The HtmlHelp application (hh.exe) in Microsoft windows read a value from a .CHM file to set a length parameter. By setting this to a large value, it is possible to overwrite sections of the heap with attacker supplied values. Affected software includes: Microsoft Windows 98, 98SE, ME, Microsoft Windows NT 4.0, Microsoft Windows 2000 Service Pack 4, Microsoft Windows XP, Microsoft Windows XP Service Pack 1, Microsoft Windows Server 2003.

Multiple Microsoft Windows 98/ME/2000/XP/2003 HTML Help file loading hijack vulnerabilities exist. Proof of concept included.

WikiWebHelp version 0.3.3 suffers from an insecure cookie handling vulnerability.

Maian Support Helpdesk version 4.3 suffers from a cross site request forgery vulnerability.

A git clone action can leak cached / stored credentials for github.com to example.com due to insecure handling of newlines in the credential helper protocol.

In 2015, the state of Louisiana consumed more energy per capita than any other state, according to the U.S. Energy Information Administration. Although this may not come as a complete surprise — the state's warm, muggy climate makes air conditioning a must — it's clear that Louisiana's energy-use profile needs a drastic transformation.

The Energy Wise Alliance (EWA), a small nonprofit based in New Orleans, is determined to do just that. Along the way, the organization has gotten a boost from Microsoft's MileIQ app.

MileIQ is a mobile app from Microsoft that automatically tracks the miles you've traveled and records all of your tax-deductible and reimbursable mileage. It's kind of like using a Fitbit, except you're tracking your driving. You can report your business drives on demand and claim your reimbursements or maximize your tax deductions. The average MileIQ user is logging $6,900 per year.

Building a More Energy-Efficient Community

EWA works to make energy efficiency more accessible to everyone. The organization works primarily with low-income families, tenants, and others who would otherwise be left out of the green energy revolution. EWA accomplishes its goals through both workshops and equipment upgrades at homes and businesses.

Its Energy Smart for Kids program teaches students throughout the state how to lead a more energy-efficient lifestyle. These hourlong sessions cover the pitfalls of nonrenewable energy and detail more sustainable alternatives. At the end of each session, EWA volunteers hand out energy-efficiency starter kits so students can apply what they learned at home.

Much like the rest of EWA's programs, Energy Smart for Kids serves underserved and underprivileged communities. In fact, many of the schools that EWA serves are Title 1 schools — schools whose students generally come from lower-income households.

Aside from schools, EWA also helps nonprofits become more sustainable.

Making Nonprofits Greener and More Cost-Efficient

Nonprofits can benefit from EWA's work by way of simple but effective power-saving retrofits. EWA also provides volunteer labor and donates the materials for the retrofits, which means added cost savings. And as we all know, cost-saving programs are like gold dust for nonprofits.

For example, volunteers from EWA revitalized the Victorian-era headquarters of the Alliance Française, a nonprofit dedicated to preserving Francophone heritage in the New Orleans community, with sustainable retrofits. As part of these upgrades, EWA sealed cracks, gaps, and openings; installed additional insulation; and programmed new thermostats.

In addition, EWA gave the Alliance Française's volunteers a hands-on demonstration of behavioral changes so that they could bring this knowledge back home. EWA anticipated that the Alliance Française would save a total of $2,000 to $3,000 as a result of these green improvements.

EWA's staff members also actively save money and operate more efficiently through the use of the mile-tracking app MileIQ.

Saving Time and Money with MileIQ

This method, as you can imagine, was time-consuming, and it brought with it the risk of human error. Most people can't possibly remember every single trip they make with their car, after all.

"MileIQ is super accurate and takes the forgetting out of the equation," said Jamie Wine, executive director of EWA.

For Kevin Kellup, education coordinator at EWA, MileIQ has been a game-changer. Jamie explained, "Kevin drives like crazy from school to school," racking up miles on his personal car. Now, thanks to MileIQ, Kevin can get more fairly and accurately reimbursed for his constant traveling.

The most important benefit of Microsoft's MileIQ for Jamie is that his staff can be correctly reimbursed for mileage. He wants to show staff members that he values their time and effort spent traveling, which MileIQ really helps him achieve.

For nonprofits, particularly small ones like EWA, it's always great when the team can receive fair compensation for its hard work. "The staff doesn't get paid much," Jamie said. And considering how important staff members' work is to the community, every penny matters. That's also where TechSoup comes in.

TechSoup's Role: "Essential"

Through TechSoup, eligible nonprofits can get MileIQ at 80 percent off the subscription rate. "Without TechSoup," Jamie noted, "this huge step up in technology" would not have been possible. The MileIQ discount program from Microsoft has made acquiring MileIQ way easier on the nonprofit's pocket.

Having also previously obtained Microsoft Office 365 and QuickBooks Online through TechSoup, Jamie said, "TechSoup is a great equalizer." He mentioned that TechSoup helps a small nonprofit to grow into a technologically advanced organization. He added, "The super discounted products from TechSoup are like the pot of gold at the end of the rainbow."

Getting MileIQ Premium

Eligible nonprofits can get MileIQ at 80 percent off the individual subscription rate through TechSoup and can request an unlimited number of individual subscriptions. In addition to individual subscriptions, MileIQ is now included with an Office 365 Business Premium license. Nonprofits who currently do not have an Office 365 license can visit Microsoft's Office 365 for nonprofits page to register.

This blog post was written by Nicholas Fuchs.

spanhidden

Financial incentives from two different cities persuaded US grocery chain The Fresh Market to stay headquartered in its home state of North Carolina.

Venture capital funding has reached record levels in recent years, enabling start-ups to expand across borders – but their ability to do this depends on their type of business, and where they are founded.

Climate change is picking up pace in Europe, thrusting farmers and power generators onto the front lines of a battle with nature that threatens to upend the lives of the half billion people who occupy the world’s biggest trading bloc.

kWh Analytics, a leader in solar risk management, this week announced the first refinancing supported by the Solar Revenue Put. The portfolio of 41 projects, owned by AES, totaling approximately 28 MW DC of capacity is located in Arizona and Massachusetts. The portfolio is being funded by Silicon Valley Bank and a Japanese financial services company. Swiss Re Corporate Solutions, a leading global corporate insurer, is providing capacity for the Solar Revenue Put.

The insurance industry has lots of exposure to climate change. But as Warren Buffet has explained, not so much for companies that do annual policy adjustments, like Berkshire Hathaway. Their exposure is limited because the trends are baked into the premiums. But there is an opportunity for reducing insurance risk due to climate change, and it comes from the insurance industry itself. The business model is to have car insurance salespeople provide leads to virtual electric car charging services. This has perfect demographics because electric vehicle owners are very receptive to solar electricity. Who wouldn’t want a clean transportation solution with local job creation that can’t be offshore?

Yesterday, the Environmental and Energy Study Institute (EESI) announced the launch of the Access Clean Energy Savings (ACES) initiative. ACES provides technical assistance to help rural electric cooperatives and public power utilities apply for the U.S. Department of Agriculture’s (USDA) Rural Electric Savings Program (RESP), which provides zero-interest 20-year loans for improving energy efficiency.

A build team in Ohio is in the process of turning an old Porsche Boxster into a supercar that was limited to just seven units worldwide and originally priced at $3.4 million. The car we're talking about is the W Motors Lykan Hypersport that bowed in 2013, and a replica was recently acquired by a workshop in Bowling Green, Ohio. The replica was...

DBL Partners, the same venture capital fund that supported SolarCity for many years, has led the largest venture capital funding for distributed energy in Africa. Off Grid Electric announced today that it raised $25 million in a Series C investment.

Off Grid Electric, based in California and Tanzania, is installing solar in over 10,000 homes and businesses per month with what it calls “its radically affordable solar leasing platform.” The company designs, manufactures, sells, installs and services solar home units in Tanzania and is announcing today that it will be entering

This week Autogrid announced that it entered into a partnership with Swell Energy to provide software for managing Swell’s growing fleet of distributed energy resources (DER).

Utilities are — and have been for a long time — seeking better ways through which they can engage with their customers. According to Jeff Hamel, director of energy and housing partnerships at Google, the Nest smart thermostat, which is part of the hardware product line that Google provides, is a good example of a simple way that utilities are partnering with their customers.

New state energy goals and innovative utility program offerings have been making headlines in recent months. These types of regional policies and incentives are important, especially as we face challenges ranging from grid constraints and fluctuating electricity prices to environmental concerns, but significant portions of the country are outside of the direct influence of energy use mandates and incentives.

This week Constellation, an Exelon company, said it signed a long-term PPA with Starbucks to power more than 340 Illinois stores with 100 percent renewable energy produced by Enel Green Power (EGP) North America, Inc.’s HillTopper wind project in Logan, County, Ill.

Today, Smithfield Foods and Roeslein Alternative Energy (RAE) announced that they have formed a joint venture called Monarch Bioenergy to produce renewable natural gas (RNG) across Smithfield’s hog farms in Missouri.

Yesterday, the Environmental and Energy Study Institute (EESI) announced the launch of the Access Clean Energy Savings (ACES) initiative. ACES provides technical assistance to help rural electric cooperatives and public power utilities apply for the U.S. Department of Agriculture’s (USDA) Rural Electric Savings Program (RESP), which provides zero-interest 20-year loans for improving energy efficiency.

Australian urban planning and design and economics consultancy Cistri is using its evidence-based insights to help Asian developers design and plan urban communities that enhance quality of life.

With the potential for disaster at hydropower projects around the world, the lack of organized training programs becomes a prominent consideration in how companies manage their assets.

As the Zambezi River Authority (ZRA) of Zambia and Zimbabwe seeks to secure funding for the 2,400-MW Batoka Gorge hydroelectric facility, the region is experiencing rolling blackouts based on reduced inflow to existing hydroelectric generating facilities. 

Electricite de France (EDF) and the World Bank are joining with the government of Cameroon to fund the €$1.2 billion (US$1.3 billion), 420-MW Nachtigal hydropower plant.

Through its exclusive distributor in China, Puxing Energy, NEC developed two 9-MW battery facilities providing frequency regulation for the Hang-Jin and Feng-Run power plants located in Ordos City, Neimongol Province and Tanshan City.

This week the Smart Electric Power Alliance (SEPA) released a report that is says will help utilities and other industry stakeholders understand and prepare for the grid of the future

The insurance industry has lots of exposure to climate change. But as Warren Buffet has explained, not so much for companies that do annual policy adjustments, like Berkshire Hathaway. Their exposure is limited because the trends are baked into the premiums. But there is an opportunity for reducing insurance risk due to climate change, and it comes from the insurance industry itself. The business model is to have car insurance salespeople provide leads to virtual electric car charging services. This has perfect demographics because electric vehicle owners are very receptive to solar electricity. Who wouldn’t want a clean transportation solution with local job creation that can’t be offshore?

Yesterday, the Environmental and Energy Study Institute (EESI) announced the launch of the Access Clean Energy Savings (ACES) initiative. ACES provides technical assistance to help rural electric cooperatives and public power utilities apply for the U.S. Department of Agriculture’s (USDA) Rural Electric Savings Program (RESP), which provides zero-interest 20-year loans for improving energy efficiency.

On Monday, Portland-Oregon-based flow battery manufacturer ESS announced that it has joined Power Africa, a U.S. government-led partnership coordinated by the U.S. Agency for International Development (USAID), as a private sector partner. ESS is the program’s first flow battery partner.

Genex Power Limited has signed a share subscription agreement (SSA) with Electric Power Development Co Ltd, trading as J-POWER, for a conditional investment of up to AUD$25 million (US$17.5 million).

Bayerische Motoren Werke AG, the world’s biggest maker of luxury vehicles, is offering drivers of the i3 city car speedier and smaller auto-battery chargers in an effort to make driving electric vehicles more practical.

Sen. Troy Fraser (R-Horseshoe Bay) has filed a bill that would eliminate Texas’ Renewable Portfolio Standard (RPS) – a policy that has catapulted Texas to world leadership in wind energy and strengthened Texas’ energy diversity. In addition to terminating the RPS at the end of the year, SB 931would make it more difficult to build renewable energy infrastructure. The argument behind the bill is that because Texas has achieved its RPS goals it’s time to move on. Sounds reasonable, right? Well…

Through its exclusive distributor in China, Puxing Energy, NEC developed two 9-MW battery facilities providing frequency regulation for the Hang-Jin and Feng-Run power plants located in Ordos City, Neimongol Province and Tanshan City.

Climate change is picking up pace in Europe, thrusting farmers and power generators onto the front lines of a battle with nature that threatens to upend the lives of the half billion people who occupy the world’s biggest trading bloc.

This week global engineering company Emerson announced that it had formed a 3-year alliance with Vayu to combine Emerson’s Ovation automation platform with Vayu’s cloud-computing wind energy optimization technology. The new technology will optimize wind farms in the Americas, Caribbean and Europe.

Government support for Australia’s defence industries is on the increase, as two government agencies extend collaboration.

Australia, India and UK Pursuing Centralized Approach Many Privacy Experts Warn Against
Technology is no panacea, including for combating COVID-19. While that might sound obvious, it's worth repeating because some governments continue to hype contact-tracing apps. Such apps won't magically identify every potential exposure. But they could make manual contact-tracing programs more effective.

Australia, India and UK Pursuing Centralized Approach Many Privacy Experts Warn Against
Technology is no panacea, including for combating COVID-19. While that might sound obvious, it's worth repeating because some governments continue to hype contact-tracing apps. Such apps won't magically identify every potential exposure. But they could make manual contact-tracing programs more effective.

Australia, India and UK Pursuing Centralized Approach Many Privacy Experts Warn Against
Technology is no panacea, including for combating COVID-19. While that might sound obvious, it's worth repeating because some governments continue to hype contact-tracing apps. Such apps won't magically identify every potential exposure. But they could make manual contact-tracing programs more effective.

Australia, India and UK Pursuing Centralized Approach Many Privacy Experts Warn Against
Technology is no panacea, including for combating COVID-19. While that might sound obvious, it's worth repeating because some governments continue to hype contact-tracing apps. Such apps won't magically identify every potential exposure. But they could make manual contact-tracing programs more effective.

Australia, India and UK Pursuing Centralized Approach Many Privacy Experts Warn Against
Technology is no panacea, including for combating COVID-19. While that might sound obvious, it's worth repeating because some governments continue to hype contact-tracing apps. Such apps won't magically identify every potential exposure. But they could make manual contact-tracing programs more effective.

Australia, India and UK Pursuing Centralized Approach Many Privacy Experts Warn Against
Technology is no panacea, including for combating COVID-19. While that might sound obvious, it's worth repeating because some governments continue to hype contact-tracing apps. Such apps won't magically identify every potential exposure. But they could make manual contact-tracing programs more effective.

Australia, India and UK Pursuing Centralized Approach Many Privacy Experts Warn Against
Technology is no panacea, including for combating COVID-19. While that might sound obvious, it's worth repeating because some governments continue to hype contact-tracing apps. Such apps won't magically identify every potential exposure. But they could make manual contact-tracing programs more effective.