BITS Downloading App updates from unknown endpoint
Hi, Our IDS started freaking out today because a large number of our endpoints started initiating BITS downloads to an unknown endpoint. My initial reaction was ransomware, but after further investigation it appears that these BITS downloads are updates for Windows Store Apps. I am making this post to confirm that these endpoints are actually indeed official Microsoft endpoints. The BITS requests I had seen were all for the Limelight Networks CDN (llnwd[.]net), which I have heard hosts content for a lot of MSPs, one of which being Microsoft. Checking the logs, it appears that our workstations have never made BITS requests to this CDN. All previous BITS updates were carried out using official microsoft.com endpoints. The following are some examples of the domains seen in the BITS requests: ic-c39e4900-0f7065-msftstoretlu19.s.loris.llnwd[.]net ic-c39e4900-0d5ab5-msftstore19.s.loris.llnwd[.]net ic-c39e4900-08b3f9-msftstore19.s.loris.llnwd[.]net ic-c39e4900-0700f8-msftstore19.s.loris.llnwd[.]net Although all my investigations point to these being official Microsoft endpoints, I am worried that a CDN is being used because a malicious actor could easily mangle the URLs to make them look like official Microsoft ones. Is this the correct place to confirm that the above sub-domains are official Microsoft, and if not where should I ask this question instead? ThanksSuggestion: Open file and save as option before downloading in the same Google Chrome downloads UI
There is no option to open a file and installer directly when we download files in Microsoft Edge and we have to save the file in order to open the file which is sometimes timeconsuming. So, I am suggesting a feature where there will be the same Chromium downloads UI and there will be the option to open and save the file before downloading and the option to cancel the download will always be there in the ellipsis(three-dotted) menu. If you like this feature and want it to come to Microsoft Edge, then you can also send feedback through the in-built feedback feature(Alt+Shift+I) in Microsoft Edge which will give this suggestion a +1.Suggestion: option to run or open downloaded files
From the time I have installed Microsoft Edge Chromium, I have to compulsorily save files when it is downloaded from the internet and not to just run or open it which were the options given in IE and Edge Legacy, because of that I have to delete the file after it was opened. It is a suggestion that option to run or open files is added in Edge Chromium. Edited: This feature has now been implemented and you can check it by going to my conversation which is linked below: https://techcommunity.microsoft.com/t5/discussions/good-news-the-new-downloads-ui-asks-to-whether-open-or-save-the/m-p/1602206?search-action-id=236090470239&search-result-uid=1602206
OneDrive Direct Download Link
Hi all, My Problem and Question This question pertains to OneDrive for personal use. Microsoft recently made a change to the link format from the embed feature and made my direct download links obsolete. I would retrieve these links from the embed feature in OneDrive and the links looked like what's shown below. The link would directly serve the file to whomever accessed it without them ever having to interact with OneDrive. With the changes Microsoft recently made to OneDrive, is there a new way of getting links that have this functionality? Old link format (no longer works): https://onedrive.live.com/download?resid=XXXXXXXXXXX&authkey=XXXXXXXXXXX My Own Digging I've scoured several forums unable to find any solutions. I have found a temporary solution; however, the links generated via this method only have temporary authentication, so they expire after a day. Perhaps it could be a real solution if I could figure out how to get a permanent auth token for a personal OneDrive file. I'm retrieving the link from the GET request when clicking the download button on a file from a publicly shared link. Link format: https://my.microsoftpersonalcontent.com/personal/{resid}/_layouts/15/download.aspx?UniqueId=XXXXXXXXXXXXX&Translate=false&tempauth=XXXXXXXXXXXXXXXX&ApiVersion=2.0 Thank you to anyone that has input!SS38: screenshot based warning - color tabs - reload - download status on tabs
Suggestion (SS): 38 Classification: warning - download on tabs PRIORITY IN MY OPINION: 4 on a scale from 1 (low) to 10 (high) Edge devs, i wrote you before via feedback app, but i continue the topic here, so that other chromium based devs can read it too. We talked about reload by domain and why such feature is cool and useful. now a similar suggestion is that you detect all website that has the same identical layout (so screenshot based). if i click via menu bar or right click menu "warn me based on this website" you color all tabs that have the similar layout/design. related to the picture, you warn me if the link has not be saved correctly on all other tabs. now about this website we generally** can see such problems via the icon in the tab, but there are a lot other examples, where we need to check manually, otherwise we batch close not completed websites. **there are still situations where the icon is not a valid method to know if the website (in this case webarchive) completed the task correctly or not. this was another example we talked via feedback app where maybe a better integration between "smart screenshot warning" and "reload tab" should happen. another suggestion related to this is to show me on the tab an icon --> that marks you are downloading files from such tab and once the download is done, you color it in green.
