Re: << Small Biz Server news of 9/5/2004>>

From: Henry Craven (IUnknown_at_Dot.Nyet)
Date: 09/07/04


Date: Tue, 7 Sep 2004 14:41:43 +1000

RTF

-- 
Henry Craven {SBS-MVP}
    Melbourne Australia
"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@pacbell.net>
wrote in message news:eq6DL59kEHA.2500@TK2MSFTNGP09.phx.gbl...
> Kevin [a bit waterlogged] and his song of the week
> news://msnews.microsoft.com/Od7AycgkEHA.644@tk2msftngp13.phx.gbl
>
> but he's nice and safe as I hope all other SBSers are
>
> ------------------------------------------
> SMBNation is JUST around the corner.  Everyone have safe flights.
> The next news of the week will be posted during the summit
> http://www.smbnation.com
> I'm looking forward to seeing folks and putting email addresses with
faces!
>
> -----------------------------------------
> The big news for the developer community but sort of "ho hum" for us
was
> the changes going forward in Longhorn
> http://radio.weblogs.com/0001011/2004/08/30.html#a8167
>
> ---------------------------------------
>
> Mariette and Marina are constantly adding content to
www.smallbizserver.net
> Smallbizserver.Net > SBS 2003 > Exchange Server 2003 > Intelligent
> Message Filter on SBS 2003:
> http://www.smallbizserver.net/Default.aspx?tabid=174
>
>
> ----------------------------------------
> Patches out this week on Windows Update
> .NET
> Download details: .NET Framework 1.1 Service Pack 1 for Windows Server
> 2003:
>
http://www.microsoft.com/downloads/details.aspx?FamilyID=ae7edef7-2cb7-4864-8623-a1038563df23&DisplayLang=en
>
> Sharepoint services sp1
> Download details: Windows SharePoint Services Service Pack 1:
>
http://www.microsoft.com/downloads/details.aspx?FamilyID=875da47e-89d5-4621-a319-a1f5bfedf497&DisplayLang=en
>
> ----------------------------------------
>
> If after applying the Sharepoint SP1 service pack you are getting HTTP
> 500 or 0x80040E14 error:
> http://msmvps.com/bradley/archive/2004/09/03/12954.aspx
>
> ---------------------------------------
> Issue with the V5 version of Windows update and ISA Server:
> http://msmvps.com/bradley/archive/2004/09/04/13009.aspx
>
> --------------------------------------
> Pssst.... can someone tell me what a Blob parser is?
> Download details: Windows SharePoint Services: Usage BLOB Parser:
>
http://www.microsoft.com/downloads/details.aspx?FamilyID=8ed64398-4992-47cb-9075-afec32060986&DisplayLang=en
>
> -----------------------
> Download details: Servers for Small Business:
>
http://www.microsoft.com/downloads/details.aspx?FamilyID=cfb2223f-0fa2-4f2f-8585-796f120ecbe1&DisplayLang=en
> Power points for customers
>
> ------------------------
>
> 875420 - How to enable Live Communication Server traffic through ISA
> Server 2000:
> http://support.microsoft.com/?kbid=875420
> 838906 - You may be disconnected when you connect a Windows XP-based
> computer to a remote server through a VPN, and you use an external
> firewall device or a NAT device:
> http://support.microsoft.com/?kbid=838906
>
> --------------------------
> In other news this week
>
> - - - - - - - - - -
> Copyright Office pitches anti-P2P bill
> A hotly contested wrangle in Congress over how
> to outlaw file-swapping networks just took a new
> twist. The U.S. Copyright Office has drafted a new
> version of the Induce Act that it believes will ban
> networks like Kazaa and Morpheus while not putting
> hardware such as portable hard drives and MP3
> players on the wrong side of the law.
>
http://news.com.com/Copyright+Office+pitches+anti-P2P+bill/2100-1027_3-5345528.html
> - - - - - - - - - -
> Further data security laws on the way
> Although a US draft bill calling for compulsory
> annual security audits to be carried out by publicly
> listed companies has been delayed until early next
> year, security experts said regulations of this kind
> are inevitable, both for US and UK firms.
> http://www.vnunet.com/news/1148994
> - - - - - - - - - -
> Bagle variant lacks teeth
> The worm is being thwarted because most of the
> site from which it attempts to download malware
> cannot be contacted. Another version of the Bagle
> mass-mailing computer worm started spreading
> this week, but it probably won't get far,
> security experts said.
> http://news.zdnet.co.uk/internet/security/0,39020375,39165277,00.htm
> - - - - - - - - - -
> Critical Kerberos bugs surface
> Multiple vulnerabilities have been reported
> in version five of the widely-used Kerberos
> authentication protocol. The most serious could
> be exploited by crackers to gain root control
> to authentication servers. Exploits are yet to
> surface and patches are available. All releases
> of MIT Kerberos 5 up to and including krb5-1.3.4
> are affected. At fault are "double-free
> vulnerabilities" in MIT Kerberos 5 implementation's
> Key Distribution Center (KDC) program and libraries.
> http://www.securityfocus.com/news/9449
> http://news.zdnet.co.uk/internet/security/0,39020375,39165276,00.htm
> - - - - - - - - - -
> WinZip warns of security flaws in software
> Windows clients running the popular WinZip
> application are at risk from a number of critical
> security flaws, according to WinZip Computing
> Inc. and security researchers. The compression/
> decompression tool is one of the most widely
> used piece of software on the Windows platform.
> http://security.itworld.com/4345/040902winzipflaw/page_1.html
> - - - - - - - - - -
> Army urged to step up IT security focus
> The security threat on DOD networks is growing
> substantially each day, so much so that on two
> separate occasions this summer, viruses infiltrated
> two top-secret computer systems at the Army Space
> and Missile Defense Command. Army Lt. Gen. Larry
> J. Dodgen, the command's leader, blamed the viruses,
> which appeared on the Defense Department's Secret
> Internet Protocol Router Network, on users and
> network administrators who were not conducting
> their jobs in a diligent fashion.
> http://www.gcn.com/vol1_no1/daily-updates/27138-1.html
> - - - - - - - - - -
> Microsoft warns spyware could foul up security update
> Though Microsoft Corp.'s new security update
> package is all about protecting systems from
> worms, viruses and spyware, it can't do much
> about what's already on computers -- and that
> could pose a problem. The company is warning
> users of the Windows XP operating system to
> check for spyware before downloading the free
> massive security update, called Service Pack 2.
>
http://www.siliconvalley.com/mld/siliconvalley/news/editorial/9565886.htm
>
> SP2 plays havoc with online banking
> An Australian bank says installing the Windows
> update prevents users from logging into its Web
> interface. St.George Bank may be forced to make
> changes to its online banking interface as
> adoption of Windows XP Service Pack 2 becomes
> widespread among consumers.
> http://news.zdnet.co.uk/internet/security/0,39020375,39165283,00.htm
>
> WinXP SP2 = security placebo?
> http://www.theregister.co.uk/2004/09/02/winxpsp2_security_review/
> Why SP2 deserved every shred of the scrutiny
> http://zdnet.com.com/2100-1105_2-5344180.html
> XP SP2 glitches to trip up one in 10 upgrades - report
> http://www.theregister.co.uk/2004/09/02/sp2_glitches_study/
> Most US firms ignore spyware risk
> http://www.vnunet.com/news/1157773
> - - - - - - - - - -
> Oracle patches finally released
> The database maker has fixed several flaws in
> its software as it attempts to move to a monthly
> patching schedule. Database software maker Oracle
> pushed out a host of long-awaited patches after
> struggling to organise its software fixes into
> a monthly release schedule.
> http://news.zdnet.co.uk/internet/security/0,39020375,39165278,00.htm
> - - - - - - - - - -
> Apache, open-source groups wary of Sender ID
> The Apache Foundation, an open-source development
> group, on Thursday pulled its support of the
> proposed antispam standard Sender ID, saying
> Microsoft's license requirements are too strict.
> The move by the group responsible for the popular
> Apache Web server comes as other open-source
> developers also voiced reservations about
> Microsoft's attempts to apply stringent license
> requirements to its contribution to the spam-
> fighting technology.
> http://zdnet.com.com/2100-1104_2-5345317.html
> - - - - - - - - - -
> Cybercrime is not limited by boundaries
> Computer crimes more and more assume transnational,
> organized and group character. Transnational
> character of computer crimes poses a certain
> social threat - a threat to the compound of
> the national security. Modern technologies
> gave an impetus to criminal activity as well
> as to the free trade and economy.
> http://www.crime-research.org/news/02.09.2004/604/
> - - - - - - - - - -
> Cutting email cholesterol
> Each week vnunet.com asks a different expert
> to give their views on recent virus and security
> issues, with advice, warnings and information
> on the latest threats. This week Alasdair Kilgour,
> managing director of CommVault UK and Ireland,
> suggests some preventative steps for IT managers
> to adopt to reduce the email burden.
> http://www.vnunet.com/news/1157771
> - - - - - - - - - -
> Tech threats: the new front in the War on Terror
> There's little doubt nowadays that the 21st century
> is shaping up to be a very unstable era in human
> history. Non-state actors like al-Qaeda are stepping
> up their fight against nation-states, employing
> mostly conventional, low-tech solutions to their
> acts of terrorism.
> http://www.cbc.ca/news/viewpoint/vp_hughes/20040901.html
> - - - - - - - - - -
> New WiFi security adds strong encryption
> A new security specification for wireless
> networking incorporates the Advanced Encryption
> Standard, opening the door for certification under
> the Federal Information Processing Standard. WiFi
> Protected Access 2 is a technical specification
> from the Wi-Fi Alliance based on the recently
> approved 802.11i standard.
> http://www.gcn.com/vol1_no1/daily-updates/27135-1.html
> - - - - - - - - - -
> Hummingbird stretches connectivity, security
> Hummingbird this week added new features in its
> Hummingbird Connectivity 10 suite, introduced
> secure-terminal software called Connectivity
> SecureTerm, and added other features to its
> security suite. The Connectivity 10 suite allows
> organizations to securely integrate heterogeneous
> legacy infrastructures with Windows desktops,
> enabling customers to meet business continuity
> and corporate governance requirements.
> http://zdnet.com.com/2110-1104_2-5339786.html
> - - - - - - - - - -
> Spam tide drowns email
> Email's usefulness is being downgraded because
> of the effort needed to filter out spam, says IDC.
> Rising tides of spam are drowning the usefulness
> of email, according to a new report from IDC.
> Spam has accounted for 38 percent of the 31
> billion emails sent each day in North America
> in 2004, up from 24 percent in 2002, the market
> researcher said.
>
http://news.zdnet.co.uk/communications/networks/0,39020345,39165256,00.htm
>
> Sendmail trials Sender ID
> http://news.zdnet.co.uk/internet/0,39020369,39165170,00.htm
> - - - - - - - - - -
> ID thief to the stars tells all
> Book excerpt: In "Your Evil Twin," MSNBC.com's
> Bob Sullivan argues that credit industry neglect
> led to the identity theft epidemic. Note: Last
> year, some 10 million people were victims of
> identity theft, and some estimates claim as many
> as 1 in 10 Americans have been hit by the crime
> in recent years.  MSNBC.com's Bob Sullivan explores
> the digital epidemic in a new book, "Your Evil Twin."
> http://www.msnbc.msn.com/id/5763781/
>
>
>
>
>
> -- 
> http://www.sbslinks.com/really.htm


Relevant Pages

  • SecurityFocus Microsoft Newsletter #164
    ... Got Storage Security Risks? ... MICROSOFT VULNERABILITY SUMMARY ... Chat Client FTP Server Default Username Credential Weak... ... NetServe Web Server is a compact web server for Microsoft Windows ...
    (Focus-Microsoft)
  • Re: im being held in memory
    ... How can I harden my computer or server to secure it from hackers? ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.security)
  • MS and security: good effort but no cigar
    ... build upon the progress it's already made in security. ... The low-hanging fruit of millions of insecure Windows machines ... Then there's the issue of poorly secured server applications. ... and execute external virus and filtering ...
    (microsoft.public.windowsxp.general)
  • SecurityFocus Microsoft Newsletter #167
    ... MICROSOFT VULNERABILITY SUMMARY ... Multiple Vendor XML Parser SOAP Server Denial Of Service Vul... ... Proactive Windows Security Explorer ...
    (Focus-Microsoft)
  • Re: Group Policy broke my DCs
    ... to be very careful with tweaking services on domain controllers. ... Group Policy - security policy at the OU level which makes it much easier to ... complied from the Windows 2003 Server Security guide for baseline core ... Server - automatic ...
    (microsoft.public.windows.group_policy)