What's with this 'serious Windows 7 bug'..?

Charlton_King

It's all over the Beeb but doesn't seem to have got a mention on this forum unless my eyes deceive me.

https://www.bbc.co.uk/news/technology-47494760

I've been running 7 for several years without a hitch. What do I need to do to cover myself? The reports say you have to get the latest Windows updates with the 'patch' ASAP - but I thought the thing updated itself automatically - I've never so much as once received any 'update notification' in that entire time!

victor2

You're only at risk if you're using Chrome, and that isn't updated. If you do use it, make sure you have the latest update (as Google have already fixed it). If your Windows 7 is set to apply updates automatically, it will do just that, but you can go to the Windows Update settings and check yourself.
It sounds like Microsoft haven't fixed it yet. They might not bother, as they want to phase out 7 and force people onto 10 anyway. After January next year, official MS support for Windows 7 comes to an end, so they definitely won't fix any issues that come to light after that.

dipsomaniac

Charlton_King wrote: »

What do I need to do to cover myself?

the article advises you to update to win10

Charlton_King

Thanks. I have no interest in Windows 10. I can't see any advantages and I know of many people who have actually switched back to 7 from 10.

I use Chrome, yes, but again my understanding is that the browser updates itself, no?

victor2

Charlton_King wrote: »

...
I use Chrome, yes, but again my understanding is that the browser updates itself, no?

I believe it does, but you can force it to check anyway through the "Help, About Chrome" menu option.

I stopped using Chrome when it became so slow, due to the amount of data it was gathering. Use Firefox now, and happy with it.

Charlton_King

Ok I can answer myself. I checked on what version of Chrome I was using under the settings/help menu and it tallied with the version mentioned here:

https://nakedsecurity.sophos.com/2019/03/06/serious-chrome-zero-day-google-says-update-right-this-minute/

... so it looks like all's ok!

I use both Chrome and Firefox, almost interchangeably, and see precious little difference in speed.

JJ_Egan

Reads as a combination

Windows 7 + Chrome .


The Windows flaw exists in core elements of the operating system that are supposed to stop data in one program interacting with anything outside that application.


So thats a reason to update .

poppellerant

This is why I cringe at people who install Windows and claim they don't need the Windows updates turned on. Even if you use antivirus software, unpatched and out of date software is a bad idea - nothing is infallible.

1. Update the BIOS on your hardware, whether it's a PC, tablet or laptop. Find this by visiting the support section of whatever make your laptop is (ie: HP Support), identify your machine, then download and install any available and appropriate BIOS updates.

2. Run Windows update and install any available security updates.

3. Update your software, using software such as SUMo or Patch My PC. You may discover during software scans you have a lot of unnecessary programs installed - use this opportunity to do some housekeeping and remove those programs.

4. Consider a paid-for antivirus, however most people find that Windows Defender is sufficient. Personally I don't like the performance impact that it imposes upon my PC, therefore I choose to use ESET Internet Security with it's interactive firewall.

5. Drivers are often overlooked when it comes to security flaws, but they should be updated. I use Snappy Driver Installer Origin to make this so quick and easy. I can recall the days of individually checking if devices had up-to-date drivers in Device Manager, therefore appreciate SDIO as a result.

6. Use a good ad blocker for your browser and choose appropriate lists. uBlock Origin with it's Privacy and Malware lists is what I would personally recommend.

victor2

poppellerant wrote: »

...
2. Run Windows update and install any available security updates.
...

Ah, but remember the Microsoft update in Feb 2018 that bricked many AMD based computers? Doesn't always pay to be among the first to get the latest patches.

wongataa

Charlton_King wrote: »

Thanks. I have no interest in Windows 10. I can't see any advantages and I know of many people who have actually switched back to 7 from 10.

Well how about this advantage: the potential issue being discussed here does not exist with Windows 10. Windows 10 has improved security over Windows 7 and will continue getting security updates for any issues found. Windows 7 will STOP getting security updates soon and will not be updated. The improved security and updates are the main reason to switch.

poppellerant

victor2 wrote: »

Ah, but remember the Microsoft update in Feb 2018 that bricked many AMD based computers? Doesn't always pay to be among the first to get the latest patches.

Thankfully I don't remember that, but I do agree with you to an extent. Having system restore enabled and keeping regular backups may help minimise any data loss. To date, I don't think I have ever had a Windows update go so badly wrong that it killed my installation of Windows.