Another exploit in Windows 8.1 and 7 showcased by a Google security researcher

Few weeks ago, Google had outed a vulnerability in Windows. Well ! Google has done it again. This time by a Google security researcher detailed another vulnerability in both Windows 8.1 and Windows 7. Similar to the exploit that Google had previously detailed, this vulnerability could allow a user to impersonate another ID allowing encryption and decryption of data he or she wouldn't have access to.

From the report:

"The issue is the implementation in CNG.sys doesn't check the impersonation level of the token when capturing the logon session id (using SeQueryAuthenticationIdToken) so a normal user can impersonate at Identification level and decrypt or encrypt data for that logon session. This might be an issue if there's a service which is vulnerable to a named pipe planting attack or is storing encrypted data in a world readable shared memory section."

This news comes before a patch has been issued by Microsoft to fix the exploit just similar to the previous report by Google security research. However, it is important to note that the details of these security exploits are subject to a 90 day disclosure deadline. It appears, Microsoft was aware of the issue for quite sometime and fix for this is expected in February patches.

Image Courtesy : Windows Central 

Lumia Camera app shall be expanded to all Windows Phones for Windows 10

As the Windows 10 event is all set for next week to be Live, more information is slowly coming out. A new Camera beta app has been found at the store for internal use by Microsoft.

Images for the app provided to another tech site Windows Central by Leskinen reveal the familiar Lumia Camera app design , although it appeared that ffew features were unique to Lumia Denim like Rich Capture were not present.

Interestingly, the camera app listed HID (Human Interface Devices) bluetooth support, although it is not clear in what context that would be useful for this app.

Currently Lumia devices have minimum two main camera apps, including the Microsoft  default app and Nokia's Lumia camera. It makes sense that Microsoft would want to consolidate things for Windows 10, especially since they now own the Lumia camera app code.

As announced earlier, Microsoft is expected to announce a Phone Insider program this week for Windows 10 on mobile.

Till then , stay tuned

Image Courtesy : Windows Central

Microsoft announces the ultra-affordable Lumia 435 and Lumia 532

Roughly after a couple of hours post the news of mysterious Lumia 532 passed through Brazil's equivalent of the  FCC, Microsoft made the news true by making the device official. The Redmond giant also launched the Lumia 435 in both single and dual Sim versions at a price tag of $80 before taxes making it the most affordable Lumia handset ever.

Now lets talk about the specs !

Lumia 435

The Lumia 435 features a 4-inch WVGA display clocked at 1.2 GHz dual core Snapdragon 200 CPU with a 1 GB RAM , 8 GB internal storage and 2 MP rear camera , VGA front shooter and a 1560 mAh battery. For its software, obviously it is running Windows Phone 8.1 with Denim update out of the box and also the users will be able to access HERE's suite of services for free (thanx to Microsoft's licensing deal with Nokia)

The Lumia 435 will be available in bright Green, bright Orange , white and black and will start rolling out in select countries in Europe , APAC and IMEA in February.

Lumia 532

The Lumia 532 is another budget device , but the device features a more improved hardware in the form of quad core Snapdragon 200 CPU. The camera is 5MP at the back compared to 2MP of Lumia 435. The rest of hardware is more or less similar along with the colors available . The price tag is a $93 before taxes and will set to roll out in Europe , APAC & IMEA in February.

Lumia 532 is also available in single and dual SIM versions.





So what do you guys thing of these latest ultra budget handsets ?

Windows & Windows Phone stores now comprises over 560,000 apps!

Microsoft has just updated its official combied number of Modern apps that are currently available in its Windows & Windows Phone stores to a whooping number of 560,000 apps.

Last updated, Microsoft said the store contained 527,000 apps from both stores last year.
Its a good news for Windows and Windows Phone fans and users out there. The updated stats comes even as Microsoft gets ready to move all of its Modern apps to one app store for the launch of Windows 10 later in 2015 .

Source : Microsoft

Microsoft prepares to preview Windows 10 for phones

A good news for all the Windows Phone users and fans ! Microsoft seems to be preparing to preview its latest version of Windows Phone later this month. The software giant released a "Phone Insider" app this week ahead of January 21st press event where Microsoft will be revealing its plans for Windows 10 across phones and tablets. 

According to sources, the company will also be talking about a number of features aimed at Windows 10 for phones, including some user interface changes designed to more closely align its mobile operating system with its desktop platform and Xbox One console.

Microsoft also seems to be making changes to Windows 10 on the desktop to include light and dark themes that would match the phone and tablet editions. As it is currently being called as Windows Mobile and Windows 10 mobile internally at Microsoft, the next big mobile OS will include a combination of the Windows Phone and Windows RT operating systems. Microsoft has already started making universal apps for Windows and Windows Phone platforms.

While the company will reveal its developer and app plans further at the Build event held on 21st January, the event will be more focused on the consumer features of both the desktop and phone/ tablet operating system.
Microsoft is also expected to introduce a new name for its combined Windows RT and Windows Phone OS at the event.

The recently released "Phone Insider" app provides similar access to the Windows 10 insider program for desktop. Microsoft will be discussing more about this app on 21st January event, however the app currently only works for Microsoft employees at present.

One thing is for sure, Microsoft's 21st January event will be full of suspense and excitement for both developers and the consumers and all those who will be watching the event live that day. The Verge will be live from Microsoft's press event next week,  so stay tuned for more details on both "The Verge" and your very own "Windows Avenue" blog post. 

Windows 7 mainstream support ends this Tuesday and patches will continue until 2020

Its finally and end of the first phase of support for Windows 7 as Microsoft's self-declared deadline to offer mainstream support for the OS ends on Thuesday the 13th of January. However, the company has declared that it will offer extended support for Windows 7 for another 5 years, until January14 , 2020.

This means that Microsoft won't be making any more changes to Windows 7 in terms of its design or features. It also won't provide complementary phone or online support anymore. SO what does this mean for over 50 percent of PC users worldwide who still have Windows 7 installed?

A year ago, Microsoft had ended all official support for Windows XP, but the OS which launched in 2001 is still used by a large fraction of PC users world wide. However, its a fact that still , Windows 8 and 8.1 have so far not claimed a large amount of market share. Hence, Microsoft clearly would like for Windows 10,  which is due for launch this year, to be more successful. Hopefully, it seems likely that many Windows 7 users will bypass Windows 8 and 8.1 entirely and move onto Windows 10. 

Fingers crossed !

Source: Microsoft

Microsoft responds to Google for publishing Windows 8.1 vulnerability before being fixed

Microsoft has Hit back at Google for making Windows 8.1 vulnerability issues public. Chriz Betz who heads the Microsoft Security Response Center (MSRC), published a new blog post on Tech Net where he talks about security and how tech companies shall work together to protect consumers against threats from exploits in software in a better way, something the company feels Google disregarded .

The blog talks more on preventing the full public disclosure of security vulnerabilities in software, which Microsoft believes is to be best kept under wraps.

Betz also stated that Microsoft requested Google to avoid releasing said details before January 13.

The blog concludes by re confirming that software is by no means perfect. It is made by humans after all . Here's hoping the giants behind our favourite devices band together to keep everyone safe from attacks and cyber crime.