Microsoft Office 2010 SP1 Is Out

If you've been wanting to do some testing again, then you're in luck - Microsoft has just released Office 2010 SP1 for download.  http://www.techspot.com/news/44454-microsoft-releases-office-2010-sp1.html gives some more information and direct download links are below:

http://www.microsoft.com/download/en/details.aspx?id=26622 (x86)

http://www.microsoft.com/download/en/details.aspx?id=26617 (x64)

Thanks to Peter Hale for giving me the heads up on this.


Regards,

The Outspoken Wookie

BPOS Down Again?

OK, so while we're talking about Cloud services with their security and stability issues, Microsoft looks like they wanted to get a mention again, so here we go! BPOS was down again earlier this week - their North American offering was down yesterday (Wednesday) for 3 hours from 11:00AM US Eastern Time - right in the middle of the work day.

The Cloud has promise, sure, but if you can't affort outages where you have no real control over the recovery, sometimes keeping your infrastructure in-house makes a lot more sense.  Microsoft seems to have some way to go before they put these network infrastructure issues behind them and can offer a truly redundant cloud solution.


Regards,

The Outspoken Wookie

Online Storage, Syncing & Backup

Up until recently, there was an application that I used and recommended called Dropbox that was used for online storage - you could run the app on multiple computers, your iPhone, iPad, Android or even Blackberry device and sync the data. OK, on mobility devices you won't get the whole size syncing, but you can choose a file and access it once it downloads (sane usage of expensive 3G/HSPA bandwidth).

Then Dropbox went and changed its T&Cs to let the US Government "hands on" department have access to my data if and when they chose. OK, as I don't store anything illegal nor compromising up there, I didn't care. Then they changed things so that any of their employees could access my data, which isn't good. And then, to top things off, they went and released an update that results in open slather access by anyone to anyone's data and that was the straw that broke this camel's back.

Sure, this latest issue was a poor coding, poor internal procedures, poor quality control issue, but it was also a massive security issue following on after Sony, Acer, Sega, Nintendo and other high profile companies had their confidential customer data breached.  This chasm has since been closed, however I don't like how easy it was for their internal checks and balances to be utterly defeated by the poor coding skills of one programmer.

Dropbox should have a) known and b) done better.

So, as the major failure of Dropbox is in the security (sic) of your data being applied at their server end, not at your client end, I've looked around for an alternative to Dropbox where I have some control over the security - SpiderOak seems to offer this.

SpiderOak lets you choose whether you want to back data up to the cloud using locally-applied encryption or whether you want to sync a folder on multiple machines that you've signed into using SpiderOak, again using locally-applied encryption - at no point is unencrypted data being stored on the SpiderOak servers.  You can also create a "ShareRoom" which allows you to share files with people who you choose, using a "RoomKey" password.

All up, this operates similarly to Dropbox and utilizes real security.  Dropbox has dropped the ball in a big way.

Regards,

The Outspoken Wookie

How Nuts Is The Jewish Faith

http://www.bbc.co.uk/news/world-middle-east-13819764


Regards,

The Outspoken Wookie

Outlook: "The name of the security certificate is invalid or does not match the name of the site"

When an SBS 2008 or SBS 2008 R2 (aka SBS 2011) site is configured, sometimes you will find the local (internal) users who use Outlook 2007 or Outlook 2010 (and possibly/probably also Outlook 2003) will receive an error message when first opening Outlook that will report:

Tick - The security certificate is from a trusted certifying authority.
Tick - The security certificate date is valid.
Cross - The name on the security certificate is invalid or does not match the name of the site.

If you press "Proceed", everything runs as normal.  This is an annoying message that is caused by some improperly configured Exchange settings (normally caused by initially using a self-signed cert, then later replacing it with a purchased one), all of which are easily rectified after following KB940726, however below I've included the modified instructions for this to apply to an SBS installation.

In the following instructions, "CAS_Server_Name" should be replaced with your internal SBS name, such as "SBS2008" and "office.example.com" should be replaced with the URL you use to gain access to the SBS from the Internet. Also, all lines beginning with [PS] are single lines - everything in bold is the one command and there are no spaces between the minus signs (-) and the property names immediately after them.

1. Start the Exchange Management Shell.
2. To check the current settings of the ClientAccessServer property, enter the following command:
   [PS] Get-ClientAccessServer | FL
   If AutoDiscoverServiceInternalUri is not set to your external Uri (such as https://office.example.com/autodiscover/autodiscover.xml), then
   
   1. Modify the Autodiscover URL in the Service Connection Point. The Service Connection Point is stored in the Active Directory directory service. To modify this URL, enter the following command:
      [PS] Set-ClientAccessServer -Identity "CAS_Server_Name" -AutodiscoverServiceInternalUri https://office.example.com/autodiscover/autodiscover.xml
3. To check the current setting of the WebServicesVirtualDirectory property, enter the following command:
   [PS] Get-WebServicesVirtualDirectory
   If the InternalUrl of EWS (SBS Web Applications) is not set to your external Uri (such as https://office.example.com/ews/exchange.asmx), then
   1. Modify the InternalUrl attribute of the EWS. To do this, enter the following command:
      [PS] Set-WebServicesVirtualDirectory -Identity "CAS_Server_Name\EWS (SBS Web Applications)" -InternalUrl https://office.example.com/ews/exchange.asmx
4. To check the current setting of the OABVirtualDirectory property, enter the following command:
   [PS] Get-OABVirtualDirectory
   If the InternalUrl is not set to your external Uri (such as https://office.example.com/oab), then
   
   1. Modify the InternalUrl attribute for Web-based Offline Address Book distribution. To do this, enter the following command:
      [PS] Set-OABVirtualDirectory -Identity "CAS_Server_name\oab (SBS Web Applications)" -InternalUrl https://office.example.com/oab
5. To check the current setting of the UMVirtualDirectory property, enter the following command:
   [PS] Get-UMVirtualDirectory
   If the InternalUrl of UnifiedMessaging (SBS Web Applications) is not set to your external Uri (such as https://office.example.com/unifiedmessaging/service.asmx), then
   
   1. Modify the InternalUrl attribute of the UM Web service. To do this, enter the following command:
      [PS] Set-UMVirtualDirectory -Identity "CAS_Server_Name\unifiedmessaging (SBS Web Applications)" -InternalUrl https://office.example.com/unifiedmessaging/service.asmx
      Note This command is required only in an Exchange 2007 (SBS 2008) environment. This command no longer exists in an Exchange 2010 (SBS 2011) environment. Instead, the WebServices URL is used for this purpose.
6. Open IIS Manager, expand the local computer, and then in Application Pools, right-click MSExchangeAutodiscoverAppPool and click Recycle.

Next time anyone on the LAN opens Outlook and connects to your Exchange Server, the error message will not appear as we've configured the settings in Exchange Server correctly.

Update: Mark Wilton mentioned the following links to me also regarding this same issue:
A script to fix this issue from VirtualBarryMartin.me
Some PowerShell commands to fix the issue from Daniel Kenyon-Smith

Regards,

The Outspoken Wookie

Sega Follows CodeMasters, Acer and Sony

In what's clearly a case of "If it's good enough for them, then it's good enough for us", Sega have recently succumbed to a hacker attack obtaining their customers' personal data.

The Telegraph reported that whilst Sega is only reporting "Sega Pass is going through some improvements so is currently unavailable for new members to join or existing members to modify their details including resetting passwords" on their website, in an email sent to their customers, they admitted "We have identified that unauthorised entry was gained to our Sega Pass database."


The question I *have* to ask is: How many more high profile companies need to be hacked and have their confidential customer database details stolen before these susceptible companies start taking online/cloud security seriously?  (Unfortunately, I feel the answer lies in the old "It won't happen to me" line of security principles - and this means that more and more people's confidential data will be stolen and made available to identity fraudsters.)

Regards,

The Outspoken Wookie

Codemasters Follows Sony And Acer

Well, what seemed good enough for Sony (multiple times) and Acer now seems to have been good enough for Codemasters, a large British game developer.  They have had their confidential client data breached, apparently everything but their credit card details...

Well, believe what you want, but it is just another example of how security is something that too many companies are not taking seriously enough.


Regards,

The Outspoken Wookie

Acer Exposes 40,000 Customer Records

Just as Sony seems to have gotten their vulnerabilities under control for a few weeks, Acer goes and gives away sensitive data from their customers.

It appears that an old username/password posted online to allow users to download a patch was used to gain access to not only over 40,000 customer accounts, but also Acer source code.

Oops!

Will these companies never learn that security is something that needs to be taken seriously?  :(


Regards,

The Outspoken Wookie

Human Dignity Campaigner Dr Jack Kevorkian Dies At 83

The well known campaigner for human dignity, Dr Jack Kevorkian, died on Friday 3 June, 2011 in Michigan, after being admitted to hospital suffering from kidney and respiratory problems.  Dr Kevorkian had spent many years of his life dedicated to allowing humans to die with dignity when their death would otherwise be unavoidably painful and messy.  He spent 8 years in a Michigan jail for these "crimes against humanity" as some have called this compassionate exercise.

I've always wondered why we can afford a level of dignity to our pets and other animals that we legislate against for humans - it makes no sense to me.  Oregon seems to have seen the sense in allowing humans to die with some dignity and have, thanks to the efforts of Dr Kevorkian (and others), enacted the Death With Dignity Act which protects assisted suicide as a legitimate medical practice.

There's a difference between being alive and not being dead and maybe this is time to reflect on what this difference actually is, out of respect for the one man who brought this to the attention of the law makers.


Regards,

The Outspoken Wookie

Today's Garden Addition

I heard the birds going nuts outside and "I know that noise"!  :)

So, here's a few photos of today's snake!  :)

Yes, that's the first (little) rat I fed it.  I had some rats left over from Cletus that are too large for my other snakes, so...

This gives you an idea of its girth - probably around 8cm in diameter.

Getting the entree down, and then I fed the larger rat (however it was eaten in a difficult place to photo, between stairs and palms.

Just looking at the flood light.

... and now looking at me.  :)

Regards,

The Outspoken Wookie