Tag: Security

Security Process that Bulletproofed Windows 7

February 03, 2010 by Jason

Microsoft is making it easy for third-party developers to bulletproof their software using the same security assurance process that the company applied when building products such as Windows 7 and Windows Vista. In this sense, the software giant continues on a path it set on a few years back when it started sharing resources and guides associated with the Microsoft Security Development Lifecycle with the developer community. Devs looking to secure their software leveraging the same range of security activities used by Microsoft in developing solutions starting with Vista can take advantage of such resources as the Simplified Implementation of the Microsoft SDL white paper, which can be grabbed from the Microsoft Download Center.

“Because Microsoft created the SDL, some people think they have to have Microsoft-like resources to be able to implement it,” revealed David Ladd, principal security program manager of Microsoft’s SDL Team. “It’s true that we do invest a lot in the SDL, but that’s largely because we have so many products that go through it. This paper sets out how any development team — even teams of eight to 10 developers — can implement the SDL.” Read More»

Firefox for Maemo Goes Final

January 31, 2010 by Jason

Mobile phone users that own a Maemo-based handset from Nokia have now yet another reason to rejoice, as the final version of Firefox for their handsets has just emerged on the web. Following a long line of beta and release candidate flavors, now Firefox for Maemo 1.0 is here for them, providing an experience similar in many respects to the one that the desktop iteration of Firefox can deliver.

One of the main feature of the web browser is that it comes around with support for add-ons, something that no other solution offers to users. The add-ons enable any Maemo-based device owner to customize the browser via the over 40 add-ons that are already available for download on Mozilla’s website. Among them, we can count popular solutions like AdBlock Plus, URL Fixer, TwitterBar, language translators, or geo guides. The Add-ons Manager allows for an easy installation of such solutions, and Mozilla recommends for the YouTube Enabler add-on be installed.

The features that Firefox for mobile comes with to Maemo-based phones should be already familiar in a way to those who use the browser on their desktop computers:

Read More»

Vista SP2 Bluetooth Pairing Update Released

January 28, 2010 by Jason

Microsoft has made available for download a reliability refresh designed to resolve issues affecting Windows Vista, including platforms upgraded to Service Pack 2, in Bluetooth pairing scenarios. According to the Redmond company, Bluetooth pairing issues affect only Windows Vista, and not customers running Windows XP or the latest version of the Windows client, Windows 7. Customers can now grab an update from the Microsoft Download Center, set up to resolve reliability issues associated with Windows Portable Devices (WPD).

“You try to pair a Bluetooth device with a computer that is running Windows Vista. When you initiate Bluetooth pairing from the Bluetooth device, the Bluetooth services on the Bluetooth device are not enabled automatically. You have to manually enable the services,” the software giant explained. “This issue does not occur when you initiate Bluetooth pairing from the computer. In this situation, the Bluetooth device’s services are turned on automatically.”

Microsoft is offering the Vista SP2 Bluetooth pairing reliability update for both the 32-bit (x86) and the 64-bit (x64) versions of the operating system. “To apply this update, you must have hotfix 971514 installed on a computer that is running Windows Vista Service Pack 2,” the company informed. Read More»

Windows 7 RTM Eats Desktop Shortcuts

January 12, 2010 by Jason

Windows 7 RTM can eat up some of the desktop shortcuts created by end users, Microsoft explained. Customers running the latest iteration of the Windows client have reported that in certain scenarios shortcuts that they placed on the desktop disappeared altogether. According to the Redmond company, this is expected, by design, behavior in Windows 7. At fault is the System Maintenance troubleshooter that will delete all shortcuts from the desktop as long as they are considered broken.

“The System Maintenance troubleshooter performs a weekly maintenance of the operating system. The System Maintenance troubleshooter either fixes problems automatically or reports problems through Action Center. When there are more than four broken shortcuts on the desktop, the System Maintenance troubleshooter automatically removes all broken shortcuts from the desktop,” Microsoft stated.

According to the software giant, the System Maintenance troubleshooter has a certain limit that triggers it to delete broken shortcuts. Microsoft informs that keeping the number of broken shortcuts on the desktop to no more than four ensures that they won’t be touched. But place five broken shortcuts on the Windows 7 desktop and they will be deleted. Read More»

Windows 7 UAC Setting Access Cut

December 21, 2009 by Jason

A simple change made into Windows 7’s registry can cause the operating system to cut access for end users to the settings of the User Account Control feature. According to the Redmond company, the Office 97 has been identified as the source of the problem. Microsoft explains that the issue only occurs in scenarios in which end users attempt to install Office 97. It is the very installation of Office 97 that is responsible for the registry change which cuts off access to the settings of UAC in Windows 7.

“In the Windows 7 “System and Security” control panel category, the Action Center lets you change User Account Control (UAC) settings. In the User Account Control Settings dialog box, you move the slide bar control for notifications, and then you click the OK button. In this scenario, the dialog box does not close, and no change is made. When the mouse pointer is positioned on the OK button, and you press ENTER, the dialog box still does not close, and no change is made,” Microsoft revealed.

Microsoft doesn’t offer a hotfix or an update designed to resolve this specific issue as of yet. However, the Redmond company does have a manual fix in place. Users will be required to essentially mend the problems created with the installation of Office 97 on top of Windows 7. Essentially, users need to put together a file that will modify the Windows 7 registry. For this, they will need nothing more than Notepad. They will need to create a file with the name UAC.reg and place it on the desktop. Next, they will have to copy and paste the following text in the UAC.reg file, save it and close the text editor. Read More»

Microsoft Reacts to Windows 7 0-Day DoS Vulnerability

November 14, 2009 by Jason

Microsoft has reacted rapidly to public reports of a zero-day denial-of-service vulnerability in its latest iterations of the Windows client and server operating systems, and is providing customers with guidance on how to block potential attempts to take advantage of the security flaw. In this regard, the Redmond company has underlined that no exploits or attacks have been detected for the denial-of-service (DoS) hole in the Microsoft Server Message Block (SMB) Protocol impacting both SMBv1 and SMBv2 in Windows 7 and Windows Server 2008 R2. However, Proof of Concept (PoC) code was irresponsibly published in the wild, making it extremely easy for attackers to build exploits putting at risk users of Windows 7.

“Microsoft is aware of public, detailed exploit code that would cause a system to stop functioning or become unreliable. If exploited, this DoS vulnerability would not allow an attacker to take control of, or install malware on, the customer’s system but could cause the affected system to stop responding until manually restarted. It is important to note that the default firewall settings on Windows 7 will help block attempts to exploit this issue,” Dave Forstrom, group manager, public relations, Microsoft Trustworthy Computing, revealed. “The company is not aware of attacks to exploit the reported vulnerability at this time.” Read More»

Vista SP2 and XP SP3 Patch Security Release ISO Image

November 14, 2009 by Jason

A DVD5 ISO image file containing all the security bulletins made available on November 10th, 2009 for all supported Windows platforms, is now up for grabs via the Microsoft Download Center. As is the case every month, the Redmond company is accompanying the security patched it offers through Windows Update, Automatic Updates, and Microsoft Update with standalone downloads as well as with a package of updates. In this regard, the November 2009 Security Release ISO Image has become available for download earlier this week.

There are no less than six security updates packaged into the ISO image, four of which are now served through WU, AU, and MU to Windows users around the world. MS09-063, MS09-064, MS09-065, MS09-066 are all designed to patch security vulnerabilities in Windows server and client platforms, including versions such as Windows Vista SP2 and Windows XP SP3.

“This DVD5 ISO image file contains the security updates for Windows released on Windows Update on November 10th, 2009. The image does not contain security updates for other Microsoft products. This DVD5 ISO image is intended for administrators that need to download multiple individual language versions of each security update and that do not use an automated solution such as Windows Server Update Services (WSUS). You can use this ISO image to download multiple updates in all languages at the same time,” Microsoft explained. Read More»

Windows 7 RTM Patches ISO Image

October 15, 2009 by Jason

It has by no means been a slow month as far as Microsoft security bulletins go, with no less than 13 patch packages being released by the company for a range of products. In total, the Redmond company patched no less than 34 security holes across Windows, Internet Explorer, Silverlight, Microsoft Office, Developer Tools, Forefront and SQL Server, revealed Christopher Budd, security response communications lead, Microsoft. October 2009 is also the first month in the software giant’s security patch cycle when updates were made available for the gold version of Windows 7. October 2009 marks yet another first, namely the first time that patches for Windows 7 RTM have been included into a company Security Release ISO Image.

At the bottom of this article you’ll be able to find a download link for the October 2009 Security Release ISO Image. The ISO package brings to the table all of the security updates made available for supported Windows operating systems, including Windows 7, Vista, Windows XP, Windows Server 2008 R2, etc. Read More»

Microsoft Patches 34 Security Vulnerabilities

October 15, 2009 by Jason

On October 13th, 2009, Microsoft started serving to Windows users patches for no less than 34 vulnerabilities, releasing the most security bulletins in the company’s history. The 13 security bulletins made available are designed to offer fixes for a range of security issues affecting Windows, Internet Explorer, Silverlight, Microsoft Office, Developer Tools, Forefront and SQL Server. Microsoft underlined that, despite the large number of patches, all security updates had been thoroughly tested, and only received the green light for broad release once they met specific quality standards.

Out of the total 13 security bulletins released, eight have received Microsoft’s maximum severity rating, namely Critical, indicating that they are designed to patch severe vulnerabilities that could allow for remote code execution in the eventuality of a successful attack. The remaining six patch packages have all been deemed Important, a less severe rating. However, customers should apply the patches offered by the Redmond company immediately. The simplest way to access the security updates is through Windows Update. Users with Automatic Updates enabled will have all patches automatically downloaded to their machines.

Microsoft revealed that no less than seven security bulletins with a maximum severity rating of Critical out of the total eight also had an exploitability index of 1. The highest possible exploitability index: 1 is indicative of the fact that Microsoft considers the possibility of exploit code becoming available in the wild for the seven flaws extremely likely, perhaps even within the first 30 days since the patches were released. This just in case you needed additional incentive to deploy the security updates. Read More»

Make Windows 7 faster – Part 3

October 12, 2009 by Jason

Before that the first and second part we continue to publish series of articles.

41. Go Live. Many applications installed on past versions of Windows have been removed. Starting with Windows 7, these applications (and a few others not typically installed with Windows) have been moved into the Live Essentials downloadable applications, at download.live.com. These applications include Messenger, Mail, Writer, Photo Gallery, Movie Maker, Family Safety and a few others.

42. Remove Apps. Although some applications have been moved off of Windows to become an optional download, other apps, such as IE8, Media Player, Media Center and DVD Maker are still included. In times past, especially when it came to IE, the applications were tied into the OS. However, in Windows 7 you can easily remove them if desired. Head to the Program and Features applet in Control Panel and select the “Turn Windows features on or off” link in the top left-hand corner. Then you can select the checkbox of the features you want to lose or add for your system. Read More»