Happy Easter! "Khrystos Voskres!"

"Khrystos Voskres!"

(Christ is Risen!)

"Voistyno Voskres!"


(He is Truly Risen!)

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

SkyDrive Security

Do you use SkyDrive only for storing photos and miscellaneous files?  What about important correspondence or files containing personal information?  What about sensitive files such as tax returns or copies of bank statements?

The question about sensitive information was raised in the comments of my article Moving to SkyDrive regarding the security for sensitive files on SkyDrive:

"Is Skydrive suitable as a place to sync/save sensitive information (e.g. tax/financial records) or is it just really for things like photos, unimportant Office files etc? It would make things simpler for me if I could use Skydrive to sync all my files including the sensitive ones, but I am hesitating on security grounds."

In retrospect, my immediate reaction to the question was short-sighted:

"Short answer: Yes, sensitive documents (e.g. tax/financial records) saved to SkyDrive are secure. The only way to access those files is by secure logon with your Microsoft Account.

That raises the reminder of ensuring that a strong/unique password is used for your Microsoft Account. For additional information regarding a strong password, see Password Generator & Checker | How Secure is my Password.

Additionally, regardless of whether anyone uses SkyDrive or not, I strongly recommend taking the steps to protect your account. This article written for "Hotmail" equally applies to the revamped Outlook.com: Hotmail Security to Protect and Recover Your Account ~ Security Garden."

Why, after reconsideration, do I consider my response short-sighted?  Let's take a closer look at transporting and accessing files on SkyDrive.

Transporting Files to SkyDrive

When saving your files to SkyDrive, the method used for transport encryption of your data from your computer to SkyDrive is called Secure Socket Layer, or SSL.  SSL protocol uses standard key cryptographic techniques for the communication session between the client (your computer) and server (SkyDrive).

Thus, during transit from your computer to SkyDrive, your data is protected from interception and is reachable and readable only on SkyDrive. However, it is important to consider that SkyDrive does not include any additional encryption on the files after being uploaded.

Update 06Dec2013:   Please see this important information by Brad Smith, General Counsel & Executive Vice President, Legal & Corporate Affairs, Microsoft, about plans to strengthen the encryption of customer data across Microsoft networks and services. Protecting customer data from government snooping.

Accessing Files on SkyDrive

The default setting of files saved from your computer to SkyDrive is set to "only me".  Thus, no one can view your files and documents without your consent unless you intentionally select the folder and change the setting. (See this Microsoft help document for instructions on how to Share files and folders and change permissions.)

In other words, the only way to access the files set to "only me" is by logging on to SkyDrive with your Microsoft Account.  But, what if your Microsoft Account is compromised or if you inadvertently change the setting to public?

Another situation that could compromise the security of sensitive information is that anything uploaded via a mobile device is automatically stored in the Mobile uploads folder.  Fellow Microsoft MVP, Richard Hay, discovered recently that the Mobile uploads folder in the SkyDrive cloud storage is set by default as Shared with Friends.  The default setting can be changed by logging on to your SkyDrive account via your browser.

Securing Sensitive Files

There should be no concerns about security of your files stored in a private folder on SkyDrive, accessible only by you when you logon with your Microsoft Account.  However, for sensitive files, you may want to add an additional layer of protection to those files.

The easiest method is password protecting Microsoft Office files, illustrated in this Office support document:   Protect your document, workbook, or presentation with passwords, permission, and other restrictions.

Important:  Be careful to note somewhere offline the password used to protect your Office files.  There is no way that Microsoft can help you retrieve forgotten passwords.

Ben Herila of Microsoft provided additional methods of protecting your data on SkyDrive in his post in How secure are files on SkyDrive?:

"Some examples of methods that will protect your data on SkyDrive include: 

• Password protected RAR or 7Z archives
• Password protected Office 2010+ documents or 
• PDF documents with AES-256 encryption PGP-encrypted files"

For particularly sensitive information, I suggest you read both How secure are files on SkyDrive? and Microsoft account, Hotmail, SkyDrive.

~   ~   ~   ~   ~   ~

This program has been discontinued. As a SkyDrive Insider, I am excited to share information about SkyDrive.  If you have a question about this post, please leave a comment and I'll do my best to assist.

Learn more about the SkyDrive Insiders program here.

References

• Download SkyDrive Desktop App for Windows
• Download SkyDrive Apps
• Mobile Uploads Folder on SkyDrive Shared with Friends By Default
• New Videos Highlight Fundamentals of Service Reliability - Cloud Computing | Microsoft Trustworthy Computing Blog
• SkyDrive Help & How-to 
• SkyDrive Status: https://status.live.com/
• The security of your files on SkyDrive
   

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Windows 7 Service Pack 1 (SP1) Added to Automatic Update

Service Pack 1 (SP1) for Windows 7 was released over two years ago.  Yet, there are many home computers that do not yet have it installed.

Windows 7 SP1 is a collection of security patches and non-security fixes, it also includes client-side support for RemoteFX and Dynamic Memory.  More importantly, Windows 7 computers without SP1 installed reach "end of support" on April 9, 2013.

Due to the importance of Windows 7 SP1, it is being added to Automatic Updates starting March 19, 2013.

How to Determine if You Need SP1

Many Security Garden readers are comfortable moving around their computer, but others are not as experienced.  For those readers who have no idea whether SP1 has been installed on their computer, here is how to find out.

1. Click Start and in the search box type winver
   
   
2. Double-click winver.exe in the Programs list in the search results.
3. About Windows will open.  Look for Service Pack 1 as highlighted in this image:
   
   

If you see Service Pack 1, you are all set. On the other hand, if SP1 is not installed, it is very important to get it installed.

Installing Windows 7 SP1

In addition to the information provided in the Microsoft help document Learn how to install Windows 7 Service Pack 1 (SP1), linked below, note the following additional suggestions:

1. Make sure your computer is malware free.  Run an updated scan with your antivirus and anti-malware software program.
2. Back up important files to an external location (USB, CD, DVD, etc.)
3. Some security programs may interfere with the installation so it is suggested that you temporarily disable them.  Do not disable your Firewall.  If you are unsure how to disable your security software, see the instructions in How to disable your security applications  at the Tech Support Forum. 
4. If you are using a laptop, be sure to be plugged in to an electrical outlet rather than a wireless connection.

Problems Installing SP1 or other Windows Updates

In the event you have a problem installing the Service Pack, download and run the System Update Readiness Tool (SURT).  Have patience because the tool may take as long as an hour to run. 

Windows 7 32-bit (x86)		Download
Windows 7 64-bit (x64)		Download

Note:  To determine whether you have a 32-bit or 64-bit operating system do the following:

1. Click Start and type system in the search box.
2. Click system in the Programs list.
3. The operating system will be displayed as either a 32-bit Operating System or a 64-bit Operating System.

If, after running  SURT, you are still unable to install SP1, expert help is available at Sysnative.  Register for a free account and follow the instructions in the Windows Update Forum Posting Instructions topic.

References 

• Learn how to install Windows 7 Service Pack 1 (SP1)
• Windows 7 SP1 to start rolling out on Windows Update
• Windows 7 Support LifecCycle

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...