technical solutions and commentary

Microsoft announced the release of "Microsoft Equipt" a yearly subscription for consumers that includes "Windows Live OneCare" and "Office Home and Student". Also Equipt makes it simple for consumers to install and take advantage of the other Windows Live and Office Live Services.

The estimated retail subscription price is under $70 a year for the entire suite and it can be installed on up to 3 PC’s. That price is nice considering some Consumer PC security suites, which are comparable to "OneCare" by itself cost nearly that much per PC.

I had the opportunity run the product and provide feedback during it’s last two private betas - the product them was code named "albany" - before the Release. I was impressed with the easy installation and configuration of the core products and also the optional Windows Live Add-on services. I ran the suite on Windows Vista and Windows XP SP2 and had great user experience on both platforms. As well, I have been running Onecare for the last two years - apart from the Albany beta - and have seen great new features and services added, and the product improves since the 1.0 release.

I would recommend Equipt to anyone that wants a solid PC security product and productivity suite. You don’t have to be connected to the Internet to use the suite, you get full featured office products, and price is right - especially if you have more than one PC.

The Microsoft Press Release is here: http://www.microsoft.com/presspass/press/2008/jul08/07-02EquiptPR.mspx

You can view the Keynotes from the RSA Conference 2008 online, free. Access the keynote list here: http://media.omediaweb.com/rsa2008/keynote_catalog.htm

The Session breakout recordings are not available free, but can be purchases for about $400 if you are interested. Not inexpensive, but cheaper than attending the conference in person. A link to purchase the session recording are on the same page as the keynote list.

The Microsoft Virtualization Team Blog has a post on the Top 5 things to know about Hyper-V by a guest author. The Guest author is a Microsoft MVP of Virtual Machine Technology based in Amsterdam and has extensive Experience with VMWare and Microsoft Virtualization technologies. The basics are:

1. Understand the hypervisor model and performance consequences
2. Understand the use of snapshots
3. How to use Quick Migration
4. Consider System Center Virtual Machine Manager
5. Hyper-V can run on Server Core Installation

You can see the top 5 list with extensive explanations here: http://blogs.technet.com/virtualization/archive/2008/07/01/Top-5-things-to-know-about-Hyper_2D00_V.aspx

For many organizations that run data centers or even small server rooms, energy efficiency is becoming a priority. Many are looking to control or even reduce operational costs, reduce the impact on the environment, or even increase data center capacity without having to add power capabilities and AC.

Windows Server 2008 includes technologies such as Server Virtualization with Hyper-V and native Power Management capabilities (on by default) which provide power savings.

Microsoft has released a document that outlines the power savings capabilities in Windows Server 2008. If you are looking to reduce power consumption, I would suggest you take a look at it: http://www.microsoft.com/downloads/details.aspx?FamilyID=61d493fd-855d-4719-8662-3a40ba3a0a5c&displaylang=en

It’s only been a little over one month since Apple released the Mac OS X 10.5.3 update, but today (June 30, 2008) they released the 10.5.4 combo update to the web. According to Apple’s Web Site, this update includes general OS improvements that enhance the stability, compatibility, and security of the Mac OS. More specifically updates are included for:

• Mac OS general capabilities
• AirPort
• iCal
• Safari
• Spaces and Expose’

get the details about this update from: http://support.apple.com/kb/HT1994

download the 561MB update directly from Apples support downloads page: http://www.apple.com/support/downloads/macosx1054comboupdate.html

after receiving and loading my new Lenovo ThinkPad T61p with Windows Vista 64-bit, I would get random Blue Screens (BSOD) and the machine would shut down a few time in the first week of use. These blue screens started to occur more often this last week, especially after I installed my podcast receiver, and started multiple large file downloads.

So to figure out what was causing this, I installed the "Diagnostic and Recovery Toolkit" which is now part of the Microsoft Desktop Optimization PAck (MDOP). Once this was installed, I figured out that the NETw4v64.sys file was causing a memory error resulting in the BSOD. Using this information, I searched on the file name and blue screen. What I found was that all kind of people where having the same problem with the Intel 3945 wireless driver when running Windows Vista 64-bit. The problem seemed to affect any type of machine that had this combination of things, no matter who the manufacturer was. I verified the issue was the wireless card driver by disabling the wireless card with the hard switch on my laptop and ran it without blue screening for hours. The I enabled the card, started a large file download, and bang! in a minute or two I was staring at a BSOD.

the first thing I did was to download and install the latest wireless driver directly from Intel hoping that they had fixed the problem. So after installing the new driver, I started a new download and… BSOD. I also tried to install the 32-but driver for Vista but it wouldn’t allow the 32-bit driver install. I also tried to install older x64 drivers and nothing worked.

So, to fix this problem of the BSOD from this Intel driver, I did an "XP" fix on Vista. I downloaded the driver for the Intel 3945 Wireless card from the Lenovo site for Windows XP 64-bit. I delete the current Intel drover for Vista from Device Manager (Accessable in Control Panel) - including the option to delete the driver from the system. After deleting the driver, I had to install the XP driver manually since the Driver installation package for XP will not let you install on vista. To do this yourself, do this:

(to get to the Control Panel: Open the Control Panel / Select "System", then "Advanced system settings" / click on the "Hardware" tab, and on "Device Manager")

1. download and extract the Intel Drivers for the 3945 wireless adaptor for Windows XP 64-bit.
2. Find and expand "Network adapters".
3. Right-click on the ‘wireless network adaptor’, click "Update Driver Software…"
4. Select "Browse my computer for driver software"
5. Click on "Let me pick from a list of device drivers on my computer"
6. Click on "Have disk…"
7. Browse to the folder where the driver was located
8. Select the file wireless driver and press "Open".
9. And then press "OK", and let the installation begin

Microsoft has released the Windows Server 2008 Hyper-V! As promised, Hyper-V was released within 180 days after the RTM if Windows Server 2008. It was released over a month before the deadline set by the Hyper-V team.

Hyper-V can be downloaded from Microsoft today (starting at 12:00PM PST). It will also be pushed out through Windows Update in the next "patch Tuesday" release cycle which is July 8th.

There is more information on the Hyper-V release here:

• Microsoft PressPass announcement: http://www.microsoft.com/presspass/features/2008/jun08/06-26hyperv.mspx
• official hyper-v site: http://www.microsoft.com/hyper-v
• Windows Server Team blog: http://blogs.technet.com/windowsserver/archive/2008/06/25/microsoft-com-powered-by-hyper-v.aspx
• server and tools news blog: http://blogs.technet.com/stbnewsbytes/archive/2008/06/26/it-s-here-windows-server-2008-hyper-v-is-available-for-download.aspx
• virtualization team blog: http://blogs.technet.com/virtualization/archive/2008/06/26/wu-hoo-only-12-days-to-wu.aspx
• Virtualization Solutions Accelerators: http://www.microsoft.com/vsa

Microsoft is aware of a recent escalation in a class of attacks targeting Web sites that use Microsoft ASP and ASP.NET technologies but do not follow best practices for secure Web application development. These SQL injection attacks do not exploit a specific software vulnerability, but instead target Web sites that do not follow secure coding practices for accessing and manipulating data stored in a relational database. When a SQL injection attack succeeds, an attacker can compromise data stored in these databases and possibly execute remote code. Clients browsing to a compromised server could be forwarded unknowingly to malicious sites that may install malware on the client machine.

The purpose of Security Advisory 954462 is to assist Web site administrators in identifying possible issues with their Web application code being susceptible to possible SQL injection attacks and to provide a stopgap solution to mitigate SQL injection attacks against the server while the applications are being fixed.

actions to take

Review Microsoft Security Advisory 954462 for an overview of the issue, details on affected components, mitigating factors, suggested actions, frequently asked questions (FAQ) and links to additional resources.

Microsoft Security Advisory 954462 – Rise in SQL Injection Attacks Exploiting Unverified User Data Input - http://www.microsoft.com/technet/security/advisory/954462.mspx

Additional Resources

• MSRC Blog: http://blogs.technet.com/msrc
• Links to other documentation on SQL Injection and coding best practices
• SQL Server Injection Protection
• Preventing SQL Injections in ASP
• Coding Techniques for protecting against SQL Injection
• Filtering SQL Injection from Classic ASP
• How To: Protect from SQL Injection in ASP .NET
• Security Vulnerability Research & Defense Blog on SQL Injection Attack

Wish there was a simple source downloading for SysInternals utilities that you could get to without having to go through the typical web site? Actually there is at http://live.sysinternals.com, and the utilities are ready to download or use live. If you don’t want to download the utility before using it, just open a command prompt and run the command to the remote server. That’s right, run it from the remote internet server. For example, to run Process Monitor from the remote server:

• Open a Command Prompt as administrator.
• Switch to: “C:\windows\system32>”
• Type (without quotes) “\\live.sysinternals.com\tools\procmon.exe”.

It will take a minute or so for the utility to load into memory on the local machine before it executes. The nice thing is that when you close the application, it’s gone.

Microsoft has released a new Release Candidate for App-v 4.5 (Formerly known as softgrid). The Major highlights include:

• HTTP streaming. We now support streaming virtual applications from an IIS server (v6 or v7). This will provide dramatic performance and scalability improvements for customers with large App-V deployments.
• Re-designed Sequencer.  Simplifies the process and reduces the complexity of creating virtual application packages. There is now a single wizard for creating a new package and advanced settings have been put into an optional screen.
• Dynamic Suite Composition (DSC) for MSI packages allows the flexibility to control virtual application interaction. Administrators wanting to consolidate virtual environments, and enable faster, easier administration, can use the product’s Dynamic Suite Composition, which sequences and manages packages for middleware applications separately from the main application.
• Seamless integration with SCCM 2007 R2. Allows customers to easily deploy virtual applications through the SCCM 2007 R2 infrastructure and scale their deployments.
• Client cache improvements. The maximum size of the client cache has been increased to 1 TB.
• Improved Manageability. Integration and support for VSS writer, MOM Pack, ADM template
• Accessibility. The product is now Section 508 compliant, bringing App-V in line with other Microsoft products.

get more details on what this release will include from the Microsoft App-V Blog. download the RC from Microsoft Connect.