Santa’s having a rough year. Go go JibJab. Niiice. :-)

Be sure to click on the link to send toys to kids in Iraq. It’s time to give a little.

Update: By way of Sean Alexander, It’s a Wonderful Life, in 30 seconds, performed by bunnies. Uh, yeah. Enjoy.

Near and dear to my heart (professionally speaking), the latest increasing numbers related to the number of fraudulent phishing sites (sites that look like a bank or other business, but which are actually set up by bad people who are wanting to steal your personal and private information) are worth taking notice of:

“The number of phishing sites, or fake Web sites set up to fool victims into handing over personal information, reached 1,518 last month, the Anti-Phishing Working Group said in a report released on Wednesday. The total was up almost a third over October and three times the level in September.”

That’s an increase of 29% over the previous month. It’s also – in my opinion – an understatement of the real number, since it deals only with reported phishing sites. But it pays to be conservative with numbers, I suppose.

“A total of 51 brands were hijacked by cybercriminals during the month, the group found. Financial services was again the most targeted industry, averaging 75 percent of all hijacked brands. ISPs faced a fair share of scams, accounting for 16 percent, according to the report.”

The Anti-Phishing Working Group publishes the monthly stats. You can find them here.

Also close to me professionally is the fact that recently the company I work for banded together with and a few other organizations to form the Anti-Fraud Alliance - a team of companies with existing, powerful software and services that can be used together or individually to combat fraud online, including phishing.

Note: My employer, Corillian Corporation, is a member of the Anti-Fraud Alliance. I mention them here simply because I wanted to and because I believe its relevant. No compensation involved, and opinions expressed here are my own, not those of my employer.

Apparently some are of the opinion this is not a security vulnerability, according to Microsoft’s comments to ZDNet reporters, but in the real world – it’s a hole. A Mack-Truck-sized security hole. The news story reads a bit like one team saying “Hey, we’re not in charge of that, so it’s not a problem” and the other one saying “We do things the way we do them, and that’s what we do.” Oof.

Anyhow… If you run Windows XP with SP2 you need to make sure you have this update.

http://support.microsoft.com/default.aspx?scid=kb;en-us;886185

SYMPTOMS
After you set up Microsoft Windows Firewall in Microsoft Windows XP Service Pack 2 (SP2), you may discover that your computer can be accessed by anyone on the Internet when you use a dial-up connection to connect to the Internet.

CAUSE
This problem occurs because of the way that Windows Firewall interprets local subnets when the “My network (subnet) only” option is used. Windows Firewall is included with Windows XP SP2.

Because of the way that some dialing software configures routing tables, Windows Firewall in Windows XP SP2 can sometimes interpret the whole Internet to be a local subnet. This can let anyone on the Internet access the Windows Firewall exceptions. When the "My network (subnet) only" option is enabled, it is automatically selected for file and print sharing. Therefore, your shared drives can be unexpectedly revealed on the Internet when you use a dial-up connection.

RESOLUTION
To resolve this problem, you must download and install the Critical Update for Windows XP (KB886185).

Use Windows Update or click the above link. If you’re not already set up for automatic updates, make that change now.

Are you a Microsoft OneNote user? I am – big time. If you’re getting started with OneNote and are interested in learning some of the basics about how to use OneNote to be productive and organized, you might want to check out this webcast, scheduled for December 21st:

Microsoft Office System Webcast: OneNote Tips and Tricks (Level 100)
Tuesday, December 21, 2004
9:00–10:00 A.M. Pacific Time, United States and Canada (UTC-8)
Join this webcast and learn how to flag notes, manage pages and sections, and use stationery and outlines in e-mail and other Office applications.

If you’re someone who needs or wants to learn more about InfoPath (an addition to the Office suite in the 2003 version) and building some really cool XML forms, you’re in luck.

“Create dynamic interactive forms in an advanced XML forms editor that feature strong validation with built-in business rules and use them to collect, re-purpose, and present data throughout the organization. Use existing data schemas, Web services, and XML data to create solutions without complex data mapping. Use point-and-click integration with back-end systems and take advantage of "silent" deployments and version upgrades via simple centralized management.”

A series of recent webcasts, Understanding InfoPath, is available now for on-demand viewing. Titles include:

Best Practices for Designing InfoPath Forms
Level 200 - Tuesday, October 5, 2004 - 9:00 AM to 10:30 AM
Presented by Scott Roberts, Software Design Engineer, Microsoft Corporation

User Roles in InfoPath 2003
Level 200 - Tuesday, October 12, 2004 - 9:00 AM to 10:30 AM
Presented by Josh Bertsch, Software Test Engineer, Microsoft Corporation

Building Advanced Dynamic Solutions in InfoPath 2003
Level 200 - Tuesday, October 19, 2004 - 9:00 AM to 10:30 AM
Jun Jin, Software Design Engineer, Microsoft Corporation

Business Logic in InfoPath 2003
Level 300 - Tuesday, October 26, 2004 - 11:00 AM to 12:30 PM
Presented by Yuet (Emily) Ching and Prachi Bora, Software Test Engineers, Microsoft Corporation

Using Managed Code and Visual Studio to Build Solutions
Level 300 - Tuesday, November 2, 2004 - 1:00 PM to 2:00 PM
Presented by Willson Raj David, Software Design Engineer, Microsoft Corporation

InfoPath in End-to-End Enterprise Solutions: Integrating InfoPath with Siebel and SAP
Level 300 - Monday, November 2, 2004 - 11:00 AM to 12:30 PM
Presented by Hagen Green, Software Test Engineer, Microsoft Corporation

Digital Signatures in InfoPath 2003
Level 300 - Monday, November 15, 2004 - 11:00 AM to 12:30 PM
Presented by Mihaela Cristina Cris, Software Test Engineer, Microsoft Corporation

Creating Custom Controls for InfoPath SP1
Level 400 - Monday, November 29, 2004 - 11:00 AM to 12:30 PM
Presented by Andrew Ma, Software Test Engineer, Microsoft Corporation

Programming Workflow into InfoPath Solutions: Using InfoPath with BizTalk Server 2004 and Human Workflow Services
Level 400 - Monday, December 6, 2004 - 11:00 AM to 12:30 PM
Presented by Rick Severson, Software Test Engineer, Microsoft Corporation

Database Connectivity in InfoPath Through ADO.NET DataSet Support
Level 400 - Monday, December 14, 2004 - 11:00 AM to 12:30 PM
Presented by Mikhail Vassiliev, Software Design Engineer, Microsoft Corporation

Lots of Microsoft downloads recently it seems… Catching up…

If you have a Tablet PC and use Office 2003, Microsoft has released an update that you need to download and install. The update improves recognition of “inked” handwriting in Office 2003 applications, including:

• Microsoft Office 2003
• Microsoft Office Excel 2003
• Microsoft Office InfoPath 2003
• Microsoft Office OneNote 2003
• Microsoft Office Outlook 2003
• Microsoft Office PowerPoint 2003
• Microsoft Office Word 2003

Get the update patch here.

Over on it’s GotDotNet workspace, you can download the Collutions cBlog package, a custom site definition for SharePoint released under a Shared Source license. The cBlog package creates a blogging environment on the Windows SharePoint Services (WSS) platform. WSS ships as a free web server add-on/enhancement to Windows Server 2003.

This is interesting stuff. Jim Duncan’s sample blog is viewable online, and is a real, working blog that appears to be dedicated to the development and discussion of the cBlog custom site definition itself, at least so far.

Looks like Jim has already created an  RSS  2.0 Feed  for the WSS cBlog, too. Subscribed!

Going to have to look into this one further…

Microsoft has published “Bill Gates Answers Most Frequently Asked Questions.”

It’s an interesting read. Here are the questions, but you’ll have to get the doc to see the answers.

• What kind of role did fate or luck play in your success?
• In the history of Microsoft, what was your happiest moment?

• How do you spend your time?

• What do you think is more important to your success, raw intelligence or hard work?

• Please explain the secret of your success.

• When do you think the first computer will become as intelligent as a human?

• Do you regret not finishing college?

• Who coined the name Microsoft?

The Virtual Server Migration Toolkit (VSMT) lets IT Pros migrate servers from physical hardware to virtual machines. You can get it here.

Okay, well it’s not quite like the P2V (physical-to-virtual) software produced by VMWare, but for those looking to make a transition to Microsoft Virtual Server, this is a valuable resource. It works differently than VMWare’s counterpart – VSMT requires you run Automate Deployment Services as part of your migration setup. It’s worth noting the difference in price, as well (P2V costs $$$, and the Microsoft VSMT is a free download once you register online).

I’ve worked with both Microsoft’s Virtual Server 2005/Virtual PC 2004 and VMWare’s Workstation and ESX/GSX Server products. All are good products that do a fine job. In the end, the tools you choose should be the result of careful examination and testing against your needs and in your environment. But you should be using these tools, even if only for the purpose of getting to know them and keeping on the leading edge of the technology.

From the VSMT description:

“One of the key steps in a successful Virtual Server 2005 deployment strategy is simplifying the process of converting physical servers to virtual machines.

“You can use VSMT to create images of physical computers and deploy them in virtual machines running on Virtual Server 2005. With VSMT, you can migrate source computers running the following operating systems to virtual machines in Virtual Server 2005:

• Windows NT 4.0 Server with Service Pack (SP) 6a, Standard and Enterprise Editions
• Windows 2000 Server SP 4 or later
• Windows 2000 Advanced Server SP 4 or later
• Windows Server 2003, Standard Edition and Enterprise Edition”

For those in the field, virtual servers (of one sort or another) are proving themselves to be cost-effective, flexible, reliable and generally valuable alternatives to setting up and maintaining separate hardware for each server. It’s the way of the future – worth checking out and becoming familiar with.

• VSMT Datasheet
• VSMT White Paper
• VSMT FAQ

The bandwagon is rolling rolling rolling along: MSN kicked a new toolbar suite out the door that integrates desktop search – cool stuff. Check it out.

I like the display-results-as-you-type thing, similar to X1. Google needs this.

“MSN Toolbar Suite features three different toolbars to help you search the Web and your computer from Microsoft Internet Explorer or Windows Explorer, the Windows taskbar, and Microsoft Outlook.”

Update: Scott has a look under the hood and compares the MSN desktop search to the Google desktop search, as well.

Google rocks my virtual world every day. If it doesn’t do the same for you, it should. I’ve written about this before in the context of knowing how to leverage Google’s advanced search capabilities, but many don’t know that there is much more to Google than searching.

There are so many cool things you can do at Google. Things that will capture your attention and hold it hostage for hours and days at a time. Some of those things are fun, some are serious. All are pretty darn cool. Things like this:

Google Search for Klingons (sorry I could not resist):

Dave has links to a few other “languages,” too.

And then there’s all the cool Google Labs stuff, the latest of which is Google Suggests.

What else can you do at Google? Well – here’s their own list:

Google Services: Use one of our many services to find what you're looking for.

Alerts	Answers	Catalogs	Directory
Froogle	GroupsNew!	Images	Google Labs (tons of cool new stuff here!)
Google Local	Google Scholar	News Search	Special Searches (see more below)
University Search	Web Search	Wireless

Google Tools: We offer various tools to help you get more done.

Blogger	Browser Buttons	Google Desktop Search	Google in your Language
Keyhole	Picasa Photo Organizer	Google Toolbar	Translate Tool
Web APIs

Additionally, you can Add Google to your Browser by making Google your default search engine.

Google Special Searches: Often better than you’ll find at the web sites that are home to the technologies themselves…

	U.S. Government		Linux		BSD
	Apple Macintosh		Microsoft

Nice to see the docs rolling out the door on the black-box stuff in SharePoint Portal Server. Here’s another, covering the syntax used in SharePoint Portal Server’s full-text search – Apparently it’s a preview of the what is to come in the next SDK release…

This download includes a preview of the reference documentation for Microsoft SharePointPSSearch, the SQL Syntax used for Microsoft SharePointPSSearch Full Text Search with Microsoft Office SharePoint® Portal Server 2003. Look for updates to this documentation in the Microsoft SharePoint Products and Technologies 2003 Software Development Kit (SDK).

If you’ve worked on rebranding (to any significant extent) SharePoint Portal Server 2003, you know how difficult it can be to feel confident in what you’re actually doing, due mostly to the lack of documentation on the subject.

Well, Microsoft has released two papers on the Office Developer Center to help:

• Branding a SharePoint Portal Server 2003 Site:
  
• Part 1, Understanding the Use of a Corporate Brand
  Learn what it means to "brand" a SharePoint Portal Server site, and about the different types of branding you can apply to a portal site to reflect an organization's identity.
• Part 2, How to Apply Your Own Corporate Brand
  Through step-by-step examples of the typical tasks involved in branding a Microsoft Office SharePoint Portal Server site, learn to change the standard banner, introduce a custom style sheet, and enhance the user experience of your portal site through interface, navigation, and page layout changes.

Coming Soon - Oregon’s commemorative state quarter:

Reverse Image: "Crater Lake"
Description: Features a portion of Crater Lake, viewed from the south-southwest rim to include Wizard Island and Watchman and Hillman Peaks on the lake’s rim.

Engraver: Donna Weaver

• Proofs: [Macintosh: 591 KB] [PC TIFF: 591 KB]

Circulation plans, per the Statesman Journal:

General Circulation: June 2005
Five-State Proof Set: January 6
Silver Proofs: TBA

“2004 would be remembered as they year that everything began.”

And the rest will be history…

You need to watch this. Seriously. Thought-provoking.

(thanks to Brandon for pointing this out)