Showing posts with label Bug. Show all posts
Showing posts with label Bug. Show all posts

Thursday, November 24, 2016

Windows 10 is ignoring my file associations

Microsoft just doesn't understand how annoying they are when they mess with my computer. I have put up with all kinds of weirdness with Windows 10, but thanks to Classic Shell and Spybot Anti Beacon I feel I am at least partially in control of my own PC. Until recently.
I started noticing some weirdness with my file associations. I've learnt to put up with the occasional file association reset that Windows Update does, trying to force me to use Edge to open PDF files instead of Acrobat. That's a well known and much hated "feature" of Windows 10. But this is different: it's a stubborn refusal to pay any attention to the fact that I don't want to edit text files with Notepad. I use EditPad Pro, and when I check in the registry it is correctly set up to use EditPad Pro. Except that the desktop ignores this completely. It seems that Windows Explorer (that's explorer.exe not Internet Explorer) is loaded is some weird mode when Windows 10 boots up. Any text file on the desktop will open in notepad. Any folder I navigate to from the desktop, such as via "This Computer" or via the "User's Files" icon is also affected.
I noticed an important exception: I have a batch file that opens my TrueCrypt drives and then runs the following command:
start explorer.exe X:\dev
which opens the X:\dev folder on the TrueCrypt drive. This version of Explorer gets the file associations correct every time. Some further experimenting has led me to a simple, but weird, workaround:
  • Allow Windows 10 to boot up and stabilize as normal.
  • Open the Windows Task Manager.
  • Scroll down the list of tasks until you get to the "Windows Processes" section.
  • Right Click on the one or two copies of Windows Explorer, and select "End Task".
  • Don't panic when the desktop disappears.
  • From the Task Manager go to the top menu, select File, then "Run new task".
  • Type in "explorer.exe" and make sure you tick the box that says "Create this task with administrative privileges"
  • Click OK.
You will get your desktop back and once it has settled down the file association problem will be gone until the next time you reboot the PC.
Like many workarounds I cannot explain why it works, only that it does. I don't know if it is something peculiar to my Windows setup, but I suspect not. If this helps you too, please leave a comment.

Update 3rd December 2016: After updating to version 1607 the problem seems to have gone away. I am cautiously optimistic.
The upgrade process turned into a bit of a mission, but after leaving the laptop to do its thing overnight I have a new version of Windows 10.

Tuesday, June 26, 2012

Qualys Browser Check just got a whole lot more useful


Last year I heard about this really useful web site that checks your browser. It's at http://browsercheck.qualys.com/. It tells you what plugins are installed in your browser, and whether they are secure and up to date.
Now it has just become a whole lot more useful, because it checks all your browsers at once, even the ones you don't use, like
Internet Explorer. I have a server running Windows Web Server 2008 R2 and the version of IE that comes with it is basically useless, and I never use it. I use Google Chrome or Firefox instead, mainly for downloads. Recently I discovered that IE still had an insecure component of RealPlayer installed. It turns out this is the default configuration of Windows, so without a tool like this I would never have known.
Then there is the machine I use to develop the FishWise Pro web site. It has 5 different browsers installed, and keeping them up to date can be a problem. Not any more. The screen shot above shows me that they are all up to date, as well as all the main plugins, like Flash, Silverlight, Adobe Reader, and Java. Its very helpful.

Another related tool is the Update Checker from FileHippo.com. I run it from time to time to find out which applications need to be updated. It doesn't check every app I have, but it is pretty comprehensive and useful. If you haven't tried these utilities out, now is a good time.

Friday, October 14, 2011

ESET's Not-So-Smart Security Failure - Fixed


Resolved: I remain a NOD32 fan, particularly after the amazing response from Shaun Norris and his team. They have fixed the problem locally, and making sure the ESET engineers improve their download process in future releases.

Original Post 10/14/11: I have been a NOD32 fan for a long time, but recently I have been questioning my loyalty, particularly in the light of their very dodgy virus definition update policies. It seems they are perfectly happy to allow a PC to run with definition files that are 448 days old. Or 105 days. Or whatever. What kind of security is that!?
Take a look at the screen shot at the top of the page (click on the image) to see how the software is lying to me. I installed the software two weeks ago on this Windows 7 32 bit PC, and at the time the virus definitions were updated backwards from version 6364 (20110809) to 5307 (20100723) and then later to 6516 (20111004). OK, so it had a glitch. It came right. Wrong!
This morning I returned to the machine, after leaving it running by itself for 10 days. The virus definitions are back to 5307. No amount of cajoling can persuade the machine to download the correct version and not mislead me:

Other versions of the software have experienced similar problems. This PC was using version 4.2.71.2 and it had an issue with the definitions, so I removed the software and installed version 50.93,0. The same thing happened on a brand new Windows 7 machine I was setting up from scratch. Other PCs running Windows 98 and version 2.7 are reverting back to July 2011.
So my question is this: how can the software allow the definitions to roll backwards? How can the servers still have definition files that are 448 days old? Are they insane? They are supposed to be a security company. Yet they issue software with bugs in it, and have a policy that doesn't remove old virus definitions, giving careless users a false sense of security. That's worse than no security at all.
ESET CEO Richard Marko is still blissfully unaware of this problem

Update Mon 17th Oct: I have been assigned a bug report number #TICKET 57298
Update Tues 18th Oct: ESET requested the configuration file and SysInspector log that I sent on Friday 14th. I am starting to get annoyed as well as alarmed. In the meantime the definition files are now over 450 days old! And they want me to run WireShark to capture all the packets. WTF?!
Update Wed 19 Oct: Posted an update to the Wilders Security Forum.
Update Thu 20 Oct: Definitions are now 454 days old, i.e. 64 weeks. After making enquiries this morning I discover the ESET engineers are waiting for a log that I have already sent them. I sent the following reply:
Yes, I am on M-Web but the problem also occurs when using ISDSL which is what most of the [customer] connections use.
Yes, I sent you the event log. TWICE. Here it is: [I have removed duplicates]

14/10/2011 03:24:54 PM ESET Kernel The program modules have been updated.
14/10/2011 03:24:52 PM Update module Updater: retval = 0x0000, failures: 0 NT AUTHORITY\SYSTEM
14/10/2011 02:59:19 PM Update module Updater: Switch DEVEL modules retval = 0x00005007 [NOT NEED] NT AUTHORITY\SYSTEM
14/10/2011 01:43:30 PM ESET Kernel The program modules have been updated.
14/10/2011 01:43:28 PM Update module Updater: retval = 0x0000, failures: 0 NT AUTHORITY\SYSTEM
14/10/2011 01:43:23 PM Update module Updater: Switch DEVEL modules retval = 0x00005007 [NOT NEED] NT AUTHORITY\SYSTEM
14/10/2011 01:42:56 PM ESET Kernel The program modules have been updated.
14/10/2011 10:56:12 AM ESET Kernel The program modules have been updated.
11/10/2011 06:53:02 PM Update module An error occurred while downloading update files. NT AUTHORITY\SYSTEM
11/10/2011 04:53:00 PM Update module An error occurred while downloading update files. NT AUTHORITY\SYSTEM
05/10/2011 08:51:06 PM Update module An error occurred while downloading update files. NT AUTHORITY\SYSTEM
05/10/2011 03:46:12 PM ESET Kernel Virus signature database successfully updated to version 6519 (20111005).
05/10/2011 11:46:10 AM ESET Kernel Virus signature database successfully updated to version 6518 (20111005).
04/10/2011 09:46:01 PM ESET Kernel Virus signature database successfully updated to version 6517 (20111004).
04/10/2011 06:06:00 PM ESET Kernel Virus signature database successfully updated to version 6516 (20111004).
04/10/2011 06:05:57 PM Update module Updater: retval = 0x0000, failures: 1 NT AUTHORITY\SYSTEM
04/10/2011 04:46:44 PM ESET Kernel The program modules have been updated.
04/10/2011 12:49:52 PM ESET Kernel The program modules have been updated.

This is clearly an ESET issue because it is ESET software doing the download, and ESET software that is lying to me about the result, and ESET software that is allowing is virus definition files to go backwards.

I understand that transparent proxies may be involved, but then please explain why two adjacent computers on the same connection can have different results? One works fine and the other doesn’t update.

I really think that ESET is not taking this matter seriously. If your engineers have any further requests or questions, please ask them to contact me directly.
Update 2: Thu 20 Oct 2011: I got a call from Shaun Norris at ESET South Africa, who assured me that they are not ignoring the problem, and have requested further info from me. This is most reassuring. In the meantime I think I have figured out how things are going wrong: their update mechanism is broken. It is vulnerable to faulty proxy servers (such as those used by M-Web) and doesn't use https. It also has no check to see if the version it is updating is older than the existing version. WTF!?
Update: Fri 21 Oct 2011: Shaun Norris set up an alternate proxy for me to try, and also contacted M-Web to get them not to cache the ESET virus definitions. Last night I tried a new installation, which worked flawlessly. I'm waiting to be able to connect to the "afflicted" PC (the office opens on Monday) to see whether these changes will help.
Update: Monday 24 Oct 2011: The virus definitions have updated to the correct version, and appear to be stable. I have sent the logs through to Shaun Norris. All is well for now, and hopefully the ESET Engineers will fix this bug before it endangers other customers.
Update: Tuesday 5 June 2012: Version 5.2.9.1 was just released. It addresses some of these issues, according to the release notes.

Thursday, September 01, 2011

I just screwed up my blog!

I was fiddling around with some new blog settings and I totally wiped out all my carefully constructed blog settings.
Sorry folks! It's going to take a while to get it all back. Some of the items will take some time to figure out too. Please bear with me.
Update Friday 2 Sept: Not everything is fixed, but at least the site is usable again. I guess it was ready for a redesign, but not like that! I really must stop fiddling and get back to work.

Wednesday, July 20, 2011

Check Your Browser!

Many tech geeks know about how insecure Internet Explorer 6 is, and how even Microsoft has a web site dedicated to convincing users to upgrade. But is your browser up to date or vulnerable? One service that allows you to find out is the Browser Check from Qualys at http://browsercheck.qualys.com/ which can check most browsers, including IE (requires an add-in), Firefox and Chrome. Here is the result of running it in Firefox 5:
It's interesting that it reports the availability of version 5.0.1 even before the browser itself offers the upgrade. It also shows that (once again) Java is vulnerable, but no fix available yet.
When you run this check on Google Chrome you may need to load the "about:plugins" page to be able to disable plugins like the RealPlayer plugin, which you may not be using. I also found its false warning about a "potential threat" in Adobe Flash a bit annoying: it doesn't check the version number correctly. Hopefully this will be fixed before another flash vulnerability comes along. The bug doesn't happen if the plugin is installed.

Sunday, June 05, 2011

Cash for Bugs

I love my job. Part of what makes it interesting is finding and fixing bugs. What alarms me is how long it sometimes takes to find a bug. So recently I took a different approach with my biggest customer: for each new bug found and reported, the person who found the bug gets a R100 cash reward.
On Thursday I paid out R300 for bugs in a new module that I could swear I tested thoroughly. I guess not. But I was glad to be able to pay out the money, because they haven't found any problems since. And there are a few happy call centre operators who reported the problems.
I have now got a backlog of bugs to fix, many of them minor but annoying. I doubt if half of them would have come to my attention so soon without the reward. And certainly it gives me more confidence that next time I make changes to the program that I'll be hearing sooner rather than later about anything I overlooked or missed during testing.

Thursday, May 05, 2011

MTN: It doesn't add up

(Click on the image above for more detail)
I just love getting statements from my cellphone company, MTN. They are just full of laughs. I have noticed that for some time my debit order was R89 but the balance shown is double this amount. Looking back to figure out why, I am still completely confused. In November last year it just increased by R89 with no explanation given.
The call centre operators just repeat the mantra "it's because we invoice monthly in arrears" and cannot explain any further. I guess it's not in the script and they are just underpaid droids. At least the phone works, even if they can't add. Such is life in Africa.

Update 22nd June 2011: After meeting with several MTN executives they helpfully sent me a reconciliation spreadsheet going back several years. I then discovered the following:
I am therefore left with the conclusion that all statements between Feb 2009 and Nov 2010 were incorrect, and the bug has now been fixed. Weird.

Wednesday, April 29, 2009

Yet Another File Explorer Bug

Why do we put up with crappy software like Windows Vista? My guess is that this bug will carry over into Windows 7 too. It certainly didn't exist in Windows XP, because I originally wrote the batch file on an XP machine.
The faulty screen above was created using the batch file command
start x:\dev\clinic
which is supposed to open and display the contents of a folder. In this case one on the X: drive, which is a Truecrypt volume. Notice how the Path section at the top incorrectly shows "Computer", and the "Folders" view incorrectly shows drive "C:"

Now look at the screen below, where the path and folder information is correct. This was created using the command
start explorer.exe x:\dev\clinic
Notice how both views show a music-related view, even though the Vista default view is set to "All Items" and I regularly have to re-customize the folder back to "All Items".
I wonder if reporting this bug will get as much response as reporting the previous one, which was almost zero.
Update 3pm: This Bug issue has been escalated to [Microsoft SA's] Response Management Team and captured as a Feedback. Reference 2009042900700

Thursday, March 26, 2009

Microsoft Access and the Ten-Year-Old Currency Bug

Today I wasted hours of valuable time fighting with a bug that is in Microsoft Access 97 and can also be found in Microsoft Office Access 2007. Does it really take more than 10 years to fix a bug like this, or is Microsoft just deaf? You decide.
This is how you get the bug to work:
1. Change your regional and language settings to "English (South Africa)" so that your currency fields use the "R" symbol.
2. Create a table with some fields in it. Include two currency fields, Field2 and Field3.
3. Populate the table with a few rows of data
4. Create a report, and make sure that the format of Field2 and Field3 is set to "Currency".
5. To be extra sure, include the following code in the Report Open event:
Report!Field3.format = "Currency"
6. Preview the form. Close the database.
7. Change your regional and language settings to "Zimbabwe", so your currency is now "Z$".
8. Open the database, create a form, and put the currency fields on the form.
9. Make sure both currency controls have their format set to "Currency"
10. To make extra sure, put the following code in the form open event:
form!Field3.format = "Currency"
11. Put a button on the form to preview the report.
12. Set the database to open the form on opening the database.
13. Preview the form.
14. Close the database, and change the regional and language settings to "English (Ireland)"
Theoretically, all the controls with the Currency format should show their values in Euros, the currency for Ireland. Wrong.
As you can see from the screen shots shown here, Access converts the format from "Currency" to "R #,##0.00;R-#,##0.00" for the fields that were edited when the settings were South Africa, and "Z$#,##0.00;(Z$#,##0.00)" for the Zimbabwe settings. Only if you use code to force the control to retain the "Currency" format, does the formatting work correctly. That's why Field3 displays correctly but Field2 does not.
Why does it do it? Because Access is written by programmers in Redmond, USA, who seem to think that Canada and Mexico are on other continents, and don't realise that Redmond is not the centre of the universe and that most of the planet does not format its dates as mm/dd/yyyy. But that's another bug.
Now you can change your currency settings back to what you normally use, and shake your head in disbelief. This bug works in all version of Access from 97 to 2007. It was reported in January 2004 applying to "Access 2 and above" by Allen Browne. I guess it might be fixed in a decade or so.
Update Friday 27 March: I tried doing a loop through all the report controls, but you can only do that in design view, not in print preview, so I used the Tag property and stored the names of all the Currency controls in a tag item. Then I use the OnOpen function to set the format of the explicitly listed controls. I use a similar technique for forms. This bug (or is it an undocumented feature?) has cost me 2 days worth of programming time. Thanks for nothing, Microsoft! Both of these bugs are not documented anywhere on the Microsoft site or in the Access documentation that I could find.
Update Saturday 28 March: Setting the currency fields in the table to have a format of "Currency" doesn't work either. It seems that anything done at design time is likely to fail. What's worse is that Access lies about the format setting. It will display the format property as "Currency" when it isn't stored that way. You can expose this lie only by changing to a different region, and then inspecting the format property again. By then it's too late because the app is already installed in another country on a customer's machine, and they are yelling at you on the phone. Access 2007 also has a format called "Euros" just to add to the confusion.
The code I use in the OnOpen event is basically this
'
'// Fix up CURRENCY formatting
'
Dim strField as string, strTag as string, n as long
strTag = Nz(form.Section(acDetail).Tag, "")
If Len(strTag) > 2 Then
strTag = strTag & ","
n = InStr(1, strTag, ",")
While n > 0
strField = Mid$(strTag, 1, n - 1)
strTag = Mid$(strTag, n + 1)
form(strField).Format = "Currency"
n = InStr(1, strTag, ",")
Wend
End If
This code relies on the tag in the form detail having a list of fields, separated by commas, that require correct currency formatting. Similar code works in the OnOpen event of a report.
One final thought: I don't hate Microsoft, or Access. I have used Access 97 almost every day since I bought it in 1998 and installed it on Windows 98. Access is awesome, in spite of these annoyances. As a programmer I am in awe of all the things it does. Why they have to spoil it with undocumented nonsense that persists for 10 years is incomprehensible to me. I guess geeks aren't perfect either.
Update Sunday 29th March: Wayne Phillips sent me another elegant solution. I haven't tried it yet but it looks promising. I am al;so dismayed to find that the same bug exists in Excel, so I guess it's never going to be fixed, or documented.
Update Wednesday: Here is a comprehensive list of similar Access "gotchas" (i.e. Momentary Lapses of Reason on the part of Microsoft). I cannot believe the arrogance of these people. And as for the Dollars vs Lira argument, I can't believe that ANY competent programmer would have a "Currency" format that was not hard wired to $ or Lira if the possibility of confusion could arise. Microsoft themselves have now introduced a "Euros" format for precisely this problem, but have left the old "Currency" behaviour permanently broken. PEBCAK indeed: the only debate is whose chair and keyboard? I say Michael Kaplan's chair and keyboard, not mine. And when are they going to WTFM to document it correctly?

Sunday, March 22, 2009

Acronis True Image Home 2009 and the feature that is really a bug (Updated)

I promised the Acronis support team that I would test Acronis True Image Home 2009 build 9709 on my laptop because they had said
I understand your issue and assure you of a quick resolution for the same. The time variation in progress bar might take place because of particular software/hardware configuration. There may be some applications running on the background that may have higher priority level than Acronis software.
Clearly they did not understand the issue because I was running from their boot CD and so there were no background applications. But to disprove the "particular software/hardware configuration" nonsense I ran the software on my Acer Extensa 5620 last night. (See below for the same bug on my FRAGG desktop machine.)
My first problem was getting the software to see the drive, because I protect it with a password. After removing the password we were ready to go. I selected all the partitions on the drive, and asked for a sector-by-sector backup, as before. Here is the summary screen:
The progress bar appears to work OK, with the top one moving faster than the bottom one, but not for long.
The overall time estimate has dropped from 10 minutes to 17 seconds, when it still has over 4 hours to go.
Notice how the total progress bar resets itself for the verification operation. Why?
To add further lunacy to the equation, the verification estimate jumps from 10 days to 3 minutes. It actually took 65 minutes.
Now for the final amazing feature: I selected the "Shutdown the computer after completion" option because it was late and it would have been nice to leave the computer and go to bed, knowing it would shut down when done.
Of course I had forgotten about this incredibly stupid dialog box. Even though it defaults to the "shutdown" option, if you don't click it during the few seconds it gives you (i.e. you've gone to sleep or left the machine unattended expecting it to shut down) then instead of shutting down it "reverts" the shutdown option and reboots instead.
What kind of feature is that? You select it expecting it to do a shutdown, but unless you're standing by the machine it doesn't. According to the "What's New" article,
Automatic computer shutdown after backup or restoration finishes. You can now perform a backup at night and go to sleep without bothering about turning off the computer - the program will do this on its own.
Except it doesn't do this on its own. You have to be there to confirm the operation within a few seconds or it "reverts" and does something else.

Update 4th April 2009: Acronis Customer Support have allowed me to change my purchase from the 2009 version to 11.0.8101 with a legit serial number. They also gave me a link to the boot CD ISO image, and it all works fine. The problems described still occur, and will probably be fixed in a future release.