tag:blogger.com,1999:blog-9707367103313089012024-03-05T12:53:22.643+00:00Application Management in the 21st CenturyThis blog details some of my thoughts and aspirations relating to application packaging, compatibility and the ongoing management of applications on desktop, server and cloud platforms. I have a strong focus on the Windows desktop space, but as we progress into more and more cloud based application management, we will definitely see more posts on getting applications working
in the cloud.Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.comBlogger436125tag:blogger.com,1999:blog-970736710331308901.post-42972063005044103662016-10-03T18:15:00.000+01:002016-10-03T18:15:01.583+01:00September Patch Tuesday delivers critical updates to IE and Adobe Flash<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoTrjHLozDdEQVYeOq5bk-NW_Vg7slJQWjYv1ZV5IETck14rUk23wjRBwB_8Z86o8fbbnFRFiPay749wOGOU-0AkiRZxGm1Arq7bLNO6cUnms_SskuDHFLJugTqVNyTqdUszr-ZqkFuqCQ/s1600/CW_Sept2016_img.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="214" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoTrjHLozDdEQVYeOq5bk-NW_Vg7slJQWjYv1ZV5IETck14rUk23wjRBwB_8Z86o8fbbnFRFiPay749wOGOU-0AkiRZxGm1Arq7bLNO6cUnms_SskuDHFLJugTqVNyTqdUszr-ZqkFuqCQ/s320/CW_Sept2016_img.jpg" width="320" /></a></div>
<!--?xml version="1.0" encoding="UTF-8"?-->
<br />
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
</div>
<br />
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
Microsoft traditionally has a large patch release for September. This September's Patch Tuesday is no exception with 14 updates, seven rated as critical, seven rated as important, altogether resolving a total of 50 reported vulnerabilities. Unlike last month, September brings a <a href="https://en.wikipedia.org/wiki/Zero-day_(computing)">zero-day</a> vulnerability with the update <a href="https://technet.microsoft.com/library/security/MS16-104">MS16-104</a>. Unfortunately, this patch to IE also includes a publicly reported security issue. So this month we have a number of Microsoft updates on the "Patch Now" list including: <a href="https://technet.microsoft.com/library/security/MS16-104">MS16-104</a>, <a href="https://technet.microsoft.com/library/security/MS16-115">MS16-115</a>, <a href="https://technet.microsoft.com/library/security/MS16-116">MS16-116</a> and <a href="https://technet.microsoft.com/library/security/MS16-117">MS16-117</a>. And the update to the Windows kernel with <a href="https://technet.microsoft.com/library/security/MS16-111">MS16-111</a> may make some administrators pause for a little more testing due to the core system files updated.
</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
You can read more <a href="http://computerworld.com/article/3119757/security/september-patch-tuesday-brings-7-critial-updates-to-ie-windows-and-adobe-flash.html">here</a>.</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-43063079226699532182016-08-18T18:21:00.004+01:002016-08-18T18:21:59.956+01:00LinkBait: Interesting reads for the month of August<div dir="ltr" style="text-align: left;" trbidi="on">
Each month, I try to (with a little help from my friends) compile a list of interesting links about application compatibility and general platform issues.<div>
<br /></div>
<div>
Here is my suggested reading list for this month's "packaging canon" </div>
<div>
<br /></div>
<div>
<div class="p1">
<span class="s1"><b>Platform News</b></span></div>
<div class="p1">
<span class="s1">Windows Redstone 1 is now known as the <a href="https://www.youtube.com/watch?v=80Qz0Gbjh6Q"><span class="s2">Windows 10 Anniversary Update</span></a> and is a <a href="http://www.askvg.com/windows-10-anniversary-update-version-1607-changelog/"><span class="s2">major update</span></a> to Windows and brings other upgrades:</span></div>
<div class="p2">
</div>
<ul style="text-align: left;">
<li><span class="s4"><a href="https://www.microsoft.com/en-au/download/details.aspx?id=53344"><span class="s5">.Net Framework 4.6.2</span></a></span><span class="s6"> has been released</span></li>
<li><span class="s4"><a href="https://www.microsoft.com/en-us/download/details.aspx?id=53168"><span class="s5">SQL Server 2014 SP2</span></a></span><span class="s6"> has <a href="https://support.microsoft.com/en-us/kb/3171021"><span class="s7">been released</span></a> with <a href="http://blogs.sqlsentry.com/team-posts/latest-builds-sql-server-2014/"><span class="s7">many changes</span></a> and a new <a href="http://go.microsoft.com/fwlink/?LinkID=821560"><span class="s7">Feature Pack</span></a></span></li>
<li><span class="s4"><a href="https://www.microsoft.com/en-us/cloud-platform/sql-server"><span class="s5">SQL Server 2016</span></a></span><span class="s6"> has <a href="https://blogs.technet.microsoft.com/dataplatforminsider/2016/06/01/sql-server-2016-is-generally-available-today/"><span class="s7">been released</span></a> with many <a href="http://www.databasejournal.com/features/mssql/slideshows/10-new-features-worth-exploring-in-sql-server-2016.html"><span class="s7">new features</span></a></span></li>
<li><span class="s2"><a href="https://blogs.technet.microsoft.com/windowsserver/2016/07/25/dont-miss-the-launch-of-windows-server-and-system-center-2016-at-ignite/">Windows Server 2016 and SCCM 2016 to be launched</a></span><span class="s1"> at the Ignite Conference in Atlanta on </span></li>
</ul>
<br />
<div class="p1">
<span class="s1"><br /></span></div>
<div class="p1">
<span class="s1"><b>September 26-30</b></span></div>
<div class="p1">
</div>
<ul style="text-align: left;">
<li>Windows Redstone 2 is <a href="http://blogs.windows.com/windowsexperience/2016/08/11/announcing-windows-10-insider-preview-build-14901-for-pc/"><span class="s2">already in testing</span></a>. It and Redstone 3 <a href="http://www.theverge.com/2016/8/5/12385240/microsoft-windows-10-redstone-updates-2017"><span class="s2">are due in 2017</span></a></li>
<li>Why UAC in reality <a href="https://blogs.msdn.microsoft.com/oldnewthing/20160816-00/?p=94105"><span class="s2">has only two settings</span></a>, On or Off</li>
<li>Why sharing a folder in Explorer <a href="https://blogs.msdn.microsoft.com/oldnewthing/20160726-00/?p=93955"><span class="s2">grants full permission</span></a> on the share to everyone</li>
<li>New <a href="https://www.microsoft.com/en-us/software-download/windows10startfresh"><span class="s2">tool for refreshing windows 10</span></a>. It replaces missing functionality that was part of Windows 8</li>
<li>Security implications of <a href="https://blogs.technet.microsoft.com/deploymentguys/2016/08/01/security-implications-of-upgrading-to-windows-10/"><span class="s2">upgrading to Windows 10</span></a></li>
<li>Upgrade to Windows 10 for free <a href="http://www.theverge.com/2016/8/1/12340318/microsoft-windows-10-free-upgrade-still-available"><span class="s2">after the deadline</span></a></li>
</ul>
<br />
<div class="p1">
<br /></div>
<div class="p1">
<span class="s1"><b>Install News</b></span></div>
<div class="p1">
</div>
<ul style="text-align: left;">
<li>WiX v3.10.3 has <a href="http://wixtoolset.org/news/"><span class="s2">been released</span></a></li>
<li>Updated <a href="https://developer.microsoft.com/en-us/windows/downloads/virtual-machines"><span class="s2">prebuilt virtual machines</span></a> from Microsoft with latest available operating systems for VMware, Hyper-V, Virtualbox & Parallels</li>
</ul>
<br />
<div class="p1">
<br /></div>
<div class="p1">
<span class="s1"><b>Browser News</b></span></div>
<div class="p1">
<span class="s2"><a href="http://blogs.windows.com/windowsexperience/2016/08/04/edge-anniversary-update/">Edge</a></span><span class="s1"> browser now <a href="http://blogs.windows.com/windowsexperience/2016/08/15/windows-10-tip-get-started-with-microsoft-edge-extensions/"><span class="s2">supports extensions</span></a>, has pinnable tabs and notifications</span></div>
<div class="p2">
<span class="s7"><a href="http://blogs.windows.com/msedgedev/2016/08/09/rc4-now-deprecated/">RC4 encryption is now disabled in Microsoft Edge and Internet Explorer 11</a></span></div>
<div class="p1">
<br /></div>
<div class="p1">
<span class="s1"><b>Other News</b></span></div>
<div class="p1">
</div>
<ul style="text-align: left;">
<li>Follow the Olympics in Outlook with new <a href="http://blogs.office.com/2016/08/01/follow-the-summer-games-in-rio-with-the-new-outlook-interesting-calendar-feature/"><span class="s2">“Interesting Calendar”</span></a></li>
<li>Yahoo! Messenger has been redesigned with a new UI and received its <a href="https://messenger.yahoo.com/download"><span class="s2">first update in 4 years</span></a></li>
<li>Windows Holographic experience <a href="http://blogs.windows.com/windowsexperience/2016/08/16/windows-holographic-experience-available-for-mainstream-windows-10-pcs-next-year/"><span class="s2">looks interesting</span></a></li>
<li>Anyone (in US or Canada with $3000) can now <span class="s2"><a href="https://blogs.windows.com/devices/2016/08/02/hololens-development-edition-updates-2/">buy a hololens</a></span></li>
</ul>
<br />
<div class="p1">
<span class="s1"><br /></span></div>
<div class="p1">
<span class="s1"><br /></span></div>
<div class="p1">
<span class="s1"><br /></span></div>
</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-9038984514099380692016-06-16T09:23:00.004+01:002016-06-16T09:28:17.351+01:00June Patch Tuesday delivers five critical updates and (hopefully) the end of QuickTime<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh91Ab41vopRbSuvreOsaEtmbAfbIxK1Rr4iktVkJd_TSxClua49ydyI2fQPDAhIzUr90fI_zrMhyjx9HWX7IPyhMdNPo1b0bcGx69O6Xdp7f8W11f4yRTIOOcicNkaUIWx_isEcVdM7H4s/s1600/CW_June2016_img.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="214" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh91Ab41vopRbSuvreOsaEtmbAfbIxK1Rr4iktVkJd_TSxClua49ydyI2fQPDAhIzUr90fI_zrMhyjx9HWX7IPyhMdNPo1b0bcGx69O6Xdp7f8W11f4yRTIOOcicNkaUIWx_isEcVdM7H4s/s320/CW_June2016_img.jpeg" width="320" /></a></div>
<br />
A few months ago, we saw the end of Oracle JAVA Plugin support, and now we see the end of QuickTime with the call to remove it from your systems. If only we could get rid of Adobe Flash.
For this June Patch Tuesday, we won’t see an update to Adobe Flash from Microsoft, but we may see an update from Adobe later this month. With 16 updates for June, we already have enough to worry about. Microsoft has released five critical updates and the remaining 11 patches are rated as important, covering a total of 44 vulnerabilities.
This month looks like a pretty straightforward update cycle, with some very targeted updates from Microsoft which should have a low to moderate risk for deployment.<br />
<br />
You can also read about Patch Tuesday from Chris Goettl's blog found <a href="http://blog.shavlik.com/june-patch-tuesday/">here</a>. Chris also products a great infographic each month that summarises Patch Tuesday that is definitely worth a look.<br />
<br />
You can read more about this Patch Tuesday on the Computer World column found <a href="http://www.computerworld.com/article/3084326/security/5-critical-updates-and-the-end-of-quicktime-for-june-patch-tuesday.html">here</a>.</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-64824682127615669692016-06-08T17:53:00.000+01:002016-06-08T17:53:43.045+01:00Critical updates for IE, Edge and Flash for this May Patch Tuesday<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6M7mHFT1VtJRK07M_LKhKa8qT_M9JggwT_X_eXoRfE9wvyEgEaw2uGRkWs_x09VZZNFxrwmtKNVkvBw9fhuWfjNc5Pj-BV-B0fAzP_st7XaEECVu-NvNZVRyGi5Ltdbm5ZWjD-b6ZRmNm/s1600/cw_may2016_img-100660536-primary.idge.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6M7mHFT1VtJRK07M_LKhKa8qT_M9JggwT_X_eXoRfE9wvyEgEaw2uGRkWs_x09VZZNFxrwmtKNVkvBw9fhuWfjNc5Pj-BV-B0fAzP_st7XaEECVu-NvNZVRyGi5Ltdbm5ZWjD-b6ZRmNm/s320/cw_may2016_img-100660536-primary.idge.jpeg" width="320" /></a></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
Historically, May has been a big month for Microsoft updates. This May, we see 16 updates, covering all versions of Windows, IE and Edge as well as an update for Adobe Flash player.
</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
With eight updates rated as critical and the remaining patches rated as important, Microsoft seems to have adopted a new clustering approach to patches. We have seen pairings of IE and Edge in the past, but this month we see core components (VBscript and JScript) linked with browser updates. In addition, we also have kernel updates linked to kernel mode driver updates (<a href="https://technet.microsoft.com/library/security/MS16-060">MS16-060</a> and <a href="https://technet.microsoft.com/library/security/MS16-061">MS16-061</a>). We are also missing MS16-063! And, this month we also get the benefit of a nice looking <a href="http://blog.shavlik.com/wp-content/uploads/2016/05/May2016PatchTuesdayInfographicSum.jpg">infographic</a> from Shavlik.
</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<!--?xml version="1.0" encoding="UTF-8" standalone="no"?-->
<br />
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
You can read more about this ComputerWorld article <a href="http://www.computerworld.com/article/3068668/security/critical-updates-for-ie-edge-and-flash-for-this-may-patch-tuesday.html">here</a>. </div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-65755121955159971392016-06-08T16:18:00.001+01:002016-06-08T16:18:32.109+01:00Critical updates for IE, Edge and Adobe Flash for April Patch Tuesday<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8WR0-K_fUEUreEAW4yYIQ4V2ThbKa89srQzcl9mNkNwUU9ABkqAEcmtUBcqeNHK1Qfx9KpzB2zoeeST-4WBMbgp_mk7cFgjmeLehH8XqxKTAPNBQKH1V1kT5pKeodPmXQa7Od4OMqa2VD/s1600/CW_Apr2016_img.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="214" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8WR0-K_fUEUreEAW4yYIQ4V2ThbKa89srQzcl9mNkNwUU9ABkqAEcmtUBcqeNHK1Qfx9KpzB2zoeeST-4WBMbgp_mk7cFgjmeLehH8XqxKTAPNBQKH1V1kT5pKeodPmXQa7Od4OMqa2VD/s320/CW_Apr2016_img.jpg" width="320" /></a></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
This April, Microsoft has released another large batch of Windows updates with six rated as critical and the remaining seven rated as important.
</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
Although there has been a large amount of hype relating to the latest security scare (<a href="http://www.computerworld.com/article/3047227/security/prepare-to-patch-a-critical-flaw-in-windows-and-samba-file-sharing.html">BadLock</a>), the real issue this month is the Adobe Player vulnerability addressed in <a href="https://technet.microsoft.com/library/security/MS16-050">MS16-050</a>. Both Microsoft browsers require urgent updates due to more memory corruption issues (<a href="https://technet.microsoft.com/library/security/MS16-037">MS16-037</a> and <a href="https://technet.microsoft.com/library/security/MS16-038">MS16-038</a>). I am not quite sure that Microsoft does this deliberately, but it seems that every month, the second to last update rated as important could be considered a little “worrisome.” This month it's <a href="https://technet.microsoft.com/library/security/MS16-048">MS16-048</a>, which updates a key windows system (that handles logins) that may require some additional testing before production deployments.
</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
Here’s the link to <a href="http://blog.shavlik.com/wp-content/uploads/2016/04/April2016PatchTuesdayInfographicSum.jpg">Shavlik’s helpful Patch Tuesday infographic</a> that outlines the risks and exploitability of all these patches.
</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<!--?xml version="1.0" encoding="UTF-8" standalone="no"?-->
You can read more about this ComputerWorld article <a href="http://www.computerworld.com/article/3055587/security/critical-updates-for-ie-edge-and-adobe-flash-for-april-patch-tuesday.html">here</a>. </div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<!--?xml version="1.0" encoding="UTF-8" standalone="no"?-->
<br />
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
</div>
<br />
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-45401762530559784742016-06-08T16:16:00.001+01:002016-06-08T16:16:30.473+01:00Five critical updates for March Patch Tuesday<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0D4U2ikXorkr-fQr2safK7izaPNx2IyXblFVvUfrYa9nhtquAlRxca6kwUFtkjGpne-RshLVmu-WBKK9K9nOYqKRWvShIXKgkRpwMDvDJ8tkKQ6ZXx4FnquuIQG3g_hA6m6K1HJWu-2Lt/s1600/CW_Mar2016_img.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="214" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0D4U2ikXorkr-fQr2safK7izaPNx2IyXblFVvUfrYa9nhtquAlRxca6kwUFtkjGpne-RshLVmu-WBKK9K9nOYqKRWvShIXKgkRpwMDvDJ8tkKQ6ZXx4FnquuIQG3g_hA6m6K1HJWu-2Lt/s320/CW_Mar2016_img.jpeg" width="320" /></a></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
Following Microsoft’s recent practice of issuing large updates covering multiple versions of Microsoft IE, Office as well as both desktop and server OS platforms, the 13 updates for March probably represents the new “average” Patch Tuesday payload. Five of the updates are rated as critical, while the remaining eight are rated as important, together covering 44 newly reported security vulnerabilities. In addition to these Microsoft patches, I expect that we will see an update to Adobe’s Flash player.
</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<!--?xml version="1.0" encoding="UTF-8" standalone="no"?-->
<br />
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
If you are looking for a helpful infographic for this month’s patch cycle, check out Shavlik’s latest offering<a href="http://blog.shavlik.com/wp-content/uploads/2016/03/MarchPatchTuesday2016Sum.png"> here</a>.</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
You can read more about this ComputerWorld article <a href="http://www.computerworld.com/article/3042028/microsoft-windows/5-critical-updates-for-march-patch-tuesday.html">here</a>. </div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-26011623627188916942016-06-08T16:06:00.000+01:002016-06-08T16:06:02.941+01:00February brings Patch Updates to IE and Flash<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZg53jq2TPuv0QLq4Jh9JJdpxJYZNfgazZlY3ifxfDCeSS0QD18UTr6W6z_uwv20WzdT3ILVqWki6e6qZuRTbPqDKctbMn1IIjcrxuGiiib_gjdhYBM7cqXi3gahiJi8hUtt_5vpBs4s9A/s1600/CW_Feb2016_img.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="214" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZg53jq2TPuv0QLq4Jh9JJdpxJYZNfgazZlY3ifxfDCeSS0QD18UTr6W6z_uwv20WzdT3ILVqWki6e6qZuRTbPqDKctbMn1IIjcrxuGiiib_gjdhYBM7cqXi3gahiJi8hUtt_5vpBs4s9A/s320/CW_Feb2016_img.jpeg" width="320" /></a></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
This month Microsoft returns to form with 13 patches, with six rated as critical and the remaining seven rated as important. You’ll notice that <a href="https://technet.microsoft.com/library/security/MS16-010">MS16-010</a> is missing -- that’s because it was released last month on January 12th, with the standard January update cycle.
</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
As always, I recommend a reboot after installing these updates, even if not explicitly required by Microsoft. In addition, some attention may be required on<a href="https://technet.microsoft.com/library/security/MS16-022"> MS16-022</a> (the update to Adobe Flash Player) and the two kernel mode updates<a href="https://technet.microsoft.com/library/security/MS16-016"> MS16-016</a> and<a href="https://technet.microsoft.com/library/security/MS16-018"> MS16-018</a>.
</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<!--?xml version="1.0" encoding="UTF-8" standalone="no"?-->
<br />
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
Shavlik is now producing a monthly infographic on Patch Tuesday which can be found<a href="http://blog.shavlik.com/wp-content/uploads/2016/02/FebruaryPatchTuesday2016Sum.png"> here</a>.</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
The Computer World posting can be found <a href="http://www.computerworld.com/article/3031894/security/microsoft-delivers-major-updates-to-internet-explorer-and-adobe-flash-player.html">here</a>.</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-89058656042463996512016-06-08T15:55:00.003+01:002016-06-08T15:55:49.276+01:00Six critical updates for January Patch Tuesday<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnzuYmW21EHcQb9nSYwbVtBrc7REjHika-PmKQZRsBYc4BflWZPyZ2c3vCPwmtJ41kicsnR7rhABl_HHz00_6q9YKqRecG0JYytKTR_s8fX9StbhvTncgZf8XqokXy1tD4VvYjwqFXxp4W/s1600/CW_Jan2016_img.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnzuYmW21EHcQb9nSYwbVtBrc7REjHika-PmKQZRsBYc4BflWZPyZ2c3vCPwmtJ41kicsnR7rhABl_HHz00_6q9YKqRecG0JYytKTR_s8fX9StbhvTncgZf8XqokXy1tD4VvYjwqFXxp4W/s320/CW_Jan2016_img.jpeg" width="320" /></a></div>
Microsoft has started the year with a truly unusual Patch Tuesday. There are nine updates for January, with six rated as critical and the remaining three rated as important (the reverse of the usual distribution in terms of severity). January has a couple of additional surprises. First, it looks like MS16-009 did not make this Patch Tuesday release at all and may only surface later this month. Secondly, we see what has been rated as an important update with<a href="https://technet.microsoft.com/library/security/MS16-008">MS16-008</a> may contain the most severe vulnerability and the most risky patch contents.
</div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<!--?xml version="1.0" encoding="UTF-8" standalone="no"?-->
<br />
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
Thanks to Shavlik this month for their <a href="http://blog.shavlik.com/wp-content/uploads/2016/01/January-Patch-Tuesday-2016-summary.jpg">very helpful summary infographic</a> detailing this January Patch Tuesday. </div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
<br /></div>
<div style="font-family: 'Helvetica Neue'; font-size: 14px;">
You can read more <a href="http://www.computerworld.com/article/3022060/security/6-critical-updates-for-january-patch-tuesday.html">here</a>: </div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-40195577448780629812015-05-18T14:06:00.002+01:002015-05-18T14:06:54.959+01:00New posting on Computerworld: Critical Updates to Office and IE<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaKE5OOp6KVmnlRI-7H4FfXouTFINo1la8zuq7Dq-EQmYyuECdEQ8h64cCU75URvd-B3etKSYLZOlyBh8VJcuqw8UevnU5dye8wdPCd4-nx-jQVMmkIW7kLwLtyvyxsiO75uMl5PKJTWrr/s1600/Depositphotos_27328935_s.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaKE5OOp6KVmnlRI-7H4FfXouTFINo1la8zuq7Dq-EQmYyuECdEQ8h64cCU75URvd-B3etKSYLZOlyBh8VJcuqw8UevnU5dye8wdPCd4-nx-jQVMmkIW7kLwLtyvyxsiO75uMl5PKJTWrr/s200/Depositphotos_27328935_s.jpg" width="136" /></a></div>
With this May Microsoft Update Tuesday, we see Microsoft delivering 13 security bulletins with three rated as critical and the remaining ten rated as important by Microsoft.<br />
<br />
This May release from Microsoft see an update to Office (and its web components), Internet Explorer and some low level system components. Include the Internet Explorer and Office updates as part of your standard testing and deployment plan, however I would suggest waiting a little while before deploying MS15-044 as it updates two key system files; GDIPLUS.DLL and Win32K.sys.<br />
<br />
I was hoping for a little respite from the ongoing onslaught of large patches from Microsoft, but with 13 patches to deploy this month, there is no let up in the continuing drum-beat of security patches and application updates.<br />
<br />
Here is our monthly overview info-graphic on this month's Microsoft Patch Tuesday.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvVTIh6Wxn6CV7tggExrzLMQuL9ojd-ZMWMwsM3j72kK66J_g_lS-6nNa7D6UmPGOevrMOQNkjIN-ZgiJBmjQv5j7O5tBlq1RE-l-ft9XMWXFXxO2r0OWrg873cAdQmN1fuMfNUgoJi6Vu/s1600/Patch+Tuesday+MAY_2015.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="190" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvVTIh6Wxn6CV7tggExrzLMQuL9ojd-ZMWMwsM3j72kK66J_g_lS-6nNa7D6UmPGOevrMOQNkjIN-ZgiJBmjQv5j7O5tBlq1RE-l-ft9XMWXFXxO2r0OWrg873cAdQmN1fuMfNUgoJi6Vu/s320/Patch+Tuesday+MAY_2015.jpg" width="320" /></a></div>
<br />
<br />
To find out more about this month’s updates and the potential impact on your application portfolio, head over to <a href="https://spine.qompat.com/#/">Qompat Spine</a><br />
<br />
Or, you can have a read of my monthly posting at Computerworld found <a href="http://www.computerworld.com/article/2922035/application-security/critical-updates-to-ie-and-office-for-may-patch-tuesday.html">here</a>. </div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-85660530119467267962015-04-27T16:11:00.003+01:002015-04-27T16:11:46.590+01:00IE rages into the night<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhj6S_atKNKMxXuEowGD3mR9mMrRvkFT528m8kvw3ucs6k9w8DnyyqLa2T1gbpJ0MNQ1p27oL2dBB2jGnsWRC2YAM4hiJ0Df0cXwDGV59ohk5tELaME2QiVCDcYlByIbjiGoZ8bZvmjZTU1/s1600/Depositphotos_4494731_s.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhj6S_atKNKMxXuEowGD3mR9mMrRvkFT528m8kvw3ucs6k9w8DnyyqLa2T1gbpJ0MNQ1p27oL2dBB2jGnsWRC2YAM4hiJ0Df0cXwDGV59ohk5tELaME2QiVCDcYlByIbjiGoZ8bZvmjZTU1/s1600/Depositphotos_4494731_s.jpg" height="257" width="320" /></a></div>
We are seeing another major 'end of life' (EOL) scenario for a primary Windows component. This time it's Internet Explorer and it's not for the usual "gosh, it's over 10 years old" reason. Take the latest Windows operating system (hint: Windows 8.1 Update) and the latest production version of IE (this time IE 11) and look to January 16, 2016 and what do you get?</div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
EOL! </div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
"What, but Windows 8.x and IE11 are only a few years old?" </div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
I thought that we had at least another five years of support and then maintenance after that. You could be forgiven for thinking this way as Microsoft has traditionally followed a multi-year release, production, and support model. However, things are changing. Following on from Microsoft's IE support statement page found <a href="https://support.microsoft.com/en-us/lifecycle#gp/Microsoft-Internet-Explorer">here</a>, we will find that; </div>
<blockquote class="tr_bq" style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
"Beginning January 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical support and security updates"</blockquote>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
Microsoft generally allows for five year's Mainstream and then five year's Extended Support. So even though IE11 is a relatively young browser, you will need a plan to move this browser by next Christmas. Microsoft is helping though with two key technologies; <a href="https://msdn.microsoft.com/en-us/library/dn640687.aspx">Enterprise Mode </a>and <a href="https://www.microsoft.com/en-gb/download/details.aspx?id=44570">Site Discovery</a></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
Microsoft describes Enterprise Mode as;</div>
<blockquote class="tr_bq" style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
"A compatibility mode that runs on Internet Explorer 11 on Windows 8.1 Update and Windows 7 devices, lets websites render using a modified browser configuration that’s designed to emulate Internet Explorer 8, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer."</blockquote>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
The Microsoft Site Discovery toolkit includes a collection of free tools to facilitate the identification and metrics of internal site usage for enterprise customers.</div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<span style="text-align: -webkit-auto;"><br /></span></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<span style="text-align: -webkit-auto;">And just last week, Microsoft has made a number of improvements to both technologies which can be found</span><span style="text-align: -webkit-auto;"> </span><a href="http://blogs.msdn.com/b/ie/archive/2015/04/23/announcing-improvements-to-enterprise-mode-and-enterprise-site-discovery.aspx" style="text-align: -webkit-auto;">here</a><span style="text-align: -webkit-auto;">. The updated Enterprise Mode now supports IE7 where;</span></div>
<blockquote class="tr_bq" style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
"If you put a site in IE7 Enterprise Mode, it will automatically use Enterprise Mode with IE7 document mode if there’s a DOCTYPE in the markup, or fall back to IE5 document mode if there isn’t a DOCTYPE." </blockquote>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
In addition, Microsoft has renamed the original Enterprise Mode for IE to 'IE8 Enterprise Mode', to differentiate the new features. <span style="text-align: -webkit-auto;">The new Site Discovery update for March found</span><span style="text-align: -webkit-auto;"> </span><a href="http://blogs.msdn.com/b/ie/archive/2015/03/20/announcing-enterprise-site-discovery-support-on-ie8-ie9-ie10-and-new-privacy-enhancements.aspx" style="text-align: -webkit-auto;">here </a><span style="text-align: -webkit-auto;">allows for improved privacy and security settings. Microsoft has also updated several Group Policies for improved management as illustrated by the following diagram;</span></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://blogs.msdn.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-38-71-metablogapi/3348.aitemaesd_2D00_image2_5F00_760x137.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://blogs.msdn.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-38-71-metablogapi/3348.aitemaesd_2D00_image2_5F00_760x137.png" height="71" width="400" /></a></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
This reduced lifecycle is not due to something wrong with IE, rather it's part of the new update and maintenance strategy for Microsoft. I think that we will see IE12 or 'Spartan' follow the same fate as Windows 10. Microsoft will continue to deliver 'Features as a Service' (FaaS) with major version numbers fading into the background. IE12 and Windows 10 may be the last 'version' that Microsoft ever delivers.<span style="text-align: -webkit-auto;"> </span></div>
<br />
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
</div>
<br />
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<div style="margin: 0px;">
<br /></div>
</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-52822959532481598972015-04-21T07:08:00.001+01:002015-04-21T07:08:15.472+01:00MS15-034 - Patch now to resolve critical HTTP vulnerability<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6P5gPRWzIYlhyEoGCSxbRrss4Iryco5I2y-y3ZwHa7QMk3UcwiXP-nW0ZHbmc_gekzGmKXnFCXq_dk5oeSz9NaLPl326xhNhqcN9Cr0PG1-v4lj5jCKwHF0Gxtj7nBcWVKQw-gRFdiaxH/s1600/Depositphotos_16187173_s.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6P5gPRWzIYlhyEoGCSxbRrss4Iryco5I2y-y3ZwHa7QMk3UcwiXP-nW0ZHbmc_gekzGmKXnFCXq_dk5oeSz9NaLPl326xhNhqcN9Cr0PG1-v4lj5jCKwHF0Gxtj7nBcWVKQw-gRFdiaxH/s1600/Depositphotos_16187173_s.jpg" height="150" width="200" /></a></div>
<span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; display: inline !important; float: none; font-family: Tahoma; font-size: x-small; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">This month's Patch Tuesday posting included eleven updates with four rated as critical and the remaining seven as important by Microsoft. Each month, I am now posting my views on Microsoft's Patch Tuesday on the on-line ComputerWorld blog found </span><a href="http://www.computerworld.com/blog/patch-tuesday-debugged/" style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">here</a><span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; display: inline !important; float: none; font-family: Tahoma; font-size: x-small; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">. The latest update titled, "</span><a href="http://www.computerworld.com/article/2909524/microsoft-releases-11-critical-updates-and-fixes-critical-http-flaw.html" style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">Microsoft releases 11 critical updates and fixes critical HTTP flaw</a><span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; display: inline !important; float: none; font-family: Tahoma; font-size: x-small; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">" provides a brief overview of each update and some recommended actions.</span><br />
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
This month, the Microsoft update <a href="https://technet.microsoft.com/library/security/MS15-034">MS15-034</a> attempted to resolve a critical security vulnerability in Microsoft IIS web server. Though the updated only affected a single file, we are now seeing active exploits of this security vulnerability at Internet-wide scales. The <a href="https://isc.sans.edu/forums/diary/MS15034+HTTPsys+IIS+DoS+And+Possible+Remote+Code+Execution+PATCH+NOW/19583/">Internet Storm Centre</a> has reported active attacks on their honey-pots, with the following comment on their related newsgroup page;</div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<blockquote style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; border: none; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; margin: 0px 0px 0px 40px; orphans: 2; padding: 0px; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<b>"Update</b>: We are seeing active exploits hitting our honeypots from 78.186.123.180. We will be going to Infocon Yellow as these scans use the DoS version, not the "detection" version of the exploit. The scans appear to be "Internet wide"."</blockquote>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
The ISC have also provided a quick test to see if you are vulnerable to this HTTP vulnerability that includes;</div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<blockquote style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; border: none; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; margin: 0px 0px 0px 40px; orphans: 2; padding: 0px; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<div>
GET / HTTP/1.1</div>
<div>
Host: MS15034</div>
<div>
Range: bytes=0-18446744073709551615</div>
<div>
<br /></div>
<div>
If the server responds with "Requested Header Range Not Satisfiable", then you may be vulnerable.</div>
<div>
<br /></div>
</blockquote>
<span style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">I would recommend running this quick test, and then updating your servers as a priority with the Microsoft update </span><a href="https://technet.microsoft.com/library/security/MS15-034" style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">MS15-034</a><span style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">.</span></div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-63274337915651196712015-04-16T15:34:00.000+01:002015-04-16T15:34:04.449+01:00A revolutionary new way to resolve your app compatibility issuesHow much time, money, and energy does it cost your company to resolve all the issues pertaining to compatibility, virtualisation suitability, and corporate standards? Wouldn't life be so much simpler if you could automate this process in a fraction of the time? And from wherever you are, even if you're not in the office? Even on a mobile device? And if your tech team were freed up from these annoying laborious issues, think about all the more constructive tasks they could be getting on with the improve your company's performance.<br />
<br />
Well here at Qompat we have been developing an app that does all these things and more. Qompat Spine is a unique, cross-platform, cloud based app that assesses, remediates, and converts your applications in minutes. <br />
<br />
Once you have signed up, you create a Project according to your individual requirements:<br />
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiI1VTW7yCKPSFYWuf39YgbYXHFmg77qC_phS77JiIWntLILGzJ_m6QQM0Om0afLtlvK3WSfnozNaxbRLspTPfehy4kJqJu915nXdBAvgsDxjbWki9ahA6DQKJdqtMdGDULFNrlAbCMp8Io/s1600/Q_IntroBlog_Img01.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiI1VTW7yCKPSFYWuf39YgbYXHFmg77qC_phS77JiIWntLILGzJ_m6QQM0Om0afLtlvK3WSfnozNaxbRLspTPfehy4kJqJu915nXdBAvgsDxjbWki9ahA6DQKJdqtMdGDULFNrlAbCMp8Io/s1600/Q_IntroBlog_Img01.jpg" /></a></div>
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><br />
Then you simply drag and drop your apps onto the Uploader:<br />
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDww1HG4M2tNMBrs-8pYVByyNhl_9-S9OsjN1oCoGYkFD1Q2gL1a5vec2ZPDrdnU7QNVq8-vf3cV9qC40ptHiNk2fIeJg5__QMK3aUop4FNjOUkN437dNRmuvlENyQn5UCspte6O3yN4LW/s1600/Q_IntroBlog_Img02.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDww1HG4M2tNMBrs-8pYVByyNhl_9-S9OsjN1oCoGYkFD1Q2gL1a5vec2ZPDrdnU7QNVq8-vf3cV9qC40ptHiNk2fIeJg5__QMK3aUop4FNjOUkN437dNRmuvlENyQn5UCspte6O3yN4LW/s1600/Q_IntroBlog_Img02.jpg" /></a></div>
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><br />
You will then see an executive summary that gives an overview of your app statuses:<br />
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNLRaWGuJhTsnNgAXP0f5khqwViTLxuwHo-5w1ss0xylPPkr4Ks4EBfPOG2iXtXc_Lu7iQVAThIk317WeitcNkeissJuBH_nrD3p3k9HX-vjHvEeo14pWjke7YPQBVOLAAKMrZPEmnpnI6/s1600/Q_IntroBlog_Img03.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNLRaWGuJhTsnNgAXP0f5khqwViTLxuwHo-5w1ss0xylPPkr4Ks4EBfPOG2iXtXc_Lu7iQVAThIk317WeitcNkeissJuBH_nrD3p3k9HX-vjHvEeo14pWjke7YPQBVOLAAKMrZPEmnpnI6/s1600/Q_IntroBlog_Img03.jpg" /></a></div>
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span>You may drill down further to inspect issues within these apps, and our filtering system allows you to autoselect or manually select whichever issues you want to fix:<br />
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY1woBs3LRCM4TAg4TuWhuvUVBbGS3_1QG_1sYVLZwgYrJiBSKtPDCT7szgIRlYslrosPAXTRf9_Y9nOcqZ8plhZM08SHTL1niopfA_-kSRAnsqwPqrlvCQt0H2LmgDRfnKAobPaGNWdrq/s1600/Q_IntroBlog_Img04.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY1woBs3LRCM4TAg4TuWhuvUVBbGS3_1QG_1sYVLZwgYrJiBSKtPDCT7szgIRlYslrosPAXTRf9_Y9nOcqZ8plhZM08SHTL1niopfA_-kSRAnsqwPqrlvCQt0H2LmgDRfnKAobPaGNWdrq/s1600/Q_IntroBlog_Img04.jpg" /></a></div>
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><br />
Reports are generated for you to view, export, and print:<br />
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKc8EsS15KClbiYd4aPfWBhrLdNoZHDQGKOOU9jZqNk194_ALxfBobDbjcYSQoDsVeGTLh8QCqI-Zwo5Xdv1ocmAh0_b5JNKQ6B5H4wM1r6X0DQZgbyW7rzT5NhDC3z2JMx0gx3I8EtKr8/s1600/Q_IntroBlog_Img05.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKc8EsS15KClbiYd4aPfWBhrLdNoZHDQGKOOU9jZqNk194_ALxfBobDbjcYSQoDsVeGTLh8QCqI-Zwo5Xdv1ocmAh0_b5JNKQ6B5H4wM1r6X0DQZgbyW7rzT5NhDC3z2JMx0gx3I8EtKr8/s1600/Q_IntroBlog_Img05.jpg" /></a></div>
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><br />
Notifications will give you a progress update, and alert you when your files are ready to download:<br />
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLAAJZOZQlp_5pHFjyCfDn2wy6BNsMDuw3vg1_8-oH_O4rpf8qJZaqkjyFAazdH4wdsMZGGamg7ciaofzSWgJ3GiYgdk4Bi4eYoKm8WnYJJqozzcW1z8oSxvxGiSzpEmjO5_qAZCzee39C/s1600/Q_IntroBlog_Img06.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLAAJZOZQlp_5pHFjyCfDn2wy6BNsMDuw3vg1_8-oH_O4rpf8qJZaqkjyFAazdH4wdsMZGGamg7ciaofzSWgJ3GiYgdk4Bi4eYoKm8WnYJJqozzcW1z8oSxvxGiSzpEmjO5_qAZCzee39C/s1600/Q_IntroBlog_Img06.jpg" /></a></div>
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif; font-size: 13.3333330154419px;"><br /></span>If you would be interested in trying it out for yourself, feel free to <a href="mailto:hello@qompat.com">email us</a>, or visit our <a href="http://www.qompat.com/" target="_blank">website</a> for more information.Anonymoushttp://www.blogger.com/profile/08350641256705085677noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-27580478376417447062015-04-01T12:21:00.002+01:002015-04-01T12:21:15.265+01:00To be IE, or not to be IE<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-W4wexgI4K5QthKFF2R1nI6rjk3s65PZCjTeMdNqwtF_DlRoEakX2mVqovoDOKcQ5Odv9NhSjj3f72dLRKT7OsKZsofttv-xsI3LM8jzzVnZdATwmtC77O3_lVxKD8J0O78CR5I67yhj9/s1600/IE-Janus.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-W4wexgI4K5QthKFF2R1nI6rjk3s65PZCjTeMdNqwtF_DlRoEakX2mVqovoDOKcQ5Odv9NhSjj3f72dLRKT7OsKZsofttv-xsI3LM8jzzVnZdATwmtC77O3_lVxKD8J0O78CR5I67yhj9/s1600/IE-Janus.jpg" height="193" width="200" /></a></div>
Microsoft has released more information on their new web browser, currently code-named Spartan. You can read more about Spartan on the newly minted wikipedia page <a href="http://en.wikipedia.org/wiki/Spartan_(browser)">here</a></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
The new browser will be completely different from Microsoft IE, with a different rendering engine and a different code-base. </div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
The IE team provided a few different reasons for these <a href="http://blogs.msdn.com/b/ie/archive/2015/03/24/updates-from-the-project-spartan-developer-workshop.aspx">changes</a>:</div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br />
<ul>
<li>Project Spartan was built for the next generation of the Web, taking the unique opportunity provided by Windows 10 to build a browser with a modern architecture and service model for Windows as a Service. This clean separation of legacy and new code will enable us to deliver on that promise. Our testing with Project Spartan has shown that it is on track to be highly compatible with the modern Web, which means the legacy engine isn’t needed for compatibility.</li>
<li>For Internet Explorer 11 on Windows 10 to be an effective solution for legacy scenarios and enterprise customers, it needs to behave consistently with Internet Explorer 11 on Windows 7 and Windows 8.1. Hosting our new engine in Internet Explorer 11 has compatibility implications that impact this promise and would have made the browser behave differently on Windows 10.</li>
</ul>
</div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
In addition to these changes, I think that there may be some customer confusion about which browser to use, and when. Enterprise customers may still need the legacy compatibility support for their internal enterprise systems while Spartan will be used for the "rest of the web". The web is a messy place, with compatibility issues of its own. I am not sure that a simple distinction of "if it's internal, use IE11 and if not, use Spartan" will work.</div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
That said, Microsoft has updated Windows 10 at its fastest pace ever, and the new browser has been updated as well. Some key elements in the new browser include;</div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<ul>
<li>Cortana is built-in and ready to assist: Cortana in Project Spartan is a digital personal assistant that helps make Web browsing easier.</li>
<li>Inking and sharing so you can capture and communicate your thoughts: Now with new inking capabilities, Project Spartan enables you to write or type directly on the page, comment on what’s interesting or clip what you want – then easily share this “Web Note” via mail, or a social network. </li>
<li>Distraction-free reading with Reading List and Reading View: Project Spartan helps with a new Reading List to collect everything you want to read, including the ability to save any webpage or PDF for convenient access later.</li>
<li>A new engine for the modern Web: Project Spartan’s new rendering engine is built around the idea that the Web “just works,” while being fast, more secure, and more reliable. </li>
</ul>
<div>
However, if you are currently in the UK (like me) you will not be able to see all of these benefits, until worldwide distribution later this year. You can read more about this latest update to the Windows 10 Insider program <a href="http://blogs.windows.com/bloggingwindows/2015/03/30/introducing-project-spartan-the-new-browser-built-for-windows-10/">here</a>. </div>
</div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
This may all sound interesting from a simple technical perspective. However, if you have been watching my patch updates for a while (years?) and see how often IE is completely refreshed/updated each month, this may not be good news for you. Also, I think we have to ask the question, "Will anyone care?". There are already a number of very good, and fast evolving browsers out there. Microsoft is going to have work pretty hard to woo customers back to a new browser. </div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
<br /></div>
<div style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font-family: Tahoma; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;">
Actually, it's kind of exciting to watch.<br />
<div>
<br /></div>
</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-71330171655938621742015-03-11T15:49:00.001+00:002015-03-11T15:49:36.196+00:00Massive March Microsoft Update<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://images.techhive.com/images/article/2015/03/depositphotos_4042654_s-100572708-primary.idge.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://images.techhive.com/images/article/2015/03/depositphotos_4042654_s-100572708-primary.idge.jpg" height="133" width="200" /></a></div>
It looks like we have a massive March Microsoft Update for this months Update Tuesday. With five updates rated as critical and the remaining nine rated as important by Microsoft.<br />
<br />
I have posted my latest update on my Computer World column: Patch Tuesday Debugged. You can find the full story <a href="http://www.computerworld.com/article/2895214/massive-microsoft-march-update.html">here</a>:<br />
<br />
Two of the critical updates were related to the Microsoft VBScript engine - using the core OS or Internet Explorer (IE) as attack vectors for malicious hackers that could lead to remote code execution scenarios.<br />
<br />
In addition, we saw an update to the Windows kernel mode driver, which I have advised to test thoroughly an then maybe wait a little while as these kinds of updates have caused issues in the past. The final update MS15-031 addressed the industry wide FREAK issue with an update to the Windows SChannel component.<br />
<br />
<br />
I will post another preview of Microsoft Patch Tuesday next month (April) so, please watch this space.</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-65919539664763451232015-02-17T20:39:00.001+00:002015-02-17T20:39:19.886+00:00Windows 10 means Microsoft 2.0<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhC1bHToDNn3kvokL6NipLof9sJ7TVirIYPkIAVMlo2f1ptprMGfI1XGDOkXjP9aHncLao5lpiwI7lzua4ogBQgMo_hQl0pDByZnBLRyhw3OpqEHRpK_6tXteqsMYqCPm6vSXJ0J6IO7ycJ/s1600/Time+To+Upgrade.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhC1bHToDNn3kvokL6NipLof9sJ7TVirIYPkIAVMlo2f1ptprMGfI1XGDOkXjP9aHncLao5lpiwI7lzua4ogBQgMo_hQl0pDByZnBLRyhw3OpqEHRpK_6tXteqsMYqCPm6vSXJ0J6IO7ycJ/s1600/Time+To+Upgrade.jpg" height="200" width="150" /></a></div>
<div>
<span style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">A little while ago, I was reading an article from </span><a href="http://www.computerweekly.com/blogs/it-fud-blog/" style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">Cliff Saran</a><span style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;"> on Computer World titled </span><a href="http://www.computerweekly.com/news/2240238645/Windows-10-Microsoft-at-the-crossroads" style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">Windows 10: Microsoft at the crossroads</a><span style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;"> which I consider some required reading for those following the recent change of fortunes for Microsoft. </span><br />
<span style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;"><br /></span><span style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">I think that Microsoft has suffered from an image problem for the past few years. I won't go into the details, but I think that Windows 8 was a really good example of a company that stopped listening properly to their existing and prospective customers.</span><br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
I think that has Microsoft has changed. And, more importantly it continuing to change.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Cliff's article details the different ways that Microsoft is handling both the release and the upkeep of their next version of the Windows operating system. As <a href="http://blogs.forrester.com/category/windows_8">Forrester</a> has noted that roughly 10% of users have migrated to Windows 8.x and even fewer enterprise customers have plans to move to Windows 8.x, Microsoft needed to change it's game. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
And, I believe it has done so with Windows 10 in three major ways. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<b>Windows 10 will be a subscription model</b></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
First, Windows 10 will be a free upgrade for the first 12-months. After that we can assume that Microsoft will charge a monthly or yearly subscription. This is fundamental change for Microsoft from a license perspective with a move away from monolithic upgrades to a newer version. Windows 10 will then operate on a subscription basis - just like Office 365. Which for Office, seemed to work pretty well. (Disclaimer: our company uses it, and things seem OK so far.) </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<b>Microsoft Universal Apps</b></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Microsoft has released a really cool augmented visualization tool called <a href="http://www.microsoft.com/microsoft-hololens/en-us">HoloLens </a>that solves some the nasty VR issues (like being sick in front of your friends) and allows computer generated graphics (think Skype video-chats and your current MineCraft project) to be over -layed onto your living room or office space. Cool, but the key ideas behind this technology is that Microsoft is creating a form of universal applications that can be displayed on any medium including; desktops, tablets, phones and even the HoloLens. Think responsive websites but taken to the next level for all of the Microsoft application eco-system. You can read more about Microsoft Universal Apps strategy <a href="https://msdn.microsoft.com/en-us/library/windows/apps/dn609832.aspx">here</a>. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<b>Business as Usual Migrations and Updates</b></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
The third key component of the new Microsoft strategy is a managed approach to continuous cycles of innovation. Since you are now buying a subscription with Windows 10, Microsoft will need to keep adding features to ensure that you stay with Windows. Recognizing that enterprise customers will need a mixed or more flexible approach, Microsoft will support a "consumer paced" update cycle, a four month delayed cycle and a way for customers to opt-out of certain features or all future updates. Gartner has a great diagram that illustrates the the new Microsoft update process as shown below;</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://na1.www.gartner.com/imagesrv/reprints/270900/270933/270933_2.gif;pvb9a4a0170ccddc41" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://na1.www.gartner.com/imagesrv/reprints/270900/270933/270933_2.gif;pvb9a4a0170ccddc41" height="191" width="320" /></a></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<img src="file:///C:/Users/greg/AppData/Local/Temp/enhtmlclip/270933_2.gif" style="cursor: default;" /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
With these core changes, I can now understand why Microsoft didn't call it Windows 9. In binary, 1 and 0 means the number 2. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
As I see it, Windows 10 is really Microsoft 2.0</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
</div>
</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-73740661809783983822015-02-09T21:33:00.002+00:002015-02-09T21:33:39.505+00:00Microsoft Malware Protections in the Cloud - MAPS<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv4vjPuFLJ7oV1PzoPG_O8i7LWZH9pFIps0F8N6iMxMp-pJ0_y-1zH9_P9bT8zC64pMuW5g1Y6qYxOHQtH72G-ebVDM8xaxnkqJn68OQdzJJwX_q6CuaApw3JjgWCIdW-6H7X0W2FYs7Nf/s1600/Clould+Spam.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv4vjPuFLJ7oV1PzoPG_O8i7LWZH9pFIps0F8N6iMxMp-pJ0_y-1zH9_P9bT8zC64pMuW5g1Y6qYxOHQtH72G-ebVDM8xaxnkqJn68OQdzJJwX_q6CuaApw3JjgWCIdW-6H7X0W2FYs7Nf/s1600/Clould+Spam.jpg" height="173" width="200" /></a></div>
When I first received my invite to join Google mail (Gmail) years ago, I was immediately surprised by what was missing: a global SPAM directory or registry. I thought to myself - this is the first time that someone knows what people are flagging as SPAM. Once you have a few (or maybe a few thousand) users complaining about a particular email (SPAM) from a particular sender (a SPAMMER) then you could be pretty sure that the email in question was SPAM. It was a crowd-sourced SPAM filter - updated dynamically by now millions of users every day. That omission was quickly corrected by Google, and now I have to say that their collective SPAM filter is very good. As is the more recent incarnation of Hotmail, Outlook.com</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Which brings me to the next surprise. If Microsoft knows what people are using, and what kind of errors are occurring on the Windows desktop and server platforms, why doesn't Microsoft have the best crowd-sourced anti-malware and anti-virus system in the world? Who needs a monthly virus definition from Symantec (if you pay your money) when you should have daily, dynamic scans of your systems updated through the collective experience (wisdom) of hundreds of millions of other users?</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Well, now you can. Sort of. You can now receive the benefit of other users' experience and dynamic updates through the <a href="http://windows.microsoft.com/en-GB/windows-8/join-maps-community">Microsoft Active Protection Service</a> (MAPS).</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
The Microsoft Active Protection Service is the cloud service that enables: Clients to report key telemetry events and suspicious malware queries to the cloud, whilst providing real-time blocking responses back to the client.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
The MAPS service is available for all Microsoft's antivirus products and services, including:<br />
<ul>
<li>Microsoft Forefront Endpoint Protection</li>
<li>Microsoft Security Essentials</li>
<li>System Center Endpoint Protection</li>
<li>Windows Defender on Windows 8 and later versions</li>
</ul>
</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
You can join the MAPS program through the free Microsoft anti-virus/malware program using the Settings tab as shown here:</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUJoiIfpa5qkBbpZaYOkkb-xxSkDQm-S01JUxzj_pckn_rIjTU3wR1mi6067kkyRvfGv0czODOmMGSv9Zt_tSW9XpJVyiTZlZ8eKCVNMJdvIO_SXzne9cqILY2712lhkiE1trpylxxu_G_/s1600/Windows+Defender+MAPS+Setting.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUJoiIfpa5qkBbpZaYOkkb-xxSkDQm-S01JUxzj_pckn_rIjTU3wR1mi6067kkyRvfGv0czODOmMGSv9Zt_tSW9XpJVyiTZlZ8eKCVNMJdvIO_SXzne9cqILY2712lhkiE1trpylxxu_G_/s1600/Windows+Defender+MAPS+Setting.PNG" height="222" width="320" /></a></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<img src="file:///C:/Users/greg/AppData/Local/Temp/enhtmlclip/Windows%20Defender%20MAPS%20Setting.PNG" style="cursor: default;" /><span style="text-align: -webkit-auto;">To help manage your privacy concerns, Microsoft reports all data through an encrypted connection and apparently only relevant data is included in the analysis process. If you are an enterprise customer, your data is most likely blocked by your corporate firewall, and therefore your particular threat landscape won't be included in Microsoft's updates.</span></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
If you need to find out more about the related confidentiality agreement from Microsoft you can look at the <a href="http://technet.microsoft.com/en-us/library/hh508835.aspx">Microsoft System Center 2012 Endpoint Protection Privacy Statement</a> for details</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
To give you an idea of how this malware telemetry is being exploited, you can see from the following chart that System Center Endpoint Protection is actually contributing roughly 10% of the malware signatures reviewed and included in Microsoft updates. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.microsoft.com/security/portal/blog-images/a/MAPSpro2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://www.microsoft.com/security/portal/blog-images/a/MAPSpro2.jpg" height="240" width="400" /></a></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<span style="text-align: -webkit-auto;">That means people like you and I adding to the system - resulting in 10% fewer malware attacks and fewer security incidents.</span></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
You can read more about the <a href="http://blogs.technet.com/b/mmpc/archive/2014/09/22/microsoft-cloud-protection.aspx">Microsoft Cloud Protection</a> effort here on the <a href="http://blogs.technet.com/b/mmpc/">Microsoft Malware Protection home blog page</a>.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
</div>
<br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<div style="margin: 0px;">
<br /></div>
</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-6739043265151535192015-01-26T21:45:00.002+00:002015-01-26T21:45:59.194+00:00Compatibility Challenges coming for Google Chrome<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBe6BUuIg2vl3pxcuEadagu6d5GLi5_pOSjtQpwkdxO7AmPzIUjoiszLzILExx9BYbJkdEyPTpSqfKXu_VUVWezjCDH7949bOOqbpxYuPjHzKnIRfG7q0wXVQAPnT75QYMNtO1D1nnu8q5/s1600/Old+Legacy+Computers.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBe6BUuIg2vl3pxcuEadagu6d5GLi5_pOSjtQpwkdxO7AmPzIUjoiszLzILExx9BYbJkdEyPTpSqfKXu_VUVWezjCDH7949bOOqbpxYuPjHzKnIRfG7q0wXVQAPnT75QYMNtO1D1nnu8q5/s1600/Old+Legacy+Computers.jpg" height="133" width="200" /></a></div>
January is a big month for both Microsoft and Google with Microsoft doing a <a href="http://news.microsoft.com/windows10story/">big reveal on Windows 10</a> and the <a href="http://gwtcreate.com/">Google Create conference</a> kicking off in sunny Mountain View. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
A highlight of the Google conference included an update to the <a href="http://www.gwtproject.org/">Google Web Kit</a> (Project) which is used by Google's web based products such as Google Wallet and AdWords.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Google's Ray Cromwell talked about the project's future direction and how future releases expected in the fourth quarter this year. Unusually one of the main topics was a break in backward compatibility for the Google Web kit. This is an unusual move for this Google team, as backward application compatibility was rigorously maintained through all previous versions since the project's inception back in 2006.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
In his presentation on the planned updates to Google Web Kit, Chris Cromwell said;</div>
<blockquote class="tr_bq" style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
“Now, because IE6, IE7, and IE8 are dead and there’s certain legacy things that we don’t want to support anymore because we need to target newer browsers and this new world of mobile, we want to deprecate these things,”</blockquote>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
IE6, IE7 and IE8 are dead? Really?</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
I took the liberty of having a quick skim on some browser usage compilation sites and found that in fact IE8 is not dead. Especially if you are using a desktop.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiv6KukG2qEFg2KcVpfxs9ocgBJ7vraF5JUJ1rZo6r08X6KUEjdRX3Y6VPCslx4G23aPh1fD7yxkCPTHotQ2NZpaaQIZOa7vcPqKrhrNOzxNqLxDOVMlM-gTsGlKugYHYAEVW-3SnLf3vFS/s1600/Browser+Usage+Diagram.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Browser Usage Pie Chart 2014" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiv6KukG2qEFg2KcVpfxs9ocgBJ7vraF5JUJ1rZo6r08X6KUEjdRX3Y6VPCslx4G23aPh1fD7yxkCPTHotQ2NZpaaQIZOa7vcPqKrhrNOzxNqLxDOVMlM-gTsGlKugYHYAEVW-3SnLf3vFS/s1600/Browser+Usage+Diagram.PNG" height="131" title="Browser Usage Pie Chart 2014" width="400" /></a></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<img src="file:///C:/Users/greg/AppData/Local/Temp/enhtmlclip/Browser%20Usage%20Diagram.PNG" style="cursor: default;" /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
You can find these results <a href="http://www.netmarketshare.com/browser-market-share.aspx?qprid=2&qpcustomd=0">here</a>. In fact I have always been suspicious of these market share reports, in that they under-report IE browser usage.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Many organizations that are likely to user a browser like IE8 (or even worse IE6) would lie behind a firewall that in some cases will remove usage tracker information from a particular user. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
</div>
<br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<div style="margin: 0px;">
Maybe the imminent death of IE8 is just wishful thinking on the part of the Google team. </div>
</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-37646635072210274882015-01-19T13:47:00.000+00:002015-01-19T13:47:07.902+00:00Google's 90-Day Exposure Policy<div dir="ltr" style="text-align: left;" trbidi="on">
<table cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: left; margin-right: 1em;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZRCNhBKBhI4DgAxZnU_kByjLlIuH_Yqlf2PT4-SGEgkQMsJRmcF3g-va5BBn_FuQ7XsC6dLf4DvIhBGy8GZo9glbUPw5zCkYI6IwxlqeGWDKJAorvPDBEgLsGdwNm1l8JDaE-wPdlcc-9/s1600/Security+Weakness.jpg" imageanchor="1" style="clear: left; margin-bottom: 1em; margin-left: auto; margin-right: auto;"><img alt="Google and Microsoft Vulnerability Exposure and Disclosure" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZRCNhBKBhI4DgAxZnU_kByjLlIuH_Yqlf2PT4-SGEgkQMsJRmcF3g-va5BBn_FuQ7XsC6dLf4DvIhBGy8GZo9glbUPw5zCkYI6IwxlqeGWDKJAorvPDBEgLsGdwNm1l8JDaE-wPdlcc-9/s1600/Security+Weakness.jpg" height="121" title="Google and Microsoft Vulnerability Exposure and Disclosure" width="200" /></a></td></tr>
<tr><td class="tr-caption" style="font-size: 13px; text-align: center;"><br /></td></tr>
</tbody></table>
<span style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">At the beginning of this month, I wrote a </span><a href="http://greglambert.blogspot.co.uk/2015/01/google-lights-fuse-on-microsoft-time.html" style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">post</a><span style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;"> about Google's new policy of researching vulnerabilities of other companies' technology and platforms, and then posting the details of the flaws and (more controversially) some sample exploit code.</span><br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Microsoft has responded with a blog <a href="http://blogs.technet.com/b/msrc/archive/2015/01/11/a-call-for-better-coordinated-vulnerability-disclosure.aspx">posting </a>from Chris Betz that called for better Coordinated Vulnerability Disclosure (CVD) where Chris comments that;</div>
<blockquote class="tr_bq" style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
"Those in favor of full, public disclosure believe that this method pushes software vendors to fix vulnerabilities more quickly and makes customers develop and take actions to protect themselves. We disagree. Releasing information absent context or a stated path to further protections, unduly pressures an already complicated technical environment. It is necessary to fully assess the potential vulnerability, design and evaluate against the broader threat landscape, and issue a “fix” before it is disclosed to the public, including those who would use the vulnerability to orchestrate an attack. We are in this latter camp."</blockquote>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
You can read more about Microsoft's disclosure approach (CVD) <a href="http://technet.microsoft.com/en-us/security/dn467923">here</a>. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
I am still struggling with my views on this topic, as I feel that Google may have slightly over-played their hand here, by publishing sample code and releasing the information the day before a patch was to be released from Microsoft. Google says that 90 days is enough to sort out a bug and deliver a patch. Really? For who? And, does Google have to support four desktop and server operating systems with over a billion users?</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
"Not my problem" says Google. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Yeah, and not cool, either" I would say.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<a href="http://blog.landesk.com/en/author/cgoettl/">Chris Goettl</a>, the Patch product manager from Landesk has this to say: </div>
<blockquote class="tr_bq" style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
"There was no public code examples or disclosure before Google announced this, and no known attacks were in the wild. In this case I think Google acted irresponsibly. In the increasingly more dangerous Cyber world we live in, companies like Microsoft and Google should be setting examples to follow. This example is not an example I would urge vendors to follow."</blockquote>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
I agree.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
And now Google has published another Windows flaw, and this one is even worse (more dangerous) than the first reported issue. This flaw may result in an information disclosure scenario where Windows does not check the user identity when performing cryptographic operations. You can read more about this flaw <a href="https://code.google.com/p/google-security-research/issues/detail?id=128&can=6">here</a>.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
To their credit, Microsoft has been working on this issue, had developed a patch, but at the last minute encountered some compatibility issues with the security update. The fix is now scheduled for the February Patch Tuesday update cycle. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Given that it takes some organizations between thirty and sixty days to fully deploy a patch to all their affected system, it looks like Google's "90-day disclosure policy" is more like a "90-day exposure policy".</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
</div>
<br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<div style="margin: 0px;">
<br /></div>
</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-38740324522637878022015-01-15T07:23:00.001+00:002015-01-15T07:23:03.588+00:00January Patch Tuesday ComputerWorld Posting<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTJgTl-Jxs7F3_YssmU0lU15O0xBYGs32dDQmcpodW_N1MkvyTofqgcOCt-jnrGwgn6rd2R-ovyIIcvKhaanIQ5KXEMSNWL6Kv4UzMWcegECNZqjuYrvFZmw5Vqm0R8dq6yImMdYUkMVOv/s1600/Happy+New+Year+Keyboard.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTJgTl-Jxs7F3_YssmU0lU15O0xBYGs32dDQmcpodW_N1MkvyTofqgcOCt-jnrGwgn6rd2R-ovyIIcvKhaanIQ5KXEMSNWL6Kv4UzMWcegECNZqjuYrvFZmw5Vqm0R8dq6yImMdYUkMVOv/s1600/Happy+New+Year+Keyboard.jpg" height="133" width="200" /></a></div>
I have posted my latest update on my Computer World column: Patch Tuesday Debugged.<br />
<br />
January was a pretty light update, with a single critical update and seven patches rated as Important. Most of the patches looked like pretty low-impact for most systems.<br />
However, you may want wait a little while before deploying the kernel driver update.<br />
<br />
You can find the full story <a href="http://www.computerworld.com/article/2868757/an-easy-start-to-the-year-with-microsofts-patch-tuesday-for-january-2015.html">here</a>:<br />
<br />
I will post another preview of Microsoft Patch Tuesday next month (Feburary) so, please watch this space.</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-81276478443158825062015-01-13T12:26:00.001+00:002015-01-13T12:26:45.183+00:00Microsoft Changes is Patch Communication Strategy<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitDWDikZ_dxF2ldh3WXsMtSWT_7fMiC8-Ddu41et6hcZXcBBrNjYGyhw_VE9B7SPAgrRqtMKodRM-K-ATxx2A87nPaVk8KXhBQ-1vIVXoKhh_Khb_yR0umbhNRHaFtngEMLZEUWmgBKEml/s1600/Goals+just+out+of+reach.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitDWDikZ_dxF2ldh3WXsMtSWT_7fMiC8-Ddu41et6hcZXcBBrNjYGyhw_VE9B7SPAgrRqtMKodRM-K-ATxx2A87nPaVk8KXhBQ-1vIVXoKhh_Khb_yR0umbhNRHaFtngEMLZEUWmgBKEml/s1600/Goals+just+out+of+reach.jpg" height="133" width="200" /></a></div>
As I have mentioned in this blog before, Microsoft is changing how it views and communicates with the world. And, given the recent challenges in communicating Patches with its Patch Tuesday release cycle (<a href="http://www.computerweekly.com/news/2240234523/Microsoft-holds-back-two-security-bulletins">Microsoft holds back two security bulletins</a>), it appears that Microsoft has decided how it communicates what patches are going to be released through the (now defunct) Advance Notification Strategy (ANS).<br />
<div>
<br /></div>
<div>
The ANS was a Patch Tuesday preview that was published initially one week in advance of the actual security update and patch release process. The ANS contained a basic list of the number of patches and what platforms would be affected by the updates. Recently (the past four months), this preview period was shortened to four days as the ANS was published on a Friday, rather than a week prior Tuesday. I found this a useful service, but apparently the feedback that Microsoft received indicated otherwise as you can see with Chris Betz's latest blog <a href="http://blogs.technet.com/b/msrc/archive/2015/01/08/evolving-advance-notification-service-ans-in-2015.aspx">posting</a>;</div>
<div>
<br /></div>
<div>
"We are making changes to how we distribute ANS to customers. Moving forward, we will provide ANS information directly to Premier customers and current organizations involved in our security programs, and will no longer make this information broadly available through a blog post and web page."</div>
<div>
<br /></div>
<div>
Yes, this means no more Advance Notification Service. Actually, premier customers can still access this service and Microsoft has created a new web-based dashboard service for a customized patch view called <a href="http://mybulletins.technet.microsoft.com/">myBulletins</a>. In addition, the Microsoft Deployment Priority matrix has been discontinued and the <a href="http://technet.microsoft.com/en-us/security/cc998259.aspx">Exploitability Index</a> has been upgraded to include more threat scenarios.</div>
<div>
<br /></div>
<div>
I found the Advance Notification Service really helpful as it allowed me to plan the week. Finding out if you had to deal with four or fourteen patches a few days in advance is helpful - but, maybe it was a real pain for Microsoft. I have already had a bit of play with the myBulletin service and have found it .... well, pretty incomprehensible. As I have to cover most Microsoft products (like all my peers) the dash board listed forty-five pages worth of information. Hmmm...</div>
<div>
<br /></div>
<div>
I will see how this Patch Tuesday goes and report back...</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-45420731673760607672015-01-08T09:27:00.001+00:002015-01-08T09:27:42.833+00:00Microsoft sweeps away IE for a clean Spartan look<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLdE03mPGDtnIspri-jwmzRAASyqMl2Ffvfb9hcqKQz35xznvOmgJizqE9fS9VwHRk7TLkhInmLhiDaeI59LVUj7G32fnERe74UGqYZ6h-kWKQWWvynDiErhVfTnu1FfbFBOEMznNWhxrB/s1600/Microsoft+Spartan.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLdE03mPGDtnIspri-jwmzRAASyqMl2Ffvfb9hcqKQz35xznvOmgJizqE9fS9VwHRk7TLkhInmLhiDaeI59LVUj7G32fnERe74UGqYZ6h-kWKQWWvynDiErhVfTnu1FfbFBOEMznNWhxrB/s1600/Microsoft+Spartan.jpg" height="114" width="200" /></a></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
For those who have followed the trials of tribulations of Internet Explorer (IE) over the past few years you may not be surprised to hear that Microsoft may now end the IE lineage with the release of a new browser currently called "<a href="https://bgr.com/2015/01/06/microsoft-spartan-pictures-release-internet-browser/">Spartan</a>". IE is dead, long live IE. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Microsoft IE has a lot of history and some will say a lot of "baggage" with repeated security issues, compatibility and standards compliance issues cropping up over the years. I think some of these negative views are little unjustified as the security landscape has changed rapidly and dramatically over the past years. Microsoft has also made great strides in both rendering and JavaScript standards compliance. In fact, the Microsoft you see today, the one that embraces standards, open software and even other OS platforms (apparently <a href="http://www.theregister.co.uk/2014/10/20/microsoft_cloud_event/">Microsoft loves Linux</a>) is very different from the striving, slightly isolationist monolith that it was (or was represented as by the press) even a few years ago.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Today, Microsoft is really different. And, maybe now is time for a change. Time for a new browser</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
The new browser codenamed "Spartan" will probably run along side IE11 (my educated guess) with the release of Windows 10. And there probably will be a parallel development and support path for both browser options for a while. Microsoft has to support IE10 (and potentially IE11?) for a while, but not as long as you might think.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Generally, Microsoft will offer 5-6 years of mainstream support for its products. For example, Windows 8 was released on 10/30/2012 and mainstream support will end on 1/9/2018.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
If you check the Microsoft Support Lifecycle Support page (found <a href="http://support2.microsoft.com/lifecycle/?p1=16759">here</a>) for IE you will find something very different from any other product or platform;</div>
<blockquote class="tr_bq" style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
"Beginning January 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical support and security updates."</blockquote>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
This is a big change, from previous support narratives, but given the nature of the security landscape and the rapid pace of change of Internet standards, an understandable stance to take. Given that we are now in 2015, and Windows 10 is currently scheduled for release in late 2015, Microsoft's venerable browser may disappear quicker than you think.</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-69583951806157787802015-01-05T09:23:00.000+00:002015-01-05T11:37:24.184+00:00Google lights the fuse on a Microsoft time-bomb<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqkpjtVpy7v_mOUh1LvN62JMnmZiGocmsf0QsQNIkMd1kfIc7TInOJE_n5bsPF6GxAdbdMEPXyCDR9-fr3_H59UMiNoUyO7PtaFWw1l4N-tfjIgGBIQwIGYG4yhF4PZW1VyCj7dNtFdxCP/s1600/Security+Time-bomb.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqkpjtVpy7v_mOUh1LvN62JMnmZiGocmsf0QsQNIkMd1kfIc7TInOJE_n5bsPF6GxAdbdMEPXyCDR9-fr3_H59UMiNoUyO7PtaFWw1l4N-tfjIgGBIQwIGYG4yhF4PZW1VyCj7dNtFdxCP/s1600/Security+Time-bomb.jpg" height="200" width="200" /></a></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
As the first post of the year, I wonder if this entry will set the tone for 2015. That is, one company publishing another company's security vulnerabilities before they can be fixed - potentially exposing us users.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Google, through it <a href="http://googleprojectzero.blogspot.co.uk/">Project Zero</a> program has published a Windows 8.1 vulnerability that allows certain users to gain administrative privileges through an elevation of privileges attack. Google has a 90-day embargo policy where if it discovers a bug, it will notify the affected vendor and give them 90 days to respond (i.e. fix the bug or close the security hole). If the company (in this case Microsoft) does not respond in time, then Google will publish the vulnerability with a sample exploitation. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Reading from the code example given on Google's development site, you can follow these steps yourself;</div>
<div style="font-family: Tahoma; orphans: 2; text-align: left; widows: 2;">
<ol style="text-align: left;">
<li><span style="text-align: -webkit-auto;">Put the AppCompatCache.exe and Testdll.dll on disk</span></li>
<li><span style="text-align: -webkit-auto;">Ensure that UAC is enabled, the current user is a split-token admin and the UAC setting is the default (no prompt for specific executables). </span></li>
<li><span style="text-align: -webkit-auto;">Execute AppCompatCache from the command prompt with the command line "AppCompatCache.exe c:\windows\system32\ComputerDefaults.exe testdll.dll". </span></li>
<li><span style="text-align: -webkit-auto;">If successful then the calculator should appear running as an administrator. If it doesn't work first time (and you get the ComputerDefaults program) re-run the exploit from 3, there seems to be a caching/timing issue sometimes on first run. </span></li>
</ol>
There are a number of opinions about this kind approach to security. Google has the following to say about this;</div>
<blockquote class="tr_bq" style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
"On balance, Project Zero believes that disclosure deadlines are currently the optimal approach for user security — it allows software vendors a fair and reasonable length of time to exercise their vulnerability management process, while also respecting the rights of users to learn and understand the risks they face..."</blockquote>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
To be fair, Google is not just researching vulnerabilities in Microsoft products, it is targeting Apple as well. However, what Google has done here, is to set a time-bomb. Once the vulnerability has been published by Google, then the bug will automatically be released 90-days after. Regardless of the impact or the effort from the affected vendor. If the issue is fixed, fine. If not, then you can add this to your list of worries.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<div>
However, as a user who is now more exposed and potentially compromised by this security issue, I feel a little less comfortable with this approach. In this case, it's not what Microsoft didn't do, its what Google has done.</div>
<div>
<br /></div>
<div>
You can read the specifics about this issue <a href="https://code.google.com/p/google-security-research/issues/detail?id=118">here</a>. </div>
</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com1tag:blogger.com,1999:blog-970736710331308901.post-71485319400884627592014-12-15T09:18:00.001+00:002014-12-15T09:18:34.880+00:00Microsoft problem patch, breaks future patching of certificates<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQcV3-kTe8nQYGMwVRGJ-Bm-8S_9W6WIX1kvXajDXKvihe1BsTbNgt2QI0cGhD-H9reAnJhTDOm0lT9FNRgNKGbE494X394ziEyg6850dCR-EnzDjEuH3i6z33lYkCL01Q9dzNAz9-bnZP/s1600/Broken+Microsoft+Update+Process+.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQcV3-kTe8nQYGMwVRGJ-Bm-8S_9W6WIX1kvXajDXKvihe1BsTbNgt2QI0cGhD-H9reAnJhTDOm0lT9FNRgNKGbE494X394ziEyg6850dCR-EnzDjEuH3i6z33lYkCL01Q9dzNAz9-bnZP/s1600/Broken+Microsoft+Update+Process+.jpg" height="239" width="320" /></a></div>
<span style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">In addition to the normal Patch Tuesday series of security of updates from Microsoft, we also saw an additional security bulletin released that addressed a vulnerability in the Windows Root certificate Program in Windows</span><br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
The initial security bulleting released in the form of a Microsoft Knowledge base article <a href="http://support.microsoft.com/kb/3004394">KB3004394</a> attempted to resolve a polling issue with the certificate update process, detailed by Microsoft here;</div>
<blockquote class="tr_bq" style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
"The Windows Root Certificate Program enables trusted root certificates to be distributed automatically in Windows. Usually, a client computer polls root certificate updates one time a week. After you apply this update, the client computer can receive urgent root certificate updates within 24 hours." </blockquote>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
To get more information on this process, you can read about the polling process in the Microsoft KB article found here <a href="http://support2.microsoft.com/kb/931125">KB931125 </a>. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Unfortunately, this update to the certificate polling process has broken the polling update process. Microsoft has now revoked the KB article <a href="http://support.microsoft.com/kb/3004394">KB3004394</a> with the following information:</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<blockquote class="tr_bq">
"this update is causing additional problem on computers that are running Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1. This includes the inability to install future updates. The KB 3004394 update does not cause any known problems on the other systems for which it is released. We recommend that you install the update on the other systems."</blockquote>
<br />
An update is now available to remove the Microsoft update KB3004394 from Windows 7 SP1-based and Windows Server 2008 R2 SP1-based computers which you can find here <a href="https://support.microsoft.com/kb/3024777">KB3024777</a>; </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
So, just to be clear. If you installed <a href="http://support.microsoft.com/kb/3004394">KB3004394</a>, you need to install <a href="https://support.microsoft.com/kb/3024777">KB3024777</a>. Or you will not receive updates to your certificates via the automated Microsoft update service.</div>
<br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
</div>
<br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<div style="margin: 0px;">
<br /></div>
</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-40677814024579532902014-12-15T07:50:00.001+00:002014-12-15T07:50:08.911+00:00Microsoft Desktop Optimization Pack 2014 R2 Released<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioR1IJK2mjdmTGBSqj03vmu4GFd-cYn660ovcgTEUXIAMM1GUu5i-BMYoF0-jXzyNSBRd0hdgAZReRPj9LtzlzD_aDyCeaBMNqgdbkCfBJ18ZaImXqKR0I8awYuSqeuVUz4myvPL4tZ7XJ/s1600/Microsoft+MDOP.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioR1IJK2mjdmTGBSqj03vmu4GFd-cYn660ovcgTEUXIAMM1GUu5i-BMYoF0-jXzyNSBRd0hdgAZReRPj9LtzlzD_aDyCeaBMNqgdbkCfBJ18ZaImXqKR0I8awYuSqeuVUz4myvPL4tZ7XJ/s1600/Microsoft+MDOP.jpg" height="86" width="320" /></a></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
Another post on the latest release of the Microsoft Desktop Optmization pack. This is R2 or the first update, or second release of the 2014 edition. You can download this pack from the Microsoft site <a href="http://www.microsoft.com/en-us/windows/enterprise/products-and-technologies/mdop/default.aspx">here</a>. </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
This incremental update includes additions to the Application Virtualization (App-V) 5.0 with Service Pack 3, and an updated User Experience Virtualization (UE-V) 2.1 tool.</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
You can find out more about the enhancements and changes to App-V SP3 in this Microsoft TechNet article found <a href="http://technet.microsoft.com/library/dn858700.aspx">here</a>. Microsoft has detailed some of the enhancements in App-V Sp2 and SP3 including;</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<ul>
<li>App-V now has a number of enhancements to application publishing/refresh and launch performance. These include new capabilities that leverage existing user profile management technology (like MDOP’s UE-V) during application publish and launch.</li>
<li>Support of parallel deployment and execution of application upgrades. Improvements to App-V, allowing you to simplify the test and execution of your upgraded virtualized applications while retaining user access to the original virtualized application running on the same device.</li>
<li>Improvements to existing capabilities including: enhancements to the package conversion engine and sequencer, improving package conversion rates; and, support for a VFS write mode sequencer setting </li>
</ul>
This release also updates Microsoft's User Experience management technology UE-V 2.1 which includes; </div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<ul>
<li>Support for Windows credentials roaming: Microsoft has added support for synchronization of Windows Credentials between devices. If enabled, this allows users to retain their Windows Credentials between their devices.</li>
<li>Backup and Restore of settings: UE now supports the assignment of UE-V to backup profiles</li>
<li>Support for external settings storage, including OneDrive for Business</li>
<li>Extensions to existing Office 2013 settings</li>
</ul>
</div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
You can read more about the latest version of Microsoft UE-V 2.1 <a href="http://technet.microsoft.com/en-us/library/dn878907.aspx">here</a></div>
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<br /></div>
<br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
</div>
<br />
<div style="font-family: Tahoma; orphans: 2; text-align: -webkit-auto; widows: 2;">
<div style="margin: 0px;">
<br /></div>
</div>
</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0tag:blogger.com,1999:blog-970736710331308901.post-73360435905241925682014-12-10T21:53:00.002+00:002014-12-10T21:53:34.752+00:00Patch Tuesday for December 2014<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://images.techhive.com/images/article/2014/12/december-patch-tuesday-100534865-primary.idge.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://images.techhive.com/images/article/2014/12/december-patch-tuesday-100534865-primary.idge.jpg" height="213" width="320" /></a></div>
I have posted my latest update on my Computer World column: Patch Tuesday Debugged.<br />
<br />
December is an interesting month with enough Microsoft updates, Adobe critical patches and Google upgrades to keep you going throughout the Christmas break.<br />
<br />
You can find the full story <a href="http://www.computerworld.com/article/2857777/critical-updates-for-flash-player-and-internet-explorer-for-december-patch-tuesday.html">here</a>:<br />
<br />
I will post another preview of Microsoft Patch Tuesday next month (January) so, please watch this space.</div>
Greg Lamberthttp://www.blogger.com/profile/07983481321915505115noreply@blogger.com0