Can anyone explain this security failure in Domino?

I've never seen this problem before and I hope I never see it again.

A customer's branch office based in Sydney, Australia sends out a daily industry newsletter to their customers but for reasons specific to their industry they doesn't want any of the customers to realize who the other customers are. Consequently the author mails the newsletter to himself with all of the customer addresses in the BCC field.

Two days ago he mailed the newsletter out as normal but it bounced at one address (let's say for 'Mr Smith') because Mr Smith no longer worked at the target organization. After that all of the other 100+ customers listed in the BCC field received the Non-Delivery Report for Mr Smith addressed to themselves, and since they were given the original email encapsulated within the NDR then they could see the contents of the BCC field and thereby understand who all of the other 100+ customers were. So somehow the Router task had taken the contents of the BCC field and used that to address the NDR.

The customer had been getting random corruptions in their mail.box file on a monthly basis for over a year but Lotus support hadn't been able to determine the reason for this. Recently the corruptions had been hitting mail files also but Fixup never found a problem. I have a sneaking suspicion that the files weren't actually corrupt, and that a wayward Router Task is somehow to blame for all of this, but the server has been taken up and down more times than a Bride's nighty and there is still no end to the problem. The next step is to completely reinstall the server and patch it to R7.04 but that still doesn't answer the question of what happened.

The customer is standardized on Notes across the world and is unlikely to abandon the platform. They are looking at upgrading to R8.5 later this year, but for now they would like some reassurance that the problem won't occur.

Anyone seen this kind of problem before?

The server is an unclustered R7.02 FP3 running on Windows 2003 server. A PMR has been raised for this issue and if any Loti wants to investigate it further then I'm happy to give them the reference.
.

"Microsoft's" new mailing list

I had an interesting email this morning which concluded with...

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers' content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

©2010 Microsoft | Unsubscribe | More Newsletters | Privacy

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052

Funny... I don't remember subscribing to "MSN Featured Offers". Ten seconds of detective work showed that the return address was in Russia and the "Unsubscribe" button would take me somewhere that anti-virus filters feared to tread.

I'll give them an A+ for innovation and simultaneously wish that the fleas of a thousand camels would infest their armpits.
.

Google Gears shifts into reverse

eWeek have published another piece on the Google push to overtake IBM and Microsoft on the desktop, with the obligatory ten piece Death-by-Powerpoint slideware (PCMag had a similar article). I admit that I'm a little jaded after 20+ years of seeing vendor slide sets but this one really pushed the limit on feature beat-up e.g.

• The Google Drawing Editor supports Copy and Paste between applications.
• Google Docs have Rulers with Tab stops plus Spell check.
• Google Spreadsheets have a Formula editing Bar and simultaneous editing for fifty users.

You can have fifty people editing the same spreadsheet? I can understand the need for multiple people to view a spreadsheet within the context of an on-line meeting but once you open the spreadsheet up to multi-user editing then who's going to clean up the mess and verify the data afterwards? Consider that once you get more than a dozen people into a face-to-face meeting there is a high risk of the agenda being abandoned UNLESS you have a very capable chairperson. It would be unimaginably worse with an on-line meeting based around a spreadsheet ... hey, that number doesn't look right... I'll just change it while no-one's looking...

Then there was this wonderful (but totally meaningless) slide with no external references. I'm intrigued to know what measurements Google used to set the scale on the X and Y axis but I don't think there's an answer to that question.


However once you pass over the fluff and bubble there were some interesting snippets in the articles.

• Google is disabling Google Gears for Docs. It intends to rewrite that component so it can handle HTML5 and modern Web browsers. Now I don't have a problem with a software company rewriting their code to include new technologies, but it does show that the Google architecture is no more future-proof than Microsoft Exchange. In other words, Google has some good ideas but there was nothing extraordinary about their initial implementation of those ideas. On the other hand, Notes/Domino continues to provide backwards compatibility even while it evolves to include new technologies eg X-Pages. Score one for IBM.
  
  
• Google is implementing this change in three weeks time. Your company may have made a significant investment in learning and applying Google Gears to your applications but after May 3rd you're back to Square One. That's another big gotcha in the cloud computing scenario - consumers are completely disenfranchised in their preference for software versions.

Google has some interesting ideas and a ton of money to fund research into those ideas, but I'm starting to think that they just don't understand collaboration. It's not about giving everyone simultaneous editing access to the same spreadsheet - email - Wave - other file type, its about providing your people with transparent access to the aggregate intellectual property contained in your organization so they are empowered to better perform, and refine the process of, their own work. Sometimes that work occurs within the context of a meeting, but more frequently it is an individual activity reinforced by easy access to team knowledge.

Leaving aside the multi-user access, I'm thinking that all of the 'new' features Google are crowing about have been standards in Microsoft Office and Open Office for years. I'm glad to see Google providing competition in the Office arena but IMHO they need to lift their game.

I'll stick with Symphony.
.

Spring cleaning the software library

Today I threw away my last stack of floppies... you know... those small plastic things that would fit inside your shirt pocket and carry less than one hundredth of one percent of the data that you can fit on a 2gb USB. I discovered these refugees from the 20th Century hiding in the back of a desk drawer and had little hesitation in consigning them to the dustbin. The only problem was finding a device to read them first to ensure that I wasn't throwing away something essential (like the certifier password to my Notes infrastructure). Fortunately I still have an old laptop with a floppy drive and ten minutes of disk shuffling showed that the disks were disposable.

The next step is going through my CD collection and tossing out all of my Notes 4.x and 5.x CDs along with the R5.x Redbooks etc. I'd be impressed with my spring-cleaning efforts except that I live in Sydney and it's certainly not Spring in Australia. Maybe I need a six month sabbatical in the USA to get my body clock back into sync.
.

Something free from IBM?

IBM/Lotus have provided some excellent self-paced online software tutorials at no charge to Business Partners. Some of the tutorials need to be updated with current software versions but there's more than a few nuggets of gold in Them There Hills for the Business Partner who wants to get a toehold into a previously unexplored Lotus technology. Some examples are:

• IBM Lotus Quickr 8.2 Workshop: The Workshop will provide you with an understanding of the features of Lotus Quickr 8.2, both those that are new and those that were introduced earlier. The course will show you how to operate and manage Lotus Quickr Activities and tools. It will illustrate how to install and configure Lotus Quickr 8.2, how to use connectors to integrate productivity applications and customize Quickr themes and places, and how to manage a Lotus Quickr environment.
  
  
• Lotus Notes/Domino 8.5 Building Collaborative Applications Workshop: The Workshop will show a student how to use the Lotus Notes client to write collaborative applications that use the features of the Lotus Notes platform. The student will also learn how to package applications and deploy them to the Notes client through the Domino server. The XPages technology will be introduced and the student will learn how to develop XPages applications. After completing the workshop the student should be able to describe the primary features of the Notes and Domino platforms, describe how these platforms can enhance an enterprise’s business, define common terms used with this technology, and write a composite application and an XPages application that will run in the Notes client to provide additional capabilities. The student will be able to write Eclipse plug-ins which extend the user interface of the Notes client and deploy them to the client platform, and be able to incorporate widgets for use in collaborative applications.

• IBM Lotus Connections v2.5 Workshop: This technical skills hands-on workshop will show you how to leverage the eight integrated services for social networking delivered by Lotus Connections 2.5. You will learn how to use the functions and features that capture, communicate, share, collaborate, organize, and deliver social software for business. Setup and use of Lotus Connections features, how to integrate them with each other and incorporate them with other applications and Web sites. Learn how to use the tools and underlying servers to configure the products for use. All reinforced by hands-on labs.

These courses won't take you from from Zero to Hero but they will give you the ability to talk confidently to your customers about the products.
.

Hey IBM... how about running Salestalks on a Pacific time zone once in a while?

I have a customer with c.300 Notes seats who has specifically asked me to get him information on Web Content Management. With perfect timing I received an IBM News update advising me that there will be a Lotus SalesTalk on this topic and then I realize the call is scheduled for 1:00am Australian time.

10. Lotus: Lotus SalesTalk: Put information to work at customer sites with Lotus Web Content Management
-----------------------------------------------------------------------
Customers and prospects are increasingly looking for ways to reduce costs, maximise value, increase ROI, and enable top-line growth. This call provides valuable information that can help you talk with your customers about the solid ROI they'll see with Lotus Web Content Management.

Date: Tuesday, April 20, 2010
Time: 11:00 a.m. EDT (90 minutes)

We all know that IBM has historically had the majority of its software market on the North American continent and in Europe, but the markets in Asia have a significant proportion of the worlds population and a much higher growth rate than the USA. I concede that Australia and New Zealand have only 3% of the world IT market but what about India, China, Korea, Japan etc etc.

Lotus Knows that Asia wants to be in on the action also.
.

Needed: An off-the-shelf Notes based CRM

I've had a request to recommend an off-the-shelf Notes-based CRM which supports mobile devices. The product would be involved in a shootout with the Microsoft Dynamics CRM so it would be worth knowing how well the recommended Notes product has scored in previous product comparisons and what its key features are v. MS Dynamics.

The customer is running Notes 6.5 and not looking to upgrade to R8.5 in the near future so no XPage applications please.
.

A wakeup call for the Australian Lotus Channel

Yesterday we completed the third of our free two-day Domino R8.5 Proof of Technology seminars which takes the cumulative total of attendees to well over fifty, and we've had some interesting feedback about the seminars:

• Customers love getting two full days of technical training and product positioning for free. I think the most popular session in the last seminar was the one about the best methods to counter the suggestion that their organizations should move to Exchange and Outlook. We'll be expanding that session for our next seminar in June
  
  
• Some of our competition admire the idea and at least two of them are now putting on their own free Lotus-centric seminars (according to friends of mine who work in those companies). I've heard that imitation is the sincerest form of flattery so thanks for the compliment guys.
  
  
• Some of our competition hate the idea and claim that these seminars causes 'disharmony' in the Lotus sales channel because their present customers might wind up attending a seminar put on by another Lotus Business Partner. Well, Bollocks to them! IMHO the Customer is King and is entitled to talk to any and all Lotus Business Partners and to pick and choose between them to get the best mix of services. If our efforts in running these seminars makes another Business Partner feel 'disharmonized' then perhaps they need to ask themselves what are *they* doing to offer a better service to their customers.
  

These seminars will continue as long as the customers want them. We have our first Sametime/Quickr seminar running in May and the fourth Domino R8.5 Proof of Technology will be running in June. Now maybe those Australian IBM/Lotus Business 'Partners' who have been ignoring the Lotus portfolio will start talking to their current customers about the Lotus product range.

Because if they don't then we will...
.