Windows 10: Microsoft lost control over the Windows Tiles domain and someone took it

Discus and support Microsoft lost control over the Windows Tiles domain and someone took it in Windows 10 News to solve the problem; Microsoft introduced Tiles in the Windows Start Menu and Start page when it launched the Windows 8 operating system. Designed to add a dynamic note to... Discussion in 'Windows 10 News' started by GHacks, Apr 17, 2019.

  1. GHacks
    GHacks New Member

    Microsoft lost control over the Windows Tiles domain and someone took it


    Microsoft introduced Tiles in the Windows Start Menu and Start page when it launched the Windows 8 operating system. Designed to add a dynamic note to the previously static program, service and website links by supporting options to load new tile content regularly, it was a feature that never saw broad adoption by users of Windows.

    Many were only exposed to the default list of tiles that Microsoft added to Start profiles; this did not prevent Microsoft from adding support for Live Tiles to Windows 10 as well. Websites and services could support the feature as well so that users who pinned these to Start would receive updated tiles whenever new content became available. While tiles are on their way out, they are still supported in all recent versions of Windows.

    Microsoft lost control over the Windows Tiles domain and someone took it windows-8-metro-live-tiles-660x528.jpg

    A story on German computer site Golem (in English) describes how Golem got its hands on a domain responsible for Tile content delivery to Windows systems because Microsoft failed to protect properly against what is called a subdomain takeover attack.

    The takeover gave Golem full control over the content that it delivered to user systems; Windows 8 and 10 users can pin supporting websites to Start to receive updates when new content is published.

    Golem noted that sites like Engadget, Mail.ru, or the major German news sites Heise or Giga, supported tiles just like many others.

    How the attack was carried out

    The host responsible for delivering data to Windows devices was notifications.buildmypinnedsite.com; Microsoft appears to have abandoned the domain and while it redirected it to a subdomain of Azure, never registered it with Azure. Golem managed to register the subdomain using a regular Azure account and added corresponding host names to take full control over the Tiles service used to deliver content to user devices.

    The magazine contacted Microsoft about the issue but did not receive a response according to the article. It noted that the host received a "decent amount of traffic" and that Golem would not keep the host registered permanently because of running costs.

    Golem stopped the web app in the meantime, it returns a 403 this web app is stopped error now so that manipulated content cannot be delivered to user devices at the time.

    Windows users may want to deactivate website live tiles (see this tutorial for Windows 8 Live Tiles) if they use any as a consequence, and website owners may want to drop support for the feature as well to protect against potential abuse.

    Closing Words


    I never thought much of Live Tiles on desktop versions of Windows. While some functionality was appreciated, e.g. getting an up to date weather report by opening Start, most of the functionality did not make much sense on the desktop in my opinion.

    A scenario like this should never happen in my opinion, especially not if it has the potential to affect customers negatively.

    Now You: What is your take on Live Tiles or dynamic tiles in general?

    Ghacks needs you. You can find out how to support us here or support the site directly by becoming a Patreon. Thank you for being a Ghacks reader. The post Microsoft lost control over the Windows Tiles domain and someone took it appeared first on gHacks Technology News.

    read more...
     
    GHacks, Apr 17, 2019
    #1

  2. BOINC for Windows Domain Controllers

    Long story short, BOINC stopped supporting domain controllers after version 5.10.45 and 5.10.45 broke because it's HTTPS security certificates are out of date. Requirements:
    • Windows Server 2003 R2 x64 Edition or newer (must be 64-bit)
    • Must have domain controller role installed.
    If neither of these requirements are met, just use the latest version from Berkeley.

    The solution:
    • Download this ZIP from TPU (thanks @Wizzard!)
    • Extract everything from the ZIP to the desktop or some place you can easily access it.
    • Run "boinc_5.10.45_windows_x86_64.exe" to install 5.10.45 as normal.
    • After it is installed, make sure BOINC is not running. If it is running as a service, you can stop it via Services. If it is running in the tray, right click on the tray icon and click on Exit.
    • Navigate to where BOINC is installed. This is usually C:\Program Files\BOINC. You should see a ca-bundle.crt file here (it'll have a different icon from the rest). If you do, you're in the right place.
    • Extract the contents of the "certificates" folder to the folder where BOINC is installed. You should be prompted to replace existing files. Do it. If you do not, you're likely in the wrong directory or copied the "certificates" folder instead of its contents. It is very important that the files inside of "certificates" overwrite the installed BOINC files.
    • Start BOINC again. If it is a service, go back into Services and start the BOINC service. If it is a tray application, run it from your start menu. You'll also need to start the BOINC Manager if you have it installed as a service for the next step.
    • Double click on the tray icon to open the BOINC Manager if it isn't already open. Click on the "Messages" tab and verify it is able to download tasks. If it is, you're good to go. If you see "SSL connect" errors lets us know by replying to the thread.
    The "certificates" are copied from 7.6.22.
     
    FordGT90Concept, Apr 17, 2019
    #2
  3. sammy Win User
    Question:- How to add client to domain from domain controller side?

    Hi Guys,

    -I have domain called lab.com created on virtual machine Windows Server 2008
    -I have added a client machine Linux machine rhel6 to domain lab.com in /etc/host file
    -I am able to ping DC from linux machine by IP and hostname .
    But from DC I can only ping Linux machine by IP address and not by its hostname "rhel61.lab.com"

    I don't want to add linux machine entry to DC's hosts file as it is DC so it should resolve it

    But I wish to know what step or doings I am missing from DC side that I am not able to ping linux machine by its hostname.

    Please suggest.

    Thanks.
     
    sammy, Apr 17, 2019
    #3
  4. Microsoft lost control over the Windows Tiles domain and someone took it

    Windows 'domain'?

    Hello,

    Thank you for sharing your concern in the Microsoft Community. Follow these steps to find the domain name:

    • Press the Windows key + R then choose System.
    • The name of your computer will be listed as the Full computer name.
    • The domain your computer belongs to will be listed as the Domain. If, instead of Domain, you see Workgroup, your computer
      is not a member of any domain.

    If you have any questions or things you'd like to clarify, feel free to ask.
     
    Marvin Barc, Apr 17, 2019
    #4
Thema:

Microsoft lost control over the Windows Tiles domain and someone took it

Loading...
  1. Microsoft lost control over the Windows Tiles domain and someone took it - Similar Threads - Microsoft lost control

  2. failure to update windows over domain

    in Windows 10 Installation and Upgrade
    failure to update windows over domain: i have this issue Windows update failure so am facing the problem as in the image below on most of domain computers so i cant install updates and i also tried update agent but cant update as well what could be the cause??...
  3. My friend took over my computer

    in Windows 10 Ask Insider
    My friend took over my computer: So my friend logged into my computer to play Minecraft windows 10 edition on his account, and now when I log in my account is under his Microsoft account and email and I have not been able to fix it. I tried to make a new Microsoft account but his account is the administrator...
  4. New Computer took over old computer

    in User Accounts and Family Safety
    New Computer took over old computer: New Computer took over old computer, I should Not be administrator on that computer https://answers.microsoft.com/en-us/windows/forum/all/new-computer-took-over-old-computer/000e4fb9-2eae-418f-8ee0-566a566dafe1"
  5. Lost Icon Tiles

    in Windows 10 Software and Apps
    Lost Icon Tiles: I have a New laptop but I have lost the App Tiles immediately above the Start....anyone help recover them . https://answers.microsoft.com/en-us/windows/forum/all/lost-icon-tiles/646838ac-77a4-495f-80d0-05fe39c05a98
  6. Recent Windows update took over my computer

    in Windows 10 Installation and Upgrade
    Recent Windows update took over my computer: I updated my computer because Microsoft ordered me to. So I did. Completely took over my computer. Opening/sign in screen was different. Desktop was really different. Eight of 20 program icons were missing. Nothing worked. I tried opening Opera browser, and Internet explorer...
  7. Someone is taking over control of my Windows 10 Laptop

    in Windows 10 Network and Sharing
    Someone is taking over control of my Windows 10 Laptop: I am the owner, hopefully the administrator and the only user of my laptop Lenovo Yoga 510 computer. It has Windows 10 operating system and Home Office 365. Every now and then when I try to open a saved file, I get a message 'This file is locked by another user. Should a Read...
  8. Event Viewer Took Over My Computer

    in AntiVirus, Firewalls and System Security
    Event Viewer Took Over My Computer: I would love it if someone were able to tell me why Event Viewer has sent thousands of events to God knows who, with data that you make impossible to read. I would also like to know why it has so invasively taken over functions of my computer. Before I go on, I can ensure you...
  9. Microsoft took remote control of pc last night and lost connection

    in Windows 10 Network and Sharing
    Microsoft took remote control of pc last night and lost connection: Can not access internet or left click on bottom taskbar since losing connection with Microsoft technician who took remote control of pc last night when trying to help with update problem....
  10. Took Ownership over C Drive

    in Windows 10 Support
    Took Ownership over C Drive: So I did something stupid and now my computer isn't running properly. Ever since I took ownership of the C Drive it takes over an hour, almost two, to boot up. Luckily for me this is the only problem I have noticed. I cannot revert back to original ownership (Trusted...