Monthly Archives: September 2020
-
If your organization uses HP Device Manager to control thin clients, you need to plug this hole now
Posted on September 30th, 2020 at 05:01 Comment on the AskWoody LoungeNews early this morning from Thomas Claburn at The Register
HP Device Manager, software that allows IT administrators to manage HP Thin Client devices, comes with a backdoor database user account… the account can be exploited to achieve privilege escalation and, in conjunction with other flaws, gain unauthorized remote command execution as SYSTEM.
This is bad: if you can reach a vulnerable installation of this device manager on a network, you can gain admin-level control over its machine and the thin clients it controls. HPDM typically runs on a Windows-powered server, and directs multiple Windows clients.
HP just updated its security bulletin HPSBHF03689.
There’s an updated HP Device Manager coming. In the interim, make sure you follow the HP remediation steps — and close up the hole manually following @nickstadb ‘s steps in The Reg.
-
Patch Lady – why are you running Windows 7?
Posted on September 29th, 2020 at 12:22 Comment on the AskWoody Loungehttps://www.zdnet.com/article/poll-why-are-you-still-using-windows-7/
Rather than speculate, I’ve put together a poll. It’s only three questions and won’t take more than 30 seconds to answer. And if you need a little more space, send an email to windows7@realworldwindows.com. I’ll share the results next week.
Want to help out Ed Bott with the question of why are you still running Windows 7?
-
Office (er, Microsoft) 365 authentication heads for the hills
Posted on September 28th, 2020 at 17:11 Comment on the AskWoody LoungeIf you’re trying to log in to Microsoft 365, and can’t get past the authentication step, you aren’t alone.
Per Brad Sams:
Microsoft is aware of the issue but at this time there is not an ETA for a fix. Amusingly, the support account for Microsoft 365 on Twitter recommends that you check your account dashboard for MO222965 but when you try to authenticate, it fails… If you are already logged into an app or dashboard, you should be safe to utilize that feature but do not log out.
I expect it’ll be fixed in short order.
Here’s the official notification:
Man, if Microsoft itself can’t install patches to its key service without blowing things up….
-
Where we stand with the September patches
Posted on September 28th, 2020 at 13:21 Comment on the AskWoody LoungeAlthough the September Win10 version 2004 “optional, non-security, C/D/E Week” patch still hasn’t surfaced, bumps in this month’s patches have been largely worked out.
Win10 version 2004 is still beset with bugs. Give it another month to mature.
Details in Computerworld Woody on Windows.
-
Win10’s ever-changing Reset functions
Posted on September 27th, 2020 at 21:15 Comment on the AskWoody LoungeLANGALIST
By Fred Langa
Microsoft has quietly removed one of Win10’s three built-in Reset options.
In Version 2004 (April 2020), the somewhat confusing and redundant Fresh start option is now gone, replaced by an enhanced and clearer Reset/Keep My Files function.
Another improvement: All Win10 Reset controls now let you choose between local or cloud-based reinstallation files.
Read the full story in AskWoody Plus Newsletter 17.38.0 (2020-09-28).
-
I’m almost ready for Windows 10 2004 … almost!
Posted on September 27th, 2020 at 21:10 Comment on the AskWoody LoungePATCH WATCH
By Susan Bradley
The fall release of Windows 10 — 20H2 — is rolling into the station. But we’re still waiting to board Version 2004.
If you’re a prudent patcher like me, you see a new release of Windows as the call to prepare for the most current release — i.e. Version 2004. As we’ve said more than once, even if you’re not ready to catch 2004, download a copy and save it for later. Next, take stock of your system and acquaint yourself with any Win10 2004 issues.
Read the full story in AskWoody Plus Newsletter 17.38.0 (2020-09-28).
-
Web presence: Business social networking
Posted on September 27th, 2020 at 21:05 Comment on the AskWoody LoungeSMALL-BUSINESS WEBSITES
By Will Fastie
The major-league social networks such as Facebook and Twitter can be a big help in establishing your company’s persona on the Web — but often at a cost.
I have an instructive tale about Facebook. The story is a bit dated, and hopefully the world’s mightiest social network has improved somewhat, but it will give you a small perspective into the intricacies of social networking — and the sorts of trouble they can pose.
Read the full story in AskWoody Plus Newsletter 17.38.0 (2020-09-28).
-
Freeware Spotlight — ControlUWP
Posted on September 27th, 2020 at 21:00 Comment on the AskWoody LoungeBEST UTILITIES
By Deanna McElveen
Microsoft is slowly moving tools and controls out of Windows 10’s classic Control Panel and placing them (somewhere) in the Settings menus.
Eventually, Control Panel will probably disappear altogether. When that will happen even Microsoft probably doesn’t know. Control Panel was never perfect, but in my humble opinion, it’s still far better than the maze that is Win10 Settings.
So, you can imagine how excited I was to find a Settings alternative that’s more like Control Panel. Builtbybel (formerly Mirinsoft) has recently released ControlUWP for Windows 10. The app checks off all our boxes: it’s free, it has no junkware, it’s portable — and it’s awesome!
Read the full story in AskWoody Plus Newsletter 17.38.0 (2020-09-28).