Windows 11 rollout

Microsoft on final phase of Windows 11 24H2 rollout

Microsoft has announced the full rollout of the Windows 11 24H2 update to all compatible PCs, except those with safeguard holds. The update, known as the Windows 11 2024 Update, includes features such as AI capabilities, Wi-Fi 7 support and enhanced audio features.

Full Story: BleepingComputer (5/5) 

Your Identity

How to rebuild your identity after a job loss

A job loss can take a toll on identity, says Jeffrey Anvari-Clark, a professor of social work at the University of North Dakota, noting that processing this grief is crucial for moving forward. Michelle, a federal worker affected by layoffs, is navigating this identity loss by considering new career paths aligned with her values, illustrating the importance of constructing a new identity post-job loss.

Full Story: National Public Radio (4/28) 

My advice is always to look for and find a new job before you get to the point where you could loose your current position.

Offboarding Remote workers

Offboarding remote workers is not as easy as it seems, so here is an article from Forbes for some things to consider when offboarding remote workers

Companies often overlook offboarding of remote employees, leading to data breaches and potential legal issues, writes Brandon Batchelor of ReadyCloud, an ecommerce CRM. Common mistakes include failing to recover equipment, not rescinding software access, poor internal communication and ignoring the emotional aspects of offboarding.

Full Story: Forbes (tiered subscription model) (5/5) 

Considering some of the above issues involved, one really has to wonder if the correct analysis of the risks of remote workers has been done and are worth the initial savings involved.

The question’s are who are they, who and where do they live, who are their partners, what additional software is installed on their devices, what AI features are they using that could compromise your security and credibility.

Many cases of remote worker fraud have been recorded.

Advanced Google Search’s

46 Advanced search commands for Google search operators

By Chima Mmeje — April 23, 2025.

We’ve simplified complex commands into clear, actionable insights, ensuring you can apply them immediately. Each operator includes:

  • What it does: A concise explanation.
  • Working status: Is the operator still functional?
  • Example: Ready-to-use search strings for real-world tasks.

List of working Google search operators

You can find all of the major organic search operators below, broken up into three categories: “Basic”, “Advanced”, and “Unreliable”. Basic search operators are operators that modify standard textsearches.

Search operatorWhat it doesExample
” “Forces exact-match searches.“nikola tesla”
ORSearches for results related to X or Y, not necessarily both.tesla OR edison
|Functions identically to “OR.”tesla | edison
()Groups operators to control the order of execution.(tesla OR edison) alternating current
Excludes terms from search results.tesla -motors
*Acts as a wildcard for matching any word or phrase.tesla “rock * roll”
#..#Searches within a range of numbers.tesla announcement 2015..2017
$Searches for specific prices.tesla deposit $1000
Searches for prices in euros.€9.99 lunch deals
inConverts units.250 kph in mph
define:Searches for the definition of a word or phrase.define:telescope
filetype:Searches for specific types of files.“tesla announcements” filetype:pdf
ext:Same as filetype, searching for specific file extensions.powershell ext:pdf
site:Searches within a specific website.site:goodwill.org
intitle:Searches only within page titles.intitle:”tesla vs edison”
allintitle:Searches for every term following “allintitle” within page titles.allintitle: tesla vs edison
inurl:Looks for words or phrases within a URL.tesla announcements inurl:2024
allinurl:Searches the URL for every term following “allinurl.”allinurl: amazon field-keywords nikon
intext:Searches for words or phrases within the body text of a document.intext:”orbi vs eero vs google wifi”
allintext:Searches the body text for every term following “allintext.”allintext: orbi eero google wifi
AROUND(X)Finds terms within X words of each other in a text.tesla AROUND(3) edison
weather:Searches for the weather in a specified location.weather:New Jersey
stocks:Searches for stock information using a ticker symbol.stocks:nvidia
map:Forces Google to show map results for a location.map:Manhattan
movie:Searches for information about a specific movie.movie:Oppenheimer
source:Searches for news from a specific source.deepseek source:cnn
before:Searches for results before a specific date.Microsoft before:2010-05-08
after:Searches for results after a specific date.Microsoft after:2010-05-08

List of unreliable search operators

Search operatorWhat it doesExample
#..#Searches within a range of numbers.logitech keyboard $50..$60
inanchor:Searches for pages with backlinks containing specific anchor text.inanchor:tesla announcements
allinanchor:Searches for pages with backlinks containing multiple words in their anchor text.allinanchor: tesla announcements
daterange:Searches for results from a specific date range. It can be inconsistent and requires Julian dates.tesla announcements daterange:2457663-2457754
loc:Finds results from a specified area.loc:”Silicon Valley” Microsoft
location:Finds news from a specific location.location:”London” Salesforce
AROUND(X)Find terms within X words of each other in a text.tesla AROUND(3) edison
related:Find sites related to a specified domain.related:nytimes.com

List of deprecated search operators dropped by Google

Search operatorWhat it doesExample
~Include synonyms. It seems to be unreliable, and synonym inclusion is the default now. Deprecated in 2013~cars
“+”Force exact match on a single phrase. Deprecated with the launch of Google+. Dropped in 2011+cars
inpostauthor:Searches for posts by a specific author. Deprecated in 2013inpostauthor:”Tom Capper”
allinpostauthor:Same as inpostauthor, but it applies to all terms following it.allinpostauthor:Tom Capper
inposttitle:Searches for posts with specific words in the title.inposttitle:apple iphone
link:Searches for pages linking to a specific URL or domain.link:microsoft.com
info:Searches for information about a specific page or website. Deprecated in 2017info:Amazon.com
id:Same as info, searches for information about a specific page.id:openai.com
phonebook:Searches for someone’s phone number. Deprecated in 2010phonebook:Jeff Bezos
#Searches for hashtags on the discontinued Google+. Deprecated with the sunsetting of Google+#NFL
cache:Find the most recent cache of a webpage. Discontinued in 2024cache:microsoft.com

OneNote

Get the most out of OneNote with these little-known features

Hi, Microsoft 365 Insiders! I’m Gokul Subramaniam, and I’m a Product Manager on the OneNote team. If you’re a OneNote fan, you’re aware of the many ways it can streamline and boost note-taking and content generation. But even the most experienced OneNote users among us might not be benefitting from all it has to offer, which is why we’ve singled out some of our favorite features that you may not be aware of – or wish existed but didn’t know they already did. Check them out, supercharge your productivity, and let us know what you think!

Clip web content with Web Clipper

With OneNote Web Clipper, you can easily capture and save online materials directly into your OneNote notebooks, saving you time manually copying information and allowing you to preserve the content in its original form. By simply adding the OneNote Web Clipper extension to your preferred browser, you can instantly begin clipping articles, recipes, YouTube videos, or other types of web pages, and neatly organize them into your notes for reference later.

A screenshot of Web Clipper clipping a video about Microsoft Copilot prompts.

Save and showcase files with print to OneNote

The print to OneNote feature enables you to send any type of file, including documents, spreadsheets, emails, drawings or diagrams, web pages, and PDFs, directly to a OneNote notebook as a printout. This can be particularly useful for students saving lecture notes, professionals archiving important reports or correspondences, and anyone else wanting to keep a digital copy of physical documents for easy access and annotation. Simply select Print on the file, and then choose OneNote (Desktop) or OneNote (Desktop) – Protected in the Printer list to add it as an image in your chosen notebook or page.

A screenshot of someone saving the Microsoft 365 Insider Blog page to OneNote in the print screen.

Availability: This feature is only available to OneNote on Windows users.

Recover lost or important edits with version history

Made a mistake or written over crucial content in OneNote? You can restore previous versions of your notes, ensuring that all important information is not lost for good. Perhaps most crucially, this feature gives you peace of mind that should someone else have access to your notebook and make edits, you can still go back to earlier versions if you don’t like what they’ve added. Try it out the next time you want to track progress on a school essay, or revisit old versions of a work project, or revert back to an earlier draft. Under History, you can locate a version of your notebook based on timeframe or author, view all previous page versions, and delete certain versions you no longer need.

A moving image of someone looking at Page Versions of a OneNote notebook about a Montana camping trip.

Availability: This feature is only available to OneNote on Windows, OneNote for Mac, and OneNote for the web users.

Store and revert deleted information with Recycle Bin

The Recycle Bin in OneNote is a feature that temporarily stores deleted notes and sections, allowing users to recover content that’s valuable or has been accidentally removed. Items in the Recycle Bin can be restored to a specific location in your notebook or permanently deleted, providing an additional layer of security against unintentional data loss. For instance, you can bring back mistakenly deleted project plans, or pull out discarded meeting notes, from the last 60 days.

A zoomed in screenshot of the Notebook Recycle Bin button in OneNote.

Availability: This feature is only available to OneNote on Windows, OneNote for Mac, and OneNote for the web users.

Quick machine Recovery

New features gradually being rolled out to the Beta Channel with toggle on*

Introducing quick machine recovery

Quick machine recovery (QMR), part of the Windows Resiliency Initiative announced at Ignite 2024 is now available in the latest Windows Insider Preview build. This feature, when enabled, addresses widespread boot issues on Windows 11 devices by automatically detecting and applying fixes directly from the Windows Recovery Environment (WinRE) thereby reducing the system downtime and manual intervention. When a critical boot failure occurs, the device enters WinRE, connects to the network, and sends diagnostic data to Microsoft, which can then deploy targeted remediations via Windows Update. IT admins are encouraged to enable, customize, or test this feature, which is enabled by default for home users. Windows Insiders can start testing it today and provide feedback via Feedback Hub to refine the feature further. In the Feedback Hub app on your Windows device, select Recovery and Uninstall > Quick Machine Recovery. Keep an eye out for a test remediation package coming your way in the next few days, allowing you to experience the quick machine recovery in action.

Microsoft Word

Find and Replace content in a word document:

On the “Home” Tab in the “Editing” section, click the down arrow and select either Find or Replace.

The Find or Replace Navigation will open in the left section of the document.

Type the required content to find in the search box and the results will show

If you selected Replace: The Find and Replace search box will display in a window. Fill in the Find What text in the firsts box and what you want to replace it with in the “Replace with:” dialogue box. Select either “Replace” aor “Replace All“. You will see that the R in Replace and the A in “Repalace All” is under lined so you can use those characters on the keyboard, without having to click on the buttons. If you choose “Replace” you can then click “F” to find the next instance without replacing the instance to skip some choices.

To open the “Find” or “Replace” sections use the keyboard shortcut sequence: CTL F to Find and CTL H to Replace or type “Find” or “Replace” in the Tell me what you want to do Search feature in Ribbon.

I hope that this tip will help you

Backdoors

Fact or fiction

Below is what AI has to say about built in back doors:

While it is not accurate to say that most software has backdoors built into them, there are numerous instances where backdoors have been discovered or intentionally included in software and hardware systems. Backdoors can be defined as mechanisms that allow bypassing normal authentication or encryption to gain access to a closed system. These can be created intentionally by developers, inserted by malicious actors, or result from poor coding practices.

Some notable examples include:

  • Microsoft: Has included backdoors in its disk encryption, allowing for remote data extraction.
  • Apple: Has the capability to remotely extract some data from iPhones for state purposes, although this has reportedly improved with iOS 8.2
  • BMW: Implements a backdoor in car software to enable or disable features like heated seats, even in used cars.
  • Xiaomi: Some of its phones contain a backdoor that can activate political censorship features.
  • Tesla: Sells software features that require a backdoor for activation, which is considered unjust.
  • Adobe: Has licensed its Flash Player to a Chinese company that bundles it with spyware and a backdoor.
  • Samsung: Has included a backdoor in some of its TVs that allows for remote bricking.
  • Wavelink and JetStream Routers: Have universal backdoors that allow unauthenticated users to control the routers and connected devices.
  • Kindle: Contains a universal back door, in addition to its book eraser feature.
  • Kia Cars: Were built with a backdoor that allowed the company to locate and control the cars, which was later exploited by a security flaw.

Tech companies and privacy advocates have been resistant to adding backdoors due to concerns about user privacy and the potential for these backdoors to be exploited by malicious actors. The inclusion of backdoors can weaken the security of devices and software, making them more vulnerable to attacks.

In summary, while backdoors are a significant concern in the tech industry, it is not accurate to generalize that most software includes them. However, the presence of backdoors in various systems highlights the ongoing debate and challenges surrounding software security and privacy.

End AI report:

So my question has to be with so many known instances, what make you or I think that the rest of the software does not have backdoors that have not yet been discovered?

So a specific follow up question to the AI: Tell me more about the encryption backdoor created by the 3 letter agency

The history of encryption backdoors and their impact, particularly involving three-letter agencies like the NSA, spans several decades and has significant implications for both national security and individual privacy.

Early 1990s: Clipper Chip

  • Clipper Chip: In the early 1990s, the National Security Agency (NSA) attempted to introduce the Clipper chip, a chipset designed to provide a backdoor for law enforcement to access encrypted communications. The chip was met with strong opposition from technologists and civil liberties advocates due to concerns over privacy and security. Despite efforts to promote its adoption, the Clipper chip was ultimately abandoned by 1996 due to its technical flaws and widespread criticism.23

2000s: NSA’s Bullrun Program

  • Bullrun Program: Following the Clipper chip, the NSA initiated a secret program called Bullrun to crack encryption standards. This program involved creating backdoors by compromising the software used to generate random numbers in encryption algorithms and gaining access to encrypted communications through hacking. The New York Times revealed in 2013 that by 2006, the NSA had gained access to the communications of several foreign entities, including airlines, travel reservation systems, and government departments.23

2013: Snowden Leaks

  • Snowden Leaks: In 2013, Edward Snowden leaked documents that exposed the extent of the NSA’s surveillance activities, including the use of backdoors. One significant revelation was the NSA’s influence on the Dual EC DRBG random number generator, which contained a backdoor allowing the NSA to break encryption. This backdoor was known to be insecure and slow, yet RSA Security continued to use it until 2013, leading to a loss of credibility and customers.34

2014-2015: Stronger Encryption and Law Enforcement Backlash

  • Apple and Google: In response to the Snowden revelations, Apple and Google strengthened their encryption in 2014, making it so that they could not bypass it even with a warrant. This move was met with strong condemnation from law enforcement officials, including FBI Director James Comey, who argued that end-to-end encryption hinders law enforcement’s ability to collect electronic evidence.235

2016: San Bernardino Case

  • San Bernardino Shooting: The FBI’s attempt to force Apple to unlock the iPhone of Syed Farook, one of the shooters in the San Bernardino attack, brought the encryption debate to the forefront. The FBI sought to compel Apple to create a custom version of its operating system to bypass security features, which Apple refused, citing privacy and security concerns.26

2020-2025: Ongoing Debates and Legislation

  • EARN IT Act: In 2020, the EARN IT Act was introduced, which aimed to create a commission to develop “best practice” guidelines for technology providers to follow in order to maintain immunity from liability for child sexual abuse material. This act has been criticized for potentially undermining encryption.3
  • French Rejection: In March 2025, the French National Assembly rejected a proposal that would have forced messaging platforms to allow hidden access to private conversations, marking a significant victory for digital rights and privacy.3

Impact

  • Cybersecurity Risks: Encryption backdoors create significant cybersecurity risks. They can be exploited by malicious actors, leading to an increase in cybercrimes and the creation of a black market for exploits.56
  • Trust and Business Impact: The revelation of backdoors has damaged trust in U.S. technology companies, leading to a loss of business and a reluctance among international customers to use American tech products.46
  • Privacy Concerns: Backdoors undermine the privacy of individuals, leaving them exposed to surveillance by governments and malicious actors. This has far-reaching implications for personal and national security.56

The ongoing debate over encryption backdoors highlights the tension between national security and individual privacy, with significant implications for both the public and the tech industry.

Absolute Home & Office: Provides security solutions that both locate and recover lost or stolen devices, including PCs, Macs, iPhones, iPads, and Android devices. Their patented Persistence technology can survive a factory reset or hard wipe, and they have an Investigations Team with over 45,000 devices recovered in 120+ countries

Absolute Home & Office is a comprehensive security solution designed to protect your devices and data. Here are the key features and services it offers:

  • Device Tracking and Recovery: Absolute Home & Office can help you locate your lost or stolen device using a combination of GPS, Wi-Fi, and IP geolocation technology. The service claims to recover 3 out of 4 reported stolen devices on average.
  • Remote Lock and Wipe: The LOCK feature allows you to remotely freeze your device at the touch of a button. Additionally, you can remotely and permanently delete sensitive files and personal information from your device to protect against identity theft.
  • Persistent Security: Built into the BIOS or firmware during the manufacturing process, Absolute Home & Office provides a security solution that can withstand a factory reset, installation of a new OS, or even a complete hard drive replacement.
  • Investigations Team: Absolute Home & Office has a dedicated Investigations Team that works with law enforcement agencies to locate and recover your stolen device. They provide support and coordination to help you get your device back.
  • Guaranteed Recovery: With the Premium license, if Absolute Home & Office is unable to recover your stolen device within 60 days, they will pay up to $1,000 for a replacement.
  • Compatibility: The software is pre-installed in some devices from manufacturers like Acer, Asus, Fujitsu, Panasonic, Toshiba, Dell, HP, and Lenovo. For Apple devices, it can be installed on the hard drive, but it will not be as persistent if the hard drive is replaced or reformatted.
  • Customer Support: Absolute Home & Office offers customer support through their website, including a contact form, telephone support, and a theft reporting process. They also provide detailed installation and usage instructions.

These features make Absolute Home & Office a robust solution for protecting your devices and data, providing peace of mind in case of loss or theft.

As can be seen from the above “Absolute Home & Security” is build into most motherboards, so what prevents this code being used against the legal owner? This is a question that you have to answer.

And Finally, the cherry on top:

Key Vulnerabilities in Hard Disk Firmware

  1. Pre-installed Backdoors:
    • Issue: Some hard disk drives come with pre-installed backdoors that can be exploited to gain unauthorized access.
    • Example: Kaspersky Lab discovered that the Equation Group (believed to be linked to the NSA) had developed methods to hide malware in the firmware of hard drives from multiple manufacturers[1].
  2. Unauthenticated Firmware Updates:
    • Issue: Many hard disk drives allow firmware updates without proper authentication, making it possible for attackers to install malicious firmware.
    • Example: Samsung SSDs were found to have a vulnerability that allowed unauthenticated firmware updates, which could be exploited to install malicious code[2].
  3. Self-Encrypting Drives (SEDs):
    • Issue: Vulnerabilities in key management can allow attackers to bypass encryption and access data.
    • Example: Researchers discovered that several SEDs from major manufacturers had vulnerabilities in their key management processes, allowing attackers to bypass encryption and access data[3].
  4. Firmware Rootkits:
    • Issue: Firmware rootkits can persist even after reformatting and OS reinstallation, making them particularly dangerous.
    • Example: The Stuxnet worm included a component that infected the firmware of industrial control systems, allowing it to persist and spread[4].

The malware or backdoor was found on drives from multiple manufacturers including Western Digital, Hitachi, Seagate, Samsung, Toshiba, and IBM

The joys of Open source

Open source use should come with oversight of the risks

Open-source software is widely used in business, but companies often lack visibility into their use of it, as was evident with a recent Log4j vulnerability. Experts recommend better management practices, including using software bills of materials and evaluating the health of open-source projects.

Full Story: IT Pro (3/26) 

Open Source, has always been a point of contention when looking at the security aspect of software. In a commercial program/software the company has to know who it is employing and do security checks to ensure the safety of the software, however in a opensource package, we have no clue who the players are and if security checks are performed on any of the contributors.

It has been known that backdoors have been programmed into some of the open source software that is freely available, that has remained undetected for years.

Vulnerable Medical devices

Report: 99% of hospitals have vulnerable medical devices

Ninety-nine percent of 351 health systems in a study had internet-connected medical devices that were vulnerable to publicly available exploits, and 20% of hospital information systems had known vulnerabilities linked to ransomware exploitation, according to Claroty. The report recommends prioritizing security of devices with known exploited vulnerabilities that are directly connected to the internet or can be accessed remotely through a non-enterprise-grade method.

Full Story: Security Week (3/28)