Neowin.net

Last night, Bill gates gave the keynote address at the 2002 Internetional CES show in Las Vegas.

This is a quick recap on some of the announcements, he made in his keynote and other information made available at International CES 2002.

• Bill gates announced two new technologies, "Freestyle" and "Mira"
  • Freestyle is an important step toward creation of a complete media center on the PC. Build on the power of Windows XP and with a new easy-to-navigate user interface and a simple remote control, users will have a more relaxed way to enjoy their music, videos and photos with friends and family from their Windows XP PC.
  • Mira (based on Windows CE .Net) will enable a new generation of smart displays that give people the freedom to experience the power of Windows XP from anywhere in their home. Harnessing the remote desktop and wireless networking features of Windows XP and Windows CE .NET, "Mira"-enabled smart displays will deliver to consumers the freedom of the complete experiences in Windows, including browsing the Web, sending or receiving e-mail messages, listening to music, and editing and displaying digital images, from any room in the home.
• Bill gates also announced availability of Windows CE .NET, delivering a robust, high-performance platform for developers building smart mobile devices, while allowing them to optimize their operating system footprint to as low as approximately 200K. As well as a training curriculum (which will help educate device developers and show them how to create devices using the new platform and tools) and a special 90-day Windows CE .NET promotional price of $995, two versions will be made available :-
  • Emulation Edition (lets developers test CE .NET designs on Windows 2000 or Windows XP platforms without the target hardware) [download from here, requires Passport Sign-in]
  • Evaluation Edition (will enable embedded developers to quickly start their evaluation of Windows CE .NET for their next embedded project)
• In the two months since its launch, sales of Windows XP exceeded 17 million copies, making it the fastest-selling version of Windows ever.
• Microsoft marked one of the most successful game console launches of all time, selling 1.5 million Xbox units through the end of 2001. Xbox has the highest game attach rate on record for a video game console launch, with 3.2 games sold with every system through Dec. 29, according to NPD Intelect. In addition, the "Halo (TM) " video game has made the NPD Intelect weekly top-10 list every week since its Nov. 15, 2001 launch.
• Car stereo manufacturers are now getting on the WMA bandwagon, with AIWA and Blaupunkt announching availability of in-car units that can make use of WMA encoded media, making them capable of playing up to 22 hours of music, with models from Kenwood and Pioneer becoming available later in 2002.

Citibank spokesperson Maria Mendler wouldn’t comment on the details of Devitry’s accusations, and instead offered a written statement: “While it is not our policy to comment on information security matters, we have taken and are continuing to take all necessary steps to ensure our c2it site is effectively protected from cross-scripting vulnerabilities.”

The alleged flaw in C2it.com revolves around a two-year-old security vulnerability called “cross-site scripting.” Effectively, it lets a current c2it.com customer sneak requests for customer information through a normal form on a Web page.

Until two years ago, many Web page designers never considered the possibility that an intruder might attempt to load malicious code onto a Web server “through the front door” — by typing it right into a Web page form requesting information like name or address or account number. As a result, few Web designers bothered checking data typed in by site visitors for suspicious characters.

In February, 2000, the federally funded CERT/CC Coordination Center, charged with calling attention to major computer risks, published an urgent bulletin on the issue.

Devitry, who publishes a site designed to expose firms that still have not protected against cross site scripting, said the c2it.com issue was particularly worrisome because it exposed customer account information. According to Citibank’s Mendler, c2it.com, a PayPal competitor, currently has 250,000 customer accounts.

“In September I talked to their e-crimes person, it sounded like someone pretty high up who would take care of things,” Devitry said. “But nothing happened. Then I kept sending them e-mail and having gotten much since then. I use the site and I like it, but I like the sites I use to be secure.”

Devitry said he published the flaw in order to convince Citibank to fix the problem.