<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Office Insider : security</title><link>http://blogs.msdn.com/atwork/archive/tags/security/default.aspx</link><description>Tags: security</description><dc:language>en-US</dc:language><generator>CommunityServer 2.1 SP1 (Build: 61025.2)</generator><item><title>Store your docs safely online</title><link>http://blogs.msdn.com/atwork/archive/2009/07/16/office-live-workspace.aspx</link><pubDate>Thu, 16 Jul 2009 11:50:00 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9835313</guid><dc:creator>StephB</dc:creator><slash:comments>1</slash:comments><comments>http://blogs.msdn.com/atwork/comments/9835313.aspx</comments><wfw:commentRss>http://blogs.msdn.com/atwork/commentrss.aspx?PostID=9835313</wfw:commentRss><description>&lt;p&gt;Have you ever lost a memory stick, had a laptop stolen or suffered a hard-drive failure? Yep – it’s likely the the answer is ‘yes’. An easy way to back up important files is to use an internet-based storage system like &lt;a href="http://workspace.officelive.com/en-GB/" target="_blank"&gt;Office Live Workspace&lt;/a&gt;. You can back up your valuable documents to the web and then securely access them from &lt;strong&gt;any &lt;/strong&gt;internet connected computer. That’s a PC or Mac running Internet Explorer, Firefox or Safari. &lt;/p&gt;  &lt;p&gt;&lt;a href="http://workspace.officelive.com/en-GB/" target="_blank"&gt;&lt;img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="image" border="0" alt="image" src="http://blogs.msdn.com/blogfiles/atwork/WindowsLiveWriter/OfficeLiveWorkspace_8A7C/image_3.png" width="244" height="201" /&gt;&lt;/a&gt; &lt;/p&gt;  &lt;p&gt;And if you were wondering what happens to all those lost memory sticks… take a look at the video from one of the links below :)&lt;/p&gt;  &lt;ul&gt;   &lt;li&gt;YouTube: &lt;a href="http://www.youtube.com/watch?v=weSfAmonDgg" target="_blank"&gt;http://www.youtube.com/watch?v=weSfAmonDgg&lt;/a&gt;&lt;/li&gt;    &lt;li&gt;MSN video: &lt;a href="http://video.msn.com/video.aspx?mkt=en-gb&amp;amp;vid=d0689630-1b1d-4876-af1b-8c65328a19b8" target="_blank"&gt;http://video.msn.com/video.aspx?mkt=en-gb&amp;amp;vid=d0689630-1b1d-4876-af1b-8c65328a19b8&lt;/a&gt;&lt;/li&gt;    &lt;li&gt;Office Live: &lt;a href="http://ask.officelive.com/workspace/media/p/8573.aspx" target="_blank"&gt;http://ask.officelive.com/workspace/media/p/8573.aspx&lt;/a&gt;&lt;/li&gt; &lt;/ul&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9835313" width="1" height="1"&gt;</description><category domain="http://blogs.msdn.com/atwork/archive/tags/tips+_2600_amp_3B00_+tricks/default.aspx">tips &amp;amp; tricks</category><category domain="http://blogs.msdn.com/atwork/archive/tags/Office+Live+Workspace/default.aspx">Office Live Workspace</category><category domain="http://blogs.msdn.com/atwork/archive/tags/security/default.aspx">security</category></item><item><title>Office 2007 Service Pack 2 (SP2) now available to download</title><link>http://blogs.msdn.com/atwork/archive/2009/04/29/office-2007-service-pack-2-sp2-now-available-to-download.aspx</link><pubDate>Wed, 29 Apr 2009 21:15:07 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9576209</guid><dc:creator>StephB</dc:creator><slash:comments>1</slash:comments><comments>http://blogs.msdn.com/atwork/comments/9576209.aspx</comments><wfw:commentRss>http://blogs.msdn.com/atwork/commentrss.aspx?PostID=9576209</wfw:commentRss><description>&lt;p&gt;If you’re using Office 2007 and want to keep your computer completely secure and performing at it’s best - and I know you do - head to the links below, where you can find out about and download Service Pack 2 (SP2). If you have your PC configured to download updates automatically (Control Panel / System &amp;amp; Security / Windows Update), you will get this update automatically after around 90 days. However you can get the benefits straight away by installing the update early from Windows Update on your PC or by following the links below.&lt;/p&gt;  &lt;h3&gt;What are the improvements?&lt;/h3&gt;  &lt;p&gt;&lt;strong&gt;Faster email management in Outlook 2007&lt;/strong&gt;&lt;/p&gt;  &lt;p&gt;According to expert &amp;amp; blogger &lt;a href="http://blogs.technet.com/gray_knowlton/archive/2009/04/27/office-2007-service-pack-2-kiosk.aspx"&gt;Gray Knowlton&lt;/a&gt; ‘One of the most important end user benefits of the &lt;a name="Abbreviations4821943648228240329"&gt;&lt;/a&gt;SP2 release is the improvement in Outlook performance.’. Amen to that I say – anything that speeds up managing my email is a definite plus :). Improvements include:&lt;/p&gt;  &lt;ul&gt;   &lt;li&gt;Faster and more predictable startup &amp;amp; shutdown &lt;/li&gt;    &lt;li&gt;Better folder view &amp;amp; switching&lt;/li&gt;    &lt;li&gt;Improved calendar reliability &lt;/li&gt;    &lt;li&gt;Reduction in number of data file check error messages &lt;/li&gt; &lt;/ul&gt;  &lt;p&gt;&lt;strong&gt;‘Save as PDF and XPS’ added to ‘Save As’ options&lt;/strong&gt;&lt;/p&gt;  &lt;p&gt;If you haven’t already downloaded this feature you’ll find it installed as part of the SP2 update. Saving as PDF or XPS keeps your formatting intact and secure so you can ensure your documents are seen exactly as you intended. So, very handy if you have official docs to email or complex creations to send to the printer.&lt;/p&gt;  &lt;p&gt;&lt;strong&gt;Save as ODF 1.1 &lt;/strong&gt;&lt;/p&gt;  &lt;p&gt;This feature should help if you have friends or colleagues using other types of office software. Basically, it allows you to save your Office 2007 docs in a shareable format which is easily read by most types of office software.&lt;/p&gt;  &lt;h3&gt;Next steps&lt;/h3&gt;  &lt;p&gt;· &lt;b&gt;Where can I download &lt;a name="Abbreviations4629480770004254363"&gt;&lt;/a&gt;SP2?&lt;/b&gt; –&amp;#160; You can pop up to &lt;a href="http://update.microsoft.com/"&gt;Microsoft Update&lt;/a&gt; and install the bits&lt;/p&gt;  &lt;p&gt;· &lt;b&gt;Where can I learn about what is in &lt;a name="Abbreviations5418234243371619503"&gt;&lt;/a&gt;SP2?&lt;/b&gt; – &lt;a href="http://support.microsoft.com/kb/953195"&gt;Here&lt;/a&gt;&lt;/p&gt;  &lt;p&gt;· &lt;b&gt;Is this an Automatic Update?&lt;/b&gt; – Not yet. For the first 90 days (at least the first 90), service packs are made available as a &lt;a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=B444BF18-79EA-46C6-8A81-9DB49B4AB6E5&amp;amp;displaylang=en"&gt;manual download&lt;/a&gt;. After 90 days and with a 30 day notice, Service Packs are offered through the Automatic Update channel as a critical update.&lt;/p&gt;  &lt;h3&gt;Want even more info&lt;/h3&gt;  &lt;p&gt;More detailed overview of the Office 2007 Service Pack 2 can be found on &lt;a href="http://blogs.technet.com/gray_knowlton/archive/2009/04/27/office-2007-service-pack-2-kiosk.aspx"&gt;Gray Knowlton’s Gray Matter blog&lt;/a&gt; – from which most of this info in lovingly cribbed. Thanks Gary! &lt;/p&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9576209" width="1" height="1"&gt;</description><category domain="http://blogs.msdn.com/atwork/archive/tags/general/default.aspx">general</category><category domain="http://blogs.msdn.com/atwork/archive/tags/Outlook/default.aspx">Outlook</category><category domain="http://blogs.msdn.com/atwork/archive/tags/email/default.aspx">email</category><category domain="http://blogs.msdn.com/atwork/archive/tags/Help_2100_/default.aspx">Help!</category><category domain="http://blogs.msdn.com/atwork/archive/tags/support/default.aspx">support</category><category domain="http://blogs.msdn.com/atwork/archive/tags/security/default.aspx">security</category><category domain="http://blogs.msdn.com/atwork/archive/tags/tricks/default.aspx">tricks</category><category domain="http://blogs.msdn.com/atwork/archive/tags/SP2/default.aspx">SP2</category><category domain="http://blogs.msdn.com/atwork/archive/tags/tips+_2600_amp_3B00_amp/default.aspx">tips &amp;amp;amp</category></item><item><title>Internet security update</title><link>http://blogs.msdn.com/atwork/archive/2008/12/19/internet-security-update.aspx</link><pubDate>Fri, 19 Dec 2008 17:58:39 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9242202</guid><dc:creator>GillLeFevre</dc:creator><slash:comments>1</slash:comments><comments>http://blogs.msdn.com/atwork/comments/9242202.aspx</comments><wfw:commentRss>http://blogs.msdn.com/atwork/commentrss.aspx?PostID=9242202</wfw:commentRss><description>&lt;p&gt;It was somewhat ironic that I posted an article containing &lt;a href="http://blogs.msdn.com/atwork/archive/2008/12/17/true-my-sister-in-law-s-colleague-said-this-happened-to-her-son-s-next-door-neighbour.aspx"&gt;advice about internet safety&lt;/a&gt; in the same week that the Internet Explorer security flaw hit the headlines. It&amp;#8217;s a sad reminder of the fact that we live in a society where some people look to cause trouble and pain and to take what doesn&amp;#8217;t belong to them.&lt;/p&gt;  &lt;p&gt;The flaw has been rapidly fixed and instructions on how to protect your computer can be found here: &lt;a href="http://www.microsoft.com/protect/computer/updates/bulletins/200812_oob.mspx"&gt;http://www.microsoft.com/protect/computer/updates/bulletins/200812_oob.mspx&lt;/a&gt;. &lt;/p&gt;  &lt;p&gt;If you've got &lt;a href="http://update.microsoft.com/"&gt;Automatic Updates&lt;/a&gt; turned on (which we recommend) you should already have received this update.&lt;/p&gt;  &lt;p&gt;This incident serves as a reminder of the importance of keeping all of your software up to date -- a task which should now be as automatic as remembering to lock your doors and windows when you leave your house. This applies to everything from anti-virus software (which is virtually useless if it doesn&amp;#8217;t get the regular updates it needs), productivity software, your operating system and your internet browser. It doesn&amp;#8217;t matter who has made the software -- all software needs updating -- as these recent articles show:&lt;/p&gt;  &lt;p&gt;* &lt;a href="http://blogs.zdnet.com/security/?p=2304"&gt;Firefox tops list of 12 most vulnerable apps&lt;/a&gt; (or see &lt;a href="http://www.theregister.co.uk/2008/12/12/app_threat_list/"&gt;The Register&lt;/a&gt; for a different perspective on this)&lt;/p&gt;  &lt;p&gt;* &lt;a href="http://www.computerworlduk.com/technology/internet/applications/news/index.cfm?newsid=12475"&gt;Mozilla issues eight Firefox patches&lt;/a&gt;&lt;/p&gt;  &lt;p&gt;* &lt;a href="http://www.opera.com/docs/changelogs/windows/963/"&gt;Opera issued 8 security updates&lt;/a&gt;&lt;/p&gt;  &lt;p&gt;* &lt;a href="http://support.apple.com/kb/HT3338"&gt;Apple released Security Update 2008-008 to address 21 vulnerabilities in Mac OS X&lt;/a&gt;&lt;/p&gt;  &lt;p&gt;Finally, all the technical precautions in the world can be undone by a careless human error. &lt;a href="http://en.wikipedia.org/wiki/Social_engineering_%28computer_security%29"&gt;Social engineer Kevin Mitrick&lt;/a&gt; warns that it is &lt;a href="http://www.theregister.co.uk/2003/04/18/office_workers_give_away_passwords/"&gt;easier to trick someone into giving out their password&lt;/a&gt; than to hack into a computer system.&lt;/p&gt;  &lt;p&gt;Keep your passwords &lt;a href="http://www.microsoft.com/uk/protect/yourself/password/create.mspx"&gt;strong&lt;/a&gt; (&lt;a href="http://www.microsoft.com/uk/protect/yourself/password/checker.mspx"&gt;check here&lt;/a&gt; to see how yours rate) and secure and &lt;a href="http://www.microsoft.com/uk/protect/default.mspx"&gt;keep up to date with advice and guidelines on online security&lt;/a&gt;.&lt;/p&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9242202" width="1" height="1"&gt;</description><category domain="http://blogs.msdn.com/atwork/archive/tags/security/default.aspx">security</category></item><item><title>True... my sister-in-law's colleague said this happened to her son's next door neighbour...</title><link>http://blogs.msdn.com/atwork/archive/2008/12/17/true-my-sister-in-law-s-colleague-said-this-happened-to-her-son-s-next-door-neighbour.aspx</link><pubDate>Wed, 17 Dec 2008 15:04:00 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9230748</guid><dc:creator>GillLeFevre</dc:creator><slash:comments>1</slash:comments><comments>http://blogs.msdn.com/atwork/comments/9230748.aspx</comments><wfw:commentRss>http://blogs.msdn.com/atwork/commentrss.aspx?PostID=9230748</wfw:commentRss><description>&lt;P&gt;&lt;EM&gt;A timely reminder of the dangers of online crime from my colleague and Microsoft UK's Chief Cyber Security Advisor, Ed Gibson:&lt;/EM&gt;&lt;/P&gt;
&lt;P&gt;A few days ago the news broke that a series of banks, savvy investors and other esteemed financial institutions had collectively become &lt;A href="http://news.bbc.co.uk/2/hi/business/7783236.stm" mce_href="http://news.bbc.co.uk/2/hi/business/7783236.stm"&gt;victims of a $50b fraud&lt;/A&gt;. Inevitably, this news was quickly followed by shock and outrage: "how could this happen?" "where were the regulators?" "how could reputable companies and individuals have been suckered?"&lt;/P&gt;
&lt;P&gt;But how surprised should we really be? White-collar criminals are the best in the league.&amp;nbsp; Having investigated scores of massive complex fraud schemes during my career as an FBI Agent, I know never to underestimate the apparent plausibility of the schemes invented -- or the willingness of victims to clutch at the "hope" offered by scammers and to fall for a deal too good to be true.&lt;/P&gt;
&lt;P&gt;So here's a reminder of my list of things for you to stay away from online no matter how good or believable they might appear to be...&lt;/P&gt;
&lt;P&gt;1. Banks will NEVER ask you to verify your account details – they already have your details. The same applies to Ebay and PayPal.&lt;/P&gt;
&lt;P&gt;2. MySpace, Bebo, Facebook, and ALL other social network sites are OPEN by default.&amp;nbsp; Unless you want everyone (including that bully at school, the nosey neighbour, your boss, your mother, or the paedophile from abroad) looking at your site, NEVER use it until you make it PRIVATE.&amp;nbsp; Go into the website settings and follow the instructions.&amp;nbsp; See &lt;A href="http://www.safesocialnetworking.com/" mce_href="http://www.safesocialnetworking.com"&gt;www.safesocialnetworking.com&lt;/A&gt; for more information. The same applies to Instant Messenger -- if you don’t know the person, don’t add them as a contact.&lt;/P&gt;
&lt;P&gt;3. &lt;A href="http://www.snopes.com/inboxer/nothing/microsoft-aol.asp" mce_href="http://www.snopes.com/inboxer/nothing/microsoft-aol.asp"&gt;Microsoft has not and NEVER will hold a Lottery&lt;/A&gt;. (And when we do hold competitions, the terms and conditions will be posted on our website so you can check.)&lt;/P&gt;
&lt;P&gt;4. You know if you have relatives in Nigeria or West Africa.&amp;nbsp; NEVER ‘help’ someone you don’t know move money from a foreign country -- that makes you a criminal too! &lt;/P&gt;
&lt;P&gt;5. NEVER click a hyperlink in an email from someone you don’t know.&amp;nbsp; And be wise, unless you know who is sending you the &lt;A href="http://www.snopes.com/computer/virus/postcard.asp" mce_href="http://www.snopes.com/computer/virus/postcard.asp"&gt;online Birthday or Christmas card&lt;/A&gt; NEVER click on it – it’s loaded with malware or will redirect you to someplace you don’t want to be.&amp;nbsp; Miscreants and criminals frequently abuse the ‘&lt;I&gt;Hallmark&lt;/I&gt;’ name because it is so recognizable.&amp;nbsp; If your name is not in the body of the email, do not click on it.&amp;nbsp; &lt;/P&gt;
&lt;P&gt;6. Wireless Internet:&amp;nbsp; Make sure your wireless internet is secure (WEP is okay, WPA is better – and if you don’t know what these terms mean, read the instructions that came with your wireless device).&amp;nbsp; If you're not sure how to secure your network, do NOT use your wireless internet until you find a trusted advisor to fix it (generally your neighbour’s 14 year old kid). &lt;/P&gt;
&lt;P&gt;7. There is no free lunch.&amp;nbsp; NEVER reply to email requests for charitable contributions.&amp;nbsp; If you want to donate to a good cause, call the charity yourself and know who you are talking to.&lt;/P&gt;
&lt;P&gt;8. "Free" deals usually have a sting in the tail.&amp;nbsp; NEVER reply to pop up ads telling you to run free anti-spyware or anti-malware to get rid of spyware or viruses.&amp;nbsp; You can be certain they will ‘find’ bad stuff on your computer requiring you to buy what they want to sell.&amp;nbsp; OR they will load stealth software onto your computer to steal what’s important to you.&lt;/P&gt;
&lt;P&gt;9. NEVER think you are smarter than the criminal.&amp;nbsp; You may be, but if you reply, you lose, you will always lose.&lt;/P&gt;
&lt;P&gt;10. Falling in love at first sight does happen – and it’s fabulous when it does – but falling in love online, whether in Second Life or another online virtual world, can be dangerous.&amp;nbsp; Hey, if you are scoring a 4 or 5 in real life, you gotta wonder why a 9 or 10 is chatting you up online...&lt;/P&gt;
&lt;P&gt;Finally, think before you forward an email -- whether it's promising good news ("&lt;EM&gt;&lt;/EM&gt;&lt;A href="http://www.snopes.com/inboxer/nothing/marks.asp" mce_href="http://www.snopes.com/inboxer/nothing/marks.asp"&gt;free Marks &amp;amp; Spencer vouchers&lt;/A&gt;") or warning of dire dangers ("&lt;A href="http://www.snopes.com/horrors/madmen/backseat.asp" mce_href="http://www.snopes.com/horrors/madmen/backseat.asp"&gt;an armed and dangerous man hiding in your backseat&lt;/A&gt;"). There are several internet websites, including &lt;A href="http://www.snopes.com/" mce_href="http://www.snopes.com/"&gt;snopes.com&lt;/A&gt; and &lt;A href="http://www.hoax-slayer.com/" mce_href="http://www.hoax-slayer.com"&gt;hoax-slayer.com&lt;/A&gt;, that enable you to check whether or not the offer or warning you've just received are genuine. &lt;/P&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9230748" width="1" height="1"&gt;</description><category domain="http://blogs.msdn.com/atwork/archive/tags/general/default.aspx">general</category><category domain="http://blogs.msdn.com/atwork/archive/tags/email/default.aspx">email</category><category domain="http://blogs.msdn.com/atwork/archive/tags/security/default.aspx">security</category></item></channel></rss>