Sneaky Windows 10

JasX

Fightsback wrote: »

You can patch exploits to death but you can't patch PEBKAC:

yes PEBKAC

(or "Problem Between Keyboard And Chair")

is something you can't patch against as a fool clicking "yes" to every dodgy pop up and 'free jokes toolbar' they are offered will always end up riddled with viruses

Le_Kirk

So, a self-fulfilling prophecy and vicious cycle then. If there were not vulnerabilities then Ms would not need to issue security updates that allow the hackers (we shall call them but in my head there is a ruder word) thus allowing hackers to know what the vulnerabilities are. Why does Ms wait until "update Tuesday" to issue its updates for security vulnerabilities? Shutting all my systems down now .......

chunter

The tin foil hat brigade have arrived.

RumRat

Y'all need to get out a bit more..............._party_

John_Gray

If you want to prevent automatic updates to Windows 10 being sneaked onto your PC, I suggest you use GWX Control Panel, which is very straightforward (and probably automates the two or three registry changes which appear to be necessary for foist-ware prevention).

Read the blog about it, and note that he expects to have to make changes to it in the future to cope with any new mechanism which Microsoft might come up with.
I quote:

HOW PERMANENT IS "PERMANENT?"

At the time I'm writing this, the "Disable" feature of GWX Control Panel really does make the Get Windows 10 icon disappear until you explicitly re-enable it. This works after system restarts and Windows Updates with no further intervention on your part. GWX Control Panel doesn't break or uninstall GWX; it just gives you control over when it appears.

But Windows 10 is a moving target. If Microsoft pushes another update that changes the Get Windows 10 or Windows Update behavior, or locks its upgrade settings down even further than it is already, the icon and the notifications might come back. If that ever happens, I will do my best to combat it and publish updates at my downloads page.

JasX

Le_Kirk wrote: »

Why does Ms wait until "update Tuesday" to issue its updates for security vulnerabilities? Shutting all my systems down now .......

Keeps life easier for industrial / coprorate users who will aim to schedule batches of updates rather than needing to be ready for them 24-7.

JasX

chunter wrote: »

The tin foil hat brigade have arrived.

Not sure what you're getting at? Try taking a look at Microsoft's data on how many exploits are being exploited in the wild/on the internet even BEFORE they've issued the patch....

https://blogs.microsoft.com/cybertrust/2014/06/17/when-vulnerabilities-are-exploited-the-timing-of-first-known-exploits-for-remote-code-execution-vulnerabilities/

RumRat

JasX wrote: »

Not sure what you're getting at? Try taking a look at Microsoft's data on how many exploits are being exploited in the wild/on the internet even BEFORE they've issued the patch....

https://blogs.microsoft.com/cybertrust/2014/06/17/when-vulnerabilities-are-exploited-the-timing-of-first-known-exploits-for-remote-code-execution-vulnerabilities/

Then read on to see how they suggest mitigating the risks....

JasX

RumRat wrote: »

Then read on to see how they suggest mitigating the risks....

Let me guess, is it using old software versions and selectively applying patches manually sometime after release after an unspecified delay?


oh, I was wrong :j

bsms1147

...Or just install Windows 10.