Re: How do I protect myself...



me wrote:
...from Microsoft? If someone can submit to me a practical solution besides turning off Auto-updates, I will do it. I never want to have my pc break from Microsoft pushing untested mal-ware.....err...security patches ever again. Is there an alternative to turning off updates, and waiting to see if anyone gets screwed? Is this the reality in which we now live? Microsoft or Hackers...which is worse?



I really don't like to see people use the Automatic Updates, unless they take precautions to ensure that no patches get installed without the user's express permission, given only after he/she has researched each individual patch to ensure that it applies and is necessary. Due to the nearly infinite number of possible combinations of hardware, device drivers, and applications on any given PC, it's impossible to guarantee that all patches will be 100% harmless. In a very small number of cases, patches and hotfixes can cause conflicts or other problems. So, as with all changes to an OS, caution is advised.

All "Critical" updates should be installed. These address serious issues that can affect a large number of computers. There will be only rare occasions when a Critical update will not apply. Of special importance are those that address security vulnerabilities. If people had installed the available critical updates in July of 2003, the Blaster and Welchia worms would not have spread throughout the Internet the following month. In the unlikely event that problems do develop, you can always use the Control Panel's Add/Remove Programs applet or a System Restore Point to uninstall the troublesome hotfix.

For the "Recommended" updates, simply study the information
provided to see if these updates apply in your specific situation. If
they don't apply, or you're not experiencing the problem(s) addressed,
you needn't install them. For instance, I have no use for WinXP's
MovieMaker, so I ignore any updates to it. Again, in the unlikely
event that problems do develop, you can always use the Control Panel's
Add/Remove Programs applet or a System Restore Point to uninstall the
troublesome hotfix.

In general, though, I've found it best not to download the
"Driver" updates from Windows Update, unless they're for a hardware
device originally manufactured by Microsoft. Device drivers provided
by each component's manufacturer's web site are likely to perform
better and offer more features than will the watered-down, "generic"
drivers that those manufacturers provide to Microsoft for distribution
via Windows Update.


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -Benjamin Franklin
.



Relevant Pages

  • Re: device drivers
    ... > does any one know how i can find out what drivers are in my system, ... Microsoft has these suggestions for Protecting your computer from the ... I'll mainly work around Windows XP, as that is what the bulk of this ... How to configure and use Automatic Updates in Windows XP ...
    (microsoft.public.windowsxp.general)
  • Re: Intermittant GPO failure to apply
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... any updates in your thread. ... | SetNtUserPolTime, ...
    (microsoft.public.windows.server.sbs)
  • Re: Pay for Automatic Updates Automatically
    ... >> I think it would be a great idea for Microsoft to charge a fee each time ... You should have to pay a fee, ... >> raise if a fee was imposed for updates and patches. ...
    (microsoft.public.windowsxp.general)
  • Re: patch management policy/practice
    ... Installing patches is certainly a headache. ... There are a variety of ways to get updates easily, ... Microsoft update services built into Windows XP etc., ...
    (microsoft.public.windowsxp.security_admin)
  • Re: patch management policy/practice
    ... Installing patches is certainly a headache. ... There are a variety of ways to get updates easily, ... Microsoft update services built into Windows XP etc., ...
    (microsoft.public.win2000.security)

Loading