Slashdot Mirror
Microsoft Removes Antivirus Registry Key Check for Windows 10 Users (bleepingcomputer.com)
Microsoft has backtracked on a decision it took back in January when it conditioned that computers without a special registry key would not receive any more security updates. From a report: That particular "requirement" was introduced as part of the Meltdown and Spectre patching process. At the time, Microsoft said that antivirus vendors would have to add a key to the Windows Registry to signal that they are compatible with Microsoft's original Meltdown and Spectre patches. This was a big issue at the time because Microsoft detected during testing that some antivirus vendors would inject code into parts of the kernel that the company was trying to patch against Meltdown and Spectre flaws.
Can't let users have the power of deciding when to install updates now, can they? Gotta close that loophole. Microsoft knows best.
it does not really sound like a backtrack, but more like we do not need to do this anymore, now that the antivirus programs stopped using those parts of the kernel that the patch needed.
This was a big issue at the time because Microsoft detected during testing that some antivirus vendors would inject code into parts of the kernel that the company was trying to patch against Meltdown and Spectre flaws.
This is really bringing me back to the old days of Microsoft Windows...
Never have Mac and Linux and BSD and well, all other OS users ever been so glad as not to be a part of the Mother of All Cluster Fucks that is Windows. And we were pretty glad before.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
Seriously what the fuck?
How on earth are people supposed to keep track of shit like this? We literally have BLOCKED updates because they are evil, how much more of this crap needs to happen before Government steps in?? It's not even a joke any more.
Windows 10 is still a huge pile of shit and anyone who uses it is a moron who deserves all of the headache and loss of security/privacy that it brings.
Windows 10 is still a huge pile of shit and anyone who uses it is a moron who deserves all of the headaches and loss of security/privacy that it brings.
The hell you say! It is almost like they are an abusive corporate entity that does not have the best interest of anyone but themselves in mind and in fact will harm or destroy anything they can reach out and touch.
P.S. go linux today and never look back, it will be the greatest decision you ever made in your life and you will have no regrets
The bulling tactics of MS failed, yay for common sense
Backtracked? No. It was only ever temporary
Honestly. The days of Microsoft pandering to people that won't move are gone.
And people wonder why the already-unstable Windows operating system crashes even more when you install an anti-virus tool on it?
...but screw A/V vendors even more. There are countless devs on huge projects like Firefox and Chrome that talk about how horrible A/V vendors treat your system and even INJECT new vulnerabilities into your system.
https://it.slashdot.org/story/...
https://www.theregister.co.uk/...
How does this affect Windows systems that receive all their updates via WSUS?
Finally, a way to actually turn off updates until we want them in Windows 10 and MS comes back and takes the feature away. Sheesh!
The party of stupid and the party of evil get together and do something both stupid and evil, then call it bipartisan.
what happens then? Guess I gotta brace myself for a wave of new frustrated customers :D
my sig pwns your sig
If only I could choose what updates/when to install them instead.
That if I stay on Win7 and don't add this key, Microsoft will leave me alone unless I manually want to update something? Don't know about you, but this sounds like a really nice feature to me..
Microsoft wants control of everything in Windows 10 and they are terrible at doing it. What's more secure then users using third party paid security suites? Not like Microsoft doesn't admit Defender is basic security and not something that competes with third party paid security or does it? Microsoft has made Windows worse not better by obsessing over control and it has not made it more stable or better and certainly not more secure.
Microsoft said they would do one thing and then did another? That's only exactly what they do literally every goddamned time.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
"some antivirus vendors would inject code into parts of the kernel"
That's the more important part of the story.
Antivirus vendors' products are injecting their own code "into parts of the kernel" that Microsoft was trying to patch? And Microsoft allows this?
No third-party software should ever be allowed to patch an OS kernel - any OS kernel. Ever.
(Yes, yes, I know. Kernel patching has been SOP for all kinds of Windows software for decades now. But, c'mon - Windows 10 was supposed to have been designed from the ground up to be secure. Permitting the OS kernel to be patched by third parties, even with user permission required, is a fundamental security design flaw that no OS architect should allow ...
Check out my novel.
Microsoft had stopped letting the Kernel get modified by non-Microsoft entities. This is a new kind of horrifying.
Articles show 0 comments even though the comment count says otherwise, and after comments are posted they just disappear
I wish the summary provided a bit more information and explained why MS backtracked.
Microsoft put the check in place for compatibility reasons. Yet they have clearly said in the article and the original announcement that the reason they are dropping this flag is because their vendors did exactly what the registry key was designed to do: Get vendors to update their software or admit they are leaving users at risk.
Vendors chose to update their software, registry key is now superfluous. That a backtrack doesn't make.