Windows Phone 8 in-depth review

Posted: November 19, 2012 in Phones

Windows Phone 8 is one of the most anticipated Mobile Operating Systems out there in the consumer market. When I flash my memory back to Windows Mobile era. Definitely, it is an outstanding jump from Windows Mobile 5 and 6, actually a brilliant move. The question is, will it be up to the challenge and consumers market expectations? To answer this, we need to touch some key points, talk about what is Brilliant, what is good, what is poor and where it fails.

User interface

– Honestly, innovative and brilliant. The good thing about the interface that Microsoft thought out of the box, they didn’t look nor think to copy other platforms around like IOS and Android. When WP7 introduced with the Live Tiles concept, it was something uncommon, and this is what exactly Microsoft needs, with WP7, a lot of limitations where there in the interface, no high-resolution support for HD screens, only WVGA which is ancient. Live tiles where practically limited, no way to change size, most of the applications where with no support of live tiles and big arrow button occupied big space from the right edge all along. Microsoft listened well to costumers feedback, they overcome these issues by supporting high screen resolutions, resizable live tiles, the big right arrow moved to the bottom to take advantage of more wide space, and third-party applications started to support live tiles (still limited) I will talk about live tiles and applications support later in this review.

– The interface is clean and simple, still efficient (in case of live tile apps support) which presents and displays useful information pushed to the tile face to help you to decide, do you really care and want to open the app to check the updates or not, really handy. No need to scroll left and right a lot to find your app like the concept founded with IOS and Android, still some vertical scrolling will be required in the tiles page or the applications page, Microsoft thought to minimize the impact by adding search button at the top left corner, and the letters filter to group applications by their alpha names. This is really useful, even sometimes not practical, still the best to offer so far.

        

Operating System

– Settings: Settings are straightforward as you expect to see in all platforms like IOS and Android. Android are leading in the way settings are customized and accessible. In WP8, simple setting like “Keep Wi-Fi on” is missing, even it is a simple option, but very important for a lot of power users who may want to stay connected all the time, the lack of this feature is really annoying, once you lock your WP8 powered device, you are no more connected to the world, even the 3G, HSPA, HSPA+ and LTE got disconnected sometimes, called back alive if a certain application forced it “like Outlook” only if configured to receive updates. Unfortunately I cannot notice this behavior with third-party apps. Fortunately, one developer created an app called “Keep Alive” in the Store. Which from my experience worked most of the time, but sometimes I noticed it is not working. Joe Belfiore, the manager of the WP Program, promised this will be coming soon in a coming update soon “Hopefully”.

– Internet Sharing is there, it just works fine and as expected, even I noticed the Lumia 920 I have got smoked by heat when this is enabled and other devices are connected, I faced similar issue with iPhone and some Android powered devices. Nothing to complaint about, I just don’t like to see my yellow new Lumia 920 under fire! NFC is there. It works fine.

     

– You can backup to SkyDrive your applications list, phone settings, photos and … Guess what!! Text messages … Yeah!!

Multitasking

– Ok, here comes the pain! Big argument! Take the following from me for granted as I will explain the full mechanism. In WP7, multitasking was literally fake, you can view the most 5 recent application used by “Press and hold” the back button, but none of the application will really run in the background in dynamic manner, the 5 recent applications will reside in the memory with “Pause” command, where the application will remain idle with no behavior in the memory, and when you press and hold back button, click on any application, the application will “restart”, not “resume”. that was somehow reasonable as WP7 wasn’t supporting real multitasking in the core, and the hardware were really not capable to provide enough juice to handle true multitasking, Ok, here I am talking about the third-party application, not the stock ones, the question here is, there is multitasking after all!! I say yes, but in the following conditions. a) Live tile must be there. b) Application must be Microsoft Stock. c) Wi-Fi/Data must be on.

– With WP8, some improvements are there. The recent applications which can be viewed increased from 4 to 7 (Exclude the home screen which cannot be count as an app).  When you open any application back from the “Back and hold” menu. The experience varies, some applications will “REALLY” resume from the state you left them, and some will restart. This tells us the problem now with the applications development not the WP8 kernel.

– Note that, if you want the app to stay in your multitasking list in case you want to leave it, press the home button only, back button(s) will kill it.

– The application killing/closing is a real pain, to close any application, you have to press the back button, now if you open an application and you navigate a lot inside it, you will need many back clicks until you reach the stage which you can really close it, the fix of this is really simple, I don’t know why there is no simple task manager to manage your apps, or swipe or X button are available when you press and hold the back button.

– In settings, under applications, click on the background tasks. There you will be able to see all applications you installed from store which can run in the background and support multitasking, you will be surprised with the limited number that really supported, this is an apps problem so far, not the platform. You may also notice that none of the stock apps are mentioned. This proofs my point before that built-in stock apps are supported by default, this setting will let you see and manage only the apps you install manually from the store.

– I will mention some applications behavior here that a lot of users are keen to know how they will behave. WhatsApp, this application is really good with the recent version 2.8.2. Works in the background smoothly, when your phone locked and u have 3G enabled, will work and you will receive notifications, both in the live tile and the toast. Even when you close the application totally, notifications will be pushed. This is something I like, but make me raise a question. Then the “Back and hold” to view the recent 7 applications is not really the place to know how multitasking works. Multitasking is handled totally buy the platform if the apps code written in the right way. If the apps are not well-coded to work with WP8 platform, then even they are in your recent apps list, they won’t show you any true multitasking behavior.

Facebook, the app design is nice, different experience than what you will get in IOS and Android, and I am happy and prefer how the apps looks. Still the app feels and looks in early beta, even alpha, a lot of features are missing, notifications are not stable, your status update is outdated most of the time, it runs in the background sometimes well and it resumes normally, sometimes it will restart from the beginning. You cannot copy and paste inside the app, you cannot delete nor hide any comments on your posts other than yours!! Really!! You cannot save photos, the list of “Cannot do” is really long. So the app so far is a total FAIL, thanx for the built-in integration which is way better than the app.

YouTube, when I installed it I though it is an app, then I discovered it is just a shortcut to take to the mobile site, what!! Are you kidding me? If I come to know the name of the person who approved it in the store I will make sure to fire him from Microsoft!! Total FAIL!!

– My final comment on the multitasking, it is shame on Microsoft “Leader of OS multitasking” not be able to provide a decent true multitasking to WP8 platform. The current multitasking provided is way below what others provide. Android is Pioneer in multitasking for the time being, Microsoft needs to look at them and do even better!

Services integration

– This is my favorite part so far in WP8. The way People and Me hubs are integrated with social services like Windows Live, Facebook, Twitter… etc. is brilliant, sometimes I feel they inspired this idea from HTC Sense interface on top of Google, but they have done it far better. From one place you can see what your contacts are up to without you flipping between apps back and forth “Sure this will depend on how your contacts names are matched with their names in social networks”, this is if you want WP8 to do the job automatically for you, otherwise, you need to assign the profiles manually.

– You can see what’s new and feeds from the services you selected to integrate, recent contacts, together (Which requires WP8 for other users to join the rooms you created and you can invite people you select to stay connected with them). When you select a contact, you can see their profile, contact details, what’s new about them, photos and history of your communication with them, brilliant!! You wont frequently need to access Facebook app or twitter, even you cannot replace them forever; still you can do a lot without having them.

– You can set your lock screen to show pictures of Bing, CNN app, Facebook App, Photos and other applications as they may come to support this feature, nice and cool shot here, even you wont like to have your private photos and Facebook stuff all the time! But still, nice unique feature you can set. I am using Bing pictures, keeps changing daily. I wont complaint about that.

– XBOX live is good so far, not really optimized. The games variety and selections still limited, and the integration of XBOX live accounts as the service not open yet for a lot of countries, make this hub useless in most of the regions apart from US and UK. Followed by XBOX music service, same problem.

– I love the integration totally, but I have some comments on the integration of Google services, basics are there (Email, contacts and calendar) which is good, still I hope to see more integration with Google docs, Google drive and Google online apps. “I am dreaming SkyDrive”!! Right 🙂

 

Store and Applications

– Boom!! In a bad way :(. This is a disappointment (I don’t want to say FAIL). Windows Store is growing for sure, but in a wrong way I guess. Applications in the market are not refined, consistent nor reliable. Most of the applications in the market are with no use, poor alternative offering compared to the respective apps we can find in IOS and Android. Makes me wonder about Microsoft strategy to review/approve apps submission, what are these standards? They are not controlled like IOS, and not widely open like Android. This Man-In-The-Middle approach looks incapable so far to ensure well-built and controlled structure.

– Applications usability is really limited, applications with no live tiles are losing 50% of the aim of being a serious app in WP8 platform, as there is no notification center, the applications will remain cold if no live tile with comprehensive multitasking support in place. Users will forget they installed these apps by time I guess!!

– Geographical store fragmentation, WOW, imagine, simple well-known app like Twitter cannot be found in most of the stores worldwide! Shazam, spotify … etc. Long list practically. This is unfortunate, if Microsoft really wants to make WP8 platform worldwide target for future market share expansion, this is to be considered seriously.

– Microsoft needs to rethink on how to follow a strategy to encourage developers to access and develop for this platform. Apple Store is a good example, not necessarily the best, hope Microsoft will come out with something even better.

Video, Music and Media

– Music hub is really nice; the simplicity of viewing your music, the ability to play a song and the album main cover will be loaded automatically in the background is awesome. The flipping between music and categorize them by Artist, Album and Genre is handy, cleaner and simpler than you can find in other music players in other platforms. The same is applicable to Movies and podcasts.

– The problem again is the ability to search and shop music outside US  & UK. This issue will limit the growth of the Music hub & XBOX Music Live worldwide, nothing to complaint about here as iTunes the leading digital online music industry still lack this. It is just a point to highlight than can be improved.

Office Hub & SkyDrive

– Office hub is good, including Word, Excel PowerPoint and OneNote. All integrated with your SkyDrive account on Microsoft Cloud, this enables some serious business users happy to be able to view their documents, edit them “to some very limited extent”, create new (limited to Word, Excel and OneNote) save them back to SkyDrive. It’s brilliant despite the fact of touch is not really well optimized and deeply integrated in the hub, gestures and finger input commands are little tricky, sometimes impossible to achieve them. Office 365 support is there, still limited! Overall, the Office Hub is a good step toward the right direction; hope to see more serious Office Suite from the Leaders of Office Suite … Microsoft!!

Voice commands

– Press and hold the Windows/Home button, this will start the voice commands, from what I can see, it is integrated to some extent with the platform. You can launch and app, search for terms and phrases on the web, make phone calls and text message your fellas. That’s all sounds good, but it is pretty old when we see what Google voice in Android and Siri in IOS can offer more smart voice interaction, WP8 still lacks that and falls behind by miles. I wish if I can text message by saying the whole thing like “Text John, I will be late today”, instead, the platform will search for John, start the SMS app then will ask you again what do you want to say!! Then will ask you again for a confirmation to send, add or try again.

– Overall, the voice commands is not sophisticated, but it works well for what it can do and offers.

Texting, Email and Keyboard

– Messaging app is decent. In another hand is no brainer. All what you expect from a messaging app is there. A great addition is the integration of chat services. If you sync your Windows live and Facebook, you will find your contacts available at your finger tips to start chatting with, with the ability to change your status from online, busy, away, invisible and offline. This will save your from looking for third party applications that you may need to run many of them to achieve what you can simply achieve with this brilliant built-in feature.

– Email, you can add your Windows Live email, Google mail, Yahoo mail and outlook (Exchange integration). The problem for me that there is no way to have a unified inbox; this feature is lacking which is a need if you have many accounts to flip between them. Inside the email application, you can swipe right and left to see all your emails, unread, flagged and urgent, this is really nice ready made filters to you with no extra steps or manual configuration. You can multi-mark emails to do set of actions on one and/or many emails. Simply by clicking on the left edge of the emails, you can do multi selection, then select the actions you want, delete, marl read, unread, set flag, clear flag and complete.

– Keyboard is good, I see it sometimes over sensitive, buttons are aligned nicely, but the horizontal spacing in comparison to the vertical is not well-organized which make it tricky sometimes especially if you are coming from Android or IOS keyboards. The space bar is super small; you will find yourself most of the time clicking on the comma symbol (,). The addition of emoticons ready is nice, and there are tons of them if you like to dig into deep weird ones!! Other than that, it is well-built keyboard, will need some refinement, and I guess could be the best out there next time J

Final word and conclusion

Windows Phone 8 is a good operating system for smart phones, the general look and feel is promising but in beta stage, same as what we used to experience with Windows 8 developer and consumer preview.

Microsoft need to improve a lot of points that some of them highlighted above in my review. Currently there are awesome hardware make by partners, Nokia Lumia 920 is the most powerful and cool. The overall experience is satisfying if we exclude the shortcomings of WP8 platform.

WP8 can be seriously considered as your daily driver smart phone, but if you are coming from IOS, you will miss the application variety and options. If you are coming from Android, you will miss the strong true multitasking and the overall control feel over the OS. Other than that, you may be really happy with this move which i personally did, so far i don’t regret it, simply coz i hold 2 phones all the time, so my other choice is Android (Galaxy Nexus). Still i don’t miss iPhone, as the GAP of apps is the only issue, this is still covered well by Android, hope WP8 store will do soon.

I give WP8 7.5/10 total score.

If you have any questions, something you feel I didn’t cover, please leave a comment below and i will make sure to answer whenever possible.

Thanks for Reading!

Akram

Let us talk about SMTP connectors configured in the routing group in Exchange Server 2003.

Whenever Exchange Server 2003 setup in your environment relies on a third party email firewall protection to work as a middle layer between Exchange Server and the internet. you may have different aspects to consider to ensure Exchange behavior to deliver and receive email from these third party email firewalls.

The first point to consider is the placements of your Email Firewall. as this will be your facing point to the internet (bi directional) so you have to consider the placements in a secure network segment which usually we call it Demilitarized Zone (DMZ).

Exchange Server by design and best practices must be located somewhere in your internal network segments. Why? the fact is the heavy integration and dependencies between Exchange and you Active directory is unlimited. so putting Exchange Server in the internal network and/or in the same subnet where your DC’s operations maters holders is the best practice. still you can place it any where you want like DMZ. but why this is not recommended by any Exchange Architect?

Exchange integration with Active Directory is one of the highest twin integration in comparison to any other products. let us consider putting Exchange in a DMZ (for security reasons) then the amount of rules, protocols and ports you will open in your firewall is something beyond what you can expect. which is for the first look give you the impression you don’t have a firewall anymore. LDAP, LDAP/SSL, IMAP4, NNTP, NNTP/SSL, HTTP, HTTP/SSL, SMTP, SMTP/SSL, SMTP/LSA, RPC, DNS … etc. all are protocols used by Exchange and not only that, they are using different ports range. which will lead you to have a heavy work on your firewall in addition to a lot of risks aligned with that.

Now, as we agreed. Exchange will be placed somewhere in the internal network where the communication with Active Directory will be seamless.

Now, how will email firewall communication with Exchange will take place? and how you can ensure that this email firewall will not be a single point of failure (Assuming your Exchange Server is already high available/Clustered).

Sure you will need a email firewall technology with will offer a high availability on the technology itself. in case one failed the second will take over. and this will be aligned with your internal and external MX Records. usually providing the same MX records cost is the best scenario to do in case of high availability as you will ensure a balanced external email hits both your email firewalls (both = minimum high availability).

By doing this you will ensure a minimum high availability requirements to keep you email system alive and visible to the outside world in case any point of failure occurs in your email firewall system.

the question now is, how you will ensure the Exchange server email delivery to these email firewall whenever these emails are marked for external delivery. how you will ensure the email flow delivery to be aligned with email firewall design.

A lot of Exchange Servers designs I have seen was depending in putting a smart host IP address of the email firewall in the Exchange Server configured at the SMTP Virtual Server settings. which is logically reasonable. but why this practice is not the best thing to do?

First, assigning the SMTP virtual server this task considered an overhead in Exchange Server. as the external emails marked for external delivery will go first to the local delivery queue. then marked by the Virtual Server to be forwarded to another on spot created queue using the DNS query name (Let us say the domain address is Hotmail.com) and then the delivery will take place to the smart host (Email Firewall). now this process is not the best thing you can do as you are overwhelming the SMTP virtual server for multiple decisions to be taken which will case queue to react slow and will increase a noticeable deterioration in Exchange Performance.

Second, the Smart Host name will be used, which one? remember you have two email firewalls for high availability? and you cannot put two smart hosts in the same SMTP Virtual Server. then you are limited to use only one Smart Host. now consider this Smart Host refers to the one of the Emails Firewalls failed? then no Exchange delivery for external emails will take place. and your system will face an outage for external delivery.

SMTP

Looking at the two reasons above. in addition to more security and performance aspects you don’t want to go with smart host assigned in the SMTP virtual server.

So the best solution, keep in mind when u plan to deliver any email outside your internal Exchange Organization is to use Routing Groups. Routing Groups designed specifically to help your current Exchange Org. to communicate with external email services or another Exchange Org. outside your domain hierarchy.

Routing Groups will be used as an SMTP Connector to specify a name or IP to where you want your Exchange Organization to communicate emails with.

The beauty of this solution is you can have as multiple as connectors to communicate with different email gateways/firewalls. as the most important is the ability to have load balanced connectors pointing to load balanced/ high available email firewalls/gateways.

This can be accomplished by creating more than one connector to point to a specific domain OR * which indicates all domains and give both connectors the same cost. this will ensure at least if one connector or its destination device failed. your email system will keep routing the external emails using the second connector to the second alive emails firewall/gateway. the same scenario can be applicable in case of more than two gateways exists.

ADDRSSPACE

The step by step guide for the above to implement is easy and can be found http://support.microsoft.com/kb/265293

There is a lot of hidden advantages apart from what mentioned above. apart from ensuring high availability and so on. this action will improve Exchange performance and the queue delivery as exchange will be aware about a dedicated external queue delivery which will decrease the decision making overhead on the internal SMTP Virtual Server. in addition to securing the communication in the right way as you are segregating the SMTP engine for External Delivery from the local delivery (This topic of securing Exchange is another story which we will talk about in a different topic).

NoDo update for Windows Phone 7 is out. Microsoft manages all updates pushing from their side without any carrier or OEM interruption. a good step actually toward a satisfied customers unlike what you can find in Android Devices managed by carriers and OEMs. So you will receive a notification in your WP7 indicating an update available for you, then you have to connect your device to your computer, Lunch Zune Software, go to your phone tab, click settings and select update.

NoDo provides a set of real needed features all WP7 users which we used to have even in Windows Mobile 6.0, 6.1 and 6.5 like copy and paste, multiple Wifi profiles … full NoDo features can be found here Microsft NoDo

Note that, NoDo is relied on an update released in February 2011, so make sure you have it.

For you people who cannot wait the NoDo notification to be received to your phone (nevertheless, you will receive it anyway) you can follow the steps below.

 
1) Disconnect you WP7 from Wifi and 3G/Data Connection.
2) Connect your WP7 to Zune, go to Phone Tab settings and check for update.
3) Once the search for update starts, wait for 3 to 5 seconds and disconnect your Laptop/Desktop from internet (Wifi and/or ethernet).
4) just wait as the zune will continue searching. don’t disconnect your phone, just wait.
5) The NoDo update will appear for you. here connect back your Laptop/Desktop to internet.
6) Click on Update.

Here you go, the approximate update time will depends on how much data size you have on your WP7 as the backup process is really slow.
I am not sure if this will work with branded devices, but i tried it with unlocked Samsung Omnia 7 and HTC HD7.
Try this and let me know if it works.

Cheers!

Continued Security Oriented and Mac OS X Part1

The most important part in security for any OS as I mentioned, is how to keep it secure against the continuous vulnerabilities discovered by the security community and Hacker.

Mac OS X security lifecycle doesn’t include any clear security model or framework. the reason of mentioning that is the lack of a centralized repository for the security issues in Mac OS X, actually most of what you can find is a personal or some corporative work done by third party.

Mac OS X proved to be one of the highest vulnerable OS in the market today. Based on the latest study research done by Secunia http://secunia.com, Mac OS X till today has 1452 Vulnerabilities. this is on the Mac OS X side only. What do I mean by “Mac OS X side only”?

As mentioned in part one, Mac OS X is actually based on FreeBSD‘s and NetBSD‘s, so what Mac OS X actually is a FreeBSD, NetBSD and Mac OS X customization.

Mac OS X considered to be the User Mode of the Kernel, while FreeBSD is the kernel mode. on FreeBSD itself 84 Vulnerabilities, while the NetBSD is presenting the network kernel layer of the Mac OS X has 43 Vulnerabilities

So the total of infected vulnerability of a Mac System = Mac OS X + FreeBSD + NetBSD = 1579. this is a serious and dangerous number.

Now the criticality is not only in the number of vulnerability, the criticality relies beyond. The patching management is the key factor. you cannot find any reliable information in Mac OS X patching management as the absence of the patching cycle and addressing vulnerabilities and fixing them. Sure this doesn’t mean there is no patching or security implementation, but the absence of a clear resource and information about what has been patched and what not.

Some security advisory research keeps an eye to such changes, but still this is not the optimal way to handle a security for a well built promising OS like Mac OS X.

Generally speaking, all open source OS claims to be very secure, while the absence of a centralized repository for these multiple Linux and Unix-Like distributions is one of the concerns raised all the way.

OS popularity and the market share of use plays a huge role in orienting hacking against vulnerabilities, this why we find Windows Platform are more targeted to such exploits attempts. Windows 7 for example has 96 Vulnerabilities, where only 6 are not patched. which means, vulnerabilities are there, but they are well managed and handled by patches in a well known security cycle. Microsoft has a very nice Security Model called “SDLF – Security Development Life Cycle” which ensure developing applications against security standards to reduce the number of security breaches in MS Apps. the SDLF will not stop after producing the apps to the market, but it will continue improving security and addressing discovered vulnerabilities and work on patch them regularly following a nice model of Security Management.

Personally, I like Apple products and I am impressed with their quality build of hardware and the innovation part within it, but, what are the most important part, the soul of the outstanding hardware products, what about the Software? I hope in future Apple will take security more seriously apart from focusing on marketing and delivering nice looking products, spending some time in doing serious stuff is better than wasting all the time on marketing and presentations!!

If you are wondering about the FAN BOY WAR you hear here and there every day and every moment on the planet, then you should realize that nothing is real.

User experience, ease of use and much more functionalities are the major factors any user. but what about the hidden things!!!

Security of the platform you are using, is a fatal factor, not even important regardless you cannot touch it, play with it .. etc. actually, this topic is one of the hottest we find OS fans talking about, the fact is, most of the discussions I personally engaged in proofed for me most of FAN BOYS are repeating wrong information they received from …. WOW …. from another FAN BOYS!

“False Advertising”, this is the major headline about marketing OS.

One of the Headed IT Companies in advertisement is Apple. honestly, Apple is one of the best companies I ever find in advertising side. but False Advertising is a key in what I keep hearing about OS X like “Most Advanced OS” … “Secure OS” … “No Viruses” … “You don’t even need antivirus on Mac OS X” …. etc

Is this a joke?? ok let us move ahead and find out how much Mac OS X is secure. before I begin I must pointed out what is the meaning of Mac OS X.

Mac OS X is an OS relies on FreeBSD‘s and NetBSD‘s … so, there is no actual OS core “Kernel” built by Apple. Apple relies on (Mach kernel). this kernel developed at Carnegie Mellon University to support operating system research, primarily distributed and parallel computation.

Regardless the fact that Mac OS X developed by Apple is a GNU OS, Apple managed to build a great GUI experience on the GNU Kernel.

Let us talk business. Every OS by time will be part of security breaches attempts by hackers community world wide. and from there, hackers will focus on finding vulnerabilities in these OSes and try to develop an exploit to take advantage of the discovered vulnerability. it is very important here to point out that vulnerability doesn’t indeed means an exploit must happen. but the vulnerability itself is backdoor open for whoever able to realize how to reach it.

It will be silly to find someone fight or defend the fact of vulnerabilities because no OS, Application or any software is 100% un vulnerable. the main idea is, how to keep improving and securing your application/software to avoid the expected exploits of these vulnerabilities. so the management cycle of security is very important to follow.

Management Cycle of Vulnerabilities is the weakest part in Mac OS X. I don’t ant to point out any certain vulnerability yet, but pointing the UN PATCHED vulnerability what does matter.

A Framework of security management is a key in any security oriented model. This framework should include for example:

  • Monitoring discovered vulnerability in a certain cycles.
  • Assess discovered vulnerabilities against all possible exploits through it.
  • Work on patching these vulnerabilities, to be moved from unpatched to patched.
  • Release patches in well managed timing for users (this for moderate and low vulnerabilities)  and immediate patches for critical/fatal ones.

Apple doesn’t have any Security Newsletter advisory on Mac OS X, and there is actual alerting system to the users about any vulnerabilities. The worst is the absence of the security focus mechanism. a good aspect about this mess is the released updates for Mac OS X, there is no periodical updates, instead, you will find between time to time a patches with huge size. and you will find no actual information about what this update do.

Some sources mentioned about the absence of a Security Engineering section in Apple, still I cannot confirm this information, but it is most likely could be true based on the facts mentioned above, and the later completion of this article in its further parts.