News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon

Daily Archives: January 15, 2020

  • Windows 7 end of support: Separating the bull from the horns

    Posted on January 15th, 2020 at 14:18 woody Comment on the AskWoody Lounge

    There are so many half-truths, mistakes, and simple lies floating around about Win7’s demise that I put together a lengthy list.

    Keep in mind that many of the people writing about Win7’s EOL haven’t been around long enough to remember the abstract beauty of an Aero desktop. At least, I think Aero was beautiful.

    Long list of Truths and Falsehoods in Computerworld Woody on Windows.

  • Chredge is available now

    Posted on January 15th, 2020 at 11:12 woody Comment on the AskWoody Lounge

    Be still my beating heart.

    The Chromium-engine based version of Edge, which Mary Jo calls “Chredge,” just made an appearance on the Microsoft download site. Don’t know about you, but when I go to that site with the Chrome browser on Win10, it invites me to download the macOS version.

    Chredge still has a lot of rough edges. No history sync across devices. No extension sync between devices. And we’re just starting the (unpaid) beta testing phase. But it’s still a welcome new take on a dreadful old/new product.

    We’ve been promised an automatic rollout to Windows users.Kyle Pflug at Microsoft has posted a rollout roadmap:

    If you’d prefer not to install Microsoft Edge manuallyyou can wait for it to be installed in a future update to Windows 10following our measured roll-out approach over the next several months. We will start to migrate Windows 10 customers to the new Microsoft Edge in the coming weeks, starting with a subset of Windows Insiders in the Release Preview ring Enterprise and education users will not be automatically upgraded at this timeThe new Microsoft Edge will gradually be made available on Windows Update and offered to additional devices as data and feedback indicate that users are having a good experience.

    Yes, you can run Chredge and Oldedge simultaneously, but why bother?

  • The morning after — I recommend that you hold off on installing this month’s patches

    Posted on January 15th, 2020 at 08:41 woody Comment on the AskWoody Lounge

    Yes, I know that everyone + brother is now chanting, “Patch, patch, patch!” in response to the NSA-revealed Win10 Crypt32 security hole.

    I say it’s still too early for most Windows users to patch. There aren’t any widely-available exploits, and no large scale attack is imminent. Better to keep your head about you. Let’s see how the patches shake out.

    If you’re in charge of a Server 2012, 2012 R2, 2016 or 2019 based network, and you’re running RDgateway, the story’s much more complicated. See Susan’s post, next, for details.

    We’re still at MS-DEFCON 2, in spite of what the NSA says. (And everybody else, for that matter.)

    Details in Computerworld Woody on Windows.

    By the way, those concerned about CVE-2020-0601 being used to break Windows Update… it ain’t gonna happen. See this Twitter thread. Also, this tweet from Tero Alhonen, quoting yesterday’s Microsoft Security Webcast: “The Crypto API vulnerability could not exploit or in anyway remove the trustworthiness of Windows Update. Windows Updates as you know are multiply signed and it’s not possible to spoof Windows Update binaries using the Crypto API vulnerability.”

    UPDATE: Great explainer from Tal Be’ery on Zengo: Cheating in Elliptic Curve Billiards.

    UPDATE: Saleem Rashid has posted a working Proof of Concept for the Chrome (and presumably Chredge) browser. It throws a NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED error.