Category Informational

For those of you who have not seen this newly released Out of Band Critical Security Update, you should check out MS08-078 What does this mean exactly? Here is Microsoft’s Take:

Executive Summary

This security update resolves a publicly disclosed vulnerability. The vulnerability could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for Internet Explorer 5.01, Internet Explorer 6, Internet Explorer 6 Service Pack 1, and Internet Explorer 7. For information about Internet Explorer 8 Beta 2, please see the section, Frequently Asked Questions (FAQ) Related to This Security Update. For more information, see the subsection, Affected and Non-Affected Software, in this section.

The security update addresses the vulnerability by modifying the way Internet Explorer validates data binding parameters and handles the error resulting in the exploitable condition. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection under the next section, Vulnerability Information.

This security update also addresses the vulnerability first described in Microsoft Security Advisory 961051.

Recommendation. Microsoft recommends that customers apply the update immediately.

What does this really mean?

Update any and all machines which have Internet Explorer installed on them, in order to prevent the Remote Code Execution attacks from being successful against your machines.

Just because you don’t use IE does not limit your vulnerability, so DO Upgrade!

This applies to all versions of windows (2000, XP, Vista, 2003, 2008) So get that update!

Hey everyone out there in the Chicago Windows Users Group world, Let’s welcome @CWUG to the world of Twitter!

What does this mean for those of us from the CWUG, as well as those of us on Twitter?

NOW! Every link we go to look for from the Facebook, or someone is looking for information about the Meetings, other Mini-Meetings, Nightly Conferences, etc! This will be a repository of that information so you don’t have to search in a million places in order to find it!

So, add @CWUG to your Twitter account and lets make CWUG work for you!

Thanks! @CXI

Thanks Kurt Shintaku for the heads up!

Code should be valid now!

Also be sure to check out – Microsoft Learning Free stuff! How much does Free Microsoft Learning Cost? (Hint: Free!)

TRAINING: FREE Microsoft Virtualization Courses – “Configuring Hyper-V in Windows Server 2008”

Are you interested in learning Microsoft’s Virtualization technologies… for free?

Prepare for Exam 70-652 for Free (US$159.99 value)
This collection of five 2-hour online courses helps you develop the skills necessary for implementing and managing Hyper-V in an IT environment, as well as, creating and managing virtual machines and hosts in a virtual environment.

The courses within the collection include the following topics:

• An overview of the Hyper-V technology
• Creating a virtual environment
• Deploying systems in a virtual environment
• Configuring high availability in a virtual environment
• Administering a virtual environment with SCVMM

This collection helps you prepare for exam 70-652 TS: Windows Server Virtualization, Configuring
This collection requires that students meet the following prerequisites:

• At least a year and a half of experience working in Windows Server 2003 or Windows Server 2008 environments as system administrators
• Familiarity with virtualization products and technologies

The package includes all the content from the following 5 online virtualization training courses:

• Course 6320: Introducing the Hyper-V Technology
• Course 6321: Configuring a Virtual Environment
• Course 6322: Deploying Systems in a Virtual Environment
• Course 6323: Optimizing a Virtual Environment
• Course 6324: Managing a Virtual Environment by using SCVMM

How to register for free:

1. Go to the following site:
   Collection 6319: Configuring Hyper-V in Windows Server 2008
   http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11062521&s1=3b30899e-0181-e332-5c10-46f4e257ae4a
2. Register using the following promo code:
   9350-Y2W6-3676
3. The course may be revisited for a period of 18 months after registration.

Here’s a fun email I received today!

Dear Christopher Kusek,
At Vonage, we’re committed to providing exceptional phone service at a great value you can rely on. On December 1, 2008, the price of our Residential Basic 500 Minute Plan increased from $14.99 to $17.99¹. The new price will be reflected in your February 2009 bill. We’re proud that we remain one of the most competitive choices among home phone providers.
Don’t forget, with the Vonage Residential Basic 500 Minute Plan, you will continue to receive 25 great features, like Call Waiting, Caller ID, and Voicemail Plus that many phone companies still charge for. International calls are still as low as 1 cent per minute.
As an option, you might consider the Residential Unlimited Plan for only $24.99² a month. For just $7 more you will get:

• Unlimited local and long distance calls in the US, Canada, and Puerto Rico
• FREE calls to landline phones in Italy, France, Spain, UK and Ireland
• Peace of mind – never worry about going over your minutes again!

For even more savings and the convenience of one bill each year, you can pay in advance with our Annual Pre-Pay option and save 20% off the standard rate³ or just $19.99 a month.
Click here to access your Online Account and check out these options and more. If you have any questions, you can call 1-VONAGE-HELP and speak to a customer care representative.
At Vonage, we continue to provide you with the best service at the lowest possible price.
Thank you for your business,
Vonage

Here are some of my favorite parts:

¹ Maintaining Vonage service on or after your adjusted bill cycle date confirms your agreement to the rate change.

Uh, WTF? “Watch as we screw you, and you standing by and taking it is your way of agreeing!”

As an option, you might consider the Residential Unlimited Plan for only $24.99² a month. For just $7 more you will get:

Hey, we’re charging you more, so it doesn’t look so Economically bad for you to Pay us even MORE money for the same non-service! Sound good? IT’s only another $7 ! ! !

I stood by and let the fake ‘surcharges’ and other BS slide for the longest time (I’m a far stretch from when I was paying only $16.91 a month, which was a lot considering our non-home phone usage.   And then after ‘bs surcharges’ it went up to ~20 (Which was more than I paid ATT) But now, you’re raising it even more, so after surcharges I’ll be paying roughly ~25 dollars? Yea, sorry.  I don’t think so.

Who knows what type of VoIP service I will switch to in order to maintain a home phone, but I can tell you it won’t be Vonage for much longer.

For those of you who saw this Tweet that I tweeted from @CXI, our good friend @chrispirillo has a little Contest going on for the holidays, and it couldn’t have come at a better time.

Chris Pirillo is participating in Receiving the Gift of Giving, under the Don’t Just Give a Gift, Grant a Wish effort.

So, I encourage you who are interested in winning or just helping out in this spirit of giving, to check out Chris Pirillos Receiving the Gift of Giving post!

Thanks everyone and have a happy Holidays! :)