Slashdot Mirror
Windows Users, Get Ready For a Bigger-Than-Usual Patch Tuesday
dibdublin (981416) writes with a report from The Register: October is stacking up to be a bumper Patch Tuesday update with nine bulletins lined up for delivery — three rated critical. Cloud security firm Qualys estimates two of the lesser "important" bulletins are just as bad however, as they would also allow malicious code injection onto vulnerable systems. Top of the critical list is an update for Internet Explorer that affects all currently supported versions 6 to 11, on all operating system including Windows RT. Vulnerabilities discovered in most versions of Windows Server, Windows 7 and 8, and the .NET framework are covered in the other pair of critical bulletins.
Does that mean that if I have an ancient Windows 98 install going somewhere, it'll get a rare update in the wild?
Do not look into laser with remaining eye.
Nine updates isn't anything special. I had a quick look at my installed updates and last month there were 11 updates for this Windows 8.1 machine.
Let someone else beta test it.
Would these the more, less, or about as impactful as heartbleed and shellshock? What was the time frame between the introduction of the bugs being fixed, the discovery of the bugs being fixed, and the fixes?
Vintage computer games and RPG books available. Email me if you're interested.
around 2.75TB. :)
Yeah, it's big, all right. God, it's gonna take forever to download, let alone I'm only on an i3,
that is an i386. I'm already pretty bummed out about Intel's FSIN instruction, fortunately
I don't need more than 11bits of accuracy.
Windows Users, Get Ready For a Bigger-Than-Usual Patch Tuesday
Not something you expect to hear from a name like Micro Soft.
Once you go Microsoft, you never go back, because lock-in.
The only time I use IE is just after a clean install, to download Chrome or the Fox, because I don't have the ftp command to do it from a console memorized. And never get your patches on Patch Tuesday. Go get 'em on Thursday after they fix 'em.
Please, its time for the *nix world to stop pretending their crap (and code) don't stink.
The latest vulnerabilities have been around for YEARS shellshock and heartbleed both, and were just recently discovered. Open Source has many advantages, however perfect code isn't one of them. Neither is vulnerability catching, or these would have been found years ago.
Sounds like everything I don't use in Windows is getting patched.
...as Microsoft patches the shellshock vulnerability in the bash interpreter underlying all of .net :P
Meanwhile, we have this IE vulnerability that has been in Windows since IE6 was first released.
Is should not take hours / need to install 150+ updates on fresh systems + the update rollup. It needs to be easier / take less time.
.net updates take time + gigs of ram to install.
yah know ninite can solve that for you (and if you deal with a number of systems Ninite Pro is CHEAP and INCLUDES FLASH)
Any person using FTFY or editing my postings agrees to a US$50.00 charge
///nomnomnom
The word you are searching for is "compatibility".
{With apologies to Led Zeppelin}
Every months we get anothe load of patches to IE. I have to ask how much of the original code is still left? Not a lot I'll bet.
Also given the numbert of patches it must now be a rast arse nest of crap code. It must be getting really hard to maintain the codebase.
It has to be getting close to the time for MS to either
- Call time on IE - ship with a basic browser that is used to D/L another (eg Kirefoc.Chrome etc) and then deletes itself.
- Totally separate it from anything even remotely related to or connected to the Kernel.
Make it totally userspace and sandboxed away from everything.
Personally it is a POS and refuse to use it.
It's easier to just copy the latest installer into a flash drive from another machine. If you bake it in with Ninite it will be out of date in one month.
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
Chrome and Firefox also have regular updates patching security problems. We just don't get a note about it each month, it just shows up.
Does anyone know of a site or mailing list specifically dedicated to checking out the new updates and rating how safe and reliable they are to install? I've had far too many stability and performance problems after installing recommend updates to trust Microsoft's "Install this update to make {some important but unspecified change} to Windows" messages any more. However, life's too short to keep running a search on every update ID every month to see which ones are getting red flagged.
If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
I share your pain. What I do is wait a week. Early adopters make good canaries.
It little behooves the best of us to comment on the rest of us.
I thought Microsoft had dropped all support for Internet Explorer 6 and Windows XP?
If not, they should and force people still stuck on IE6 to upgrade.
If you used FTP, better hope there is no firewall. The windows command line client does not support passive mode.
Microsoft, you do not have my permission to force hidden updates or any updates of any kind into my computers. You blew any trust I ever had with you when you screwed us out of XP.
Try Windows Secrets Patch Watch http://windowssecrets.com/cate...
Windows Secrets is a great site and the Patch Watch is invaluable in tracking patch conflicts and problems.
~~~
Think before swallowing Microsoft's blue pill.
I will never do Windows Update on the day the patches are released.
Let the fools take the plunge and be the BSOD lab test rats.
You're misunderstanding how Ninite works. It's not only used for INSTALLING software.
Just rerun the Ninite installer and it will UPDATE programs.
Thanks. I hadn't come across that site before, and it looks useful.
If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
Yeah and shellshock affects every version of bash released since 1992, long before NT or IE were even released.
Uh you're a moron: