HDTVs, Blu-Ray Players Push Web Connections

Connected TVs, set-top boxes, and Blu-ray Disc players aren't new, but they continue to make new connections with Web sites and services, from YouTube and Netflix to Amazon and Internet radio sites. Some offer a lot more than others, but all are building up their portfolios of Web video and interactive services. The definition of "connected" varies widely between consumer electronics vendors.

Some of the newest entries were on display last week at the CEDIA (Custom Electronic Design and Installation Association) event in Atlanta. Available on networkable Bravia sets, the video service will also appear on a new networkable Sony Blu-ray Disc player, the BDP-N460, which will ship later this fall priced under $250. (Sony Bravia TVs also offer Web content such as stocks, weather, and Twitter, via their Bravia Widgets.) LG Electronics, meanwhile, announced the addition (via a firmware upgrade later this month) of the Vudu on-demand service to the Netcast Entertainment Access service on its $399 BD390 Blu-ray Disc player. Sony, which already offers movies, TV shows, and music from some two dozen partners, including Amazon movies on demand, Slacker radio, and YouTube, announced that it will add Netflix to its Bravia Internet Video lineup later this fall. The service already offers access to CinemaNow, Netflix, and YouTube content. And Samsung's networkable Blu-ray Disc players, including the BD-P1600, BD-P3600, and BD-P4600, will add YouTube access to the existing Pandora and NetFlix services.

Samsung's Internet@TV service, which already had a dozen Yahoo widgets, now offers on-screen access to Rallycast fantasy sports applications, including Facebook messaging and access to team stats. Pioneer, meanwhile, demo'd a new platform for connected electronics. The prototypes at CEDIA featured everything from video-on-demand services to backup. Code-named Project ET, it is designed to allow device designers and/or consumers to choose the content and services they want by clicking on menu buttons in the service's Web portal. Pioneer officials said the platform could exist on a set-top box of its own or on a Blu-ray Disc player or other networkable device (one demo setup featured a Blu-ray player with 1 terabyte of built-in storage. The company hopes to show a product based on the platform within the next few months.

Start-up releases uber-fast, efficient enterprise-class SSDs

Pliant Technology Inc. today released its first series of enterprise-class solid state disk (SSD) drives based on a proprietary ASIC design that the company claims can handle - without using any cache - more than twice the input/output operations per second (IOPS) as the top competitive drives. The 3.5-in. drive can produce up to to 500MB/sec sustained read or 320MB/sec write rates and the 2.5-in. up to 420MB/sec read and 220MB/sec write rates, Pliant said. "Put it on a log application and write to it as hard as you want for five years - it will run 24/7 for at least that long," said Greg Goelz, vice president of marketing at the three-year-old startup. The first two two enterprise flash drive (EFDs), the EFD LS and EFD LB models, are 3.5-in. and 2.5-in. drives that can produce up to 180,000 IOPS and 140,000 IOPS respectively. Pliant also claims there is no limit to the number of writes that can be performed to the drive and that it will work without slowdown for at least five years.

In an enterprise environment, that's one of the major concerns: The wear out of the SSD." Most enterprise-class SSD companies today use Fibre Channel connectivity. The drives are aimed at equipment manufacturers such as EMC Corp., Hewlett-Packard Co., Hitachi Data Systems and Sun Microsystems Inc., the company said. "They're able to claim some pretty solid performance numbers on read and writes and they're also able to claim unlimited program and erase [write/erase] cycles," said Joseph Unsworth, research director for NAND flash semi-conductors at Gartner Inc. "That's big. Pliant's first products use serial-attached SCSI (SAS), which most industry observers believe is the interconnect of the future for servers and storage arrays. "You don't want to saturate your [server] CPU cores and then find out we have this great SSD but the bottleneck is now the interface," Unsworth said. "It's all about speed." SAS currently supports 6Gbit/sec data transfer speeds and its roadmap indicates 12Gbit/sec rate by by 2012. Fibre Channel drives are currently capable of 4Gbit/sec data transfer speeds, and while Fibre Channel switches and interface cards are now emerging with 8Gbit/sec speeds. STEC Inc., the top provider today of enterprise-class SSDs, recently announced its own SAS model. SAS is eclipsing those speeds at the device level. "Six gigabit SAS in terms of data throughput is going to be the performance leader," said Jeff Janukowicz, a flash memory analyst with IDC in Framingham, Mass.

But even that next-generation product produces a maximum of 80,000 IOPS compared with Pliant's 180,000 IOPS. Pliant's SSD controller architecture is not vastly different from those of other high-end SSD manufacturers. The drives are configured as RAID 0 for increased performance and the controller. It has twelve independent I/O channels to interleaved single level cell (SLC) NAND flash chips from Samsung Corp. Most enterprise-class SSDs today also use a general purpose field programmable gate array (FPGA) controllers as opposed to Pliant's custom controller, which is programmed specifically to address SSD issues, such as wear leveling (spreading writes more evenly throughout the memory) and write amplification (reducing the number of operations required for a write), according to analysts. Also, the lack of any DRAM cache, which can store data writes more quickly, laying them down on the NAND flash chips during non-peak performance periods, is also unique to Pliant's enterprise-class product.

Also unique to Pliant's controller is the use of a triple redundancy error correction code algorithm to ensure that meta data - which is used to locate data on the drive - is saved even if two copies of it become corrupted. Some of today's more popular server-class SSDs, like those from Intel, use serial ATA interfaces, which has a half-duplex interface as opposed to SAS, which like Fibre Channel, is full duplex. Single-port half-duplex allows for one or the other. The difference between the two is that full duplex is dual ported, allowing for reads and writes at the same time. Pliant, based in Milpitas, Calif., released its new SSDs for beta testing last year and plans to make them generally available later this month. And, based on Pliant's claims, they see to have addressed many of those important issues." The company refused to release a suggested retail price for the drives.

The company raised $15 million in Series C funding in March, which was used to ramp up production of the SSDs, the company said. "I think with Pliant's announcement we're starting to see some of the true promises of SSD coming to market," Janukowicz said. "A lot of these applications are demanding, mission critical, 24/7 applications and they require high reliability, efficiency and predictable performance. However, it did note that the drives will be more expensive than Intel's X25-E SSD , which sells for $780 for a 64GB SATA model, and less expensive than STECs Zeus SSD , which sells for about $6,000 for a 73GB Fibre Channel model.

Microsoft offers tools for secure app development

Microsoft is introducing on Wednesday two testing tools to help Windows programmers build better security into their C and C++ applications, but an industry analyst was dismissive of how useful the tools would be for enterprise developers. It also verifies use of strong-named assemblies and up-to-date build tools. "Essentially, what it does is it checks for a variety of SDL requirements like GS flag, which is used to prevent buffer overflows," said David Ladd, principal security program manager for the security development lifecycle team at Microsoft. Offered at no cost, the tools enable implementation of Microsoft's SDL (Security Development Lifecycle) process, for injecting security and privacy provisions into the development lifecycle as opposed to testing during pre- and post-deployment of an application. [ Last week, Microsoft revealed some features planned for its upcoming Silverlight 4 application technology. ] One of the tools, BinScope Binary Analyzer, analyzes binary code to validate adherence to SDL requirements for compilers and linkers. Buffer overflows enable hackers to take control of an application, Ladd said. "To the extent that you can prevent those at compile time, that's a good thing from a security standpoint," he said.

The second tool, Microsoft MiniFuzz File Fuzzer implements the fuzz testing technique. The tool requires symbol files, providing security against hackers potentially using the tool to analyze software on the Web for weaknesses. Testers check application behavior by parsing files that have been deliberately corrupted. An analyst, however, doubted that enterprise developers would have much use for the tools. Security tests are applied to take code through different flow patterns and identify whether resulting crashes should be investigated as potential application security risks. "If you find a file failure and it has security ramifications, you want to go out and fix that problem," Ladd said.

These developers are more likely to be using Java and .Net managed code technologies with Visual Basic. Corporate developers also do not generally develop applications for open files, which is what the fuzz-testing tool is used for, he said. "There isn't much of a story for enterprises for these tools themselves," Gualtieri said. "These tools are more helpful for systems and software vendors than they are for most enterprise IT shops," he said. Net and C# rather than C or C++, said Michael Gualtieri, senior analyst at Forrester Research. By releasing the tools, though, Microsoft continues to demonstrate its commitment to making the SDL process real for developers, said Gualtieri. Microsoft previously has released a threat management tool and process management template based on SDL. Microsoft on Wednesday also is releasing a paper entitled "Manual Integration of the SDL Process Template," to guide Microsoft Visual Studio Team System users through a manual process to incorporate elements of the SDL process template into Team System projects. A Microsoft representative said many of the checks featured in BinScope Binary Analyzer are inherently built into .NET coding.

The tools and paper can be accessed through this Web page.

Intel announces storage- and communications-specific processor

Intel Corp. today announced it will be shipping an enhanced version of its dual-processing Nehalem Xeon chip that is aimed specifically at the data storage and communications market with the ability to natively create RAID and is integrated with PCI Express (PCIe). The processors, due out in December, are aimed at applications such as ultra-dense blades, IPTV, VoIP, network-attached storage (NAS) and storage area networks (SAN). debuted its new Nehalem-based Xeon microprocessor code-named Jasper Forest in April. Intel said the enhanced processor lowers system power consumption by 27 watts when compared to the Intel Xeon 5500 series and it integrates two Jasper Forest processors with 16 PCIe Generation 2.0 lanes each and is paired with the Intel 3420 chipset platform controller hub. The new Jasper Forest processors are capable of configuring storage as a RAID 5 or 6, protecting against single or dual disk failure, respectively. "Nehalem cores are quite powerful, but customers still want to be able to offload storage functions to a core, especially when you get down into two-core and single core versions of processors, really simplifies the architecture," said Seth Bobroff, general manager of Intel s Server Platforms Group. This integration of the I/O hub via PCIe enables significant power and space savings, resulting in one of the highest performance-per-watt Intel Xeon chips ever.

Jasper Forest provides a scalable option to system designers with a single-core, 23-watt processor to a quad-core, 85-watt processor using the same socket. The processors, which come in single or quad-core models, will offer a bridging functionality that allows multiple systems to connect over a PCIe link, removing the need for an external PCIe switch. The chips will also protect against data in case of a power failure with a function called Integrated Asynchronous Dynamic Random Access Memory Self-Refresh memory. Bobroff said that in terms of work load consolidation, the new Jasper Forest chip can natively handle storage management processing functions such as data deduplication, data snap shots, storage virtualization and any basic storage management requirements. "All the control and management aspects of storage management systems and with RAID being integrated into a CPU can simplify hardware and software design," he said. "There s no hardware acceleration for algorithms like we have here." The processor is also suited to support the Storage Bridge Bay specification , which is currently being developed as a way to plug control boards directly into storage arrays, allowing for a denser architecture. The feature automatically detects a power failure as it s happening and enables allows memory controller sequences to finish and forces the system memory to a self refresh before shutting down. Today, storage controllers require a separate blade slot.

The processors will be offered with 7-year lifecycle support.

Microsoft Hotmail users angry over pulled photo feature

Windows Live Hotmail users have been venting their frustration at Microsoft Corp. for the past month since the software maker suddenly removed a popular feature because it created a security hole.

The "Attach Photo" feature allowed users to directly add photos, images or graphics into e-mails. Users are allowed to quickly edit and add captions to the photos, which are automatically compressed by Hotmail, enabling users to attach more images per e-mail. It is distinct from Attach File, which still works and lets users attach photos to e-mails without compressing them or giving users the ability to edit them first.

Users, such as Carl Creed, a retired system administrator in Leiston, England, say they first noticed Attach Photo was missing about three weeks ago.

He and other users have complained on the Windows Live Help support forum about Microsoft's failure to warn them beforehand and the "wasted hours" they spent trying to debug the feature on their own.

"If Microsoft had just told us end users that they were planning to remove this feature before they did remove it, we would not be so upset in the first place," Creed said in an e-mail.

In a posting updated Thursday at the Windows Live Help forum and also posted at the Windows Live blog, Microsoft said it removed the feature after finding an "incompatibility with Internet Explorer that caused a security flaw with photo uploads ... The Hotmail team takes security very seriously and we expect to bring back the photo upload feature by the end of September."

The Attach Photo feature relies on an ActiveX control, a Microsoft spokeswoman confirmed in a follow-up e-mail.

ActiveX is a plug-in technology for building Web components designed by Microsoft. While theoretically a boon for Web programmers, ActiveX has been heavily criticized by security pros, including the U.S. government's Computer Emergency Readiness Team (CERT), for the many threats it enables.

The spokeswoman declined to elaborate on the security flaw because it "might compromise the security of our services."

Ben Greenbaum, a senior research manager for Symantec Corp., declined to criticize the ActiveX technology itself, as the security vendor has done in the past. And he applauded Microsoft's decision to take down the feature until the security hole is fixed.

"Attackers are focusing on vulnerabilities in popular websites in order to reach as wide an audience as possible with their attacks, and leveraging such a popular site as an attack vector would be a huge victory for any online criminal," Greenbaum wrote in an e-mail. "Disabling the vulnerable functionality until a proper solution can be put in place is absolutely the right thing to do."

While popular, the Attach Photo feature has been hit by several problems in the past several years.

In October 2007, users at the Microsoft Developer Network (MSDN) forums complained about being blocked from using Attach Photo due to Internet Explorer 7's security settings.

In May 2008, a poster at Mozilla Firefox's support forum complained about the feature being disabled. This was echoed by a poster at Windows Live Help in March this year.

In reply, a Microsoft representative posted that the Attach Photo feature was incompatible with the 64-bit version of Windows Vista.

BBN grabs cash, turns up heat on language translation technology

When it comes to translating languages in real time, BBN must speak the tongue as it netted a $14 million check from the Defense Advanced Research Projects Agency (DARPA) this week to continue developing its speech and text technology.

BBN has now taken in over $30 million from DARPA over the past few years to fill out the agency's Global Autonomous Language Exploitation (GALE) program. The goal of GALE is to translate and distill foreign language material (television shows and newspapers) in near real-time, highlight salient information, and store the results in a searchable database - all with more than 90% accuracy by the end of the program. Through this process, GALE would help U.S. analysts recognize critical information in foreign languages quickly so they could act on it in a timely fashion.

Inside the Top 10 hot aerospace technologies

During the first three years of the GALE program, BBN met or exceeded the accuracy goals for automatic translation of Arabic newswire text and broadcast news into English. Under this latest contract award, BBN will continue to work in Arabic from both speech and text sources to meet increasingly steep accuracy goals. BBN continues to work in Chinese under a separate award, the company said.

The BBN system will support multiple printed or handwritten document types including, hard copy, PDF files, photographs, newsprint, and signs. With the system, BBN will integrate optical character recognition and its state-of-the-art translation and distillation techniques to develop novel methods for processing handwritten text, BBN said.

The system will enable English-speaking military personnel and analysts to extract valuable information from a much larger number of foreign language documents than is now possible, facilitate rapid responses to emerging threats.

According to DARPA, GALE is making progress toward achieving this very ambitious goal by 2011. The agency is developing the System for Tactical Use program, a two-way speech translation system to convert spoken foreign language input to English output and vice versa.

BBN is doing lots of work for DARPA in the language and text interpretation field. Earlier this year it got $29.7 million from the Air Force to develop a prototype machine reading system that transforms prose into knowledge that can be interpreted by an artificial intelligence application.

The prototype is part of the DARPA's Machine Reading Program (MRP) that wants to develop systems that can capture knowledge from naturally occurring text and transform it into the formal representations used by AI reasoning systems.

The idea is that such an intelligent learning system could gather and analyze information from the Web such as international technological advances or plans and rhetoric of political organizations and unleash a wide variety of new military and civilian Artificial Intelligence applications from intelligent bots to personal tutors according to DARPA.

As digitized text from library books world wide becomes available, new avenues of cultural awareness and historical research will be enabled. With techniques for effectively handling the incompatibilities between natural language and the language of formal inference, a system could, in principal, be constructed that maps between natural and formal languages in any subject domain, DARPA said.

Crime lab saves energy costs by turning up heat in the data center

There's plenty of evidence that turning up the temperature in data centers is both cost-effective and safe, but many IT shops are still reluctant to take the plunge. CIO Joseph Tait of NMS Labs in Pennsylvania admits "it was an uncomfortable decision" when his IT team raised the thermostat from 68 to 73 degrees Fahrenheit.

But cost and environmental concerns had spurred a company-wide green initiative at NMS, a "CSI"-like crime lab near Philadelphia, and reducing HVAC costs was one of the top priorities. NMS started implementing its green initiative last year, and the project will ultimately include virtualization in the data center and a solar power system to provide 30% of the company's power.  

"Who doesn't want to reduce costs?" Tait says. "[We started] this before the economy even tanked."

Tait is one of many IT executives who will be sharing their stories and best practices at Network World's IT Roadmap Conference & Expo in Philadelphia next week, one of 10 such events being held in various U.S. locations throughout 2009.

NMS Labs handles clinical toxicology and forensic testing, often for criminal cases. It's not as glamorous as "CSI" but "it's interesting, certainly," Tait says. "We get everything from blood work resulting from a run-of-the-mill DUI stop all the way up to DNA evidence under a murder victim's fingernails."

NMS has about 75 scientific instruments, 50 servers and 350 computers overall. Powering down devices that don't need to be on 24 hours a day has helped save energy, as have other initiatives, including upgrades to refrigeration, UPS and generator systems; video teleconferencing; automated power management systems; and using efficient light bulbs.

NMS has cut electricity costs by roughly 15% to 20% and has more cost-saving projects on the way.

The company is planning a solar panel project that could provide 25% to 30% of its power by next year. With tax incentives, the project is a no-brainer, according to Tait.

See if a Network World IT Roadmap is coming soon to your town 

Inside the data center, upgraded cooling equipment and virtualization will play key roles. Tait is building a new data center that will replace four out-of-date air conditioning units with two larger ones. He is also phasing out older servers and planning to virtualize new ones that replace them.

"We've got about 50 servers in our data center and we're thinking virtualization can cut that in half," he says.

Tait is hoping a smaller number of servers, with virtualization, will lower his power needs and simplify management.

"Simplify and standardize is a good strategic plan for any IT department," he says. "What we've got here is a very complicated and customized environment that over the years was built into a messy bird's nest full of stuff."

While NMS is a relatively small company with 225 employees and two facilities within a mile and a half of each other, IT Roadmap attendees will also hear from Terry Harris, former CTO of De Lage Landen (DLL), a global financial services firm. Harris will discuss building resilient, dynamic data centers, and a DLL project that consolidated the company's data centers from five to two, one in the United States and another in Europe.

Key technologies for the consolidation project included VMware virtualization for x86 servers, IBM Power virtualization, and EMC's Symmetrix Remote Data Facility (SRDF) disaster recovery replication software.

DLL wanted two sites separated in distance to avoid the possibility of a regional disaster shutting down both data centers. "We wanted multiple replication and failover scenarios. With SRDF we could replicate over a long distance," Harris says. "In order to accomplish that, we had to install a global high-speed wide-area network connecting the two data centers."

Harris left DLL in January and became an infrastructure architecture consultant with Synthes, a medical device company in West Chester, Penn. Synthes is not consolidating data centers but is designing a similar "twin center" concept in an effort to ensure resiliency and become more responsive to business needs, Harris says.

In the years after Sept. 11, 2001, businesses are paying much greater attention to availability and resiliency in their IT infrastructures, he says.

"You're obligated to improve the resilience of your infrastructure," Harris says. "At the same time you're improving your resilience, you can also make it more dynamic by leveraging real-time infrastructure computing concepts, the ability to provision services and tear down services very quickly in response to business needs. By making your infrastructure more resilient and dynamic, that helps your IT department become a business enabler."

Another speaker at IT Roadmap will be Tom Amrhein, the CIO of Forrester Construction in Maryland, who will discuss managed services, software-as-a-service and cloud computing.

Forrester Construction is using managed services for VoIP and application management, and contracts with Iron Mountain for off-site backup, retention and storage. Amrhein will discuss how various outsourcing models can help offload IT tasks that don't differentiate the business, and let the IT department "shift resources to tasks that make our business more competitive and better serve our customers," he said.