Microsoft

Windows Live Essentials 2011 is now out of beta. Download links in bottom of page. This package contain most essential programs needed for your digital life: Windows Live Essentials 2011 Advanced made easy Do more with Windows on your PC with free programs from Microsoft for photos, movies, instant messaging, email, social networking, and more. Get it all in one simple download. ...

Microsoft announced that it has collaborated with WordPress and now onwards it will be the default blogging platform for Windows Live users. This means Microsoft is killing it’s own blogging platform and suggesting users to go for better platform called ‘WordPress’. In TechCrunch Disrupt conference, Windows Live Director ‘Dharmesh Mehta’ announced that all existing Windows Live Spaces users will be migrated over to an account at WordPress.com. ...

A whole bunch of Windows applications is vulnerable to a so-called binary-planting attack which allows for remote code execution. Microsoft released a security advisory about this issue which isn’t easy to fix properly. This issue arises due to the (defined and well documented) behavior of Windows when loading libraries by an application. A .dll to load gets searched in a certain standard path list. This list also includes the current working directory, which is the place a document gets opened from for example. When a file with the name of a DLL which the corresponding application needs to load is placed into the working directory, it will get loaded – this can be a malicious DLL though. ...

Microsoft has posted an advisory that explains the “DLL preloading attacks” and offers a work-around tool that “allows customers to disable the loading of libraries from remote network or WebDAV shares. This tool can be configured to disallow insecure loading on a per-application or a global system basis.” When an application loads a .dll file, but doesn’t name a full path name,Windows searches a pre-defined set of directories for it. Exploiting this, an intruder could social engineer a victim into loading a malicious .dll from a USB drive or from a network and execute arbitrary code. ...

Microsoft’s web browser Internet Explorer was launched 15 years ago. While it had its ups and downs over the years – version 6 was plagued by countless security issues, which made it one of the most hated browsers around – it’s still the most popular browser in the world, with the last couple of versions improving dramatically on their troubled predecessor. ...

Microsoft discontinued support for Windows XP Service Pack 2 on July 13th, and that means there is no SP2 update for the recent LNK shortcut vulnerability (KB2286198). If you review the comments from this SANS Diary post, you’ll see that there was some initial confusion regarding SP2 support, due to a typo in Microsoft’s Security Bulletin (MS10-046). The bulletin is now corrected. However, even today, the download for Windows XP still includes SP2 in the file properties. ...

If you’ve been squeezing the last bit of value out of that installation of Windows XP Service Pack 2 or are continuing to run it because of proprietary software that you’re squeezing the last bit of value out of, well, you only have two more months of squeezing. Microsoft will end support for Service Pack 2 on July 13. Now if you can somehow upgrade to Service Pack 3, you can forget about the problem until Microsoft’s Extended Support for XP ends April 8, 2014, assuming the hard drive in that PC you bought in 2001 lasts that long. Meanwhile, I wouldn’t slack off on the backups. ...

Yesterday, Yahoo! Inc. announced it would be acquiring Associated Content Inc., and the transaction would cost the search company an estimated $100 million. Associated Content calls itself the “People’s Media Company,” and is a media outlet consisting of more than 380,000 freelancers publishing news, photos, video, and other content on subjects chosen by the site. “Combining our world-class editorial team with Associated Content’s makes this a game-changer,” said Carol Bartz, CEO, Yahoo! Inc. “Together, we’ll create more content around what we know our users care about, and open up new and creative avenues for advertisers to engage with consumers across our network. These are important aspects of building engaging consumer experiences on Yahoo!, and one of the reasons why we’re one of the most visited destinations online.” ...

I’m constantly reminded how slow email actually is. On the homescreen of one of my smartphones, I’ve got the official Twitter widget and the official Facebook widget which are pretty much constantly refreshing. Likewise, my email inbox is set to refresh just as frequently. Every day, when someone sends me a message in Facebook or replies to a Tweet, the widgets tell me first, and then five minutes later I get the email alerting me again. Because of this, I have an email account just for social network updates that is overflowing with unread messages. ...

Three words sum up Microsoft’s patent infringement suit against Salesforce.com: Competition by litigation. Microsoft knows plenty about competition by litigation, having been its victim through major antitrust cases on two continents. It’s simply shameful action from a company which executies rightly wagged accusing fingers at litigating competitors over the years. Microsoft’s “do unto them like they did unto us” approach cheapens the company. The proof is in the patents, which are hugely broad scope. ...