Kurt Shintaku's Blog

BlueHat v12 educates Microsoft engineers and executives on current and emerging security threats in an effort to help address security issues in Microsoft products and services and protect customers.

Why Attend

The BlueHat conference serves as a great opportunity for invited security researchers to connect with Microsoft engineers who are passionate about security, furthering a bidirectional exchange of ideas at the event. Past events have included topics such as

• Threat Landscape
• Web application security
• Mobile/Wireless devices
• Cloud and Virtualization
• Penetration testing and fuzzing
• Architecture flaws

• Network design and compromise
• Reverse engineering
• Exploit development
• Intrusion prevention
• Cryptography
• Lions and tigers and bears

Agenda Overview

Thursday, December 13, 2012

• 9:00-12:30pm Anti-Fraud & Abuse
• 12:30-1:30pm Security Outreach at Microsoft
• 1:30-5:15pm Cloud & Online Services

Friday, December 14, 2012

• 9:45-12:30pm Vices & Devices
• 12:30-1:30pm OSSC Lunch and Learn
• 1:30- 5:15pm Hot Topics

Date/Location:
BlueHat v12 will take place December 13-14, 2012 at the Microsoft Conference Center in Redmond, WA.

More information:
http://technet.microsoft.com/en-us/security/cc261637.aspx

Yes… yes, I DO know this guy.  I’ll bet you know this dude, too.  He lives in his parent’s basement & is frequently known to use the phrase “M$” and “Windoze”.

FYI:  Just released to the press this morning:

Read more at:
http://blogs.technet.com/b/microsoft_blog/archive/2012/11/29/next-up-for-the-surface-family-surface-with-windows-8-pro-pricing.aspx

The final edition of “Introducing Windows 8: An Overview for IT Professionals” is available now in 3 formats:  PDF, MOBI (Kindle), and ePub.

Introducing Windows 8: An Overview for IT Professionals (168 pgs):

• PDF ebook (8.44MB)
  http://go.microsoft.com/FWLink/?Linkid=268295
• Mobi format for Kindle (15.1MB)
  http://go.microsoft.com/FWLink/?Linkid=268298
• ePub format (8.98MB)
  http://go.microsoft.com/FWLink/?Linkid=268297

There are 11 chapters in this 8.44MB eBook from Microsoft Press.  Get a headstart evaluating Window 8—guided by a Windows expert who’s worked extensively with the software since the preview releases. Based on final, release-to-manufacturing (RTM) software, this book introduces new features and capabilities, with scenario-based insights demonstrating how to plan for, implement, and maintain Windows 8 in an enterprise environment. Get the high-level information you need to begin preparing your deployment now.

Topics include:

• Performance, reliability, and security features
• Deployment options
• Windows Assessment and Deployment Kit
• Windows PowerShell™ 3.0 and Group Policy
• Managing and sideloading apps
• Internet Explorer® 10
• Virtualization, Client Hyper-V, and Microsoft Desktop Optimization Pack
• Recovery features

Does this situation sound familiar on your Windows 8 PC?

You try to start up a Windows 8 ‘Modern’ app and after a short pause, the app closes and leaves you in the START menu… or the desktop?  And sometimes the desktop looks like it’s restarting the EXPLORER.EXE process and is redisplaying the taskbar, the system tray, etc.

I’ve heard of this issue popping up on a few PCs.   This is often the graphics driver you’re using.  Two things to consider:

1. OLD GRAPHICS DRIVER?
   This may be an issue with your PC’s installed display driver.  The recent Intel integrated graphics driver update that was published on Windows Update as an optional update, for example, will fix this problem for many people that depend on the processor’s integrated GPU.  If you go to Desktop –> Control Panel –> Windows Update and look for optional updates you may see a graphics driver update that may fix this issue.
2. DISCRETE GPU ONBOARD?
   Alternatively, on systems that have both “integrated graphics” (such as the Intel HD 3000 Integrated Graphics) as well as a discrete GPU onboard, such as an AMD Radeon 6630M chip, this can get hairy because it could be caused by issues with the proprietary graphics display driver (which often switches between the integrated graphics & the discrete graphics chip to minimize power consumption. 
1. Check with your OEM for a driver update.  This is your best bet to a resolution.
2. As a backup plan, if you can’t get an updated graphics driver from the OEM/manufacturer, consider disabling one of the GPUs in the BIOS.  This has been known to work amongst folks I know.

EXAMPLE:  MY SONY VAIO S – SWITCHING INTEL/RADEON GPU
One example of this is I own a Sony VAIO S (Model VPCSA25GX) and it has a switching graphics driver that leverages the onboard Intel Integration Graphics in the Sandy Bridge chipset for power efficiency when I’m using Word, Excel, blahblahblah.  But when serious graphics are required for certain things like the START page or Starcraft 2, etc. the discrete AMD Radeon HD 6630M GPU takes over.

The originally published Windows 8 driver on Sony’s web site which I wrote about HERE, was frankly buggy and resulted in Explorer crashes and Modern App crashes all the time.  Just a couple weeks ago, Sony published an updated driver on their site, a whopping 321MB file, that fixed my issues.

For those of you with a Sony Vaio S, here’s the link to the driver:

• DOWNLOAD: AMD Radeon™ HD 6470M / 6630M and Intel® HD Graphics Update for Windows® 8 64-bit v9.1.0.0
  (Published 11/1/12 – 321.66MB)
  http://esupport.sony.com/US/p/swu-download.pl?mdl=VPCSA25GX&upd_id=8128&os_group_id=24 

Wanna see an 18min video demonstrating the key features of Windows Phone 8 care of Joe Belfiore?

As of 11/14/2012, the following “current generation” or “previous generation” products are available for training via Software Assurance eLearning.

• Course Collection 6338 : Updating your Windows Server 2003 Design Skills to Windows Server 2008
• Course 6170 : Designing Network Access Protection in Windows Server 2008
• Course 6171 : Designing Operating System Deployment and Maintenance in Windows Server 2008
• Course 6173 : Designing High Availability in Windows Server 2008
• Course 6179 : Designing AD DS Security in Windows Server 2008
• Course 6182 : Designing web farms on Microsoft Internet Information Services 7.0
• Course 6183 : Designing virtualization on Windows Server 2008
• Course 6184 : Designing Terminal Services on Windows Server 2008
• Course 6185 : Designing Security and Maintenance on Microsft Internet Information Services 7.0
• Course 6226 : Designing Identity and Access Management in Windows Server 2008
• Course 6227 : Designing Public Key Infrastructure in Windows Server 2008
• Course Collection 6435 : Designing Network Infrastructure in Windows Server 2008
• Course 6167 : Designing Network Infrastructure Connectivity in Windows Server 2008
• Course 6168 : Designing Name Resolution in Windows Server 2008
• Course 6169 : Designing Network Access in Windows Server 2008
• Course 6170 : Designing Network Access Protection in Windows Server 2008
• Course 6171 : Designing Operating System Deployment and Maintenance in Windows Server 2008
• Course 6172 : Designing Shared Resources in Windows Server 2008
• Course 6173 : Designing High Availability in Windows Server 2008
• Course Collection 6436 : Designing Active Directory Infrastructure and Services in Windows Server 2008
• Course 6174 : Designing AD DS Forest Infrastructure in Windows Server 2008
• Course 6175 : Designing AD DS Domain Infrastructure in Windows Server 2008
• Course 6176 : Designing AD DS Sites and Replication in Windows Server 2008
• Course 6177 : Designing AD DS Domain Administrative Structures in Windows Server 2008
• Course 6178 : Designing AD DS Group Policy in Windows Server 2008
• Course 6179 : Designing AD DS Security in Windows Server 2008
• Course 6180 : Designing AD DS Availability and Disaster Recovery in Windows Server 2008
• Course 6181 : Designing AD DS Migrations in Windows Server 2008
• Course 6226 : Designing Identity and Access Management in Windows Server 2008
• Course 6227 : Designing Public Key Infrastructure in Windows Server 2008
• Course Collection 6437 : Designing a Windows Server 2008 Applications Infrastructure
• Course 6182 : Designing web farms on Microsoft Internet Information Services 7.0
• Course 6183 : Designing virtualization on Windows Server 2008
• Course 6184 : Designing Terminal Services on Windows Server 2008
• Course 6185 : Designing Security and Maintenance on Microsft Internet Information Services 7.0
• Course 6186 : Designing Windows Media Services and UDDI on Windows Server 2008
• Course Collection 10271 : MCITP (Exam 70-647): Windows Server 2008 Enterprise Administrator
• Course 6168 : Designing Name Resolution in Windows Server 2008
• Course 6169 : Designing Network Access in Windows Server 2008
• Course 6171 : Designing Operating System Deployment and Maintenance in Windows Server 2008
• Course 6175 : Designing AD DS Domain Infrastructure in Windows Server 2008
• Course 6177 : Designing AD DS Domain Administrative Structures in Windows Server 2008
• Course 6178 : Designing AD DS Group Policy in Windows Server 2008
• Course 6180 : Designing AD DS Availability and Disaster Recovery in Windows Server 2008
• Course 6181 : Designing AD DS Migrations in Windows Server 2008
• Course 6183 : Designing virtualization on Windows Server 2008
• Course 6184 : Designing Terminal Services on Windows Server 2008
• Course 6185 : Designing Security and Maintenance on Microsft Internet Information Services 7.0
• Course 6227 : Designing Public Key Infrastructure in Windows Server 2008
• Course Collection 10274 : MCITP (Exam 70-646): Windows Server 2008, Server Administrator
• Course 6178 : Designing AD DS Group Policy in Windows Server 2008
• Course Collection 10329 : MCTS (Exam 70-431): Microsoft SQL Server 2005 – Implementation and Maintenance
• Course 4326 : An Introduction to Transact-SQL in Microsoft SQL Server 2008
• Course 4327 : Querying and Filtering Data in Microsoft SQL Server 2008
• Course Collection 10347 : Skills Trainings in SharePoint® 2010 for End Users
• Course 10373 : Making Decisions using Business Intelligence in Microsoft® SharePoint® 2010
• Course 10374 : Managing Content and Processes in Microsoft® SharePoint®2010
• Course 10375 : Managing Content, Metadata & Information Policies in Microsoft® SharePoint® 2010
• Course 10376 : Finding Content and People using Microsoft® SharePoint® 2010 Enterprise Search
• Course 10377 : Connecting to People and Resources with My Sites in Microsoft® SharePoint® 2010
• Course Collection 10348 : Skills Training in Microsoft® Project 2010
• Course 10378 : Setting Up Projects in Microsoft® Project 2010
• Course 10379 : Building a Project Schedule in Microsoft® Project 2010
• Course 10380 : Tracking and Managing Projects in Microsoft® Project 2010
• Course 10381 : Customizing and Sharing Projects in Microsoft® Project 2010
• Course Collection 10349 : Skills Training in Microsoft® Access® 2010
• Course 10382 : Beginner Skills in Microsoft® Access® 2010
• Course 10383 : Intermediate Skills in Microsoft® Access® 2010
• Course 10384 : Advanced Skills in Microsoft® Access® 2010
• Course Collection 10350 : Skills Training in Microsoft® Outlook® 2010
• Course 10293 : Beginner Skills in Microsoft® Outlook® 2010
• Course 10385 : Advanced Skills in Microsoft® Outlook® 2010
• Course 10524 : Intermediate Skills in Microsoft Outlook 2010
• Course Collection 10351 : Skills Training in Microsoft® PowerPoint® 2010
• Course 10295 : Beginner Skills in Microsoft® PowerPoint® 2010
• Course 10386 : Advanced Skills in Microsoft® PowerPoint® 2010
• Course 10523 : Intermediate Skills in Microsoft® PowerPoint® 2010
• Course Collection 10352 : Skills Training in Microsoft® SharePoint® Designer 2010
• Course 10387 : Creating and Customizing Websites using Microsoft® SharePoint® Designer 2010
• Course 10388 : Managing and Controlling Documents Using Microsoft® SharePoint® Designer 2010
• Course 10389 : Customizing Workflow Processes Using Microsoft® SharePoint® Designer 2010
• Course 10390 : Working with Line of Business Data using Microsoft® SharePoint® Designer 2010
• Course Collection 10357 : Skills Training in Microsoft® Word 2010
• Course 10294 : Beginner Skills in Microsoft® Word 2010
• Course 10391 : Intermediate Skills in Microsoft® Word 2010
• Course 10392 : Advanced Skills in Microsoft® Word 2010
• Course Collection 10358 : Skills Training in Microsoft® Excel® 2010
• Course 10296 : Beginner Skills in Microsoft® Excel® 2010
• Course 10393 : Intermediate Skills in Microsoft® Excel® 2010
• Course 10394 : Advanced Skills in Microsoft® Excel® 2010
• Course Collection 10359 : What’s New in Microsoft® Office 2010 Applications
• Course 10395 : What’s New in Microsoft® Access® 2010
• Course 10396 : What’s New in Microsoft® InfoPath® 2010
• Course 10397 : What’s New in Microsoft® OneNote® 2010
• Course 10398 : What’s New in Microsoft® Project 2010
• Course 10399 : What’s New in Microsoft® Publisher 2010
• Course 10400 : What’s New in Microsoft® SharePoint® Designer 2010
• Course 10402 : What’s New in Microsoft® Visio® 2010
• Course Collection 70125 : Skills Training in Microsoft® Visio 2010
• Course 10356 : Beginner Skills Training in Microsoft® Visio® 2010
• Course 10854 : Intermediate Skills Training in Microsoft® Visio® 2010
• Course Collection 70143 : Essentials Collection for Microsoft Windows 8
• Course 70144 : Microsoft Windows 8 Desktop Essentials
• Course 70145 : Microsoft Windows 8 Start Screen Essentials
• Course Collection 70146 : Essentials Collection for Microsoft Office 2013
• Course 70147 : Microsoft Access 2013 Essentials
• Course 70148 : Microsoft Excel 2013 Essentials
• Course 70149 : Microsoft Lync 2013 Essentials
• Course 70150 : Microsoft Office for Mac 2012 Essentials
• Course 70151 : Microsoft Office Web Apps Essentials
• Course 70152 : Microsoft OneNote 2013 Essentials
• Course 70153 : Microsoft Outlook 2013 Essentials
• Course 70154 : Microsoft PowerPoint 2013 Essentials
• Course 70155 : Microsoft Project 2013 Essentials
• Course 70156 : Microsoft SharePoint 2013 Essentials
• Course 70157 : Microsoft Visio 2013 Essentials
• Course 70158 : Microsoft Word 2013 Essentials
• Course Collection 70198 : Essentials Collection for Microsoft Office 2013
• Course 70147 : Microsoft Access 2013 Essentials
• Course 10166 : Windows 7 Essentials I
• Course 10167 : Windows 7 Essentials II
• Course 10353 : Beginner Skills Training in Microsoft® OneNote® 2010
• Course 10354 : Beginner Skills Training in Microsoft® Publisher 2010
• Course 10355 : Taking Content Offline using Microsoft® SharePoint® Workspace 2010
• Course 10403 : Beginner Skills Training in Microsoft® InfoPath® 2010
• Course 10918 : Communicating and Collaborating with Microsoft® Office 365™
• Course 10929 : Sharing and Working with Teams Using Microsoft® Office 365™
• Course 70133 : Make the Switch to Access 2013
• Course 70134 : Make the Switch to PowerPoint 2013
• Course 70135 : Make the Switch to Lync 2013
• Course 70136 : Make the Switch to Outlook 2013
• Course 70137 : Make the Switch to Word 2013
• Course 70138 : Make the Switch to Project 2013
• Course 70139 : Make the Switch to Publisher 2013
• Course 70140 : Make the Switch to Visio 2013
• Course 70141 : Make the Switch to OneNote 2013
• Course 70142 : Make the Switch to Excel 2013

You can access the full catalog via the web at the URL below.  The results are hyperlinked to the actual class posted on the Microsoft eLearning web site for your convenience.  You can also export the list if you wish as the list of classes available changes every month or so.

• http://www.microsoft.com/learning/sa-vl-catalog/savldefault.aspx

Also look at the following posts:

• WHITEPAPERS: Software Assurance Benefits documentation for “eLearning”
  https://kurtsh.com/2012/09/12/whitepapers-software-assurance-benefits-documentation-for-elearning/
• INFO: Taking advantage of your Microsoft eLearning benefit from Software Assurance
  https://kurtsh.com/2012/04/20/info-taking-advantage-of-your-microsoft-elearning-benefit-from-software-assurance/

Your Surface has its OS on the local store along with its configuration and updates.  You didn’t install the operating system of course so you have NO install media to start from if your Surface storage gets corrupted, won’t boot, and you need to revive it.

Q: So what do you do if you need to “recover” your Surface if the system software is damaged & you can’t boot?

The answer is:

1. Create a bootable USB drive.  Use the “Create a Recovery Drive” app on your Surface (Search apps to find this) to backup the Recovery partition beforehand to ensure you can always get back to a pristine device.
2. Boot up on the USB drive when you need to recover.  To boot up on the Recovery drive:
   1. Hold “Volume Down” & simultaneously press/hold the Power button for 5 seconds
   2. Release the Power button but keep holding down the “Volume Down” button
3. OPTIONAL:  Backup your Bitlocker Recovery Key so that you can crack the encryption on the storage drive when you need to completely recover the system partition.  Use “Manage Bitlocker” app on your Surface (Search apps to find this) and have the Bitlocker Recovery key saved to your new recovery USB drive.

The rest is pretty self-explanatory but I’d suggest reading ShinySurface.com’s post because they’re really good.

(Admittedly, this kinda pisses me off because I was halfway through writing a post on this exact topic but the guy at http://shinysurface.com did such a damned good job on the topic – including a video tutorial (!!!) – there’s really no point in me finishing mine.  Damn you, ShinySurface! )

• LINK: How to backup the Surface’s recovery partition to a USB flash drive
  http://www.shinysurface.com/2012/11/13/how-to-backup-the-surfaces-recovery-partition-to-a-usb-flash-drive/
• LINK: How to boot the Surface via USB flash drive
  http://www.shinysurface.com/2012/11/13/how-to-boot-the-surface-via-usb-flash-drive/

First of all, “Why IE10 on Windows 7?”

1. Fast, full-screen browsing
2. Flip ahead through content & Pin your favorite sites (Touch-optimized)
3. More privacy w/ Do Not Track header support

Learn more at: http://windows.microsoft.com/en-US/internet-explorer/download-ie

Note: Internet Explorer 10 Release Preview is designed to optimize the power of your PC running Windows 7 with Service Pack 1 (SP1) or higher. If you’re using a different operating system, you won’t be able to install Internet Explorer 10 Release Preview.

• BETA:  Internet Explorer 10 for Windows 7 (Preview)
  http://windows.microsoft.com/en-US/internet-explorer/downloads/ie-10/worldwide-languages
• FAQ: Internet Explorer 10 Release Preview: Frequently asked questions
  http://windows.microsoft.com/en-US/internet-explorer/ie-10-release-preview-faq
• SYSTEM REQ:  Internet Explorer 10 Release Preview
  http://windows.microsoft.com/en-US/internet-explorer/ie-10-release-preview-system-requirements

So one of the big pink elephants in the room is:

“How do I sync files from the cloud to my Surface/Windows RT device?”

I’ve gotten this question more times that I care to admit.  The simple answer is that as of today, there is no facility/tool/app to synchronize files from generic cloud file services to local storage on your Surface/Windows RT device.

WHAT IS THIS “SKYDRIVE” APP FOR THEN?
This is what’s been confusing.  SkyDrive on Windows 8 Pro provides both online access through the Internet as well as a “sync client” to keep files synchronized between the device & the cloud and cached locally for offline access.

SkyDrive App does not provide this synchronization capability & there is no SkyDrive “sync client” for Surface/Windows RT…

…yet. 

Yes, like MANY THINGS for Windows RT, it’s under development.  It’s just not ready yet.  I know that for a device without a 3G/4G radio, this might seem weird but that’s just the way the dev cycles have worked out, I guess.  But don’t worry – as I understand it, it’s coming.

SO THERE’S NO OFFLINE ACCESS OF CLOUD STORED FILES?
Actually, there is some modicum of “offline access”.   In Office 2013, any file you’ve opened from SkyDrive or SharePoint has an offline version cached on your Windows RT device in something called the “Office Document Cache” which is kept by default for 14 days.  This of course means that even if you’re offline, you can edit that previously opened document up to 14 days later.

Once you come back online, the “Office 2013 Upload Center” handles the syncing necessary between your offline edits and the online copies like the SkyDrive sync client does.  The Office 2013 Upload Center sort of acts like SkyDrive in that you have the ability to view the cache and open documents directly from it for up to 14 days since being last opened.  (This expiration time can be changed to up to 30 days in the ‘Settings’ of the Office 2013 Upload Center)

To get to the cached Office files:

1. Open the "Office 2013 Upload Center" by searching in Apps on the Start screen (click on the Upload Center to open)  You should see a list of files in the cache which you can directly open.
2. Alternatively, you can open any Office application and click the files from the "Most Recently Used" list which will open the file from the cache.