Windows update

[Agent]

http://slated.org/windows_by_stealth..._you_dont_want

Slightly worrying?

[peterb]

Now why does that come as no surprise....? (Thinking about index.dat, 'easter eggs', alternate data streams, encrypted data packets with MS's IP address as the header...)

[Funkstar]

what is it?

they have blocked IE accessing pages.

[peterb]

what is it?

they have blocked IE accessing pages.

For one moment I thought MS had stopped IE frtom accessing that site! (Anything is possible?!)

Follow their recommendations, download a better browser and have a look!

[Clunk]

At last!. Remember a while back, I had an update on Vista x86 that kept installing and wrecking everything?, even when i told it not to?

I'm glad it happened to someone else as well...I wonder what other nasties are on the way? A Rufus Wainright themed service pack?

[Funkstar]

Follow their recommendations, download a better browser and have a look!

Nah, can't be bothered

IE7 works for me. Used FF on a friends PC a few weeks back and didn't like it.

[peterb]

Nah, can't be bothered

IE7 works for me. Used FF on a friends PC a few weeks back and didn't like it.

Try Opera then! http://www.opera.com/download/

But back on topic...

it won't be an issue when Vista goes open source!!

[Agent]

IE7 works for me. Used FF on a friends PC a few weeks back and didn't like it.

Weirdo.

In short, someone has proved that windows will/can update itself even when you specifically tell it not to.
But more to the point; They can install anything on your machine without you knowing.

Just for you

Taken from http://slated.org/windows_by_stealth..._you_dont_want

On the back of the recent WGA fiasco, further research has revealed yet another citation of what I already knew to be true: Windows updates itself without explicit permission, even if you turn off automatic updates.

The procedure is supposed to work like this (on XP at least):

Launch "System Properties".
Select the "Automatic Updates" tab.
Select the "turn off Automatic Updates" (or manual) checkbox.

And that, AFAIAC should be it. Off means off.

And yet, according to Microsoft, apparently it doesn't.

If Microsoft ever wanted to get caught with their pants down, they succeeded. For most people, the above doesn't make a whole lot of sense past the "you might have a virus" part. VerifyMyPC requires a little extra knowledge about computer systems when dealing with the details. Google is your friend in these cases. Running searches for 'wups.dll' and 'wups2.dll' turns up something about Automatic Updates. In particular, those DLLs provide Automatic Update functionality for Windows.

In other words, the Automatic Updates utility automatically updated itself. Now this might not seem like a big deal but I have automatic updates set to manual (both download and installation have to be approved by me) and not the usual 'automatic' setting found on most user PCs. In other words, Windows updated itself without my express permission. Such behavior is right in line with spyware-like activity.

http://cubicspot.blogspot.com/2007/0...ing-without.ht...

So let this serve as a reminder to all those who denounce claims of stealth updates as "paranoia" ... Microsoft do deploy updates that are installed without user's explicit permission, and indeed contrary to those users' express instructions. The Windows EULA even states that Microsoft reserves such a right:

2.3 Internet-Based Services Components. The Software contains components that enable and facilitate the use of certain Internet-based services. You acknowledge and agree that Microsoft may automatically check the version of the Software and/or its components that you are utilizing and may provide upgrades or fixes to the Software that will be automatically downloaded to your Workstation Computer.

[Translation]

You agree that Microsoft can automatically and without your consent put new software on your computer.

Archive of the original linuxadvocate.org article on the WayBack Machine

Why is this such a big deal?:

* Because the supposed ability to "turn off" Automatic Updates is little more than a lie.
* Lying about updates is suspicious and untrustworthy behaviour, which one does not exactly expect from the vendor that you paid for the "privilege" of running their software. IOW if the vendor has lied about this, then what else have they lied about?
* Updates may not necessarily be deployed in good faith. Microsoft have demonstrated in the past that certain updates are quite deliberately designed to cripple and inhibit their customers' systems. Example: driver update designed to prevent all DVD playback (conspiracy with nVidia and Macromedia).
* Even when not designed with malicious intent, updates are not always necessarily a GoodThing®, on any system, including GNU/Linux. Poorly tested updates may actually cause problems, rather than fix them. Users need to have the freedom of choice to decide whether or not to apply any given update in a timely fashion, if at all. User's should be in control of their own systems, for both practical and principled reasons. Without exception.

How to resolve this problem:

* Do not rely on the control panel settings for Windows Updates, it is untrustworthy and essentially bogus. Disable the two services - WAUS and BITS ("Windows Automatic Updates Service" and "Background Intelligent Transfer Service" respectively). And keep them disabled ... permanently.
* Do not trust updates from Microsoft ... ever ... especially so-called high priority automatic updates. Consider all software from Microsoft to be potential Malware. Use WindizUpdate with Firefox to obtain updates instead, and be sure to carefully research each and every update before deploying.
* As ever, keep your Anti-Spyware and Anti-Virus definitions up to date (although it's likely that third party vendors have exception rules for Windows components, at Microsoft's behest, so do not rely on this either). Use Free Software tools where you can (e.g. packet sniffers, etc.) to determine what exactly the updated software is covertly trying to do. IOW - use extreme caution at all times.

Of course there is a more permanent and trustworthy solution, simply wipe that Malware known as Microsoft Windows off your system completely, and install GNU/Linux instead, for some peace of mind, real control, and an overall much better user experience.

[Funkstar]

Thanks Agent

To be honest i lost interest in it half way through that.

I agree that when you turn off automatic updates, if should really mean off.

The ranting about never installing updates, considder them to be malware etc. is a little bit on the extreme side is it not?

Not that it's going to matter, the vast majority of people reading that are going to be linux advocates anyway.

[TheAnimus]

Thing is its strange why it does this, when you turn updates off, it still updates itself (i think the list of the updates available is updated this way).

Now i've never seen any packets fly by un-expectedly for this, so i might conclude it updates itself automatically for the automatic updating component only. If you stop the service it won't do this.

Its not actually installing updates for windows, just the update system, so that it can view available updates etc.

Now this is not transparent to the user at all, and is very bad UI design.

Malicious, personally i think not. Where as slated.org is quite clearly retarded.

For instance, i browse on a tablet PC, ever used firefox on a lowly Q1 Ultra Tablet PC, its ****. I'm a user, and a programmer too but i don't see why blocking a browser helps anyone.

[ikonia]

blocking a browser is the same thing as designing a site for IE,

it gives open source movments or alternative software a bad name.

Very dissapointed.

[peterb]

It does seem petty - other sites usually flag up a similar message suggesting that FF gives a better browsing experience, with the offer to download, before opening the site in IEx.