<< Small Biz Server news of 9/5/2004>>

From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (sbradcpa_at_pacbell.net)
Date: 09/06/04 

Date: Sun, 05 Sep 2004 23:54:00 -0700

Kevin [a bit waterlogged] and his song of the week
news://msnews.microsoft.com/Od7AycgkEHA.644@tk2msftngp13.phx.gbl

but he's nice and safe as I hope all other SBSers are

------------------------------------------
SMBNation is JUST around the corner. Everyone have safe flights.
The next news of the week will be posted during the summit
http://www.smbnation.com
I'm looking forward to seeing folks and putting email addresses with faces!

-----------------------------------------
The big news for the developer community but sort of "ho hum" for us was
the changes going forward in Longhorn
http://radio.weblogs.com/0001011/2004/08/30.html#a8167

---------------------------------------

Mariette and Marina are constantly adding content to www.smallbizserver.net
Smallbizserver.Net > SBS 2003 > Exchange Server 2003 > Intelligent
Message Filter on SBS 2003:
http://www.smallbizserver.net/Default.aspx?tabid=174

----------------------------------------
Patches out this week on Windows Update
.NET
Download details: .NET Framework 1.1 Service Pack 1 for Windows Server
2003:
http://www.microsoft.com/downloads/details.aspx?FamilyID=ae7edef7-2cb7-4864-8623-a1038563df23&DisplayLang=en

Sharepoint services sp1
Download details: Windows SharePoint Services Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyID=875da47e-89d5-4621-a319-a1f5bfedf497&DisplayLang=en

----------------------------------------

If after applying the Sharepoint SP1 service pack you are getting HTTP
500 or 0x80040E14 error:
http://msmvps.com/bradley/archive/2004/09/03/12954.aspx

---------------------------------------
Issue with the V5 version of Windows update and ISA Server:
http://msmvps.com/bradley/archive/2004/09/04/13009.aspx

--------------------------------------
Pssst.... can someone tell me what a Blob parser is?
Download details: Windows SharePoint Services: Usage BLOB Parser:
http://www.microsoft.com/downloads/details.aspx?FamilyID=8ed64398-4992-47cb-9075-afec32060986&DisplayLang=en

-----------------------
Download details: Servers for Small Business:
http://www.microsoft.com/downloads/details.aspx?FamilyID=cfb2223f-0fa2-4f2f-8585-796f120ecbe1&DisplayLang=en
Power points for customers

------------------------

875420 - How to enable Live Communication Server traffic through ISA
Server 2000:
http://support.microsoft.com/?kbid=875420
838906 - You may be disconnected when you connect a Windows XP-based
computer to a remote server through a VPN, and you use an external
firewall device or a NAT device:
http://support.microsoft.com/?kbid=838906

--------------------------
In other news this week

- - - - - - - - - -
Copyright Office pitches anti-P2P bill
A hotly contested wrangle in Congress over how
to outlaw file-swapping networks just took a new
twist. The U.S. Copyright Office has drafted a new
version of the Induce Act that it believes will ban
networks like Kazaa and Morpheus while not putting
hardware such as portable hard drives and MP3
players on the wrong side of the law.
http://news.com.com/Copyright+Office+pitches+anti-P2P+bill/2100-1027_3-5345528.html
- - - - - - - - - -
Further data security laws on the way
Although a US draft bill calling for compulsory
annual security audits to be carried out by publicly
listed companies has been delayed until early next
year, security experts said regulations of this kind
are inevitable, both for US and UK firms.
http://www.vnunet.com/news/1148994
- - - - - - - - - -
Bagle variant lacks teeth
The worm is being thwarted because most of the
site from which it attempts to download malware
cannot be contacted. Another version of the Bagle
mass-mailing computer worm started spreading
this week, but it probably won't get far,
security experts said.
http://news.zdnet.co.uk/internet/security/0,39020375,39165277,00.htm
- - - - - - - - - -
Critical Kerberos bugs surface
Multiple vulnerabilities have been reported
in version five of the widely-used Kerberos
authentication protocol. The most serious could
be exploited by crackers to gain root control
to authentication servers. Exploits are yet to
surface and patches are available. All releases
of MIT Kerberos 5 up to and including krb5-1.3.4
are affected. At fault are "double-free
vulnerabilities" in MIT Kerberos 5 implementation's
Key Distribution Center (KDC) program and libraries.
http://www.securityfocus.com/news/9449
http://news.zdnet.co.uk/internet/security/0,39020375,39165276,00.htm
- - - - - - - - - -
WinZip warns of security flaws in software
Windows clients running the popular WinZip
application are at risk from a number of critical
security flaws, according to WinZip Computing
Inc. and security researchers. The compression/
decompression tool is one of the most widely
used piece of software on the Windows platform.
http://security.itworld.com/4345/040902winzipflaw/page_1.html
- - - - - - - - - -
Army urged to step up IT security focus
The security threat on DOD networks is growing
substantially each day, so much so that on two
separate occasions this summer, viruses infiltrated
two top-secret computer systems at the Army Space
and Missile Defense Command. Army Lt. Gen. Larry
J. Dodgen, the command's leader, blamed the viruses,
which appeared on the Defense Department's Secret
Internet Protocol Router Network, on users and
network administrators who were not conducting
their jobs in a diligent fashion.
http://www.gcn.com/vol1_no1/daily-updates/27138-1.html
- - - - - - - - - -
Microsoft warns spyware could foul up security update
Though Microsoft Corp.'s new security update
package is all about protecting systems from
worms, viruses and spyware, it can't do much
about what's already on computers -- and that
could pose a problem. The company is warning
users of the Windows XP operating system to
check for spyware before downloading the free
massive security update, called Service Pack 2.
http://www.siliconvalley.com/mld/siliconvalley/news/editorial/9565886.htm

SP2 plays havoc with online banking
An Australian bank says installing the Windows
update prevents users from logging into its Web
interface. St.George Bank may be forced to make
changes to its online banking interface as
adoption of Windows XP Service Pack 2 becomes
widespread among consumers.
http://news.zdnet.co.uk/internet/security/0,39020375,39165283,00.htm

WinXP SP2 = security placebo?
http://www.theregister.co.uk/2004/09/02/winxpsp2_security_review/
Why SP2 deserved every shred of the scrutiny
http://zdnet.com.com/2100-1105_2-5344180.html
XP SP2 glitches to trip up one in 10 upgrades - report
http://www.theregister.co.uk/2004/09/02/sp2_glitches_study/
Most US firms ignore spyware risk
http://www.vnunet.com/news/1157773
- - - - - - - - - -
Oracle patches finally released
The database maker has fixed several flaws in
its software as it attempts to move to a monthly
patching schedule. Database software maker Oracle
pushed out a host of long-awaited patches after
struggling to organise its software fixes into
a monthly release schedule.
http://news.zdnet.co.uk/internet/security/0,39020375,39165278,00.htm
- - - - - - - - - -
Apache, open-source groups wary of Sender ID
The Apache Foundation, an open-source development
group, on Thursday pulled its support of the
proposed antispam standard Sender ID, saying
Microsoft's license requirements are too strict.
The move by the group responsible for the popular
Apache Web server comes as other open-source
developers also voiced reservations about
Microsoft's attempts to apply stringent license
requirements to its contribution to the spam-
fighting technology.
http://zdnet.com.com/2100-1104_2-5345317.html
- - - - - - - - - -
Cybercrime is not limited by boundaries
Computer crimes more and more assume transnational,
organized and group character. Transnational
character of computer crimes poses a certain
social threat - a threat to the compound of
the national security. Modern technologies
gave an impetus to criminal activity as well
as to the free trade and economy.
http://www.crime-research.org/news/02.09.2004/604/
- - - - - - - - - -
Cutting email cholesterol
Each week vnunet.com asks a different expert
to give their views on recent virus and security
issues, with advice, warnings and information
on the latest threats. This week Alasdair Kilgour,
managing director of CommVault UK and Ireland,
suggests some preventative steps for IT managers
to adopt to reduce the email burden.
http://www.vnunet.com/news/1157771
- - - - - - - - - -
Tech threats: the new front in the War on Terror
There's little doubt nowadays that the 21st century
is shaping up to be a very unstable era in human
history. Non-state actors like al-Qaeda are stepping
up their fight against nation-states, employing
mostly conventional, low-tech solutions to their
acts of terrorism.
http://www.cbc.ca/news/viewpoint/vp_hughes/20040901.html
- - - - - - - - - -
New WiFi security adds strong encryption
A new security specification for wireless
networking incorporates the Advanced Encryption
Standard, opening the door for certification under
the Federal Information Processing Standard. WiFi
Protected Access 2 is a technical specification
from the Wi-Fi Alliance based on the recently
approved 802.11i standard.
http://www.gcn.com/vol1_no1/daily-updates/27135-1.html
- - - - - - - - - -
Hummingbird stretches connectivity, security
Hummingbird this week added new features in its
Hummingbird Connectivity 10 suite, introduced
secure-terminal software called Connectivity
SecureTerm, and added other features to its
security suite. The Connectivity 10 suite allows
organizations to securely integrate heterogeneous
legacy infrastructures with Windows desktops,
enabling customers to meet business continuity
and corporate governance requirements.
http://zdnet.com.com/2110-1104_2-5339786.html
- - - - - - - - - -
Spam tide drowns email
Email's usefulness is being downgraded because
of the effort needed to filter out spam, says IDC.
Rising tides of spam are drowning the usefulness
of email, according to a new report from IDC.
Spam has accounted for 38 percent of the 31
billion emails sent each day in North America
in 2004, up from 24 percent in 2002, the market
researcher said.
http://news.zdnet.co.uk/communications/networks/0,39020345,39165256,00.htm

Sendmail trials Sender ID
http://news.zdnet.co.uk/internet/0,39020369,39165170,00.htm
- - - - - - - - - -
ID thief to the stars tells all
Book excerpt: In "Your Evil Twin," MSNBC.com's
Bob Sullivan argues that credit industry neglect
led to the identity theft epidemic. Note: Last
year, some 10 million people were victims of
identity theft, and some estimates claim as many
as 1 in 10 Americans have been hit by the crime
in recent years. MSNBC.com's Bob Sullivan explores
the digital epidemic in a new book, "Your Evil Twin."
http://www.msnbc.msn.com/id/5763781/ 

-- 
http://www.sbslinks.com/really.htm

Relevant Pages

  • SecurityFocus Microsoft Newsletter #164
    ... Got Storage Security Risks? ... MICROSOFT VULNERABILITY SUMMARY ... Chat Client FTP Server Default Username Credential Weak... ... NetServe Web Server is a compact web server for Microsoft Windows ...
    (Focus-Microsoft)
  • Re: im being held in memory
    ... How can I harden my computer or server to secure it from hackers? ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.security)
  • MS and security: good effort but no cigar
    ... build upon the progress it's already made in security. ... The low-hanging fruit of millions of insecure Windows machines ... Then there's the issue of poorly secured server applications. ... and execute external virus and filtering ...
    (microsoft.public.windowsxp.general)
  • SecurityFocus Microsoft Newsletter #167
    ... MICROSOFT VULNERABILITY SUMMARY ... Multiple Vendor XML Parser SOAP Server Denial Of Service Vul... ... Proactive Windows Security Explorer ...
    (Focus-Microsoft)
  • Re: Group Policy broke my DCs
    ... to be very careful with tweaking services on domain controllers. ... Group Policy - security policy at the OU level which makes it much easier to ... complied from the Windows 2003 Server Security guide for baseline core ... Server - automatic ...
    (microsoft.public.windows.group_policy)