Tip o’ the Week 421 – Mind your passwords

clip_image001Passwords are a bane of IT usability – everyone chooses a password that’s too simple, until the systems make it too hard, and even the process of password entry is difficult.

So you write your passwords down (srsly, don’t do that), sometimes in an obvious way – there’s a (probably apocryphal) story of a senior healthcare professional who left their laptop (with lots of sensitive data on it, obviously) in a taxi… the standard disk encryption neatly foiled by a Postit note stuck to the lid with their username and password on it…

Corporate domain passwords will generally enforce a certain degree of complexity, frequency of changing, and may even add certificate or token based authentication that needs to be used in combination with other forms – so called secondary or multi-factor authentication (2FA/MFA. It’s getting pretty common now for web sites to offer or even force 2FA, achieved via texting a one-time login code, or using a mobile app to authenticate you. ToW #371 covered how to enable 2FA for your Microsoft Account (MSA) – you really should switch that on.

For most people’s private credentials (used for logging into websites concerned with personal lives rather than work), usernames & passwords – with the odd secret question thrown in – are the main way they’ll access sensitive information from their phone or PC. And forcing the changing of passwords on a very regular basis can be a bad idea, too, as people are more likely to use easily-guessable passwords that are in turn easy for them to remember.

clip_image002

Source: xkcd

The average person, apparently, is many times more likely to fall victim to some sort of computer-related incident than a more traditional robbery. You might be hoodwinked yourself, or through your lax credentials, your account might be compromised and used to scam other unsuspecting punters – as happens regularly on eBay.

The Man on the Clapham omnibus is also likely to use the same username & password for every website or other system they can, even though many know they shouldn’t. It’s easy to recall the same few sets of credentials, rather than having to go and look something up every time. Don’t do this.

If you want to scare yourself into action, have a look on https://haveibeenpwned.com/ and see if your (consumer) email address is on there; chances are, it might have leaked from one of the many high-profile data breaches that have happened over the years. Try entering a common password you might use on https://haveibeenpwned.com/Passwords and it’ll tell you if that password has ever been leaked… and advise you never to use that password again.

Password managers are a way to help combat the issue – so you could have a different password for each site, sometimes even a random password that the password manager itself will generate for you. Examples include 1Password, LastPass, KeePass, Dashlane, eWallet… many will be browser based or have extensions (even for Edge!), so you can log in easily despite the complexity of your passwords.  If the password manager has a cloud-storage vault, make sure it’s encrypted and there’s no way it could be compromised … and make sure you use a suitably complex but easy to remember password to unlock the password manager vault. Quis custodiet ipsos custodes?

If you use a password manager already, it may even have a report you can run to see how well protected you are…

clip_image003

Zoinks!

Summary

  • Use a different password on every website
  • Generate passwords that are long and complex
  • Use a password manager to keep track of the passwords for different websites you use
  • Use 2-Factor Authentication on every site that deals with sensitive or financial information

Tip o’ the Week 420 – Office 365 updates

clip_image001As part of the usual round of updates, Office 365 has had a bunch of changes during February and March. For many businesses (and a good few consumers), the traditional Microsoft Office (Word/Excel/PowerPoint…) app suite is now Office 365, with dozens of apps & services; even the app start banner says so.

clip_image003As the world shifts from discrete software purchase to a subscription model – and it’s happening everywhere – it allows software purchasers to get more incremental functionality sooner (rather than a 2-3 year refresh cycle… or more). Software publishers can charge an ongoing amount, neatly dealing with software piracy and giving themselves a more predictable revenue stream, whilst probably lowering overall support costs and maybe even making the software less expensive for the end user as a result.

clip_image005The latest updates for Office365 include some new additions to Word – like the consolidation of the Spell Check and Grammar functionality under the new “Editor”, found on the Review tab (just look under Check Document to see the pane on the right hand side).

clip_image007

There are some other interesting features on the same tab (like language translation or accessibility checks), as well as dealing with clip_image009style and content of your writing. Delving into Settings from within the Editor pane lets you switch on all kinds of checks for common errors in writing, or highlighting the use of words & phrases that are best avoided.

Now, don’t turn on the profanity check and see how many squiggles you can generate in a single document – and stop sniggering at the back!

A variety of online services now benefit from general availability of Compliance Manager, part of the tool clip_image011chest that might help businesses deal with GDPR.

Take a look at the Compliance Manager if you want to scare yourself silly about the amount of checks that people will be expected to complete, in order to be in line with GDPR.

Tip o’ the Week 419 – What’s the time?

clip_image002The subject of time has featured on a few occasions on ToW – #301, #314, #325, #388 … but there’s always more scope to talk about it.

Windows 10 tweaked the way time is clip_image004presented, from showing the calendar and the agenda (sourced from whatever is synced into the Calendar app), to the Alarms & Clocks app which offers visual wakeup alarms, daylight maps, and timer/stopwatch apps.

In the Windows Insiders builds of the last few weeks – currently 17101 (which is now in the Fast Ring), there have been changes that bring the clock further forward too – the Game Bar has been updated to include the clock on the clip_image006left of the bar, for one thing.

What is time?

Existentially, time is relative. If you ever find that your Windows PC isn’t keeping time accurately, you may want to check that you have it set to get its time automatically (check Settings -> Time & Language – > Date & time), or go into the old-fashioned Control Panel, search for time and look at the settings in there, especially under the “Internet Time” tab to see where it’s syncing the time from: time.windows.com is probably the default.

Windows Time is also a thing – the number of milliseconds since the machine was started up, and also the name of the clip_image008service that controls the time synchronisation. Unix time is also a concept, measuring the number of elapsed seconds since 1st January 1970, and may present another millennium bug style problem in 20 years, if anyone is still using 32-bit *nix by then.

Back to simple relativity, though – what is the actual, real “time”? If you have multiple clocks, watches, phones & PCs, it’s a fair bet that they’ll all be divergent, unless they’re all being synchronised by some external device (your broadband router, maybe). If you’d like to find out exactly what the time is and don’t have access to an atomic clock or similar, there are a few online resources that might help…  and you could even try asking Cortana, as she knows about time zones and stuff.

But the best time site is http://time.is. Try it from any device and you’ll get the time right now;  some allowances need to be made for network latency but the operators have tried clip_image010their best. It tells you the time in your location (or one of your choice), and calculates the offset between your computer’s clock and the time.is service.

For an illustration of what latency (as ultimately governed by the speed of light) means when accessing nearby vs far away websites, check out www.azurespeed.com, which measures the time to connect to storage services at Azure datacenters. Some variance could be explained by performance spikes and so on, but the main impact is network latency due to distance travelled. The results can sometimes be surprising.

clip_image012

Tip o’ the Week 417 – Resolving aliases in bulk

This might be a very old-Microsoft culture thing, but alias names have always been a relatively big deal within the company; not an alias in the sense of a nom de plume or some alter ego, but a name curiously given to mean your login name.

Before enlightenment, Microsofties were emailed simply by sending to alias@microsoft.com – and still are, so even if the primary mail address is forename.surname@microsoft.com, you could still mail them at forenams@microsoft.com, or whatever their alias is.

The alias, or logon name, at Microsoft was historically an up-to-7- or 8-letter moniker, based by default on surname|first-letter-of-forename, eg billg or steveb.

In a company with a handful of people, it was easy to remember such a name for when you wanted to drop them an email, but with hundreds of thousands of mail addresses, you might need more room – when Exchange Server came out in 1996, it supported 64 characters in the alias name, though oddly, Microsoft has never embraced longer than 8-character aliases.

Back in the day, your mailbox was a folder on a Xenix server, then an MS Mail postoffice, and the folder names were restricted by the 8.3 filename format. There are probably too many legacy systems that also have an employee name represented by their 8-letter alias, and it still kinda works.

Aliases – and the cultural phenomenon of calling people not by their name, but by their alias… eg “we had a billg review” – were a central part of the 1995 Douglas Coupland book, Microserfs.

Some people at Microsoft still talk about an email distribution list as an “alias” – eg. “TAKE ME OFF THIS ALIAS!!” as a Reply-All (as opposed to a little “r”) to the occasional mail storms that amazingly still happen. They’re wrong – those are Distribution Lists (DLs) or maybe more correctly, Distribution Groups (DGs).

But the true “alias” lives on, even if the Skypey “Contact Card” UI in Outlook does its best to not show you what someone’s alias is (but you can usually still get to Open Outlook Properties, which shows you the traditional Outlook address book view, with alias in the very top section). Lots of reports from Microsoft’s internal systems will refer to an employee using their alias name, so it often helps if you can decipher an alias into the person behind it.

Resolving an alias to a name one-at-a-time is all very well, but when looking at a column of alias names in some spreadsheet, it’s a bit of a palaver to turn each of the FORENAMS into something meaningful.

Bulk alias resolver in Excel

Fear not, worthy reader, for a solution is to hand.

  • Simply download this macro-enabled Excel workbook, and unwip it/open it/save it somewhere locally
  • Click on the Enable Editing, then the Enable content button, so the macro can do its stuff
  • Now paste your list of chosen alias names in column A, then click the resolve button
  • The macro will now go through each alias in the first column, and resolve the name, then stick it in column B, if it can. If the name doesn’t work, then column B will just be the same as the alias in column A

This can be handy if you’re building Excel reports and want to add names to a table instead of aliases – you could sort the list of aliases alphabetically, run them through the resolver, and then reference the table with a VLOOKUP formula so you could hide the column of aliases from your report and show instead the derived real names.

Tip o’ the Week 416 – Teams Slash At Apps

clip_image001There’s a perennial tension amongst productivity evangelists, about how best to do it – from which methodology to use, to which tools to fulfil their hopes & dreams. Similar behaviour occurs amongst communications czars – don’t send attachments, put them in SharePoint!; email is the devil, we should use Yammer!; this time, it’s about the world of team-based collaboration platforms, pioneered by the likes of Slack/Fleep/Flock/Zoho and inhabited by the Microsoft Teams product set too. Some companies barely use email, instead turning to persistent chat offered by these kinds of apps.

Teams is part of Office 365 (well, for business users – it’s hard to think of a scenario where you’d need Teams for home use…), and in time will subsume the Skype for Business capabilities that O365 users access today. Some businesses will still have an on-premises Skype for Business installation, which means that product isn’t going away entirely, at least not for a good few years.

clip_image003There have been a bunch of updates to Teams in recent days, signalling the largest update to the Teams software so far. See more on what’s new here.

If you press / or @ in the command line at the top of the Teams site or app, you’ll see a list of commands you can use – like /whatsnew, to see a change log of recent releases.

Using apps (installed from an app store within the Teams UI – just type @ in the command line to see the list) lets you quickly embed content from another source, into the conversation stream within your Team channel. There are already over 120 apps available, from all kinds of third party publishers – it’s worth browsing the different categories within the store, rather than just the top picks you’re initially presented with.

clip_image005Instead of taking a screenshot or just pasting a URL to a story/place/whatever… you can embed a hot-linked summary of the real content and make it easy for people to jump to it.

clip_image007

Tip o’ the Week 415 – Another right To-Do

clip_image002It’s been 9 months since the unveiling of Microsoft To-Do, the task manager app that will someday replace the much loved Wunderlist (see ToWs passim317, 376, et al); the celebrations were muted in the halls of Wunderlist superfans, though, as To-Do has a much reduced feature set, albeit with a mission to be clear and easy to use. “Maybe it’ll catch up quickly”, some said.

There has been very little noticeable progress on the features front, though there have been lots of minor upgrades and fixes to the Windows 10, iOS and AndroidMicrosoft To-Do” apps (note the hyphen and the design of the icon; the respective app stores are awash with inferior “todo” apps with a variety of tick logos).

Since publishing this tip internally at Microsoft (where some early builds of new functionality are available in test versions), Thurrott.com highlighted the quiet announcement that we’re working on shared lists and subtasks, as well as deeper integration to Outlook. Watch that space, basically.

Recently, though, the To-Do web app has been released in clip_image004the Office365 Portal (after a few months of opt-in preview), and a tantalizing teaser shows up on the “Your apps” page… though doesn’t really tell you a whole lot that isn’t immediately obvious.

To-Do can import tasks from your existing Wunderlist task list if you have one, and automatically syncs with Outlook Tasks, therein exposing a rub – most people will have signed in to Wunderlist with their Microsoft Account, but for To-Do and Outlook to get along well, you’ll need to be using Office365 and therefore a different set of creds.

There are various solutions, the practicality of which will depend on how many active items you have in Wunderlist – you could share your MSA-homed lists with your O365 credentials, then log in with the latter and copy the contents across. Laborious, maybe.

You could make a clean break, or else use the Outlook addin for Wunderlist to sync the list items into Outlook as Tasks, then install To-Do and sync them back out again.

clip_image006The To-Do / Outlook task sync is pretty quick – just add an item to your To-Do app and it will quickly appear in your Outlook tasks view, reminders, notes and all. See more here.

The reverse is also true, though if you add Outlook tasks without putting them directly in the folders created to mimic the To-Do structure, (such as Tasks that were created in OneNote), the new item will just be lumped in the general “To-Do” list at the top.

Dragging and dropping the item, either within Outlook (from the clip_image008“Tasks” list into on a suitable corresponding folder to your To-Do lists) or by doing the same within the To-Do app or web app itself, and you’ll keep things nicely arranged.

If you like the idea of being more task organised, find Outlook Tasks too cumbersome, then To-Do could be a great way of simplifying the junction. It may not be as functionally rich as Wunderlist, but the latter is still available for those who want it.

Tip o’ the Week 412 – I Stream a Stream

clip_image002Not to be confused with iStream, a manufacturing process dreamed up by legendary car and Formula 1 tech guru, Gordon Murray (and who also basically invented the pit stop as we know it… if you’re interested, watch this film… it’s fascinating, really).

No, this stream is about Microsoft Stream, a video service first unveiled about 18 months ago, launched last Summer and expanded in its reach to Australia, India and the UK, in October. Expect to hear more about Stream in the coming months, if ChrisCap’s appearance on Windows Weekly is any sign.

In a nutshell, you could describe Stream as a corporate video sharing service – think of it like an internal YouTube/Vimeo type service that organisations could use to securely publish internal videos (like training, exec message broadcasts etc) without exposing it to the wider world.

clip_image004Anyone can sign up for a free trial at https://www.microsoftstream.com/. Have a play…

There are lots of other enhancements besides just sharing video, that are built onto the Stream service – such as auto-captioning or speaker identification, which use elements of Azure cognitive services to parse the video and identify various components within.

If you’re interested in this kind of thing, check out the Azure Video Indexer preview – it’s amazing. Try it out, then show it to your friends, family, customers, partners… and make sure they know about Stream, too – they may already be licensed to use it.

Stream is a companion service to Office365 – see more on https://stream.microsoft.com/ and for pricing details specifically, see here.

Tip o’ the Week 401 – Go with the Flow

We all get notified of stuff that we’re probably interested in, but clip_image001which we never get around to reading about in-depth, or trying out. Well, this week’s topic presents both an example of exactly that (for some of us at least) and a potential solution to it – Microsoft Flow, a free-to-use, simple*, workflow tool that can stitch all kinds of things together in a useful manner.

* some may take issue with “simple”.  Bah.

Flow promises to do all sorts of groovy things that nobody ever needs, like writing every email to a Google Sheet then sending your calendar a reminder to look at it. But there are lots of potentially interesting and useful things you can put together, either by using the many templates or by building your own custom flow based on simple logic. You could connect all kinds of disparate web-based services together and using triggers, fire off actions based on events happening – like a tweet about a particular topic, or a new event added to a calendar.

Let’s take an example – say, you have an Office 365 work mail account and associated calendar. When you put something in your calendar which is both an all-day event, and is also marked “Out of the Office”, that probably means you’ll be out of the office all day, maybe away on a business trip or possibly even on holiday.

Wouldn’t it be useful to be able to copy that to a calendar that your nearest and dearest can see, maybe even adding all the events from several family members into one place, shared with all the others?

First off, you may want to log into www.outlook.com, go into Calendar and create a new shared calendar (if you don’t have one already)clip_image003 give it a suitable name (like Family Calendar) and clip_image005then make sure you’re sharing it with the right people you’d like to be able to see it. They will get an invite to see the shared calendar and it will be added to their own Outlook.com calendar view (as pictured way below).

clip_image007

Now, to create the flow to copy stuff from your work to Family Calendar…

  • Login to Microsoft Flow using your Microsoft Account, here.
  • Create a new Flow using a blank starting point, here.
  • Search event and select Office 365 Outlook – When a new event is created (and might as well pick v2 unless you know better)
  • Next, you’ll need to sign into your Office 365 account to be able to access it. Select the default calendar (probably just called “Calendar”…). This is the source for the flow, the trigger.
  • Click New Step and select Add a condition, then click in the “Choose a value” field; in the dynamic content pop up box, type clip_image009Is all day and you’ll see an “Is all day event?” condition clip_image011appear in the list. Click to add it to the flow.
  • Check that the central drop-down is “Is equal to” and click on the value to the right and enter True.
  • In the “If yes” left-hand pane, select Outlook.com – create event, then Sign in to provide your Outlook.com credentials.
  • Choose the Family Calendar from the list, and add the relevant details you’d like to add – in other words, the attributes from the source (O365) calendar, that you’d like to reflect on the destination (Outlook.com) one.
  • It’s a good idea to show Advanced Options, and select something like the following attributes by searching in the Dynamic content box for the key fields in each case (one of the more important being Is HTML, if clip_image013you’re going to put anything in the body of the message).
  • When you’re happy, click on the Flow name box at the very top of the page and give it something meaningful, and then Save Flow to the bottom

Now you should be able to see any new, all-day events that appear in your work calendar, showing up in your shared Outlook.com custom calendar.

A further refinement might be to add a condition to only trigger the sync when the original meeting is set to “Out of Office” – click on Update flow to edit, then add another clip_image015step, Add a condition then add Show as equals 3 – that’s the field that denotes the event’s status (busy, free etc), and “3” is the value that means “out of office”.

clip_image017
Save the flow and you’ll see the flow copies only OOF events from your work calendar to your shared private one… as below, where Outlook.com is shown behind the Outlook app.

clip_image019

It’s worth having a play around with Flow, as you can do some interesting things with it (and there are connectors for all kinds of services, including Google mail & calendar, Wunderlist tasks, even grown-up apps like Dynamics or Salesforce. There are mobile apps that can take part in flows, too); do bear in mind that it takes anything up to a few minutes to fire these kinds of events, and if there’s a problem running your logic, then you’ll be notified.

It may be worth adding a debug step that can be easily removed later, by getting the flow to send you an email with the values of the fields you’re interested in…

clip_image021

Tip o’ the Week 398 – New Dimensions in Sound

clip_image002Sound technology has been advancing ever since the phonograph wax cylinder, through higher quality recordings and transmission formats, stereo, quadrophonic, multichannel home cinema and so on.

High fidelity sound is delivered via a combination of lots of overlapping but distinct technology; from the quality of the original recording equipment, technique and media the sound was recorded onto (if analogue), or the bit-depth & format used to encode all the way from the point of recording to the moment of consumption (if digital), and all of the equipment used to turn the sound recording back into vibrating air. Many words are written on the merits of this bit of kit, or that piece of cable – YMMV.

Lucasfilm realised in the late 1970s that despite going to great lengths at the point of production to assure the quality of video and audio, there was little way of guaranteeing that cinemas showing films had anything like the quality of AV reproduction kit required to render the experience for the movie-goers. As a result, they came up with THX – a certification system rather than a specific recording technology, though many viewers confused the two; maybe because of the various THX idents that preceded popular movies, starting in 1983 with Return of the Jedi, through other mainstream hits like Terminator 2 and even a spoof-turned-ident Simpsons special.

clip_image004Other technology suppliers started following the same approach in trailing their formats, and as DVDs took off, recording compression and representation systems like Dolby Digital and DTS (and their many subsequent variants and successor technologies) showed up on players, on discs, and in theatres.

You may have seen some of their idents before… like here and here. And if you’ve bought an Audio-Visual Amplifier in the last 20 years, it probably came festooned in stickers proclaiming all the certifications it had.

Dolby Atmos is one more recent development of surround sound encoding & reproduction technology; originally designed for movie theatres with hundreds of speakers and able to precisely position a pin-drop anywhere in the auditorium. There are a growing number of Atmos-equipped cinemas around, but the curious would still need to go out of their way to find both a suitable location and the right content to watch and listen to.

Predictably, there’s an Atmos consumer version aimed at enticing AV users to upgrade their existing 7.1 system to a fancier setup. And there’s also a version of Dolby Atmos for the PC, too – maybe most useful for headphone users, and delivered to Windows 10 users via the Dolby Access store app. It costs cash money to use, but you can trial for 30 days free of charge and make up your mind if it’s worth the $15 to keep it going.

It won’t turn your 2-channel headphones into a 64-channel Atmos theatre, but it does provide some interesting software-driven tuning, akin to several other 3D software sound systems. Interestingly, it also runs on Xbox One, showcasing the benefits of the Win10 PC and Xbox sharing the same base OS. There’s the free Windows Sonic that might give you a similar experience.

clip_image006

A note from intrepid reader, Peter Martin – if you have some Carlos Fandango Bose wireless noise cancelling jobs (as worn by frequent flyers as if to say, “I travel so much, I carry these $400 cans that take up half my hand luggage, because they’re Just Better”), then it’s worth heading to Bose’s firmware update page and installing the software to check and update your chunky funks.

Pete also says:

For some cool sounding audio effects, check out Windows Sonic and Dolby Atmos settings.

Also, if you’re looking for a more robust sound, enable the enhancements on the Headphones device.

Note that the enhancements can be a bit over the top, especially on bass, so play around to your liking…

clip_image008clip_image010









When connected, if you hear audio dropouts during audio calls, try disabling Signal Enhancement on the Hands-Free device setting…

clip_image011

Tip o’ the Week 397 – Bing visual image search

Loyal Microsoft fanbois and grrlz will doubtless use Bing as their default search engine, and many “ordinary” computer users will also stick with whatever their browser or phone apps default to. Even after years of trying, though, Bing is still very much a runner-up in the league of most-used search engines, even if arguably it’s as good or even better than the alternative. Recent stats suggest that in the US, 1/3 of all searches are handled by Bing, so it’s at least in a credible 2nd place rather than a distant irrelevance, as some detractors may say.

clip_image002Even the most persistent marketers have largely given up trying to make the verb “to Bing” catch on, and El Reg reports that Google is trying to encourage “search with Google” in a style guide for developers: ‘Don’t Google Google, Googling Google is wrong’, says Google.

Aside from the beautiful daily home-screen images, there are some neat and sometimes hidden tricks in using Bing.com to search for stuff online.

A little while back, the Bing team launched Visual Search – when you do a search and look at results in Images, click on a result to preview it, and you’ll see a small magnifying glass with a dotted line box around it, in the top left.

clip_image004Clicking on that icon will let you move and resize a box around some element of the image you’re interested in, and below, you’ll see a list of related images to the one you just selected.

clip_image006

Handy for finding out about a specific item in a picture, or a person in a photo, for example.
(Yes, it is, in fact, Kevin Turvey)

This kind of searching is a variant on another approach, where you can either point Bing at an clip_image008existing online image, or upload one that you have on your computer, and it will find similar images to that. The Visual Search UI makes it a little easier if you just want to find out about a part of the image.

Watch out for some upcoming additions to Visual Search – like the ability to recognise faces in search results, for example. Read more about that and other Bing improvements to come, here.