Kurt Shintaku's Blog

“You really wanna bring a knife to gunfight?”

Not sure this is SFW.  Just lettin’ y’know.

Looking for information about the new Enterprise Mode in Internet Explorer 11?

Documentation and Other Resources

• The blog announcement is Stay up to date with Enterprise Mode for Internet Explorer 11.
• TechNet contains updated information for exploring, planning, deploying, managing, and supporting Internet Explorer. 
• A section on Enterprise Mode has been added to the Internet Explorer 11 Deployment Guide. 
• The Build session on Better App Compat with Enterprise Mode for Internet Explorer 11 is available as a technical overview.
• Public forums for discussing Enterprise Mode deployment, management, and best practices are available on TechNet Forums.

Enterprise Mode Site List Manager

• Enterprise Mode Site List Manager

Windows 7 and Windows Server 2008 R2

• KB article – Description of the security update for Internet Explorer 11 on Windows 7 and Windows Server 2008 R2: April 8, 2014
• Cumulative Security Update for Internet Explorer 11 in Windows 7 (KB2929437)
• Cumulative Security Update for Internet Explorer 11 in Windows 7 x64 Edition (KB2929437)
• Cumulative Security Update for Internet Explorer 11 in Windows Server 2008 R2 x64 Edition (KB2929437)

Windows 8.1 and Windows Server 2012 R2

• KB article – Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Update April, 2014
• Windows 8.1 Update (KB2919355)
• Windows 8.1 Update for x64-based Systems (KB2919355)
• Windows Server 2012 R2 Update (KB2919355)
• MSDN Subscribers – Full versions of Windows 8.1 Enterprise with Update

This week at San Francisco’s Moscone Center West we will host developers and press from around the world for three days of immersive content and demos during our annual Build Developer Conference. It all begins at 8:30am PDT on April 2^nd.  You can watch the keynotes, live session presentations and Channel 9 interviews from anywhere in the world.

Microsoft’s senior executives and top technical leaders will tell Microsoft’s story through keynotes, supported with some incredible Microsoft product news, partner announcements and compelling demos to show developers what they can do on the Microosft platform. We’ll go to the bare metal with over 130 deep technical sessions, all delivered by the Microsoft Engineers and Evangelists behind our products.  We’ll talk to developers of every type and show the ways Microsoft is supporting their technology investments, working across mobile and cloud and maximizing business opportunities across all platforms.

It is going to be an incredible week.

Tune in…
If you are not attending Build, our Channel 9 Community will broadcast keynotes, top sessions and interviews live throughout the event. Developers and other customers will be able to submit their questions online. Updates and announcements can be found on the Microsoft News Center. All remaining sessions will be made available on-demand within about 24 hours of presentation time.

To watch the BUILD keynotes live, visit:

• Channel 9
  http://channel9.msdn.com/

On-demand sessions will be available 24 hours after presented, here:

• BUILD on-demand playback
  http://channel9.msdn.com/Events/Build

One of the things that the HTC Windows Phone 8X had as a benefit over other Smartphones in the industry was the unmatched power routed to its audio jack for headphones and its speakerphone.  Branded with Beats Audio, there’s really been no challengers on the market with the same volume & quality of sound.

Nokia has, with the Lumia Icon, gotten bit closer.  According to Phone Arena, the Icon delivered the highest voltage of any smartphone that they’ve tested on the market.

AUDIO OUTPUT:
The “audio output voltage” (.54V) and the “loudness of the speakerphone” (79dB) on the Nokia Lumia Icon is the best of ANY SMARTPHONE ON THE MARKET.  This includes the Samsung Galaxy S4 and all other Lumias, including the 1520.

The benchmark that I’ve personally used has been Imagine Dragons’ “Radioactive” which is a song with incredibly low bass requiring a strongly backed audio port to sustain the level of bass necessary for the right clarity & minimal distortion.  Previous Nokia Lumias designs didn’t deliver the level of power required to play the song back without distortion.  (much less Android & iPhones)

The Nokia Lumia Icon is a dramatic improvement over existing smartphones for audio quality.  For more information on the tests & the other phones compared, visit the following URL:

• PHONEARENA: Nokia Lumia Icon Benchmarks
  http://www.phonearena.com/phones/Nokia-Lumia-Icon_id8160/benchmarks

Today, Microsoft announced a new suite of technologies called the Enterprise Mobility Suite (EMS) that solves 3 core challenges for mobile computing users in a single, extremely affordable subscription:

• Identity & Access Management
• Mobile Device Management
• Data Protection

The technologies that are subscribed to by EMS are:

• Azure Active Directory Premium
• Windows Intune
• Azure Active Directory Rights Management Services

Enterprise Mobility Suite is a subscription purchased for $7.50/per-user/per-month and will be first available on May 1st.  This is 30% savings over the aggregate costs of all 3 services.

• Download the datasheet:
  http://download.microsoft.com/download/6/B/D/6BDADC01-1B7A-4420-9F1A-C1702920607B/enterprise_mobility_suite_datasheet.pdf
• Visit the product site here:
  http://www.microsoft.com/en-us/server-cloud/products/enterprise-mobility-suite/default.aspx#fbid=OUCCNZpf_81
• Read the announcement here:
  http://blogs.technet.com/b/in_the_cloud/archive/2014/03/27/enterprise-mobility-for-every-business-and-every-device.aspx

Have you ever noticed that if you have the Preview Pane turned on within Windows Explorer that Adobe Acrobat’s .PDF preview handler for Windows Explorer locks the selected file, preventing you from deleting it? 

This is annoying.  And Adobe’s had this problem for more than 6 years now and never fixed it.

Well, it turns out that Tim Heuer solved the problem at no cost to you.  It involves installing a new Preview Handler from FoxIt, displacing the one used in Windows Explorer from Adobe.  It allows you to continue to use Adobe Acrobat normally as it’s installed but when you are viewing a .PDF file within Windows Explorer through the Preview Pane, it uses FoxIt’s preview handler which doesn’t suffer from the same “locked file” problem as Adobe’s.  As a result, you can preview the file in Explorer… and delete it quickly if the file is nothing you want.  Works on Windows 7 & 8!

(Of course you might just simply want to wholesale switch to using FoxIt’s PDF tools instead of Adobe Acrobat.  FoxIt’s tools are lighter weight, faster, and cheaper.)

• Foxit PDF Preview Handler
  http://timheuer.com/blog/archive/2008/05/09/foxit-pdf-preview-handler.aspx

Download the newly released Office for iPad.  Read, view and present documents, spreadsheets and presentations for free.  To get the full editing & creation experience, you can sign up for a free 30 day Office 365 trial at www.office.com/try. During your trial period, you can use Office across your PC, Mac and iPad.

• DOWNLOAD: Office for iPad
  http://www.appstore.com/microsoftoffice

The announcement & what the press has to say about it:

• Microsoft Office for iPad sets the gold standard for tablet productivity
  By Ed Bott for The Ed Bott Report | March 27, 2014 — 17:45 GMT (10:45 PDT)   
  It took four years, but Microsoft has finally released full-featured Office apps for the iPad. As expected, the new Word, Excel, and PowerPoint apps are free to install but require an Office 365 subscription to unlock the full set of features. Here’s what you can expect.
  http://www.zdnet.com/microsoft-office-for-ipad-sets-the-gold-standard-for-tablet-productivity-7000027797/
• A cloud for everyone, on every device
  27 Mar 2014 10:40 AM   
  The following post is from Satya Nadella, Chief Executive Officer of Microsoft.
  http://blogs.technet.com/b/microsoft_blog/archive/2014/03/27/a-cloud-for-everyone-on-every-device.aspx
• Announcing the Office you love, now on the iPad
  by John Case, on March 27, 2014
  http://blogs.office.com/2014/03/27/announcing-the-office-you-love-now-on-the-ipad/

UPDATE 3/20/14:
It turns out that Tim Rains from Microsoft Trustworthy Computing did actually address this about 6 months ago on the Microsoft Security Blog but apparently it went under the radar for most.

• The Risk of Running Windows XP After Support Ends April 2014
  http://blogs.technet.com/b/security/archive/
  2013/08/15/the-risk-of-running-windows-xp-after-support-ends.aspx

Paul Brennan from WhySettle, an IT network management company, wrote a straight to the point post about this exact matter as well:

• Reverse engineering patches exposes security gaps
  http://www.whysettle.co.uk/2014/01/reverse-engineering-patches-exposes-security-gaps

————–
ORIGINAL POST:

These are my thoughts on why Windows XP users will dangerously exposed after April 8th as I understand it.

SUMMARY:

1. After April 8th, 2014, Microsoft will publish security patches for Vista/Win7/Win8 that are not patched on Windows XP.
2. Malware writers reverse engineer these post-April 8th Windows Vista/7/8 patches to learn how to take advantage of the vulnerabilities they fix as they’re made available.
3. Windows XP, as a result, will be exposed to zero-day threats after every monthly Microsoft security patch Tuesday at possibly an increasing speed.

DETAIL:
I’ve read a lot of people that don’t believe that the end of support of Windows XP is a concern.  I really think this is foolish & here’s why:  There’s a number of things that people don’t often understand or take into consideration when they discount the “End of Support for Windows XP”:

• Microsoft can’t/doesn’t fix every vulnerability. 
  Microsoft receives information about lots & lots of vulnerabilities from both internal & external folks.  Most people know that Microsoft prioritizes the resources it has to focus on fixing vulnerabilities based on the threat they poses.  Of the worst potential threats, if the vulnerability is either actively being taken advantage of (“in the wild”) or about to release in the form of malware as an imminent threat, it gets the highest priority.
  … this leaves vulnerabilities on the table to be worked on next month when resources are freed up.
• It takes much longer to create a patch for Windows XP than it does for Windows Vista/7/8.
  The reason not every vulnerability is fixed is that it takes more resources & a longer amount of time to write patches for Windows XP than any current Windows OS – up to 6x as much.  The reason for this is Windows XP’s source code was designed/written during another programming era at Microsoft & is much harder to debug & test than Windows Vista & beyond.  One of the most significant fundamental improvements of Windows Vista was that it was much easier to understand the cascading impact of fixes/patches on the codebase than in prior releases.  The result is that patching Vista/7/8 is done in a fraction of the time of XP.
• Malware writers use security patches to write malware.
  This isn’t news to those in the security community but for non-techfolk, malware writers don’t need to discover new vulnerabilities:  They just simply wait until Microsoft releases security patches then reverse engineers them – i.e. picks them apart – to determine what flaw they patch, where in the OS the vulnerabilities are, then write malware to take advantage of unpatched systems.  This “piggybacking” technique was used, for example, in two of the largest, most notorious malware threats to hit the Internet – “SQL Slammer” and “MSBlast” – and caused hundreds of millions of dollars in damage.
• Windows Vista/7/8 patch releases should increase once no longer tied to Windows XP’s patch availability.
  Today’s vulnerability patches are uniformly released on a monthly basis across all supported versions of Windows on “Patch Tuesday”.  This is because the majority of Windows vulnerabilities often apply to other versions as well.  For example: If a vulnerability for Windows 7 was quickly patched & released but not Windows XP or Windows Vista, it would be easy for criminals to reverse engineer the Windows 7 patch, then write malware targeting the older OS’s for the same vulnerability.
  What this also means however, is that Windows Vista/7/8 patches are “held back” until Windows XP has the same patches written for it.  Remember what I said about Windows XP taking a ‘really long time’ to write patches for?  Yup.  Windows Vista/7/8 security is thus, effectively held back because of Windows XP.  So once Windows XP patch support ends, all other versions of Windows will start to have patches released for them, at a much quicker rate.

A few conclusions:

1. There’s a lot of vulnerabilities out there that remain unpatched.
2. After Windows XP support ends, those vulnerabilities will be patched on Windows Vista/7/8 at an increasingly rapid pace… but not for Windows XP.
3. Malware will be written targeting Windows XP computers, based on the release of these patches for newer versions of Windows.

Don’t be left vulnerable – Upgrade from Windows XP to Windows 7 or 8 today!  Visit http://www.windowsxp.com for more information.

Learn to make amazing Windows Phone apps at the upcoming Nokia DVLUP Day in San Diego and win big prizes just for participating. Join Nokia Developer Ambassadors as they provide hands-on Windows Phone development training in a dynamic and fun event. Whether you’re a seasoned developer or barely know how to code, you will walk away with the ability to write a mobile app.

With full sample source code and step-by-step instructions, you will learn how to make an app or game from scratch, or learn new techniques to enhance your current apps & games. No matter what you want to build – an app or a game – or what your programming skill level is, there are four individual tracks to choose from, which means there is something for everyone.

DVLUP Day is a unique community event that combines presentations by Windows Phone experts along with a hands-on workshop to help attendees get started on their apps. BRING YOUR LAPTOP! Work with our experts, get started on your app or game, publish it within 3 weeks after the event and get a free Windows Phone 8 device!

DVLUP Day was a huge hit with developers in 2013, with stops in Boston, Tampa, Sunnyvale and Vancouver. Just for showing up and learning, you’ll get hooked up with some cool DVLUP swag. This is going to be an awesome day in San Diego and we look forward to seeing you all there!

To pre-register and be notified once formal registration opens, please send an email to ext-becky.andrews@nokia.com.

• DATE/TIME:
  Apr 26, 2014 8AM – 8PM
• WEB SITE:
  http://www.dvlup.com/Events/230#

Multi-Factor Authentication for Office 365 Technical Support Webcast | March 11, 2014 (Webcast)     

What : Multi-Factor Authentication for Office 365 TECHNICAL SUPPORT WEBCAST, will talk about and demo Multi-Factor Authentication for Office 365 that has been recently released and covering how to set it up, how to use it, and how to resolve some of the common issues you might see

When : March 11, 2014 @ 9:00 AM (PST), 1 hour presentation

Where : Add this meeting to your calendar by clicking the above REGISTER NOW button, or use the iCalendar link attached, then click on the Lync meeting link in your calendar at the scheduled time to join the call

Who : Bill Fiddes is the Support Technical Readiness Program Manager for Windows Azure Active Directory and have been heavily involved in this release as well as writing support documentation

Office 365 Support Webcasts are a critical program for relieving support issues and encouraging foundation technical readiness, and are free of charge for both an internal and external audience. It is a great opportunity to have a conversation with Microsoft employees and get your questions answered. If you have questions regarding this webcast, please contact the IGNITE TEAM.

For more information on future Office Technical Webcasts visit the Ignite website.