Perth IT Bloggershttp://networks.feedburner.com/Perth-BloggersThis is a spliced feed of some of Perth's most influential bloggers. If you live in Perth and write a blog, let us know and we can add you to this ever growing networken-usFeedBurner Networks http://www.feedburner.comThu, 28 Aug 2008 04:16:16 -0500-31.57115.52http://networks.feedburner.com/Perth-Bloggershttp://www.flickr.com/photos/gnarly/173733698/Perth By Night745575http://www.feedburner.comThis is the spliced feed for "Perth Bloggers". Add this to your news reader to receive updates about the network.SharePoint training in Perth - Professional MOSS 2007 Solutions by Readify [Brian H. Madsen - .Net Powered by Caffeine]http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~3/376972107/sharepoint-training-in-perth-professional-moss-2007-solutions-by-readify.aspxMOSS 2007SharePoint DesignerTrainingBrian MadsenThu, 28 Aug 2008 04:16:16 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1646056<p>Wow - finally some SharePoint training in Perth, WA that steps up and presents something other than the typical &quot;Boot Camp&quot;.</p> <p>It&#39;s a four (4) day, intensive training program which you&#39;d be nuts to miss out on.</p> <p>Here&#39;s an outline of what&#39;s on offer for those four days:</p> <blockquote> <ul> <p><strong>Day 1</strong></p> <p><u>SharePoint 2007 Developer Roadmap</u></p> <ul></ul> <li> <p>Architectural overview of SharePoint and the Office 2007 system </p> <li> <p>WSS as a collaboration solution </p> <li> <p>WSS as a server-side development platform </p> <li> <p>Overview of MOSS components and services </p> <li> <p>Creating and testing your first WSS feature </p></li></ul> <ul> <ul></ul> <p>SharePoint Architecture</p> <ul></ul> <li> <p>WSS Integration with ASP.NET 2.0 </p> <li> <p>The configuration database and content databases </p> <li> <p>Configuring the web.config file for a Web application </p> <li> <p>Understanding site pages versus application pages </p></li></ul> <ul> <ul></ul> <p>Pages and Site Branding</p> <ul></ul> <li> <p>Understanding page parsing and Safe Mode restrictions </p> <li> <p>Creating a feature with custom page templates </p> <li> <p>Designing page templates using controls and Web Part Zones </p> <li> <p>Understanding the standard default.master page template </p> <li> <p>Creating a feature to apply branding at the site collection level </p> <li> <p>Understanding and extending the CSS classes in core.css <br /></p></li></ul> <ul> <ul></ul> <p><strong>Day 2</strong></p> <p><u>Developing Web Parts</u></p> <ul></ul> <li> <p>Creating, deploying and debugging ASP.NET Web Parts in WSS </p> <li> <p>Designing Web Parts with persistent properties </p> <li> <p>Web Part Description files and the Web Part Gallery </p> <li> <p>Creating a feature to import Web Parts into the Web Part Gallery </p> <li> <p>Backwards compatibility with WSS V2-style Web Parts </p></li></ul> <ul> <ul></ul> <p>Lists and Content Types</p> <ul></ul> <li> <p>New WSS 3.0 enhancements to lists and document libraries </p> <li> <p>Defining site columns, custom field types and content types </p> <li> <p>Provisioning document libraries using a feature </p> <li> <p>Defining a custom list type using a feature </p> <li> <p>Creating event handlers using custom event receiver classes </p></li></ul> <ul> <ul></ul> <p>Forms Services with InfoPath 2007</p> <ul></ul> <li> <p>Creating input forms with InfoPath </p> <li> <p>InfoPath integration with WSS forms libraries </p> <li> <p>Forms Services Architecture </p> <li> <p>Designing server-side forms with InfoPath 2007 </p> <li> <p>User deployment of server-side forms versus administrator deployment </p></li></ul> <ul> <ul></ul> <p><strong>Day 3</strong></p> <p><u>SharePoint WorkFlows</u></p> <ul></ul> <li> <p>Windows Workflow Foundation (WF) Primer Creating WF programs in Visual Studio with the workflow designer </p> <li> <p>Creating, deploying and debugging workflow templates for WSS </p> <li> <p>Creating workflow associations and workflow instances </p> <li> <p>Developing workflows which create and wait on WSS tasks </p> <li> <p>Creating workflow input forms for MOSS using Microsoft InfoPath </p></li></ul> <ul> <ul></ul> <p>Extending MOSS Portal and Search</p> <ul></ul> <li> <p>Shared Service Provider (SSP) Architecture Creating sites from the MOSS Collaboration Portal site template </p> <li> <p>User Profiles and Audience Targeting </p> <li> <p>MOSS infrastructure for creating MySites Configuring and extending MOSS Search </p></li></ul> <ul> <ul></ul> <p>The Business Data Catalog (BDC)</p> <ul></ul> <li> <p>Working with BDC Application Definition Files Application, Entities, Methods and Associations </p> <li> <p>Surfacing backend data using BDC Web Parts BDC integration with MOSS search </p> <li> <p>Creating custom Web Parts that execute BDC queries </p></li></ul> <ul> <ul></ul> <p><strong>Day 4</strong></p> <p><u>Web Content Management</u></p> <ul></ul> <li> <p>Customising sites creating from the MOSS Publishing Site template </p> <li> <p>Creating content types and custom page layouts for Web content </p> <li> <p>Understanding the MOSS content approval process </p> <li> <p>Converting Office documents into Web-ready formats </p> <li> <p>Optimizing performance with MOSS caching features </p></li></ul> <ul> <ul></ul> <p>Excel Services and Report Center</p> <ul></ul> <li> <p>Introduction to Excel Services </p> <li> <p>Publishing Excel spreadsheets that render in the browser </p> <li> <p>Trusted locations, connections and user-defined functions (UDFs) </p> <li> <p>Creating Dashboard pages with Report Center Creating Key Performance Indicators (KPIs) and filters </p> <li> <p>MOSS integration with SQL Reporting Services and SQL Analysis Services </p></li></ul> <ul> <ul></ul> <p>WSS/MOSS Security</p> <ul></ul> <li> <p>Trust Levels, Web Parts and Code Access Security (CAS) </p> <li> <p>Windows Authentication versus Forms Authentication </p> <li> <p>WSS Identities and Security Contexts </p> <li> <p>Escalation of Privilege </p> <li> <p>Delegating User Credentials </p> <li> <p>Using the MOSS single sign On (SSO) Service </p></li> <li></li></ul></blockquote> <p>For more information on this fantastic offer, go here: <a title="http://www.readify.net/Default.aspx?tabid=271" href="http://www.readify.net/Default.aspx?tabid=271">http://www.readify.net/Default.aspx?tabid=271</a></p> <p>To register (be quick, i&#39;m positive this will sell out fast), click here: <a title="http://www.readify.net/book+now!.aspx?ctl=RBS%20Registration&amp;mid=1467&amp;CourseID=29&amp;Type=NormalReg" href="http://www.readify.net/book+now!.aspx?ctl=RBS%20Registration&amp;mid=1467&amp;CourseID=29&amp;Type=NormalReg">http://www.readify.net/book+now!.aspx?ctl=RBS%20Registration&amp;mid=1467&amp;CourseID=29&amp;Type=NormalReg</a></p> <p>These types of training sessions does not come along often enough - maybe we&#39;ll see more coming out from Readify?</p> <p>Thanks to Andy Lamb for informing us about it!</p> <div class="wlWriterSmartContent" id="scid:0767317B-992E-4b12-91E0-4F059A8CECA8:db419859-3a92-4db2-8a81-33e61eaeec39" style="padding-right:0px;display:inline;padding-left:0px;padding-bottom:0px;margin:0px;padding-top:0px;">Technorati Tags: <a href="http://technorati.com/tags/SharePoint%202007" rel="tag">SharePoint 2007</a>,<a href="http://technorati.com/tags/Training" rel="tag">Training</a>,<a href="http://technorati.com/tags/Readify" rel="tag">Readify</a></div><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1646056" width="1" height="1"> <p><a href="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?a=6uo1or"><img src="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?i=6uo1or" border="0"></img></a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=I9mz1K"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=I9mz1K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=PKCATk"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=PKCATk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=9SC4yk"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=9SC4yk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~4/376972107" height="1" width="1"/>0http://msmvps.com/blogs/brianmadsen/rsscomments.aspx?PostID=1646056http://api.feedburner.com/awareness/1.0/GetItemData?uri=BrianHMadsen-netPoweredByCaffeine&itemurl=http%3A%2F%2Fmsmvps.com%2Fblogs%2Fbrianmadsen%2Farchive%2F2008%2F08%2F28%2Fsharepoint-training-in-perth-professional-moss-2007-solutions-by-readify.aspxhttp://msmvps.com/blogs/brianmadsen/archive/2008/08/28/sharepoint-training-in-perth-professional-moss-2007-solutions-by-readify.aspxALERT: Please treat content from adservdb.com with extreme caution [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/376882583/1646045.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiThu, 28 Aug 2008 01:43:39 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1646045<p>Malicious destination URL: <strong>security-scan-pc.com</strong> <p>Malicious campaign URL: <strong>adservdb.com/ads/?id=d3</strong> <p>The id=d3 URL completes various checks (browser version mostly) and then redirects to this URL: <strong>adservdb.com/tmp01.asp</strong> <p>The <strong>tmp01.asp</strong> URL sets a cookie, and completes various checks (Year, Month, Date, Hours, Minutes, Milliseconds, browser version) and, if the PC passes the test, we are redirected to this URL: <strong>adservdb.com/tmp02.asp</strong> (more country and time zone checks)&nbsp; (there is also a tmp03.asp) <p>We also see:&nbsp; <p><strong>j.maxmind.com/app/geoip.js</strong> (reports county code, country name, city, region, region name, latitude, longitude, postal code) <p><strong>j.maxmind.com/app/geoip_city</strong> (ditto) <p><strong>adservdb.com/stats.asp?</strong>...&lt;&lt;removed&gt;&gt;<br /><strong>adservdb.com/tmp03.asp?</strong>...&lt;&lt;removed&gt;&gt;<br /><strong>adservdb.com/redirect/redir.asp</strong>...&lt;&lt;removed&gt;&gt; &lt;--- it is this URL that redirects to security-scan-pc.com <p>---------------------------------------------- <p><strong>adservdb.com</strong> - IP: 74.217.128.234<br /><strong>Registrar</strong>: Netfirms, Inc<br /><strong>Created</strong> 23 June 2008 <p><strong>WHOIS</strong>: Hidden behind Domain Privacy Group <p>No obvious fraudware connections are found via Reverse IP, shared IP etc. <p>IP, NS and WHOIS history also unrevealing. <p>Nothing untoward is revealed by a web search (until I send this article live, that is...). <p>At time of writing, www.adservdb.com, which you would assume is the most logical &quot;home page&quot; for adservdbcom, contained little more than Google Analytics javascript. <p>This is the first time I have not been able to find definitive evidence of past bad behavior, or a connection with known bad actors, when investigating a malvertizing incident.&nbsp; That being said, adservdb.com is definitely the source of the malvertizement that I saw today. <p><img alt="malware" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.ALERTPleasetreatco.comwithextremecaution_5F00_B300/malware.png" width="547" height="311" /></p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1646045" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=Et5AhK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=Et5AhK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=o6jHuk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=o6jHuk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/376882583" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1646045http://msmvps.com/blogs/spywaresucks/archive/2008/08/28/1646045.aspxIE8 Beta 2 has been released... [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/376856585/1646038.aspxInternet Explorer 8sandiWed, 27 Aug 2008 09:39:00 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1646038<p>Enjoy:<br /><a href="http://www.microsoft.com/windows/internet-explorer/beta/" target="_blank" title="http://www.microsoft.com/windows/internet-explorer/beta/">http://www.microsoft.com/windows/internet-explorer/beta/</a></p> <p>&nbsp;</p> <p><strong>Upgrading notes:</strong></p> <ol> <li><a href="http://support.microsoft.com/kb/949787" target="_blank"><strong>PLEASE READ THE RELEASE NOTES!!!</strong></a> </li> <li>Compability issues: HP Smart Web Printing (some versions); Google Toolbar (some versions); DriveLetterAccess (Roxio) (some versions); Skype add-in (some versions); Visual Studio .NET Version 7; Real Player 11; Windows Live Mail; Netflix; VB6.0 ActiveX Controls; Window-Eyes; Hotmail log-off - details are in the Release Notes, but I know some of you won&#39;t read them &#39;cause they&#39;re too long or you&#39;re too busy, or too impatient, or whatever... </li> <li>The IE8 Beta 2 installer *should* remove IE8 Beta 1 automatically&nbsp; *<span style="text-decoration:underline;">if you are running Windows XP or Windows Server 2003</span>*.&nbsp; There will be two reboots - one after removing IE8 Beta 1, one after installing IE8 Beta 2. </li> <li>There is 1 update that should be installed before IE8 Beta 2 on multi-core XPSP2 x86 computers.&nbsp; It will be installed automatically if you select &ldquo;Install the latest updates&rdquo; option in IE8 Setup Wizard. </li> <li><strong><span style="color:#ff8040;">If you are running Windows XP or Windows Server 2003, and you have IE8 Beta 1 installed, and you have Automatic Updates turned on, IE8 Beta 2 *will* be offered for installation via Automatic Update.</span></strong> </li> <li>If you are running <span style="text-decoration:underline;">Vista or Server 2008</span> you will need to manually remove IE8 Beta 1 before installing IE8 Beta 2.&nbsp; There are 3 required updates that should be installed before installing IE8 Beta 2 - again, this will happen automatically if you have selected the option to install the latest updates. </li> <li><strong>IF YOU INSTALLED XP SP3 AFTER INSTALLING IE8 BETA 1 IT IS RECOMMENDED THAT YOU REMOVE WINDOWS XP SP3, AND THEN IE8 BETA 1 BEFORE INSTALLING IE8 BETA 2.&nbsp; IF YOU DO NOT DO THIS YOU WILL NOT BE ABLE TO REMOVE IE8 OR WINDOWS XP SP3 AFTER IE8 BETA 2 HAS BEEN INSTALLED.<br /><span style="color:#ff8040;">RECOMMENDED STEPS:&nbsp; REMOVE XP SP3, REMOVE IE8 BETA 1, REINSTALL XP SP3, INSTALL IE8 BETA 2</span></strong> </li> <li>If you use WSUS to manage security updates, you may be offered security updates relevant to IE7 after removing IE8 Beta 1 and installing IE8 Beta 2.&nbsp; These updates are not necessary and will probably fail if you try to install them.&nbsp; Affected computers will stop prompting to install the updates as soon as the PC synchronizes with WSUS.</li> </ol> <p>&nbsp;</p> <p><strong>There is a LOT of new stuff in IE8 Beta 2, so this is going to be a very brief run-down.&nbsp; More detailed information will be posted on this blog, and at <a href="http://www.ie-vista.com">www.ie-vista.com</a>, as time goes by.</strong></p> <p><strong></strong>&nbsp;</p> <p><strong>Web slices:&nbsp; </strong>The icon has changed from this <img height="31" width="34" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_cca86152_2D00_3d75_2D00_41f7_2D00_bc31_2D00_cd15ad25b715.png" alt="image" />&nbsp; to this <img height="29" width="30" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_4a6aac00_2D00_0a04_2D00_4faa_2D00_ae76_2D00_2493c2b1fad4.png" alt="image" /> .</p> <p>&nbsp;</p> <p><strong>Find&nbsp; bar:&nbsp; </strong>Opened via Ctrl F.</p> <p><img height="90" width="773" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_912d84a1_2D00_c360_2D00_4c2f_2D00_bfc7_2D00_65866fa8198b.png" alt="image" /> </p> <p>&nbsp;</p> <p><strong>Add-Ons:</strong></p> <p>To enable an add-on such as a toolbar, right click on the Command, Favorites or Menu Bar and turn on the toolbar that you want. Note the warning about enabling &quot;related add-ons&quot;:</p> <p><img height="221" width="275" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_29598f00_2D00_d2f6_2D00_4a63_2D00_b0da_2D00_776d92c2503b.png" alt="image" />&nbsp; <img height="225" width="497" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_51075c86_2D00_74a3_2D00_4d72_2D00_9703_2D00_c46af90b05df.png" alt="image" /> </p> <p>&nbsp;</p> <p>Add-on toolbars have a close button - click on the X to quickly and easily disable the add-on - again, you will see a dialogue window:</p> <p><img height="85" width="303" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_551e5a06_2D00_042c_2D00_445e_2D00_9ef3_2D00_852299c30408.png" alt="image" /> </p> <p><img height="245" width="492" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_ae82df4f_2D00_b4de_2D00_489f_2D00_b140_2D00_852cb05c6279.png" alt="image" /> </p> <p>&nbsp;</p> <p><strong>Suggested Sites:</strong>&nbsp; Note - turning on Suggested Sites is also turning on Automatic Feed Synchronization on my test system - you will be asked if you want to turn on Suggested Sites the first time that you run IE:</p> <p><img height="502" width="660" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_21b3097c_2D00_8040_2D00_41bc_2D00_bdbf_2D00_f9503604cb28.png" alt="image" /> </p> <p><img height="313" width="335" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_bc471d1e_2D00_b336_2D00_4da5_2D00_8cd4_2D00_fd86ce2a0348.png" alt="image" />&nbsp;&nbsp;&nbsp; <img height="317" width="339" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_b85faf22_2D00_2c23_2D00_4b64_2D00_896d_2D00_5660f8ad8b9d.png" alt="image" />&nbsp;&nbsp; <img height="315" width="337" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_e9e9ccad_2D00_0a01_2D00_4c08_2D00_b99c_2D00_fce31a3aacc7.png" alt="image" /> </p> <p>&nbsp;</p> <p>This open is enabled by turning on Suggested Sites:</p> <p><img height="556" width="438" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_3933c347_2D00_d760_2D00_4f8c_2D00_ad1e_2D00_0d9464683b6c.png" alt="image" /> </p> <p>&nbsp;</p> <p><strong>InPrivate</strong>:</p> <p><img height="48" width="288" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_da9da539_2D00_7e0f_2D00_4392_2D00_83b5_2D00_b9f0b509579c.png" alt="image" /> </p> <p>I&#39;ve been reading some of the recent discussion on various sites about what some are calling &quot;porn mode&quot;, and about how <a href="http://www.technewsworld.com/story/64296.html" target="_blank">advertisers are worried that InPrivate may block some advertisements</a>.&nbsp; </p> <p>I admit to some concern about this feature; I have always said that every (wo)man deserves his wage, and I have always spoken out against wholesale blocking of advertising.&nbsp; It is certainly possible to quickly block services such as Google Adsense using InPrivate&#39;s &quot;block and allow&quot; feature.&nbsp; I&#39;m still experimenting with this feature and am not sure what InPrivate will block, or how long it will take before blocking occurs, *if the user does not take advantage of the &quot;manually block&quot; option*. </p> <p><img height="505" width="552" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_02983d12_2D00_112a_2D00_4edf_2D00_9164_2D00_b2e6e2f36b82.png" alt="image" /> </p> <p>&nbsp;</p> <p><strong>Compatibility View:</strong><br />IE7 Compatibility View is, by default, per site.&nbsp; If a site does not display properly, click on the Compatibility View Button:</p> <p><img height="35" width="74" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/compat_5F00_on_5F00_d719aab0_2D00_7f39_2D00_4da8_2D00_be38_2D00_a5fdfe78fecb.png" alt="compat_on" /> </p> <p><img height="114" width="499" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_bc1de87e_2D00_7fec_2D00_46be_2D00_82d3_2D00_1d57ae61a2e1.png" alt="image" /> </p> <p><img height="71" width="471" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_8e3920ce_2D00_b5b9_2D00_4c17_2D00_9918_2D00_07d031f2bf74.png" alt="image" /> </p> <p>If the Compatibility View Button does not appear (it is dynamic), use the menu option (Tools, Compatibility View Settings):</p> <p><img height="468" width="486" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_ccc22302_2D00_4c7c_2D00_410a_2D00_a2ee_2D00_09f9518a6ccf.png" alt="image" /> </p> <p>Note that you can set IE to display all intranet sites in Compability View, or all web sites.</p> <p>&nbsp;<img height="438" width="394" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_56ec8449_2D00_ec6e_2D00_40af_2D00_9cdc_2D00_fd2b49265c5c.png" alt="image" /> </p> <p>&nbsp;</p> <p><strong>Changes to about:Tabs</strong></p> <p>about:Tabs is the default URL for new (empty) tabs.&nbsp; Note that about:Tabs contains a lot of new content, including the ability to open previously closed tabs from that browsing session, start InPrivate Browsing, or use an Accelerator.</p> <p><img height="526" width="831" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_728464d4_2D00_4345_2D00_4cc4_2D00_b21a_2D00_213bdf4faf96.png" alt="image" /> </p> <p>&nbsp;</p> <p><strong>Tab groups:</strong></p> <p>This is cool - note the different colored tabs. Each color indicates an separate tab group - it is probably easiest to describe them a parent and child tabs.</p> <p>&nbsp;<img height="33" width="908" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_d329bf46_2D00_cee0_2D00_421d_2D00_9d87_2D00_f6b241f49f1f.png" alt="image" /> </p> <p><strong>Tab group controls:</strong></p> <p>Accessed by right clicking on any tab:</p> <p>Close This Tab Group: will close the tab that is currently open, and all others of the same color.</p> <p>Ungroup This Tab: Ungroups the tab and changes it to the default color.</p> <p>Duplicate Tab:&nbsp; Opens a new tab at the same URL.</p> <p><img height="337" width="746" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_f7827d1f_2D00_1ad5_2D00_43b2_2D00_b329_2D00_44c3ef7d7f28.png" alt="image" /> </p> <p>&nbsp;</p> <p><strong>Smart Address Bar:</strong></p> <p>Note that the search results are divided into categories.&nbsp; It makes it a heck of a lot easier if, for example, you&#39;re trying to find something you read via an RSS feed, as distinct to a web page.</p> <p><img height="516" width="772" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_f661fbd7_2D00_aa9d_2D00_4816_2D00_af6a_2D00_86268e767798.png" alt="image" /> </p> <p>&nbsp;</p> <p><strong>Search Suggestions (with images):</strong></p> <p>There are lots of new Search Providers choose from, and many include the new Search Suggestions.&nbsp; I recommend you visit the <a href="http://www.ieaddons.com/en/searchproviders/" target="_blank">Internet Explorer Gallery</a> to choose some new providers.&nbsp; Note that if you have already installed a Search Provider, and that Provider has introduced support for Search Suggestions, then you will need to upgrade that Provider - that can also be achieved via the <a href="http://www.ieaddons.com/en/searchproviders/" target="_blank">Internet Explorer Gallery</a>.<br /><a href="http://www.ieaddons.com/en/searchproviders/" target="_blank" title="http://www.ieaddons.com/en/searchproviders/">http://www.ieaddons.com/en/searchproviders/</a></p> <p>Example of Search Suggestions:</p> <p><img height="530" width="299" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_a209d2ee_2D00_983e_2D00_490b_2D00_ada6_2D00_cecebb642a18.png" alt="image" /> </p> <p>Note: When you install the Search Provider, make sure the option to &quot;use search suggestions from this provider&quot; is enabled.&nbsp; If the Search Provider already exits, an &quot;Upgrade Provider&quot; button will appear instead of&quot;Add Provider&quot;:</p> <p><img height="287" width="417" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_e98a47e9_2D00_b8df_2D00_4d47_2D00_a54d_2D00_da866142d58a.png" alt="image" />&nbsp; <img height="290" width="414" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_a3f9e48b_2D00_d28f_2D00_4d50_2D00_8e36_2D00_e099fcb30fb5.png" alt="image" /> </p> <p>Also, note this setting, accessible via Manage Add-Ons, which was not enabled by default on my system.&nbsp; You may want to turn that option on:</p> <p><img height="156" width="813" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_29ca8121_2D00_52d5_2D00_4150_2D00_b0e0_2D00_7d028e72ac8b.png" alt="image" /> </p> <p>&nbsp;</p> <p><strong>Smartscreen Filter:&nbsp; </strong>I hold great hopes for the feature - I can see it making a big difference in the fight against Rogue Security Software:</p> <p>&nbsp;</p> <p><img height="395" width="478" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_d48532cd_2D00_5d62_2D00_4a88_2D00_a967_2D00_ef74ffb0a202.png" alt="image" />&nbsp; <img height="379" width="329" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_e78d23df_2D00_4f0e_2D00_4560_2D00_94e6_2D00_8b0c91a5843b.png" alt="image" /> </p> <p><img height="352" width="392" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_f598b789_2D00_0156_2D00_4e4e_2D00_8f58_2D00_6e1974c9d725.png" alt="image" />&nbsp;&nbsp; <img height="190" width="259" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.IE8Beta2hasbeenreleased_5F00_5C0B/image_5F00_13539e83_2D00_825c_2D00_4514_2D00_bc89_2D00_236c7f05eb77.png" alt="image" /></p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1646038" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=HqFv1K"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=HqFv1K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=vDmM7k"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=vDmM7k" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/376856585" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1646038http://msmvps.com/blogs/spywaresucks/archive/2008/08/27/1646038.aspxThis is soooo a %^&%$%^& hat [Brian H. Madsen - .Net Powered by Caffeine]http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~3/376170760/this-is-soooo-a-amp-amp-hat.aspxBrian MadsenWed, 27 Aug 2008 08:11:39 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645960<p>Just teasing a friend of mine who loves his hats...the guise of trying it on was &quot;i could get a bowl of soup for free&quot; :)</p> <p><br /><a href="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/brianmadsen.Thisissooooahat_5F00_12A04/gay_5F00_hat_5F00_2.jpg"><img style="border-right:0px;border-top:0px;border-left:0px;border-bottom:0px;" height="184" alt="gay_hat" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/brianmadsen.Thisissooooahat_5F00_12A04/gay_5F00_hat_5F00_thumb.jpg" width="244" border="0" /></a> <br /><br />anyways, he really loves this hat...i&#39;m now going to send him free entry tickets to the Love Parade :) </p> <p>he hehe</p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645960" width="1" height="1"> <p><a href="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?a=NXeFql"><img src="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?i=NXeFql" border="0"></img></a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=qOGg7K"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=qOGg7K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=EhDRPk"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=EhDRPk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=rYpBqk"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=rYpBqk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~4/376170760" height="1" width="1"/>2http://msmvps.com/blogs/brianmadsen/rsscomments.aspx?PostID=1645960http://api.feedburner.com/awareness/1.0/GetItemData?uri=BrianHMadsen-netPoweredByCaffeine&itemurl=http%3A%2F%2Fmsmvps.com%2Fblogs%2Fbrianmadsen%2Farchive%2F2008%2F08%2F27%2Fthis-is-soooo-a-amp-amp-hat.aspxhttp://msmvps.com/blogs/brianmadsen/archive/2008/08/27/this-is-soooo-a-amp-amp-hat.aspxALERT: please treat all content from admarketcenter.com with extreme caution [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/375251077/1645843.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiTue, 26 Aug 2008 09:13:26 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645843<p><img style="margin:0px 25px 25px 0px;" alt="image" align="left" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.ALERTpleasetreatal.comwithextremecaution_5F00_137F5/image_5F00_4b796120_2D00_f7b6_2D00_4b4d_2D00_967d_2D00_bd45ec36fe25.png" width="640" height="511" /> admarketcenter.com have been implicated in the distribution of malvertizements. <p><strong>AdMarketCenter.com - IP: 216.195.62.169</strong> <p><strong>Registrar</strong>: Godaddy.com<br /><strong>Date created</strong>: 15 November 2006 <p><strong>WHOIS<br /></strong>Registrant, admin and technical contact: bert_205@hotmail.com <p><strong>hostnames sharing ip with a-records: <br /></strong>excursionglobe.com<br />mypussyworld.com<br /></p> <p><strong>sharing mailserver IP: <br /></strong>Nil </p> <p><strong>sharing name server:<br /></strong>lots <p><strong>Excursionglobe.com is a known bad actor.</strong>&nbsp; See this blog entry:<br /><a href="http://msmvps.com/blogs/spywaresucks/archive/2008/01/13/1459605.aspx">http://msmvps.com/blogs/spywaresucks/archive/2008/01/13/1459605.aspx</a> <p>Note that the script mentioned in that blog entry has been changed.&nbsp; mypussyworld.com has a similar script. <div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645843" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=GGidTK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=GGidTK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=6awb6k"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=6awb6k" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/375251077" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645843http://msmvps.com/blogs/spywaresucks/archive/2008/08/26/1645843.aspxMicrosoft Urlscan Helps to Filter SQL Injection Attacks [Mitch Wheat - Treat the cause, not the symptoms!]http://feeds.feedburner.com/~r/mitchwheat/~3/375168209/microsoft-urlscan-helps-to-filter-sql.htmlnoreply@blogger.com (Mitch Wheat)Tue, 26 Aug 2008 06:54:08 -0500tag:blogger.com,1999:blog-28468793.post-481632380111212485Microsoft recently re-released an improved version of a security filter for IIS that is designed to help thwart SQL injection attacks by restricting the types of HTTP requests that IIS will process. <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=EE41818F-3363-4E24-9940-321603531989&amp;displaylang=en&amp;displaylang=en">UrlScan 3.0</a> is an IIS add-on that provides real-time validation of HTTP server requests, potentially blocking SQL injection exploits.<br /><br />UrlScan has actually been available for several years, but Microsoft added some new features in this 3.0 release, including support for query string scanning.<img src="http://feeds.feedburner.com/~r/mitchwheat/~4/375168209" height="1" width="1"/>2008-08-26T19:54:08.439+08:00http://mitch-wheat.blogspot.com/2008/08/microsoft-urlscan-helps-to-filter-sql.htmlwinningsurveys advertisement - potential malvertizement [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/374824145/1645789.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiMon, 25 Aug 2008 21:38:41 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645789<p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.winningsurveysadvertisementpotentialmalv_5F00_922E/image_5F00_2a109afc_2D00_5e60_2D00_428d_2D00_bb26_2D00_fd91e66b5dd3.png" width="729" height="89" /> </p> <p>Created using Fuse.</p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645789" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=IhHiCK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=IhHiCK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=HgIvlk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=HgIvlk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/374824145" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645789http://msmvps.com/blogs/spywaresucks/archive/2008/08/26/1645789.aspxmediamate malvertizements - several samples [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/374814514/1645788.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiMon, 25 Aug 2008 21:19:59 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645788<p>I received three separate samples of a mediamate malvertizement today, all with different names. <p><img src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Malvertizingsamplesarefloodingin_5F00_12E69/image_5F00_a8c4acf9_2D00_9f4f_2D00_4f9d_2D00_9e5b_2D00_d086894e5dc2.png" alt="" /> <p>&nbsp; <p><strong><u>First sample</u></strong> <p>This time it hit <strong>googiesindication.com - IP: 217.150.254.47</strong> <p><strong>Registrar</strong>: TLDS, LLC DBA SRSPLUS<br /><strong>Creation date</strong> - 26 November 2007 <p><strong>Registrant, administrative and billing contact</strong>: Jon Lod (mail@googiesindication.com) <p><strong>domains sharing nameservers (there are some old names here - all known bad actors)<br /></strong>aboutstat.com<br />adlbrite.com<br />akamahi.net<br />entrerrenglonadura.com<br />newstat.net<br />officialstat.com<br />quinquecahue.com<br />stat-diagnostic-imaging.net<br />statetstr.com<br />stathisranch.net<br />stathome.net<br />staticglobalsources.com<br />staticglobalsources.net<br />station-appraisals.com<br />station-appraisals.net<br />statnation.net<br />statsla.net<br />statworld.net<br />thetechnorati.com<br />vozemiliogaranon.com <p>&nbsp; <p><strong><u>Second sample</u></strong> <p>This one hits <strong>officialstat.net</strong> <strong>- IP: 92.62.100.7</strong> </p> <p><strong>Registrar</strong>: COMMUNIGAL COMMUNICATIONS LTD<br /><strong>Creation date</strong> - 1 February 2008 <p><strong>Registrant, administrative, technical and billing contact</strong>: Serg Moon (moon.serg@gmail.com) <p>&nbsp;</p> <p><strong><u>Third sample:</u></strong></p> <p>This one hit <strong>staticglobalsources.com - IP: 92.62.100.14</strong> <p><strong>Registrar</strong>: COMMUNIGAL COMMUNICATIONS LTD<br /><strong>Creation date</strong> - 1 February 2008 <p><strong>Registrant, administrative, technical and billing contact</strong>: Serg Moon (moon.serg@gmail.com) <div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645788" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=uNw1XK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=uNw1XK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=q3euZk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=q3euZk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/374814514" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645788http://msmvps.com/blogs/spywaresucks/archive/2008/08/26/1645788.aspxFree SQL Server Tools [Mitch Wheat - Treat the cause, not the symptoms!]http://feeds.feedburner.com/~r/mitchwheat/~3/373397714/free-sql-server-tools.htmlnoreply@blogger.com (Mitch Wheat)Sun, 24 Aug 2008 06:55:26 -0500tag:blogger.com,1999:blog-28468793.post-1519664250227148804I meant to blog and bookmark this great list of SQL Server resources a while ago: <a id="viewpost_ascx_TitleUrl" title="Title of this entry." href="http://weblogs.sqlteam.com/mladenp/archive/2007/11/20/Free-SQL-Server-tools-that-might-make-your-life-a.aspx">Free SQL Server tools that might make your life a little easier</a> by Mladen Prajdić.<br /><br />Did you know there is a free SQL profiler available for SQL Express? It's just one of the very useful tools listed there (direct link <a href="http://sqlprofiler.googlepages.com/">here</a>).<img src="http://feeds.feedburner.com/~r/mitchwheat/~4/373397714" height="1" width="1"/>2008-08-24T19:55:26.876+08:00http://mitch-wheat.blogspot.com/2008/08/free-sql-server-tools.htmlCAB WorkItem Visualisation Tool [Mitch Wheat - Treat the cause, not the symptoms!]http://feeds.feedburner.com/~r/mitchwheat/~3/373381820/cab-workitem-visualisation-tool.htmlnoreply@blogger.com (Mitch Wheat)Sun, 24 Aug 2008 06:41:36 -0500tag:blogger.com,1999:blog-28468793.post-6072280732426512100This is probably old hat to those people familiar with CAB: there is a debugging aid hosted on CodePlex that can show the WorkItem hierarchy, Workspaces, SmartParts, Commands, Events, State and Items: <a href="http://www.codeplex.com/WorkItemVisualizer/">http://www.codeplex.com/WorkItemVisualizer/</a>. Only drawback is that it seems to slow things down a fair bit.<img src="http://feeds.feedburner.com/~r/mitchwheat/~4/373381820" height="1" width="1"/>2008-08-24T19:41:36.407+08:00http://mitch-wheat.blogspot.com/2008/08/cab-workitem-visualisation-tool.htmlI'm also getting old fast..Keepass is probably the way to go [Brian H. Madsen - .Net Powered by Caffeine]http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~3/373311933/i-m-also-getting-old-fast-keepass-is-probably-the-way-to-go.aspxBrian MadsenSun, 24 Aug 2008 03:58:54 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645650<p>Since i&#39;m nearly in the same boat as James McCutcheon, i&#39;m also getting old(er) by the day. James McCutcheon (from nSquared (new&#39;ish joint venture between Nick Randolph and Dr. Neil Rodyn), blogged about keepass - an open source solution for remembering your passwords and such.</p> <p>it integrated with IE so i&#39;ll definitely give it a go. </p> <p>Here&#39;s a link to James&#39;s blog post about keepass: <a href="http://jamesmcc.wordpress.com/2008/04/03/started-using-keepass/">Started using Keepass « myblog = new james.mccutcheon.blog();</a> </p> <p>p.s. James, thanks for the twitter link to the Windows Live Developer Tools - appreciated!</p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645650" width="1" height="1"> <p><a href="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?a=rEB44J"><img src="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?i=rEB44J" border="0"></img></a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=aCXMDK"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=aCXMDK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=X74r7k"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=X74r7k" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=wPoBBk"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=wPoBBk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~4/373311933" height="1" width="1"/>0http://msmvps.com/blogs/brianmadsen/rsscomments.aspx?PostID=1645650http://api.feedburner.com/awareness/1.0/GetItemData?uri=BrianHMadsen-netPoweredByCaffeine&itemurl=http%3A%2F%2Fmsmvps.com%2Fblogs%2Fbrianmadsen%2Farchive%2F2008%2F08%2F24%2Fi-m-also-getting-old-fast-keepass-is-probably-the-way-to-go.aspxhttp://msmvps.com/blogs/brianmadsen/archive/2008/08/24/i-m-also-getting-old-fast-keepass-is-probably-the-way-to-go.aspxLessons learned from a %^&%*$#!! mistake [Brian H. Madsen - .Net Powered by Caffeine]http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~3/373243798/lessons-learned-from-a-amp-mistake.aspxThis is FailBrian MadsenSun, 24 Aug 2008 01:17:17 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645644<p>Yeah well - i&#39;ve just learned a new lesson. Earlier on i <a href="http://www.msmvps.com/blogs/brianmadsen/archive/2008/08/11/need-new-rss-reader-should-handle-1000-feeds-easily.aspx" target="_blank">blogged about the need for a RSS feed reader</a> client that could hold at least 1000 feeds without becoming bogged down.</p> <p>I&#39;ve been trying out a few of them, and the choice finally went with FeedDemon. I wanted to install everything from the start so i&#39;d have a fresh copy to work with. Took my time copying my OPML file over to a USB stick (as i was moving the OPML between machines) and had just uninstalled a failed rss client (wont mention which one this was).</p> <p>this uninstall also cleared my OPML but &quot;luckily&quot; i still had my trusted USB stick..right...enter murphy&#39;s law number %^*&amp;^%&amp;*!# and what do you have? a USB stick that now suddenly doesn&#39;t work. yay...OPML file gone..everything gone. hmmm..</p> <p>so lesson learned here is: don&#39;t trust a USB stick with anything vital..ARGGFFFF!!!</p> <p>this might have been a good thing - i now get to start all over again, collecting blog feeds...it also cleaned out those i didn&#39;t really read any more or had become dormant..</p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645644" width="1" height="1"> <p><a href="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?a=K4rBYj"><img src="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?i=K4rBYj" border="0"></img></a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=FSWdrK"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=FSWdrK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=Q1Tahk"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=Q1Tahk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=u6eNck"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=u6eNck" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~4/373243798" height="1" width="1"/>6http://msmvps.com/blogs/brianmadsen/rsscomments.aspx?PostID=1645644http://api.feedburner.com/awareness/1.0/GetItemData?uri=BrianHMadsen-netPoweredByCaffeine&itemurl=http%3A%2F%2Fmsmvps.com%2Fblogs%2Fbrianmadsen%2Farchive%2F2008%2F08%2F24%2Flessons-learned-from-a-amp-mistake.aspxhttp://msmvps.com/blogs/brianmadsen/archive/2008/08/24/lessons-learned-from-a-amp-mistake.aspxWindows Live - getting there.. [Brian H. Madsen - .Net Powered by Caffeine]http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~3/373235843/windows-live-getting-there.aspxWindows LiveBrian MadsenSun, 24 Aug 2008 00:55:15 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645642<p>I&#39;m going crazy at the moment - hooking up all kinds of services and have so far gotten most of my &quot;life&quot; organised via &quot;Live&quot; services.</p> <p>At the moment i&#39;ve gotten the following hooked together:</p> <p><strong>- Windows Live ID </strong><a href="http://www.live.com">http://www.live.com</a><br />Pretty much any service i use these days are hooked in to a Live ID (Windows Passport Service).</p> <p><strong>- Live Mesh </strong><a href="http://www.mesh.com">http://www.mesh.com</a><br />got my desktop all virtualised and can now get documents/files/notes etc from anywhere - excellent</p> <p><strong>- Live Mail </strong><a href="http://home.live.com">http://home.live.com</a><br />The old &quot;Hotmail&quot; got a revamp and is now &quot;Live Mail&quot;. My Outlook is hooked up (<a href="http://www.msmvps.com/blogs/brianmadsen/archive/2008/08/23/outlook-is-back-in-the-fold-again-windows-live-mail-is-out.aspx" target="_blank">see previous post</a>).</p> <p><strong>- Live Writer <a title="http://get.live.com/WL/config_all" href="http://get.live.com/WL/config_all">http://get.live.com/WL/config_all</a></strong><br />Best blogging tool i&#39;ve yet to try out and people keep making new plug-ins for it. </p> <p><strong>- Office Live <a title="http://office.live.com/" href="http://office.live.com">http://office.live.com</a></strong><br />got myself an easy way to share documents now.</p> <p><strong>- Live SkyDrive </strong><a href="http://skydrive.live.com">http://skydrive.live.com</a><br />Virtual storage for both personal and public files. Again, brilliant way to get hold of documents/files from anywhere.</p> <p><strong>- Live Listas </strong><a href="http://listas.labs.live.com">http://listas.labs.live.com</a><br />I&#39;ve become very much a &quot;list&quot; type person. I can be terribly disorganised and found that i function best if i have a &quot;list&quot;. This can be simple to-do lists, invites, events, grocery shopping etc..my life is run by lists these days. </p> <p><strong>- Live Calendar </strong><a href="http://calendar.live.com">http://calendar.live.com</a><br />Again, hooking up my Outlook calendar with my Live calendar means i can now keep a check on events and meetings even when i&#39;m not on my laptop.</p> <p>So, basically you CAN live your life with Live :)</p> <p>Question now is - what other Live services can i hook up that&#39;s cool??</p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645642" width="1" height="1"> <p><a href="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?a=sgKSIC"><img src="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?i=sgKSIC" border="0"></img></a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=5r7UhK"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=5r7UhK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=0HWvjk"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=0HWvjk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=sWqS8k"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=sWqS8k" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~4/373235843" height="1" width="1"/>0http://msmvps.com/blogs/brianmadsen/rsscomments.aspx?PostID=1645642http://api.feedburner.com/awareness/1.0/GetItemData?uri=BrianHMadsen-netPoweredByCaffeine&itemurl=http%3A%2F%2Fmsmvps.com%2Fblogs%2Fbrianmadsen%2Farchive%2F2008%2F08%2F24%2Fwindows-live-getting-there.aspxhttp://msmvps.com/blogs/brianmadsen/archive/2008/08/24/windows-live-getting-there.aspxTotally off topic!! [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/372684073/1645588.aspxOff topicsandiSat, 23 Aug 2008 07:48:02 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645588<p>How cute is my little nephew?&nbsp; He is reading THE most important section of the newspaper - Cars for Sale - he&#39;s going to be a car fan, just like his daddy (no, that&#39;s not his daddy in the picture, that&#39;s one of his uncles).&nbsp; He&#39;s the only almost-3-year-old I know who, when asked what a car sounds like, says &quot;brrrmmm... hiiissssss&quot; (yep, his daddy owns a turbo).</p> <p>He adores his daddy, and is his uncle&#39;s little shadow when daddy (who is in the navy) is away on a tour of duty.</p> <p>&nbsp;</p> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Totallyofftopic_5F00_FDB8/image_5F00_beb2d9de_2D00_3584_2D00_4f56_2D00_9fbf_2D00_9a4e80cc9ade.png" width="740" height="343" /> </p> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Totallyofftopic_5F00_FDB8/image_5F00_d496662f_2D00_edf0_2D00_4fd2_2D00_8f43_2D00_17f83058b6e5.png" width="739" height="357" /> </p> <p>For those of you who weren&#39;t around back then, here is how that young man was introduced to the world on this blog, 6 weeks premature and putting up one heck of a fight...</p> <p><img src="http://www.ie-vista.com/images/DSC00235-1.jpg" alt="" /></p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645588" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=ymCvmK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=ymCvmK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=TNzxwk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=TNzxwk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/372684073" height="1" width="1"/>1http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645588http://msmvps.com/blogs/spywaresucks/archive/2008/08/23/1645588.aspxOutlook is back in the fold again..Windows Live Mail is out [Brian H. Madsen - .Net Powered by Caffeine]http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~3/372544234/outlook-is-back-in-the-fold-again-windows-live-mail-is-out.aspxMicrosoft OfficeBrian MadsenSat, 23 Aug 2008 02:40:42 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645583<p>After having used Windows Live Mail (for my live mail account..derr) for a while it started getting <a href="http://www.msmvps.com/blogs/brianmadsen/archive/2008/08/15/windows-live-mail-nuisance.aspx">a little bit annoying</a> and i&#39;ve now swapped back to Outlook.</p> <p>But, since i lost my domain (because BankWest decided to put a block on my attempts to pay GoDaddy...yeah, GoDaddy payments must be fraudulent...who&#39;d ever heard of them?) i haven&#39;t used Outlook and swapped most of my email registrations back to my live account.</p> <p>but, how was i going to get my Live mail (aka. Hotmail) from Outlook? Easy, quick search on MSFT gave me <a href="http://office.microsoft.com/en-us/outlook/HA102225181033.aspx">Microsoft Office Outlook Connector</a>..created exactly for that purpose.</p> <p>Microsoft Office Outlook Connector: <a title="http://www.microsoft.com/downloads/details.aspx?familyid=7aad7e6a-931e-438a-950c-5e9ea66322d4&amp;displaylang=en" href="http://www.microsoft.com/downloads/details.aspx?familyid=7aad7e6a-931e-438a-950c-5e9ea66322d4&amp;displaylang=en">http://www.microsoft.com/downloads/details.aspx?familyid=7aad7e6a-931e-438a-950c-5e9ea66322d4&amp;displaylang=en</a></p> <p>Microsoft Office Outlook Connector 12.1 Beta: <a title="http://www.microsoft.com/downloads/details.aspx?FamilyId=9A2279B1-DF0A-46E1-AA93-7D4870871ECF&amp;displaylang=en" href="http://www.microsoft.com/downloads/details.aspx?FamilyId=9A2279B1-DF0A-46E1-AA93-7D4870871ECF&amp;displaylang=en">http://www.microsoft.com/downloads/details.aspx?FamilyId=9A2279B1-DF0A-46E1-AA93-7D4870871ECF&amp;displaylang=en</a></p> <p>And who said the Office developer guys weren&#39;t smart cookies?</p> <div class="wlWriterSmartContent" id="scid:0767317B-992E-4b12-91E0-4F059A8CECA8:e7e427b1-d663-4ce2-9777-76c5ea62be3a" style="padding-right:0px;display:inline;padding-left:0px;padding-bottom:0px;margin:0px;padding-top:0px;">Technorati Tags: <a href="http://technorati.com/tags/Office%20Outlook%20Connector" rel="tag">Office Outlook Connector</a>,<a href="http://technorati.com/tags/Microsoft%20Office" rel="tag">Microsoft Office</a></div><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645583" width="1" height="1"> <p><a href="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?a=quz1Zl"><img src="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?i=quz1Zl" border="0"></img></a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=3dMFrK"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=3dMFrK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=Am4zsk"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=Am4zsk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=tY9QSk"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=tY9QSk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~4/372544234" height="1" width="1"/>0http://msmvps.com/blogs/brianmadsen/rsscomments.aspx?PostID=1645583http://api.feedburner.com/awareness/1.0/GetItemData?uri=BrianHMadsen-netPoweredByCaffeine&itemurl=http%3A%2F%2Fmsmvps.com%2Fblogs%2Fbrianmadsen%2Farchive%2F2008%2F08%2F23%2Foutlook-is-back-in-the-fold-again-windows-live-mail-is-out.aspxhttp://msmvps.com/blogs/brianmadsen/archive/2008/08/23/outlook-is-back-in-the-fold-again-windows-live-mail-is-out.aspxAnatomy of a malware scam - The evil genius of XP Antivirus 2008 [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/372389664/1645576.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiFri, 22 Aug 2008 21:51:19 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645576<p></p> <p>Love the title Jesper! <p><a target="_blank" href="http://www.theregister.co.uk/2008/08/22/anatomy_of_a_hack/">http://www.theregister.co.uk/2008/08/22/anatomy_of_a_hack/</a> <p>Jesper&#39;s article includes a description of a browser hijack intended to dump its victim at a fraudware site.&nbsp; It also takes a close look at the fraudware itself - its installation, its behavior after install, and how it tries to convince victims to part with their hard earned cash by purchasing the full version of the software. <p>And, he takes a quick look at its removal using legitimate anti-malware software. <p>The article is well worth a read. <div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645576" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=Hwec5K"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=Hwec5K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=t7c07k"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=t7c07k" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/372389664" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645576http://msmvps.com/blogs/spywaresucks/archive/2008/08/23/1645576.aspxManagement Studio Improvements in SQL Server 2008 [Mitch Wheat - Treat the cause, not the symptoms!]http://feeds.feedburner.com/~r/mitchwheat/~3/372379807/management-studio-improvements-in-sql.htmlnoreply@blogger.com (Mitch Wheat)Fri, 22 Aug 2008 21:32:07 -0500tag:blogger.com,1999:blog-28468793.post-5401796764212994518<a id="ctl00_MainContent_lnkAuthor" href="http://www.simple-talk.com/author/brad-mcgehee/">Brad McGehee</a> has posted a very useful article on the <a href="http://www.simple-talk.com/sql/learn-sql-server/management-studio-improvements-in-sql-server-2008/">Management Studio Improvements in SQL Server 2008</a> over at the Simple-Talk blog.<img src="http://feeds.feedburner.com/~r/mitchwheat/~4/372379807" height="1" width="1"/>2008-08-23T10:32:07.654+08:00http://mitch-wheat.blogspot.com/2008/08/management-studio-improvements-in-sql.htmlAnother potential malvertizement - so new, it's still warm from the oven.... [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/372014697/1645520.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiFri, 22 Aug 2008 11:46:12 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645520<p>Not confirmed, but suspicious - generated using Fuse:</p> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Morepotentialmalvertizementssonewtheyre_5F00_8E8/image_5F00_99843922_2D00_337d_2D00_48b7_2D00_91e6_2D00_7357f48eb925.png" width="733" height="93" /></p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645520" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=3uXobK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=3uXobK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=rLx0zk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=rLx0zk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/372014697" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645520http://msmvps.com/blogs/spywaresucks/archive/2008/08/23/1645520.aspxYour questions answered: fraudware infection vectors [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/372005008/1645517.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiFri, 22 Aug 2008 11:30:38 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645517<p>I received this email a few days ago:</p> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Yourquestionsansweredfraudwareinfectionv_5F00_13B4D/image_5F00_032502c9_2D00_a9e1_2D00_45fd_2D00_aa1e_2D00_4d5c50b91f19.png" width="599" height="401" /> </p> <p>&nbsp;</p> <p>Dale&#39;s email is certainly worth answering; I&#39;ll do my best ;o)</p> <p>Fraudware such as XP Antivirus 2009 (or 2008) and its myriad stablemates does not come in strictly via the Clipbook vector.&nbsp; On the contrary, my opinion is that the clipboard trick is one of their least effective tactics when it is compared with their standard modus operandi.&nbsp; Why? Because hijacking the clipboard and forcing a malicious URL to be pasted into online posts is all well and good, but they still need somebody to click on the link for anything further to happen.&nbsp; </p> <p>What other vectors do those behind the fraudware use to distribute their wares in addition to the clipboard hijack?&nbsp; Well, there are the <strong>Flash based malvertizements</strong> that are featured so often on this blog and which are by far the most popular, and effective, tool that they have.&nbsp; Malicious SWF require no user interaction to be effective, a lack of user interaction that is often facilitated by the use of the ubiquitous Flash (that I described as, and still describe as, &quot;the Typhoid Mary of the Internet&quot;).&nbsp;&nbsp; Unfortunately, there is no way for the end user to control the functionality that allows the fraudsters to misuse Flash without disabling Flash entirely and the bad guys (who are experts in social engineering and adapting their wares to suit the average human psyche) *know* that the average man in the street will not give up on using Flash (and will turn off software features that block Flash).</p> <blockquote> <p><em>On a side note, I find it ironic that Adobe have <a target="_blank" href="http://blogs.adobe.com/psirt/2008/08/clipboard_attack.html">acknowledged on their blog</a>, and admit publicly, that they are trying to work out how to address the problem of clipboard hijackings when *browser* hijackings are so much more prevalent, and *FAR* more dangerous to the end user.&nbsp; The cynic in me is whispering that the only reason Adobe have made a public statement about the clipboard hijacking is because there has been so much attention within the popular press.&nbsp; Oh well, let&#39;s hope that if they &quot;fix&quot; the clipboard problem that they will do so by allowing users more granular control of what SWF is and is not allowed to do without explicit user approval or interaction.&nbsp; After all, Flash can be set to ask permission before accessing a computer&#39;s microphone or camera or if a site tries to use &quot;older security settings&quot;. I see no reason why it can&#39;t be designed to ask permission before hijacking a web browser (I have not, as yet, seen a Silverlight based malvertizement, but the use of Silverlight simply isn&#39;t widespread enough to be of interest to the crooks, and I am therefore unable to make a fair comparison).</em></p></blockquote> <p>There are also <strong>non SWF advertising attacks</strong> where networks allow a middle man to use a geographically targeted redirect to lead victims straight to the fraudware site.&nbsp; The attack that I reported <a target="_blank" href="http://msmvps.com/blogs/spywaresucks/archive/2008/08/21/1645311.aspx">here</a> used only &quot;authorized&quot; redirects - no SWF was used to get the victim to the fraudware site, nor were browser exploits used.&nbsp; You would think that such basic attacks should be easy to detect, but they are not - on the contrary, staff at host advertising networks, and the staff responsible for the victim web sites, will invariably not experience a fraudware hijack and will instead end up at a legitimate web site (not only do the bad guys use geographical targeting, they also often block specific IP ranges - IP ranges that are owned by victim web sites and hosting advertising networks and, invariably, antivirus and antispyware companies, and well known security researchers).</p> <p>How can victim advertising networks and web sites (and security researchers) get around such problems?&nbsp; Well, we have caught some pretty big campaigns when staff at an affected web site or ad network have checked things when they were at home.&nbsp; Or, you can use one of the myriad web proxies on the net to anonymize your IP and/or pretend that you are in a different country (<a target="_blank" href="http://www.proxy.org">www.proxy.org</a> is a resource that I point people to if they want to use such services).&nbsp;&nbsp; The bad guys are known to block most of the, dare I say it, popular proxies therefore the trick is to find one that is new, and/or low profile.&nbsp; Be warned though, web proxies are invariably of no use if you need to gather evidence about a malicious redirect - web proxies invariably encrypt network traffic making it well nigh impossible to gather evidence sufficient to shut down a malvertizing campaign. As for me, I prefer services such as TOR and a few other less common tricks ;o)&nbsp; </p> <p>The bad guys also use <a target="_blank" href="http://en.wikipedia.org/wiki/Spam_blog"><strong>splogs</strong></a>, which may be indexed by the popular search engines (blogger.com/blogspot.com and myspace are popular targets).&nbsp; The mitigating factor in such attacks is that they require the end user to click on what are often obviously nonsensical search results to access the dangerous site, at which time the blog loads and the victim is redirected to the fraudware site (again, no SWF required).&nbsp; Splogs that regurgitate content from legitimate blogs, verbatim, are more difficult for the end user to detect :o(</p> <p><strong>Email spam</strong> - which they use to entice the user to a splog, or a hijacked web site.</p> <p><strong>Comment spam, guestbook spam, mailing list spam, registration spam, trackback spam and forum spam</strong>.&nbsp; The crooks find it highly amusing to use one of my email addresses as the reply or registration address for a lot of crud - thank heavens for spam filters and <a target="_blank" href="http://mmm3.sourceforge.net/">Magic Mail Monitor</a>.&nbsp; I love Magic Mail Monitor.&nbsp; My fetch and filter protocols get rid of the worst of the spam, and I get rid of the rest by viewing the headers of all emails using MMM *before* they are downloaded to my local machine.&nbsp; I sort by Subject and then by Sender and delete the unwanted stuff - little time is wasted, and *very* little bandwidth.&nbsp; There was a time when a troller-prat decided he was going to use a compromised PC to send me a stack of emails with very large attachments - MMM fixed that problem quick smart :o)</p> <blockquote> <p><em>There is a bright side to all of the spam that I get - it is a wonderfully rich harvest of up-to-the-minute malicious domains that are very useful in my day to day research.&nbsp; The same applies to comment spam on this blog which is also a wonderfully rich source of research material - another reason why I don&#39;t use CAPTCHA - I have no interest in blocking anything other than trolls ;o)</em></p></blockquote> <p><strong>Hacked legitimate web sites (non-SQL injection attacks)</strong>&nbsp; - this is not as common as some of their other trickery has been but it is a growing trend, and I am certainly receiving (and have been able to confirm) reports of hacked web sites with malicious iframes inserted that expose viewers to fraudware.</p> <p><strong>SQL injection</strong> - yep, they use that too.</p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645517" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=Hx9V8K"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=Hx9V8K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=3Zx2rk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=3Zx2rk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/372005008" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645517http://msmvps.com/blogs/spywaresucks/archive/2008/08/23/1645517.aspxSuccessfully detected malvertizing samples are flooding in... [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/371889039/1645504.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiFri, 22 Aug 2008 08:57:21 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645504<p>Featuring....</p> <p>Careerbuilder.com... (hits newstat.net, profitabill.com and adverdaemon.com)</p> <p>Skype (hits statsgroup.net, profitabill.com and adverdaemon.com)</p> <p>mediaman (hits statsgroup.net, profitabill.com and adverdaemon.com as well as stats.sellmosoft.net and stats2.reliablestats.com)</p> <p>nielsen and&nbsp; bighip</p> <p>&nbsp;</p> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Malvertizingsamplesarefloodingin_5F00_12E69/image_5F00_2d1c22ad_2D00_3c0b_2D00_48f5_2D00_b4ad_2D00_c1ca5cca79bd.png" width="732" height="96" /></p> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Malvertizingsamplesarefloodingin_5F00_12E69/image_5F00_a8c4acf9_2D00_9f4f_2D00_4f9d_2D00_9e5b_2D00_d086894e5dc2.png" width="765" height="97" /></p> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Malvertizingsamplesarefloodingin_5F00_12E69/image_5F00_3c9849d0_2D00_0050_2D00_4155_2D00_b353_2D00_56589e706838.png" width="727" height="93" /> </p> <p><img alt="image" align="left" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Malvertizingsamplesarefloodingin_5F00_12E69/image_5F00_2d2a2680_2D00_bf6c_2D00_4537_2D00_8012_2D00_1b58813cd2a9.png" width="138" height="622" /> <img alt="image" align="left" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Malvertizingsamplesarefloodingin_5F00_12E69/image_5F00_da276701_2D00_87f6_2D00_4c48_2D00_aeeb_2D00_ce69fb56d96e.png" width="145" height="619" /><img alt="image" align="left" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Malvertizingsamplesarefloodingin_5F00_12E69/image_5F00_9047aea4_2D00_f580_2D00_4ccf_2D00_a311_2D00_301a4819c20d.png" width="141" height="610" /></p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645504" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=wz95yK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=wz95yK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=sx5hIk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=sx5hIk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/371889039" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645504http://msmvps.com/blogs/spywaresucks/archive/2008/08/22/1645504.aspxHeh. [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/371593211/1645473.aspxOff topicsandiFri, 22 Aug 2008 00:28:00 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645473<blockquote> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Heh_5F00_BD57/image_5F00_dcd1887b_2D00_160c_2D00_426d_2D00_a17d_2D00_e40ab8ead9b8.png" width="319" height="446" /> </p> <p>Source: <a title="http://xkcd.com/466/" target="_blank" href="http://xkcd.com/466/">http://xkcd.com/466/</a></p></blockquote><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645473" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=MMUUXK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=MMUUXK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=iqWsKk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=iqWsKk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/371593211" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645473http://msmvps.com/blogs/spywaresucks/archive/2008/08/22/1645473.aspxALERT: please treat all content from eosads.com with extreme caution [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/371583872/1645472.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiThu, 21 Aug 2008 23:39:46 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645472<blockquote> <p><img style="margin:0px 25px 25px 0px;" alt="image" align="left" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.ALERTpleasetreatallcontentfromwithextrem_5F00_AC3B/image_5F00_5dfe0686_2D00_c1c5_2D00_4da2_2D00_b1ac_2D00_05e01f290682.png" width="772" height="516" /></p> <p>&nbsp;</p> <p>&nbsp;</p> <p><strong>eosads.com - IP: 216.195.62.169</strong></p> <p><strong>Registrar:</strong> Estdomains (enough said)<br />Date </p> <p>created: 8 February 2007 </p> <p><strong>WHOIS<br /></strong>Registrant, admin, technical and billing contact: Daniel Adams (ddarkmaster@gmail.com) <p><strong>hostnames sharing ip with a-records</strong> <br />alice-cms.com<br />cstur.com<br />mail.alice-cms.com<br />mail.cstur.com<br />mail.eosads.com<br />mail.freeebayguide.net<br />mail.kxtrlive.com<br />mail.phentermine375noprescription.com<br />mail.zummedia.com<br />phentermine375noprescription.com<br />tatushki.info<br />zummedia.com <p>&nbsp; <p>&nbsp; <p>&nbsp; <p><strong>sharing mailserver IP: <br /></strong>alice-cms.com<br />cstur.com<br />freeebayguide.net<br />phentermine375noprescription.com<br />zummedia.com <p>&nbsp; <p><strong>greatvideo3.com - IP: 84.16.252.73 </strong> <p><strong>Registrar:</strong> DIRECTI INTERNET SOLUTIONS PVT. LTD. (another well known name)<br />Date created: 12 August 2008 <p><strong>WHOIS </strong>hidden behind privacyprotect.org <p><strong>hostnames sharing ip with a-records</strong> <br />3gigabytes.com<br />84-16-252-73.internetserviceteam.com<br />antivirus-download3.com<br />internet-defense2009.com<br />mail.antispyguard-scanner.com <br />mail.onlinexpsecurity.com<br />myfreespace3.com<br />update-direct.com<br />windows-defense.com<br />xp-protectsoft.com <p><strong>sharing mailserver IP:<br /></strong>84-16-252-73.internetserviceteam.com<br />antispyguard-scanner.com<br />antivirus-2009pro.com<br />antivirus2009-software.com<br />antivirus2009professional.com<br />onlinexpsecurity.com<br />xp-registration.com </p></blockquote> <p><strong>EOSADS</strong> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.ALERTpleasetreatallcontentfromwithextrem_5F00_AC3B/image_5F00_2e7d76ac_2D00_5c2a_2D00_45d3_2D00_8c9f_2D00_2362762797a8.png" width="962" height="462" />&nbsp;&nbsp;&nbsp;&nbsp; <p>Note the IP 72.36.217.26 above - now note the (expired) SSL Cert noted below for that IP: <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.ALERTpleasetreatallcontentfromwithextrem_5F00_AC3B/image_5F00_c3704a94_2D00_52ba_2D00_4b28_2D00_bd23_2D00_ceb0fafe5eef.png" width="966" height="165" /> <p>&nbsp; <p><strong>GREATVIDEO3.COM</strong> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.ALERTpleasetreatallcontentfromwithextrem_5F00_AC3B/image_5F00_65b1dae5_2D00_a0d4_2D00_476f_2D00_8987_2D00_7a4d94b05dbd.png" width="818" height="229" /></p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645472" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=NBxmpK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=NBxmpK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=859I7k"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=859I7k" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/371583872" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645472http://msmvps.com/blogs/spywaresucks/archive/2008/08/22/1645472.aspxALERT: Please treat content from the following domains with extreme caution [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/371478242/1645465.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiThu, 21 Aug 2008 21:30:06 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645465<p>Thanks to Matt for the heads-up warning that the following domains are implicated in the facilitation of malvertizing and other nefarious behavior... <p>Matt warns us about... <p><strong>paymentforad.com</strong> - IP 58.65.237.115<br />Registrar: TLDS, LLC DBA SRSPLUS<br />Registrant: Serj Moondy (moon.serg@gmail.com) &lt;-- a name we recognize, yes?<br />Administrative, technical, billing contact: Alex Ferguson (moon.serg@gmail.com)<br />Domain created: 3 July 2008 <p><strong>extrabigad.com</strong> - was 58.65.237.114, now 69.50.131.86<br />Registrar: TLDS, LLC DBA SRSPLUS<br />Registrant: Serj Moondy (moon.serg@gmail.com)<br />Administrative, technical, billing contact: Alex Ferguson (moon.serg@gmail.com)<br />Domain created: 3 July 2008 <p><strong>extrafreead.com</strong> - IP 58.65.237.113<br />Registrar: TLDS, LLC DBA SRSPLUS<br />Registrant: Serj Moondy (moon.serg@gmail.com)<br />Administrative, technical, billing contact: Alex Ferguson (moon.serg@gmail.com)<br />Domain created: 3 July 2008 <p><strong>ads4flower.com</strong> - IP: 58.65.237.116<br />Registrar: TLDS, LLC DBA SRSPLUS<br />Registrant: Serj Moondy (moon.serg@gmail.com) &lt;-- a name we recognize, yes?<br />Administrative, technical, billing contact: Alex Ferguson (moon.serg@gmail.com)<br />Domain created: 3 July 2008 <p><strong>advertpanda.com</strong> - IP: 58.65.237.117<br />Registrar: TLDS, LLC DBA SRSPLUS<br />Registrant: Serj Moondy (moon.serg@gmail.com)<br />Administrative, technical, billing contact: Alex Ferguson (moon.serg@gmail.com)<br />Domain created: 3 July 2008 <p>If I dig a little deeper, I also find... <p><strong>whoisadvert.com</strong> - IP 58.65.237.217<br />Registrar: TLDS, LLC DBA SRSPLUS<br />Registrant: Serj Moondy (moon.serg@gmail.com) &lt;-- a name we recognize, yes?<br />Administrative, technical, billing contact: Alex Ferguson (moon.serg@gmail.com)<br />Domain created: 3 July 2008 <p>At time of writing, moon.serg@gmail.com was associated with 111 different domains.&nbsp; I&#39;m very tempted to dig up and publicize every single one of them. <p>Ok, so let&#39;s see what other domains we can find in that IP range that have an advertiser-ish feel to them or which are similar to past fraudware domains (as I keep saying, the bad guys are lazy - they keep using the same registrars, they put too many eggs into the one basket and sometimes feel the need to hide behind &#39;bulletproof&#39; hosting): <p><strong>traffomer.com</strong> - IP 58.65.237.49<br />Registrar: Estdomains, Inc<br />Creation date: 9 July 2008 <p><strong>BZZZZZ.ORG</strong> - IP 58.65.237.49<br />Registrar: Estdomains, Inc<br />Creation date: 18 August 2008 <p><strong>adminkos.net</strong> - IP: 58.65.237.49<br />Registrar: Estdomains, Inc<br />Creation date: 17 July 2008 <p>BTW, another name that keeps on cropping up in association with &quot;bad actor&quot; domains is the unattractively named &quot;fuckdns.com&quot;. <p><strong>fuckdns.com</strong> - IP: 58.65.237.49<br />Registrar: Estdomains, Inc<br />Creation date: 9 July 2008 <p>Also be careful here... <p><strong>upkteam.com</strong> - IP 58.65.237.121 &lt;--- DON&#39;T GO THERE, there&#39;s script in the source code of the page:<br />Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM<br />Creation date:&nbsp; 11 October 2007 <p>That will do for now - the more we dig, the more we find.&nbsp; HostFresh in Hong Kong (58.65.237.*) has a (deservedly) bad reputation. <p><a target="_blank" href="http://ddanchev.blogspot.com/2008_06_01_archive.html">http://ddanchev.blogspot.com/2008_06_01_archive.html</a><br /><a target="_blank" href="http://ddanchev.blogspot.com/2008/02/geolocating-malicious-isps.html">http://ddanchev.blogspot.com/2008/02/geolocating-malicious-isps.html</a></p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645465" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=hCr9pK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=hCr9pK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=GIXwBk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=GIXwBk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/371478242" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645465http://msmvps.com/blogs/spywaresucks/archive/2008/08/22/1645465.aspxDetermining Poorly Performing Queries for Tuning from SQL Server Workload Trace Files [Mitch Wheat - Treat the cause, not the symptoms!]http://feeds.feedburner.com/~r/mitchwheat/~3/369938486/determining-poorly-performing-queries.htmlnoreply@blogger.com (Mitch Wheat)Thu, 21 Aug 2008 19:59:16 -0500tag:blogger.com,1999:blog-28468793.post-2258406028978366083<span style="font-family:arial;">Whenever you gather workload traces to identify poorly performing queries, you need to import this data into a database table, and to "normalise" and aggregate this information to identify the worst offenders. This can be done in a variety of ways. One way is to define a regular expression such as this SQL CLR method based on work done by Itzik Ben-Gan and modified by Adam Machanic:<br /></span><br /><div style="BACKGROUND: white;font-family:Consolas, Courier New, courier;font-size:9pt;color:black;" ><pre style="MARGIN: 0px">[Microsoft.SqlServer.Server.<span style="color:#2b91af;">SqlFunction</span>(IsDeterministic = <span style="color:blue;">true</span>)]</pre><pre style="MARGIN: 0px"><span style="color:blue;">public</span> <span style="color:blue;">static</span> SqlString sqlsig(SqlString querystring)</pre><pre style="MARGIN: 0px">{</pre><pre style="MARGIN: 0px"> <span style="color:blue;">return</span> (SqlString)Regex.Replace(</pre><pre style="MARGIN: 0px"> querystring.Value,</pre><pre style="MARGIN: 0px"> <span style="color:#a31515;">@"([\s,(=&lt;&gt;!](?![^\]]+[\]]))(?:(?:(?:(?:(?# expression coming</span></pre><pre style="MARGIN: 0px"><span style="color:#a31515;"> )(?:([N])?(')(?:[^']'')*('))(?# character</span></pre><pre style="MARGIN: 0px"><span style="color:#a31515;"> )(?:0x[\da-fA-F]*)(?# binary</span></pre><pre style="MARGIN: 0px"><span style="color:#a31515;"> )(?:[-+]?(?:(?:[\d]*\.[\d]*[\d]+)(?# precise number</span></pre><pre style="MARGIN: 0px"><span style="color:#a31515;"> )(?:[eE]?[\d]*)))(?# imprecise number</span></pre><pre style="MARGIN: 0px"><span style="color:#a31515;"> )(?:[~]?[-+]?(?:[\d]+))(?# integer</span></pre><pre style="MARGIN: 0px"><span style="color:#a31515;"> )(?:[nN][uU][lL][lL])(?# null</span></pre><pre style="MARGIN: 0px"><span style="color:#a31515;"> ))(?:[\s]?[\+\-\*\/\%\&amp;\\^][\s]?)?)+(?# operators</span></pre><pre style="MARGIN: 0px"><span style="color:#a31515;"> )))"</span>,</pre><pre style="MARGIN: 0px"> <span style="color:#a31515;">@"$1$2$3#$4"</span>);</pre><pre style="MARGIN: 0px">}</pre></div><br /><span style="font-family:arial;">Recently I’ve been trying out </span><a href="http://www.cleardata.biz/cleartrace/default.aspx"><span style="font-family:arial;">ClearTrace</span></a><span style="font-family:arial;">, a free tool based around Read80Trace (described and downloadable </span><a href="http://support.microsoft.com/kb/887057"><span style="font-family:arial;">here</span></a><span style="font-family:arial;">). Read80Trace was originally part of a Microsoft PSS engineer’s internal toolkit, but was released to the public in Dec 2007 (</span><a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=7edfa95a-a32f-440f-a3a8-5160c8dbe926&amp;DisplayLang=en"><span style="font-family:arial;">RML Utilities for SQL Server</span></a><span style="font-family:arial;">). ClearTrace is extremely simple to use, imports files (including rollover) very quickly and the results are good. The project is being supported so if you find a SQL statement that isn’t normalised/parameterised correctly, you can click a button and report it.</span><br /><br /><span style="font-family:arial;">The larger RML Utilities toolkit for Microsoft SQL Server was released </span><a href="http://blogs.msdn.com/psssql/archive/2007/12/18/rml-utilities-for-microsoft-sql-server-released.aspx"><span style="font-family:arial;">here</span></a><span style="font-family:arial;">. </span><br /><span style="font-family:arial;"><blockquote><p><em>The RML Utilities can help you answer the following questions: </em></p><ul><li><em>Which application, database or login is consuming the most resources, and which queries are responsible for that.</em></li><li><em>Whether there were any plan changes for a batch during the time when the trace was captured and how each of those plans performed. </em></li><li><em>What queries are running slower in today's data as compared to a previous set of data.</em></li></ul><p><em></em></p><blockquote><p></p><em>You can also test how the system will behave with some change (different service pack or hot fix build, changing a stored procedure or function, modifying or adding indexes, and so forth) by using the provided tools to replay the trace files against another instance of SQL Server. If you capture trace during this replay you can use the tools to directly compare to the original baseline capture</em>.</blockquote><p></span></p></blockquote></span>If you decide to install and experiment with the RML Utilities toolkit, be warned that the tools are provided as is, and the install process is neither easy nor particularly pleasant!<img src="http://feeds.feedburner.com/~r/mitchwheat/~4/369938486" height="1" width="1"/>2008-08-22T08:59:16.147+08:00http://mitch-wheat.blogspot.com/2008/08/determining-poorly-performing-queries.htmlRemember what I said about trolls? [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/371349700/1645450.aspxAdmin announcementssandiThu, 21 Aug 2008 17:57:58 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645450<p>This one seems to be having a bit of a problem with the concept of moderation...&nbsp;&nbsp; :o)</p> <p>&nbsp;<img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.RememberwhatIsaidabouttrolls_5F00_5EAB/image_5F00_776b5b24_2D00_2ab3_2D00_45b2_2D00_b54b_2D00_f1dbd1c9f30d.png" width="461" height="583" /> </p> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.RememberwhatIsaidabouttrolls_5F00_5EAB/image_5F00_f680d651_2D00_a8be_2D00_4525_2D00_8027_2D00_6c91011aa677.png" width="481" height="560" /></p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645450" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=sNm25K"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=sNm25K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=LpcoHk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=LpcoHk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/371349700" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645450http://msmvps.com/blogs/spywaresucks/archive/2008/08/22/1645450.aspxVisual Studio 2008 SDK 1.1 [Professional Visual Studio]http://www.professionalvisualstudio.com/blog/2008/08/21/visual-studio-2008-sdk-11/SDKShellVSXVisual StudioKeyvan NayyeriThu, 21 Aug 2008 07:21:30 -0500http://www.professionalvisualstudio.com/blog/2008/08/21/visual-studio-2008-sdk-11/Yesterday Microsoft Visual Studio Extensibility team announced a new update in Visual Studio 2008 SDK and released version 1.1 to public.

For VSX developers, this is important news because there are some major updates to improve the extensibility features especially around Visual Studio Shell development. This new version works on .NET Framework 3.5 and Visual Studio 2008 Service Pack 1.

Quan To has outlined these updates on VSX team blog but major updates are a reduction in the size of VS Shell package installers that no longer hold .NET Framework 3.5 data and also there is an update that lets you develop VS Shell applications as a normal Windows user that wasn’t possible before.

You can download Visual Studio 2008 SDK 1.1 from here.

]]>Yesterday Microsoft Visual Studio Extensibility team announced a new update in Visual Studio 2008 SDK and released version 1.1 to public. For VSX developers, this is important news because there are some major updates to improve the extensibility features especially around Visual Studio Shell development. This new version works on .NET Framework 3.5 and Visual Studio [...]http://www.professionalvisualstudio.com/blog/2008/08/21/visual-studio-2008-sdk-11/feed/Avert Labs 5365 DAT Issue Emergency Notice [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/370655654/1645320.aspxSecurity, safety and privacy on the InternetsandiThu, 21 Aug 2008 00:40:32 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645320<p><em>Thanks to <a target="_blank" href="http://msmvps.com/blogs/jubo/">Jurren</a> for the heads up...</em></p> <blockquote> <p>&quot;<em>Avert Labs is issuing an emergency notice for the 5365 DAT files.&nbsp; The reason for this Emergency DAT release is due to a false detection for New Malware.bm. </em></p> <p><em>Known files impacted by this emergency are:<br />Large AutoIT packed files (samples seen have been over 16MB in size) </em> <p><em>Avert Labs will be releasing the 5366 DATs early to resolve this issue and notification of this release will come via the DAT Notification service (</em><a href="http://vil.nai.com/vil/signup_DAT_notification.aspx)"><em>http://vil.nai.com/vil/signup_DAT_notification.aspx)</em></a><em> and through the Technical Support communication channels.</em>&quot;</p></blockquote><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645320" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=jUP8hK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=jUP8hK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=ntyyFk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=ntyyFk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/370655654" height="1" width="1"/>0http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645320http://msmvps.com/blogs/spywaresucks/archive/2008/08/21/1645320.aspxThank you for your well thought out contribution... [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/370640686/1645316.aspxAdmin announcementssandiThu, 21 Aug 2008 00:24:58 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645316<p>It is because of trolls like the following that I have no interest in using the oft-broken CAPTCHA, preferring to use spam filters and moderation of *every* comment.</p> <p>Below is just one of the dozens of unsavory comments that have been submitted to my blog over the past 24 hours.</p> <p>Yes it takes valuable time to trawl through comments; sometimes legitimate comments are trapped by the spam filters; and legitimate comments can take a while to be approved if submitted during the middle of my night, but the effort is worth it, if only to stop flame-storms and charmless correspondents such as &quot;nesmes&quot;.</p> <p>Argue a point with me if you are so inclined, disagree with me all you want.&nbsp; If you stick to addressing the topic at hand, and do not attack the messenger instead of the message, then your comment will in all likelihood get through - but if you get personal, or you denigrate end users, or you participate in a flame-storm, then in all likelihood your comment will not get through.&nbsp; Such are the charms of an autocracy ;o)</p> <p>&nbsp;</p> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Thankyouforyourwellthoughtoutcontributi_5F00_B2A1/image_5F00_c9107a97_2D00_f72b_2D00_46a2_2D00_89d0_2D00_496b69796235.png" width="562" height="146" /> </p> <p>&nbsp;</p> <p>Check out the translation:</p> <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.Thankyouforyourwellthoughtoutcontributi_5F00_B2A1/image_5F00_75566d3a_2D00_87d0_2D00_4b3d_2D00_b935_2D00_128f26866b08.png" width="478" height="343" /></p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645316" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=HnlgSK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=HnlgSK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=Wjlfgk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=Wjlfgk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/370640686" height="1" width="1"/>3http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645316http://msmvps.com/blogs/spywaresucks/archive/2008/08/21/1645316.aspxALERT: Please treat adtrafficserv.com with extreme caution [Spyware Sucks]http://feeds.feedburner.com/~r/SpywareSucks/~3/370601550/1645311.aspxSecurity, safety and privacy on the InternetVulnerabilities, viruses and exploitssandiWed, 20 Aug 2008 23:30:24 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645311<p>I have found a bad URL that redirects viewers to the fraudware domain systemscanner2008.com page, being: <p>adtrafficserv.com/?ref=md&amp;aff=tr. <p>This URL in turn redirects to: <p>3gigabytes.com/soft.php?aid=&lt;&lt;removed&gt;&gt;&amp;d=3&amp;product=XPA <p>and from there the viewer is led to: <p>systemscanner2008.com/2008/3/freescan.php?aid=&lt;&lt;removed&gt;&gt;. <p>adtrafficserv.com shares A-Record IP with the site winerrorfixer.com.&nbsp; It also shares IP with adnovations.com and winsolution.org. <p>Such redirects are often geographically targeted.&nbsp; Do not be surprised if you end up at a different fraudware site when testing the URL, or if you end up at a &quot;safe&quot; site. <p><img alt="image" src="http://msmvps.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/spywaresucks.ALERTPleasetreatad.comwithextremecaution_5F00_ADC4/image_5F00_f53517eb_2D00_da10_2D00_4f10_2D00_9606_2D00_9de8dd008adc.png" width="724" height="487" /><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645311" width="1" height="1"><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=F9LXUK"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=F9LXUK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/SpywareSucks?a=ikMoNk"><img src="http://feeds.feedburner.com/~f/SpywareSucks?i=ikMoNk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/SpywareSucks/~4/370601550" height="1" width="1"/>3http://msmvps.com/blogs/spywaresucks/commentapi.aspx?PostID=1645311http://msmvps.com/blogs/spywaresucks/archive/2008/08/21/1645311.aspxMVP Theatre Agenda for TechEd 2008 Australia [Brian H. Madsen - .Net Powered by Caffeine]http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~3/370002302/mvp-theatre-agenda-for-teched-2008-australia.aspxTechEd 2008Brian MadsenWed, 20 Aug 2008 08:45:39 -0500d67277c4-116b-43f1-b688-e9ef184ea916:1645198<p>For those lucky enough to actually go to TechEd 2008 in Sydney, Australia this year, you can find an addition to the TechEd agenda happening.</p> <p>The MVP Theatre will host a range of MVPs presenting on some seriously hot topics.</p> <p>There&#39;s a limited number of seats available (and it&#39;s open to all delegates..err...and MVPs as well of course) so you have to be quick on the trigger to get in.</p> <p>Not only will you get an opportunity that&#39;s limited to the elite (well, hey, if you&#39;re going to TechEd YOU ARE THE ELITE!!) but you get to rub shoulders with some cool guys!</p> <p>Here&#39;s some info:</p> <blockquote> <p><b>MVP Theatre Agenda at Tech Ed Australia<br /></b>If you are registered for Tech Ed Australia this year, come along to MVP Theatre to watch MVPs delivering sessions ranging from 20 minutes to the full 75 minutes. There are only 20 seats in MVP Theatre, so you need to be quick getting to the Expo Hall if you’re serious about catching an MVP Session. The <a href="https://aunz.msteched.com/au/public/mvptheatre.aspx">Agenda for MVP Theatre is here</a> (please watch it for last minute updates). To attend, you must be a registered delegate, so if you haven’t bought your Tech Ed ticket yet, you can <a href="http://www.microsoft.com.au/teched/default.aspx">register here</a>.&nbsp;&nbsp; <p>I’m presenting &lt;Insert session title here&gt; on &lt;day&gt; at &lt;time&gt;. <p>Seated attendees to MVP Theatre each receive an MVP Logo wind-up torch keyring (no battery!), so you need to be quick! <p>You can’t pre-register for MVP Theatre sessions; it’s first in first seated.&nbsp; </p></blockquote> <p>Enjoy and i hope to see tons of blogging come out of TechEd this year!</p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1645198" width="1" height="1"> <p><a href="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?a=PE2piY"><img src="http://feeds.feedburner.com/~a/BrianHMadsen-netPoweredByCaffeine?i=PE2piY" border="0"></img></a></p><div class="feedflare"> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=xJi6MK"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=xJi6MK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=xKMvck"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=xKMvck" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?a=nGm1hk"><img src="http://feeds.feedburner.com/~f/BrianHMadsen-netPoweredByCaffeine?i=nGm1hk" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/BrianHMadsen-netPoweredByCaffeine/~4/370002302" height="1" width="1"/>0http://msmvps.com/blogs/brianmadsen/rsscomments.aspx?PostID=1645198http://api.feedburner.com/awareness/1.0/GetItemData?uri=BrianHMadsen-netPoweredByCaffeine&itemurl=http%3A%2F%2Fmsmvps.com%2Fblogs%2Fbrianmadsen%2Farchive%2F2008%2F08%2F20%2Fmvp-theatre-agenda-for-teched-2008-australia.aspxhttp://msmvps.com/blogs/brianmadsen/archive/2008/08/20/mvp-theatre-agenda-for-teched-2008-australia.aspx