Linked Accounts Being Eliminated from Outlook

Starting in late July, Microsoft will be eliminating the "linked accounts" feature from Outlook.com.  While this feature has been used for many reasons, particularly where you don't want to provide your primary email address, security is the primary reason Microsoft is giving for this change.

According to the announcement by Eric Doerr in the Outlook Blog, it has been increasingly found that linked accounts are less secure than using aliases, particularly because it is possible to sign in to Outlook.com on the web and then switch to any other linked account without entering a password.

Options

With the elimination of linked accounts, the remaining options currently available are to use mail forwarding from the previously linked account or create an alias. 

Microsoft is reportedly working on setting up the ability to move an email address and the accompanying email from one account to another.

Important Notes: 

1. Mail Forwarding:  You must sign in to your forwarded account at least once every 365 days.  If you don't, the system will close the account.
2. Reply to Forwarded Mail:  In order to reply directly to email forwarded to your primary account, it is necessary to configure Outlook.com to send email on behalf of a secondary email account.
3. Aliases:  There is a limit of up to ten new aliases per year and an overall maximum of ten aliases.  Deleting an alias removes it from the count but not the ten/year limit. )   

Information on how to create an Outlook.com alias and set up mail forwarding is available from Microsoft in the help documents linked below.

~   ~   ~   ~   ~   ~

I am an Outlook.com Insider.  If you have a question about this post or Outlook.com, please leave a comment and I'll do my best to assist.  Learn more about the Outlook.com Insiders program here.

References

• Outlook Blog: An update to linked accounts
• Add an Outlook.com alias to your account
• Set up your Gmail, Yahoo! Plus, or Microsoft email accounts in Outlook.com

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Microsoft Fix it to Disable Java in Internet Explorer

Java, how we love to hate you!  Many people have uninstalled Java and do not miss it.  That is most likely because they do not have desktop applications that require Java. Unfortunately, that is not the situation for those people who use Java-dependent software programs. 

Until recently, Internet Explorer was the only major browser that did not provide a way to disable Java.  The only way to completely disable Java in IE was to disable Java through the Java Control Panel, which meant re-enabling Java when using Java-dependent programs.  That is no longer true!

Microsoft released a Microsoft Fix it solution designed to block all Java web-attack vectors through Internet Explorer.  As explained by Cristian Craioveanu in the below-linked Security Research & Defense Blog article, the Fix it solution is made up of two parts. 

1. The Fix It uses the Windows Application Compatibility Toolkit to change the behavior of Internet Explorer at runtime to prevent Oracle’s Java Web plugins from loading.  As a result, the Java ActiveX dlls are not loaded.
2. The second part of the Fix it clears the access control list (ACL) in the registry for the Java Network Loading Protocol (JNLP) handler which prevents Internet Explorer from automatically opening  files.  

Instructions

Before installing the Fix it solution, please follow the following suggestions:

1.  Create a restore point

• Windows XP: How to set a system restore point in Windows XP
• Windows Vista, Windows 7, Windows 8: Create a restore point
• (Note:  For Windows 8, open the Windows Charms Bar by pressing Windows key + Q.  In the Apps search Bar, type Restore Point, Create Restore Point.)

2.  Back up the Registry

• Windows XP: How to back up and restore the registry in Windows XP
• Windows Vista, Windows 7, Windows 8: Back up the registry (Note: For Windows 8, open the Windows Charms Bar by pressing Windows key + Q.  In the Apps search Bar, type regedit and press Enter to open Registry Editor.)

3.  Apply the Fix it

Disable the Java web-plugin Apply Fix it	Restore the Java web-plugin   Uninstall Fix it
Microsoft Fix it 50994	Microsoft Fix it 50995

4.  Restart Internet Explorer

For the changes to take effect, restart IE.

To undo the changes, run Microsoft Fix it 50995 and restart IE.

The Fix it solution has been tested by Microsoft and will work for all versions of Java from versions 5 and above.  It also works on all supported versions of Internet Explorer, whether 32- or 64-bit.

References

• Security Research & Defense Blog: Java: A Fix it for when you cannot let go  
• Microsoft KB 2751647: How to disable the Java web plug-in in Internet Explorer

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Adobe Flash Player and AIR Security Update

Adobe has released security updates for Adobe Flash Player and Adobe AIR for Windows, Macintosh, Linux and Android.  These updates address critical vulnerabilities.

With today's Windows Update, Internet Explorer 10 in Windows 8 and Windows RT is also updated.

Update Information

The newest versions are as follows:

Windows:  11.7.700.224
Macintosh:  11.7.700.225
Linux: 11.2.202.291
Android 4x:  11.1.115.63
Android 3x and 2x:  11.1.111.59

Adobe AIR for Windows:  3.7.0.2090
Adobe AIR for Macintosh:  3.7.0.2100

Release date: June 11, 2013
Vulnerability identifier: APSB13-16

CVE number: CVE-2013-3343
Platform: All Platforms

Flash Player Update Instructions

Warning:  Although Adobe suggests downloading the update from the Adobe Flash Player Download Center, that link includes a pre-checked option to install Google Drive.

It is recommended that you either use the auto-update mechanism within the product when prompted, or my preference, the direct download links.

• Non-IE (Opera, Firefox, Etc.):  http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_11_plugin.exe
   
• Windows XP, Vista and 7:
  Flash Player For Internet Explorer 7, 8, 9, 10:  http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_11_active_x.exe
  
  Windows 8:
  Flash Player for Internet Explorer 10: Microsoft updated Security Advisory 2755801.  If you do not have Automatic Updates enabled, the Flash Player update can be downloaded from the Download Center at Update for Internet Explorer Flash Player for Windows 8 Release Preview (KB2758994).
  
  
• Flash Player Uninstaller:  http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe

Notes:

• If you use the Adobe Flash Player Download Center, be careful to uncheck any optional downloads that you do not want.  Any pre-checked option is not needed for the Flash Player update.
• Uncheck any toolbar offered with Adobe products if not wanted.
• If you use alternate browsers, it is necessary to install the update for both Internet Explorer as well as the update for alternate browsers.
• The separate 32-bit and 64-bit uninstallers have been replaced with a single uninstaller.

Adobe Flash Player for Android

The latest version for Adobe Flash Player for Android is available by downloading it from the Android Marketplace by browsing to it on a mobile phone.   

Verify Installation

To verify the Adobe Flash Player version number installed on your computer, go to the About Flash Player page, or right-click on content running in Flash Player and select "About Adobe Flash Player" from the menu. 

Do this for each browser installed on your computer.

To verify the version of Adobe Flash Player for Android, go to Settings > Applications > Manage Applications > Adobe Flash Player x.x.

References

• Adobe Priority Ratings
• Adobe Security Advisory: Security updates available for Adobe Flash Player
• AIR Download Center
• PSIRT Blog: Security updates available for Adobe Flash Player (APSB13-16)
• Release Notes:  Flash Player® 11.7 AIR® 3.7

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...