an engineer from the company told the Hot Chips conference on Monday.

Nvidia announced the Tegra series in June, introducing the Tegra 600 and 650 chips and folding the previously announced APX 2500 cell phone chip into the same line. The chips take Nvidia beyond its base of graphics processors and up against Intel's Atom platform. The 600 and 650 can be used with hard disk drives and are designed partly for MIDs (mobile Internet devices), an emerging category of pocket-sized computers that is also in Intel's sights with Atom.

[ See related stories: "Arm takes aim at Intel in small Internet devices" and "Intel has a chip, but where are the MIDs?" ]

"Power really is the challenge," said Michael Toksvig, a distinguished engineer at Nvidia, who spoke at the conference taking place this week at Stanford University. Advances in lithium-ion battery technology only extend the amount of power from one charge by about 5 percent per year, so the rest has to be made up with device efficiency and power management, he said. In high-definition video playback, a Tegra chip's power consumption is well below 200 milliwatts, he said. The chips, based on an Arm core, are as small as 12 by 12 millimeters for the APX 2500.

The video capabilities of the chips approach home entertainment levels, according to Nvidia. The top-of-the-line Tegra 650 can decode 1080p video, the highest resolution commercially available on widescreen TVs, at 24 frames per second. The resolution can be as high as 1,680 by 1,050 pixels, so a pocket-sized device made with this chip could be plugged in to a TV using HDMI (High-definition Multimedia Interface) to play a high-quality movie, Toksvig said. The Tegra platform can decode the MPEG-4, H.264, and VC1 formats. With a peak bit rate as high as 20Mbps, the quality approaches that of Blu-ray DVD, he said. (A DVD would probably still be needed for storage of the movie, he added.)

The Tegra 600 can play 720p video at 30 frames per second and 1,280-by-1,024 resolution. The APX 2500 cell phone chip can handle the same quality with a lower resolution of 854 by 480. In addition, it can play nine hours of continuous TV broadcast over mobile systems such as DVB-H (Digital Video Broadcasting - Handheld), according to Nvidia.

A Tegra-based device could also deliver more than 100 hours of MP3 music or five hours of 3-D game play, or spend weeks in standby mode without running out of power, Toksvig said.

The Tegra platform is still in its infancy, however. In one demonstration of sending a 720p movie trailer from a prototype pocketable computer to a widescreen TV, Toksvig wasn't able to achieve the full resolution and frame rate. He said sample chips are hard to come by because Nvidia is concentrating on helping major vendors get the chips into devices for sale during the end-of-year holiday season.

Tegra chips should appear first in personal media players and later in other products, such as MIDs and navigation units, with mid-range and high-end cell phones probably coming in 2009, Toksvig said.

Greenplum and Aster Data Systems, two startups involved in large-scale data analysis, announced this week that their products will support MapReduce, a programming technique originally developed by Google for parallel processing of large data sets across commodity hardware.

Software developers tend to be more comfortable with languages such as Java and C++ than the database language SQL, said Mayank Bawa, co-founder and CEO of Aster, maker of a cluster database system that splits workloads into multiple discrete tiers.

[ Keep up with app dev issues and trends with InfoWorld's Fatal Exception and Strategic Developer blogs. ]

"Most developers struggle with the nuances of making a database dance well to their directions," he wrote in a blog post. "Indeed, a SQL maestro is required to perform interesting queries for data transformations (during ETL processing or Extract-Load-Transform processing) or data mining (during analytics)."

Enter MapReduce, the goal of which was to provide a "trivially parallelizable framework so that even novice developers (a.k.a interns) could write programs in a variety of languages (Java/C/C++/Perl/Python) to analyze data independent of scale," Bawa wrote.

Meanwhile, Greenplum, maker of a database it says can scale to a petabyte of information, said this week that a MapReduce framework will be part of its dataflow engine as of September.

The twin announcements brought a nod of approval from one close observer of the database world.

"On its own, MapReduce can do a lot of important work in data manipulation and analysis. Integrating it with SQL should just increase its applicability and power," wrote Curt Monash of Monash Research, on the DBMS2 blog.

"MapReduce isn't needed for tabular data management. That's been efficiently parallelized in other ways," he added. "But if you want to build non-tabular structures such as text indexes or graphs, MapReduce turns out to be a big help."

Of all of the ongoing expenses needed to keep corporate IT running, network-related costs are perhaps the most unwieldy. New technologies, changing requirements, and ongoing equipment maintenance and upgrades keep IT staff on their toes and money flowing out the door. But there are ways to manage network costs.

The problemAccording to Aberdeen Group, network costs continue to rise steadily. In 2008, for example, network spending is expected to increase slightly more than 5 percent over 2007. Telecom management industry association AOTMP of Indianapolis, Ind., backs that up, estimating that spending for voice and data services alone averages $2,000 to 3,000 per employee.

[ Keep up on the latest networking news with our Networking Report newsletter. And discover the top-rated IT products as rated by the InfoWorld Test Center. ]

The biggest area for steady cost growth is the ever-expanding network, either as a result of physical expansion or a general thirst for connectivity. In the first case, a new branch office could require replication of the security infrastructure through technology like a point-to-point VPN connection. The network may need to add a MPLS (multiprotocol labeling service) to provide that branch office with a wide-area, high-speed connection. And those expenses are in addition to the cost of routers, switches, and network appliances that the branch office may need.

Internally, the "need for speed" is driving the increase of network costs. More and more devices, either in terms of number of ports for network access or the number of network-connected devices per employee, is increasing.

One growing trend is the shift from standard PCs to mobile PCs in the corporate world. Over the next five years, Forrester Research believes corporate America will reach an inflection point where traditional PCs are eclipsed by mobile PCs.

"Now you have a device that perhaps needs a port or wired drop at the desk and may also need to be supported on a wireless network, so the number of means by which employees can connect to the network drives the size of the network in terms of end points of connectivity," explains Chris Silva, an analyst with Forrester Research of Cambridge, Mass.

Other factors also are contributing to spiraling network costs. Aberdeen Group, for example, found that companies expect to increase their bandwidth by 108 percent on average over the next 12 months and expect to increase the number of business-critical applications running on their networks by 67 percent.

The growth of wireless networking is also increasing IT costs. As companies begin to replace all or part of their networks with Wi-Fi networks to take advantage of newer technologies like 802.11n, they are spending liberally.

And don't forget the hidden costs: As new devices enter the network and new network end points are developed, network management becomes more complex and expensive. For example, you might have your core wired network infrastructure from Vendor A but overlay a wireless network from Vendor B, which creates two separate management consoles. And as more employees connect to the network via devices like BlackBerrys and phones, the IT staff must manage and secure these network-connected devices as well.

Clearly, companies must do what they can to manage network costs. AOTMP, a telecom consultancy based in Indianapolis, found that developing a strategy to manage network expenses was the top telecom network initiative for companies in 2008, with reducing spending for telecom services and improved asset and inventory management services rounding out the top three.

Reducing network costsThe first step in controlling network costs, says Aberdeen analyst Began Simi, is to take the network's pulse. That means understanding exactly where the network's performance bottlenecks are and how efficiently the network is performing.

"Throwing more bandwidth and money at the problem even though you don't understand the bandwidth consumption per application or network location can be expensive," he says.

There are automated network monitoring tools available to measure these metrics. Both sophisticated products from vendors like Cisco Systems and NetQoS and free tools like PRTG Network Monitor and pier can provide a lot of value, such as reducing bandwidth and server performance bottlenecks and avoiding system downtime.

Once you understand what's going on in your network, there are many methods companies can use to reduce costs or prevent them from rising further.

One method is to consolidate the physical network infrastructure by finding ways to make the switch that's at the core of the network perform more functions; by doing so, you can reduce the number of appliances and bolt-on solutions your network uses. Many networking vendors like HP and Cisco are making inroads in this area.

Virtualization is a key part of network consolidation. By setting up the network infrastructure to be delivered from a pool of shared resources, those resources can be used more efficiently across a network fabric, explains Peter Fetterolf, a partner at Network Strategy Partners, a Boston consultancy. Virtualization can improve network resource utilization, efficiency, and agility, helping lower the total cost of ownership.

What's more, virtualization leads to reduced overhead in areas like power and cooling; real estate; supervision, maintenance, and personnel; and telecom services, he adds. And consolidation of service capacity in a single location creates more predictable demand patterns that permit better utilization, while overhead costs are spread over more productive assets such as systems administrators per server and network managers per network element.

Another part of consolidation is adopting technology that allows the IT staff to manage both the wired and wireless network from a single platform via APIs or other types of application integration tools. Most of the major network vendors are battling to provide functions like these, but third-party vendors also can help.

"That means taking one network management console and managing not only just the flow of data bits and bytes, but managing the VPN service, the WAN optimization tool and other things in the network," Silva says. "You want to consolidate your different management interfaces and consoles into one virtual single pane of glass management, where everything is on one screen."

And don't forget about what you already have in place. It doesn't make sense to invest in more technology if you're not maximizing the value of the investments you have already made, Silva says. For example, you may have spent a lot on a wireless network and mobility technology, but if the network hasn't been configured properly to use the technology, you're wasting money. If built correctly, the network can probably support technologies like voice over wireless LAN or VoIP, for example.

"Most often, you can squeeze more value from what you already have by using the same infrastructure with different overlay technologies to get more return on the investment that's already been made," he says. "So in addition to serving data, that $200,000 investment in a wireless LAN can also work toward cutting down the monthly cellular bills of an organization because that network can also support voice. And the same template can be applied for supporting things like video, using the WLAN for asset or employee tracking and presence-enabling unified communications systems."

And examine the vendors and technologies you are using for best value. If, for example, you have relied on Cisco Systems to develop your entire network, expenses could get very high very quickly. "There are a lot of different ways to build a network, and there are a lot of different options. They are all worth exploring," Fetterolf says. And once you have done that, don't be shy about pitting vendors against each other, he adds.

Finally, it can also make sense to look beyond the four walls of your organization for cost savings. Outsourcing network management, for example, can save significant money in some cases. In a recent study, Aberdeen Group found that organizations that outsourced network management reported an average savings of 26 percent as compared with previous spending.

CIO.com is an InfoWorld affiliate.

EMC is targeting small businesses and branch offices with a new low-end Celerra storage product.

The Celerra NX4, which can be deployed in networked-attached storage, iSCSI, or Fibre Channel storage-area network systems, is ideal for consolidating distributed file servers and storage into a single platform, EMC says. Highlights include thin provisioning, snapshot technology for data recovery and backups, and a Web-based console that automates management of storage volumes.

[ Get the latest on storage developments with InfoWorld's Storage Adviser blog and Storage Report newsletter. ]

NX4 offers a wider choice of networks and systems than most competing products targeted at small and midsize businesses, such as those from NetApp, Dell, and HP, says Charles King of the Pund-IT analyst firm. But EMC is still trying to build a reputation as a vendor for sSMBs, he says. (Compare storage products.) 

"This is a product that would work well for a lot of small and medium-sized businesses, but those are not the type of businesses who think about EMC as the vendor of choice," King says. "It takes time to grow name recognition."

EMC says the NX4 will compete against NetApp's FAS2020A system.  

With SAS and SATA drives, EMC's NX4 provides from 4TB to 60TB of storage. Pricing starts at $20,375. Previously, EMC's lowest-end Celerra system was the NS20, which costs at least $32,000. In a related move, EMC is increasing the capacity of NS20 from 60TB to 90TB.

Based on EMC's Clariion storage, the NX4 system can support Microsoft, Unix, and Linux server operating systems, as well as VMware deployments. Applications including Microsoft Exchange and the SQL Server and Oracle databases can also be supported by the new low-end storage system.

Simplified management tools on the NX4 include Startup Assistant software that lets storage pros power up and configure a storage system in 15 minutes, EMC says.

A second tool, the Web-based Celerra Manager software, "makes system administration simple and intuitive with easy-to-use wizards and automated volume management, enabling administrators to provision a file system in just four mouse clicks," EMC says.

With support for SAS and the lower-priced SATA drives, EMC says NX4 lets IT shops offer tiers of storage based on factors like cost, efficiency, and performance.

EMC has been trying to make inroads into the SMB market for a few years now, King notes. Prior moves on that front include EMC offering the MozyEnterprise online storage service, and EMC's April purchase of data backup and storage device maker Iomega.

Users tired of phishing attacks who retaliate by talking back are being targeted with exploits designed to hijack their computers, a security researcher said Tuesday.

In a new twist, phishers using the Asprox botnet have struck victims who use the scam's log-in screen to give the crooks a piece of their mind. The scammers fire off a multi-exploit attack kit against anyone who uses profanity in place of the username or password, said Joe Stewart, director of malware research at SecureWorks Inc.

[ Learn how to secure your systems with Roger Grimes' Security Adviser blog and newsletter, both from InfoWorld. ]

Users who know better than to divulge their online banking username and password in the forms linked from phishing e-mails, but who use words such as "phish" or a wide range of what Stewart called "bad language," are targeted for a follow-on malware attack.

"The phishers are looking for three things," said Stewart. "First, if you don't fill out the form completely, second, if you use the term 'phish'. And three, if you use any kind of bad language."

Although users who backtalk sidestep the identity theft, they may be at risk from the second-round attack, which is launched by a recent version of Neosploit, a well-known multi-exploit attack kit often used by hackers.

Users who have not kept Windows up-to-date, or applied patches for popular browser plug-ins, such as QuickTime and Flash, will be vulnerable to the Neosploit attacks, Stewart said.

More people than one would think blast back at phishers in the log-in screens, Stewart said, noting that when SecureWorks locates data obtained by phishers, it often includes a "fair amount" of profanity and other uncomplimentary comments. "People think, 'While I'm at it, I might as well take some retaliatory action'," said Stewart.

The Asprox botnet contains at least 50,000 compromised computers, maybe more, Stewart estimated.

"I can't recall seeing an attack quite like this before," he added.

Computerworld is an InfoWorld affiliate.

A plan by U.S. Customs and Border Protection (CBP) to collect personal information on every traveler coming into the country and keep that information in a database for 15 years could have huge privacy implications for U.S. residents, one privacy group said.

The Center for Democracy and Technology (CDT), in comments filed Monday, said CBP's plan raises serious privacy concerns. CBP is part of the U.S. Department of Homeland Security.

[ Your source for the latest in government IT news and issues: Subscribe to InfoWorld's Government IT newsletter. ]

The CBP proposal , published as a federal notice in late July, represents a "vast scope of data collection," because data wasn't formerly kept for U.S. citizens crossing into the country by land, the CDT said.

In addition, the 15-year retention period for the data is "excessive," wrote Gregory Nojeim, senior counsel at CDT. "It cannot be justified as necessary for determining whether the record subject is admissible or is dangerous or is the subject of an outstanding criminal warrant," he wrote in the CDT filing.

The CBP plan also allows for the agency to share the information with other federal, state, local, tribal or foreign government agencies for a wide variety of reasons, Nojeim wrote. The CBP proposal allows information to be shared with government agencies responsible for investigating, prosecuting, enforcing or implementing a "statute, rule, regulation, order or license" when CBP believes that information would help the enforcement of civil or criminal laws or regulations.

In the past, CBP could only share information when it became aware of a violation or potential violation of laws or regulations, Nojeim noted.

A DHS spokeswoman discounted the privacy concerns, saying the traveler database is not new. Border officials have collected information on some travelers in the past, and the July notice is an attempt for CBP to be more transparent about its information-collection practices, said spokeswoman Amy Kudwa.

"This is not something new," she said. "We are not using the information in a new way."

The CBP lays out the reasons for the changes in information collection in its proposal. "The priority mission of U.S. Customs and Border Protection is to prevent terrorists and terrorists' weapons from entering the country while facilitating legitimate travel and trade," the CBP proposal said. The information will be used for multiple purposes, including screening people "who may be or are suspected of being a terrorist or having affiliations to terrorist organizations, have active warrants for criminal activity ... or have been otherwise identified as potential security risks or raise a law enforcement concern."

CDT also raised concerns that there are no additional restrictions on sharing information from secondary inspections, usually done when border officials believe the person has committed a crime or is a foreigner not eligible to enter the U.S. "Release of this information can cast a cloud on a person who has done nothing wrong," Nojeim said.

CBP has also come under fire by privacy advocates in recent months for searches of laptops at U.S. borders without having specific suspicions of criminal behavior. CBP and DHS officials have defended the practice of searching a small number of laptops by saying it helps catch terrorists and other criminals.

Hewlett-Packard said Tuesday that it has completed its $13.9 billion purchase of massive systems integrator Electronic Data Systems, and it also revealed that EDS' top-level management structure would remain largely unchanged.

HP had already made it clear that EDS president and CEO Ron Rittenmeyer, would continue in a leadership role. On Tuesday, it confirmed that Rittenmeyer's direct reports would include key executives from EDS continuing in their roles as vice presidents overseeing various regions of the world as well as functions such as global sales, transformation, outsourcing, and marketing.

[ Read the related stories What does the HP-EDS deal really mean? and HP-EDS deal spurs range of customer reactions. ]

HP's senior vice president of HP Outsourcing Services, Andy Mattes, will now report to Rittenmeyer in the role of senior vice president of applications services. Executives in other roles, such as finance, IT, human resources and legal, will report to HP executives.

The lack of a top-level management shuffle or purge did not surprise one industry observer.

"No real surprises here so far," said Forrester Research analyst Paul Roehrig, via e-mail. "It's very much in line with the original strategy to fold much of the legacy HP services capability into the EDS management framework."

EDS will handle outsourcing services previously provided by HP's Technology Solutions Group, which will focus instead on designing, installing and maintaining systems for customers, HP said.

HP plans to reveal more about its plans for EDS on Sept. 15, when CEO Mark Hurd appears at a meeting Webcast for securities analysts.

The massive deal -- which sets up a pitched battle between HP and IBM for dominance in the services arena -- created a combined services business with nearly $40 billion in annual revenue and more than 200,000 employees as of the end of fiscal 2007, according to HP.

Sonatype on Tuesday is offering a tool for Java developers to manage internal Maven-based code repositories and access external Maven repositories.

The company's Nexus 1.0 product is a Maven repository manager; the Maven Central Repository itself features a repository for binary artifacts and publicly available project metadata, the company said.

Maven Central Repository holds more than 50,000 main artifacts, said Sonatype, which developed the repository. The overarching Apache Maven project features a Java build development framework.

"We try to provide a single place for people to manage all their Maven repositories, and that's what Nexus provides," said Jason van Zyl, founder and CTO of Sonatype.

The open source version of Nexus 1.0 is available for free from Sonatype. Support services will be sold, but users also can get questions answered via a mailing list. A commercially available version due in the fourth quarter of this year will have capabilities for enterprise development environments. Enterprise support and services are to be available as well.

The software requires a small memory footprint, runs out of the box without a database, and can be fully integrated with Eclipse to provide a rich development environment, Sonatype said.

Other features of Nexus 1.0 include:

* A rich UI for managing repositories and contents, enabling deletion and direct uploading of artifacts. * REST APIs to integrate external Eclipse systems using Sonatype's m2eclipse plugin for Maven and Eclipse. * Repository RSS feeds for deployed and cached artifacts and RSS feeds of new artifacts and system changes. * Indexing and searching, including searching of proxied repositories. * Advanced repository proxying and hosting, including on-the-fly metadata correction, artifact request optimization and creation of logical groups of proxied or hosted repositories available via a unified URL.

Nexus 1.0 can be downloaded at Sonatype's Web page.

Nokia has expanded its N series of smartphones with two new models: the N85 and the N79. The company will also start selling an Americanized version of the upcoming N96, it announced on Tuesday.

The N85 comes in the shape of a two-way slider and has 2.6 inch OLED (organic light-emitting diode) screen. The phone measures 103 millimeters by 50 mm by 16 mm and weighs 128 grams. Users can surf the Internet using either HSDPA (High-Speed Downlink Packet Access) at 3.6Mbps or use a Wi-Fi connection. They can also store photos taken with the 5-megapixel camera on the included 8GB microSD card. Photos can be geotagged using the built-in for A-GPS (Assisted Global Positioning System) receiver.

[ Get the latest on mobile developments with InfoWorld's Mobile Report newsletter. ]

On the entertainment side, the phone comes loaded with at least 10 N-Gage gaming titles, and a voucher to activate one full game license, according to Nokia. The phone also has a built-in FM transmitter, which makes it possible to listen to music via a car radio. For users who prefer headphones there is a 3.5mm audio jack.

The N85 is expected to begin shipping in October with an estimated retail price of ¬450 ($660), before taxes and subsidies.

The candy-bar-shaped N79 will also start shipping in October. It's the cheaper of the two new phones, and will cost ¬350 ($515) before taxes and subsidies. It has many of the same features as the N85, including HSDPA, Wi-Fi, A-GPS, an FM transmitter, and a 5-megapixel camera.

Multimedia is stored on a 4GB microSD memory card. It measures 110 millimeters by 49 mm by 15 mm and weighs 97 grams. The screen size is 2.4 inches.

Finally some good news for Nokia fans in the United States., the N96 will be made available for high-speed 3G HSDPA networks used in this part of the world during the fourth quarter. It will cost an estimated $895.

The new members in the N series have the right mix of ingredients that has made products such as the N82 and N73 successful in the past, and they will probably sell well, according to Carolina Milanesi, research director at Gartner.

But she wants something more from Nokia than derivatives of already-successful phones.

"I think Nokia needs something more distinctive going forward, truly new products rather than devices that look like a refresh of previous products on a slightly different form factor," she said.

Citrix Monday is unveiling the newest version of its flagship product, which underwent a recent name change as Citrix tries to align its traditional application delivery tools with its new desktop and server virtualization technology.

Citrix, long known for its Presentation Server application delivery software, changed the product line's name to "XenApp" in February and started touting its leadership in application virtualization. The change in focus came a few months after Citrix purchased server virtualization vendor XenSource. Citrix is stressing the complementary nature of XenApp, its XenServer hypervisor and its XenDesktop desktop virtualization product.

[ Stay up to date on the latest virtualization developments with InfoWorld's Virtualization Report blog and newsletter. ]

Citrix on Monday released XenApp 5, which replaces Presentation Server 4.5, and urged customers to combine the tool with its other Xen products for "an end-to-end virtualization solution that spans servers, applications and desktops."

Citrix says XenApp 5 features load times as much as nine times faster than the previous version, more closely approximating the experience of using a natively installed desktop application. Because applications are hosted remotely and streamed out to users, they don't have to deal with the typical hassles such as upgrading to new versions or restarting when there's a problem, says Bill Hartwick, senior director of product marketing for Citrix's application virtualization group.

"When it's streamed down to me I don't have to worry about installing it or anything. I always have the latest, greatest version of it," he says. "Not only does it start up quickly, but should anything go wrong with the application, I can just re-stream it."

XenApp places applications on centralized servers, allowing users to connect to them from remote devices. To the user, it appears as if the application had been installed on the desktop. Essentially, the presentation layer or user interface is virtualized, says Barb Goldworm, founder and chief analyst for FOCUS Consulting . "Rather than run it on your own desktop, you're running it on a server, virtualizing the presentation layer and distributing it over the network," she says.

Citrix has gone further than any other vendor in terms of virtualizing both desktops and applications, Goldworm says.

Server virtualization giant VMware got into the application virtualization market this year by purchasing Thinstall, which has been renamed ThinApp. Microsoft offers an application virtualization product called App-V.  

Citrix's XenApp 5 has new load balancing functions letting IT administrators ensure that key users and applications receive the best performance available, Hartwick says. The new version uses the HTTP and HTTPS protocols for the first time, features a redesigned interface and integrates XenApp with Citrix's Branch Repeater software, accelerating delivery of applications to branch offices.

XenApp 5 ranges in price from $350 to $600 for each concurrent user.

Editor's note: On Feb. 20, IT manager and Network World columnist Ron Nutter was called into his boss's office and told he was being let go -- that day. Once the initial shock wore off, Nutter launched an aggressive search for employment in the Kansas City area. Over the next 76 days, Nutter applied for 85 jobs, and had 16 interviews before landing a new position. He chronicled the job search in a daily blog. Now that he has had some time to reflect on the experience, Nutter offers these 20 tips for surviving a layoff.

1. As you're being laid off, take notes

[ Need to clean house where you work? Read InfoWorld's report on How to fire an IT person. ]

This can be difficult to do, because losing a job can be a very emotional experience. Nevertheless, while everything is still fresh in your mind, write down all the details you can remember. For example, I was told I would be paid for the full two-week pay period plus my remaining vacation and sick time. When my last check arrived, there were discrepancies. Having written notes helped me when I went back and reminded my former boss and the Human Resources folks of their commitment.

2. Take some time for yourself

Take a few days for yourself. A traumatic event has just happened to you, and you need to get over the initial shock before you jump into the fray to search for a new job.

3. Review the paperwork from the company that laid you off

You need to attend to several important things rather quickly. One is finding out how to file for unemployment. Another is determining how long your company-paid health insurance will be in force before you have to consider paying for COBRA insurance.

4. Update your résumé

This is something we should all do, but it doesn't always get the attention it should. I was told a long time ago that a résumé should be more than two pages with a maximum of three bullet points per employer. That may work in some cases, but not in all.

I have found that some recruiters and employers use software that counts how many times a particular word, such as Cisco, or a word describing a certain type of experience appears in a résumé. I can attest this is happening to a degree. During a previous job search, a recruiter had me rewrite my résumé just about completely to list specifically all the different types of Cisco hardware I had worked with. It was interesting to note how the callbacks increased after I did that.

You may find it necessary to keep more than one type of résumé, each tailored to the type of job you are pursuing.

5. Get a handle on monthly bills

Although I had a little money put by for a rainy day, I went through my recurring bills to see if there was any room for saving more. I found that by shopping around for automobile and homeowners insurance, I could keep the same coverage and reduce both bills. I had been thinking about doing this for a variety of reasons, but being unemployed helped push it to the top of the list.

6. Cut food costs

If you live by yourself, this will be easier to do. If you have a family, everyone will need to sit down and un