Slashdot Mirror
Microsoft Kills Many Critical Flaws, Some 0-Days, Un-Trusts One Wildcard Cert
An anonymous reader writes: For this December Patch Tuesday, Microsoft has released twelve security bulletins, eight of which have been rated critical. Those refer to the cumulative security updates for Internet Explorer, Microsoft Edge, JScript and VBScript, and updates for Microsoft Windows DNS, Microsoft Graphics Component, Silverlight, Microsoft Office, and Microsoft Uniscribe. Microsoft also released a security advisory announcing the removal of a digital certificate from the Certificate Trust list (CTL).
What's new? I'm sure there are many more lurking to be found...
... err, I mean, Windows 10.
In other news Microsoft also released another 14 updates that increase telemetry, attempt to forcibly install Win 10, beat your children and do unspeakable things to the cat!
You are all Flawed Cows. Cows say Mooooooo. Moooooo! Mooooooo! Moooooo Cows Moooooo! mooooo say the Cows. You MS COWS!!!!
So if you have some critical security flaw in your Windows system, and they find it and make a patch for it by Wednesday, you have to wait around until the next Tuesday to get it? That sounds like a really stupid security policy which will leave you wide open for hacking for days at a time.
I have Windows Update on a pure as-needed basis and glad I do after hearing about the supremely unethical 'Hey! Upgrade to Windows 10! Hey!' nag that came in some updates.
On another front a friend was having trouble with his boot drive and as we were shutting it down Windows jumped in to install a bunch of updates - that finished corrupting the boot drive and many, many hours were dedicated to recovery and repair.
I'll give these patches a look but want no shady behavior out of the Redmond Mob.
A feeling of having made the same mistake before: Deja Foobar
Saw that there were several "important" updates available to me last night. I've disabled Automatic Updates, since I can't really trust Microsoft to not try and install Windows 10 behind my back, and instead have Windows Updates a startup item now so I can stay on top of new updates more easily.
Haven't had a chance to go through what's listed there -- doesn't anyone know if there are any I need to be hiding from this batch?
Warning, they are trying to sneak in yet another update to chuck Windows 10 down your throat. KB3112343 enables support for additional upgrade scenarios from Windows 7 to Windows 10.
How can any of us trust that when Microsoft puts out patches they're not also saying "fuck it, while we're here we'll just tinker with a few things and add stuff we've wanted for a while"?
Microsoft are being such bastards about shoving Windows 10 up our collective asses I'm afraid at this point Microsoft has to be treated as a hostile and un-trusted entity -- they've pretty much decided that furthering their own interests is compatible with the update system which is supposed to provide us security.
We don't trust you didn't write something horribly insecure, we don't trust that you aren't sneaking something in unrelated to security, and quire frankly we don't trust that you're going to do a good job of fixing these problems.
Lost at C:>. Found at C.
.
This extreme slowness is a recent thing, occurring only for the last three four four months. I really takes the fun out of running Windows Update.
http://www.infoworld.com/article/3013219/microsoft-windows/microsoft-pulls-botched-patch-kb-3114409-that-triggered-problems-with-outlook-2010.html
It's know as "Metro" or "Modern". Until MS kills it and goes back to the UI people WANT, without additional spyware, forced installs and all the rest, they will continue to see people migrate away from their software and services.
Strictly speaking, sending a computer with Debian into a singularity would only cause apt-get to appear as slow as windows updates to outside observers. From the frame of reference of the user it would still run as fast as it always does.
It almost seems that Microsoft has intentionally slowed updates for Windows 7. It's been taking 30 to 60 minutes to check and get a repsonse using Windows update on our Windows 7 machines. Windows 10, on the other hand, is rapid, but buggy with more than one failed update that required running a script in an elevated command prompt to get it removed, when not needed, or installed. Having experienced annoying and on one PC serious issues with Windows 10, our Windows 7 PC's are staying with Windows 7, with automatic updates disabled. I manually check now, with recommended updates turned off, since I lost all trust in Microsoft in the past few months thanks to sloppy work and buggy updates. I have been installing GWX Control Panel in most of our customer computers that are still running Windows 7 or 8.1, with their blessings and often at their request since they like their PC the way it is.
I've noticed any machines not going with the Win 10 forced upgrade are having their video drivers nuked.
Every PC you do that too is another PC that will slip through your hands, Darth MSFT.
-- Tigger warning: This post may contain tiggers! --
I think Microsoft is driven to shove tiles down people throats for no reason other than they doubled down on Ballmer's betting the company on Windows 8's schizophrenic dual GUI by bundling it into Windows 10 start menu with Candy Crush and other shit.
I'll go ahead and mention that one of the patches was to revoke the xbox live cert because the private key was leaked, opening ALL xbox users to man in the middle attacks. So yeah, MS is the devil, omfg FREE windows NOOOOOOOOOO theyz tracking us!!!!! But they also did something good here but actually acknowledging this happened and then took action to fix it. I will continue to work and support linux servers and hosts, but I will always been running at least 1 windows box at home. Get over yourselves, seriously, this is getting old and honestly it's become complete fanboyism on your part. Windows 10 isn't the bees knees, but it's also not the steaming pile of bullshit you all ASSUME it is. and I say assume because clearly none of you have even tested a build of win10 because you are still whining about non-existent issues.
Microsoft has gone so far with Modern UI already that I don't think they are coming back. It's like wishing for Linux to get rid of SystemD.
when you did not have to worry about windows updates, just click on everything, now you have to read every single fucking thing to the point my linux box is easier to update than this aids infested windows update system. They should call it windows africa or something, So much computer aids in one place
1. Don't install it.
2. If you ignored step 1, then uninstall it.
Microsoft, Apple, Google, Amazon what's the difference? All steal money from devs and control with walled gardens.
Its cute ... you guys have warped 0-day into something utterly meaningless.
The term was always stupid, you mean 'undisclosed'. It stopped being 0 day 24 hours after it was first discovered, regardless of when you found out about it.
The reality is, unless someone on slashdot was actually writing it, its pretty unlikely you've EVER seen a 0 day exploit.
You guys now days have no experience or clue about what words mean so you just start making shit up and using them in utterly stupid ways.
Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
It's know as "Metro" or "Modern". Until MS kills it and goes back to the UI people WANT, without additional spyware, forced installs and all the rest, they will continue to see people migrate away from their software and services.
I hate thing, therefore everyone hates thing!
It's know as "Metro" or "Modern". Until MS kills it and goes back to the UI people WANT, without additional spyware, forced installs and all the rest, they will continue to see people migrate away from their software and services.
Which UI is that? The one in Windows 7? The one people coming from XP also bitched about?
Shouldn't Internet Explorer be an optional removable application, since Microsoft now wants to push Edge as the default browser? I'm fine w/ that, b'cos I use a combination of Edge, Chrome and Palemoon. On the laptop, it's not a big deal, but on my Winbook tablet that has limited storage, I'd like to remove things like IE
Don't forget the ads in Solitaire! Unless, of course, you pay $1.50 a MONTH to remove them. Making FUCKING SOLITAIRE more expensive than the actual cost to upgrade the OS after three years!
There is no reason at all to ever run it. Your system will be perfectly safe. Worse IT professionals actually believe this??!
Glad mine are turned on
http://saveie6.com/
Specifically KB3114409 was intended to prevent safe mode from deploying unless a registry value was changed, but on some machines (seems like 32 bit machines, maybe, from my experience,) it ends up forcing safe mode.
http://www.infoworld.com/article/3013219/microsoft-windows/microsoft-pulls-botched-patch-kb-3114409-that-triggered-problems-with-outlook-2010.html
...installing this comprehensive necessary patch DOES actually also install Win10 automatically.
Sorry.*
-MS
*not really.
-Styopa
Microsoft's "Critical Update" screwed up my iPhone 5S's update to IOS 9.2 to the point where it almost bricked the phone.
I ended up spending 15 minutes with Apple Support trying to get the phone back using a Mac when ... the Mac announced it had an update to El Capitan and Xcode.
Maybe it's time that manufacturers set aside unique days (of the month) for releasing their updates so that they all don't collide?
Sorry, just bitching because I really didn't need to lose an hour on an iPhone update which is normally transparent to me.
Mimetics Inc. Twitter
Which UI is that? The one in Windows 7? The one people coming from XP also bitched about?
I took great pains to make my Win7 desktop look like XP!
I hate "metro" and "Live Tiles" (that never really worked properly) and all of the other MS bullshit that was designed to give MS more control over distribution of software on the PC I own. I also object, in the strongest possible way, to their attempts to force upgrades on people who don't want them, and their "telemetry" spyware.
If you don't hate Windows, you just aren't paying attention.
Windows 10 is Malware. "Malware means software designed to function in ways that mistreat or harm the user." Will Microsoft top managers be the targets of a court case? Other spyware makers have been convicted. Will there be an anti-trust case against Microsoft's virtual monopoly?
Apparently Microsoft is moving towards these arrangements: With Windows 10, Microsoft has complete control over any computer connected to the internet, so Microsoft can use its spyware, which it calls "telemetry", to gather personal information to be sold to advertisers. Eventually there may be monthy payments to use Windows, as with Microsoft Office-365. Apparently Microsoft is paid by secret agencies of governments to steal personal information.
As many people have said, putting spyware into Windows 10, and not allowing people to know the purpose of "updates", will obviously be bad for Microsoft, eventually. So, why is Microsoft becoming even more offensive? It seems that the company is amazingly badly managed. For example, the cover of the January 16, 2013 issue of BusinessWeek magazine has a large photo of Microsoft CEO Steve Ballmer (now replaced) with the headline calling him "Monkey Boy". See the BusinessWeek cover in this article: Steve Ballmer Is No Longer A Monkey Boy, Says Bloomberg BusinessWeek. The BusinessWeek cover says "No More" and "Mr.", but that doesn't take much away from the fact that the magazine called Ballmer Monkey Boy -- on its cover.
Worst CEO in the United States: Quote from an article in Forbes Magazine about Steve Ballmer: "Without a doubt, Mr. Ballmer is the worst CEO of a large publicly traded American company today."
Another quote: "The reach of his bad leadership has extended far beyond Microsoft when it comes to destroying shareholder value -- and jobs." (May 12, 2012)
Articles about Microsoft abusing customers:
How Can Any Company Ever Trust Microsoft Again?
NSA Backdoor Exploit in Windows 8 Uncovered
Microsoft Gave the NSA Direct Backdoor Access to Outlook, Skype
Microsoft has no plans to tell us what's in Windows patches. Each update is a black box, and it's going to stay that way.
Leaks show that Microsoft writes release notes, so why can't it publish them? The lack of documentation of Windows' updates is a baffling move on Microsoft's part.
Microsoft [lack of] Privacy Statement
Here's how to Block Windows 10 "Spying" (But, of course, Microsoft can change the spyware to avoid blocking.)
If you use Chrome, free solitaire! It's in their app store, or... http://offlinebrowsergames.appspot.com/index.html
I thought Microsoft Edge was elimated all the defects in the Microsoft browser?
I don't actually use Windows but I have it on good authority that there are quite a few free versions that don't have ads right in the store and available with the same search query.
"So long and thanks for all the fish."
Every time I start it up, its layout gets resetted. So annoying!
Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
Instead of juggling batch files like I was I switched to using Spybot Anti Beacon
https://www.safer-networking.o...