On Microsoft's Embedded DevCon Keynote

An anonymous reader writes "WindowsForDevices reports on the keynote talk at Microsoft's Windows Embedded DevCon (developer conference) taking place this week in San Diego. The story includes some interesting comments and highlights from the talk. Don't miss the cool bit about the ARM7-based 'SPOT' development platform that runs a tiny version of the .NET Compact Framework -- Microsoft is demoing a robot that's run by SPOT. There's also a pointer to an online video demo of a project to create a digital picture frame using Win CE."

Re:Windows XP Embedded

[howlinmonkey]

I don't know if you mean Cannon or Canon. If you do mean the EFI based RIPs for Canon ColorPASS controllers, you can run McAfee VirusScan 7.0 on their XPe based controllers.

As for security updates, EFI has just started a program for keeping more up to date with Hotfixes and Service Packs. Just today I got an update from Canon with information on a forthcoming CD bundle with the latest patches for their entire Windows based product line. Granted, they will be a little behind because they have to do a full test suite to make sure their software functions with the patch or a modified version thereof. Your printers should be bedhind a firewall with all external access blocked to protect from the majority of these baddies, if possible.

Contact your local servicing Canon dealer for additional information on the anti-virus and security update issues.

Yes, I do work as an analyst for a Canon dealer ;)

Re:Windows XP Embedded

[mrpuffypants]

The company that I work for right now is experiencing the EXACT problem that you are referring to: WinXPe forgoes all support from the OS maker (MS) and puts it right on the OEM/Embedded device maker.

While this makes sense for many devices that could be loaded with WinXPe this is a bitch and a half for anybody using it in a pseudo-desktop system use. The people on-site can't run WindowsUpdate and just get the patches, they have to come directly from the maker and be customized for that version of that kernel on that hardware.

In fact, right as I type this I'm watching a patch for Korgo/Sasser deploy to a fleet of about 1000 WinXPe powered devices. Thanks to office politics and people that have such a massive hard-on for Microsoft we are using XPe for a purpose that could be solved (LITERALLY) with a big hard drive, wget, and Apache.

Instead, we have a box that has to have XPe on it which, of course, comes with all of its wonderful 'features' that we never need, should never have to deal with, and only cause us headaches.

However, I DO get overtime for sitting here making sure that this update goes through, so cheers to that! Thanks Microsoft!

Re:Windows XP Embedded

[howlinmonkey]

If you use Symantec for antivirus, just mount the admin shares and scan them after hours. Not as good as realtime, but most of the major virus vectors aren't running on these controllers (IE and LookOut), so it is arguable whether real time scanning is necessary. I have even had a major customer test their Symantec software on the NT based controllers, and they were able to run it with no problems. We offered to assist them because of the number of machines they had, in spite of Canon's recommendations. We will be testing the XPe devices sometime this summer.

Or use McAfee on just these devices. I have customers with large networks who have done just that for these devices, and have had little additional admin work in the implemenataion.

I say use a firewall because I run into many customers who don't. I wasn't implying that it is a perfect solution, but for many of the remote exploits, it is a great "speedbump".

I don't know if the lack of SUS or Auto Updates on the Canon controllers is due to an inherent lack of support of these features in XPe, or a decision on the part of EFI (the actual mfr of these RIPs). I do know, however, that stock MS patches won't work on these devices anyway. The controller software is closely married to the OS and using unmodified patches will kill the RIP and require a software reinstall. EFI has to provide custom patches, which they are now doing on a regular basis. Your dealer should be keeping you up to date with these - meaning send a service tech with the CD when the updates are made available.

You have other options. Splash on a Mac might be the best option for you, although still produced by EFI. Or stick with the older RIPs that run an embedded *NIX

You are absolutely right, you have to make the best decision for your organization. If the XPe devices aren't the best, don't use them. I just wanted to make sure that you were aware of the options for keeping up to date and secure. I made no assumptions about your knowledge, and no assumptions about the information you may have received from the local dealer.

Digital Picture Frame

[OldManAndTheC++]

Anything like this [ceiva.com]?

Built with vxWorks, I believe. Just saw one today at the local Coffee Bean. Cool toy, though I wouldn't be likely to shell out any $$ for it ...