Today's a Good Day to Update

If you’re a regular BitsFromBill.com reader you know how I feel about the concept of auto updating software. I hate autoupdate programs from Apple, Google and Adobe.

• Detect Changes to Windows Automatic Updates (10/07)
• Not All Computers are Updated Equal (04/07)
• More AutoUpdate Problems (04/06)
• Microsoft Security Update Problems (04/06)
• AutoUpdates Are Evil (03/06)
• Windows Blackout caused by AutoUpdates (01/06)

Occasionally, the bad guys learn about a vulnerability and are quick to deploy dangerous attacks designed to take advantage newly discovered security holes. When this happens installing an update to protect yourself is worth any risk of updated code.

Today is one of those days. Yesterday Microsoft released security bulletin MS08–067 Vulernability in Server Service Could Allow Remove Code Execution. You might be thinking, “But I have a laptop, not a server”. Well, technically you do have a server and even your laptop is exposed if you’re connected to the internet.

So far the reported attacks seem to be targeted but it won’t be long before internet bots are scanning all IP address for this vulnerability. Microsoft has been a little vague only giving specific details to security providers. This attack can bypass firewalls and users don’t have to visit any webpages to become infected. I’ve read enough to suggest this security patch is a special exception.

So, I don’t know if this update could cause problems but I’ve updated my machines and I recommend you do the same.

http://update.microsoft.com/windowsupdate/v6/default.aspx

Read More

Automatic Update of IE8 Beta 2

There has been a lot of talk lately about the newest beta software for Internet Explorer 8. Most of the talk has been very positive but I haven’t been one of those to have the greatest luck.

My new IBM ThinkPad didn’t like IE8 beta 2 but thanks to the system restore applet I was able to back to where I was. I tried to update but all it did was remove IE7 from my system. I had to reinstall IE7 using Firefox so it’s a good thing Microsoft now supports FF on their websites. The Gateway desktop machine had a more mysterious experience.

Today, Windows update told me I had new software to download. I was extremely surprised it told me the update was Internet Explorer 8 Beta 2. I hope this isn’t typical behavior but on my desktop Microsoft was telling me to install beta software as a normal Windows update. I really hope people with updates set to automatic aren’t getting beta software without asking for it.

I decided for the sake of my readers it might be worth checking out IE beta 2. Downloading beta software, especially system software is not something I recommend to others. After spending the morning fixing my desktop machine from a failed update, I really recommend staying away from IE8 beta 2 for now.

I can’t explain why yet but after my update, my system was downgraded to Internet Explorer 6.

After that I started to receive new update messges including the upgrade to XP Service Pack 3 which I had already performed. My computer refused to boot after this next step so I went back to my last working configuration to save my sanity. Hopefully, the only reason I received an update was because I had previously installed IE8 beta 1.

I really want to see the new features in IE8 beta 2 but for now I’ll read about them online. I recommend you all do the same.

Read More

Windows Update Swaps Dual Monitors

Yes, I’ve been critical of auto updates in the past. I’ve documented numerous problems. While I have always considered them evil, yesterday was the first time I’ve been personally burnt by a simple Microsoft system update.( KB951748: Security Update for DNS Server)

The trouble appeared immediately when I rebooted my dual monitor XP desktop following the Windows update. For some reason my Start button and all the desktop icons were on my 2^nd monitor on the right. How this relates to a DNS Server is still a mystery to me. Software is so complex these days you just never know.

Normally the dialog below is be used to specify your primary monitor and the order of any extended monitors. Try as I might, I still wasn’t allowed to change things back so my left hand monitor was primary.

So, today my only solution short of a system restore was to physically re-arrange the monitors on my desk. No big deal but obviously, something is wrong with this picture.

A side note for other old guys like me. I actually used to have three monitors. While it impressed everyone who entered my office I found it was also responsible for some of my chronic neck and shoulder pain. Two monitors seem to work fine as long as I can keep my primary monitor on the left.

Read More

Windows Update and Zone Alarm

I’ve had a number of people share reports of problems between the most recent Windows Auto Update and Zone Alarm. Due to the sudden death of our nephew Adam I haven’t posted sooner and may not be posting again for a little while.

Here’s an example of one of the Emails I’ve received from Andrew.

I've spent the better part of today trying to help my 72-year-old mother with her total inability to access the Internet. Tried everything known to man (AV scans, system restore, etc.) to no avail. AT&T tech support is useless. AT&T's answer is to refer you to Microsith, whose VM directs you to their webpage (how the &%$# you get there if you have no *&%$ Internet access) to "sell" you their services.

Finally figured it is a conflict with ZA, went to their page & followed suggestions. Personally, I use Sunbelt Personal Firewall (formerly, Kerio) as I have had MS/ZA conflicts in the past. http://www.sunbelt-software.com/Home-Home-Office/Sunbelt-Personal-Firewall/

Could you pass on this info re: MS/ZA in your blog and elsewhere? Thanks!

Both Microsoft and Zone Alarm are aware of the problem. Unfortunately, the only solution at this time is to change the Zone Alarm settings to “Medium”. At least that way you can connect to the internet.

I haven’t had an opportunity to evaluate if it would be better to reduce the settings in ZA or just Uninstall the update. Perhaps Andrew’s got the right idea. Might be good time to check out other firewall programs so you know you’re protected.

Read More

Another Flakey Windows Update

Everyone who reads my Blog knows how much I hate AutoUpdate programs including the automatic updates for Windows. In most cases, the risk of any update far exceeds the benefits. When there are exceptions I will mention them here.

This weeks update caused a couple problems so far this week. First reported was a conflict with Sunbelts Ninja Email Security. Sunbelt’s crack development team was quick to provide a fix for their users.

Now we have word of “sluggish” applications which use .Net Managed Applications. More information can be found on Heath Stewart’s Blog.

What I regularly recommend is that users set the Windows Update option so that it only downloads updates and doesn’t install them. I suggest waiting 7–10 days before installing any updates. Usually, the only exception is when it’s a security fix for a zero-day threat that is known to be widely deployed by the bad guys. If you do have problems with a security update you can contact Microsoft for free at 1–866–PC-Safety.

Read More

Windows Update Sponsored By...

I wonder if kids born in this decade will realize that we once lived in a world where advertising could be found in specific locations. TV Commercials, Magazines, Billboards and a few others were the only place you found advertising and you knew it was an ad.

In the last ten years ads have been digitally added to sports fields, sides of personal autos and space has even been sold on various body parts. Advertisers now pay for placement in TV shows and movies. Communities have even sold space on police and fire vehicles. Soon we could see widespread use of ad supported phone calls, airline seats, ads on the back of photo paper, and even ad sponsored software updates.

Ad supported web sites are fairly common. Ad supported software is growing. Many years ago, working at America Online we made fun and chastised Prodigy because it was ad supported. Oh, how things have changed.

Now we hear more and more about Microsoft getting into the advertising business. Last week at a conference for large online advertisers, Bill Gates was among many who reassured attendees that Microsoft “will continue to invest heavily in innovation and partnerships in this area”. This week they followed up with the $6 billion dollar purchase of aQuantive. According to ZDNet, it’s the “biggest acquisition in Microsoft’s corporate history”.

I’m sure my life has benefited from products from Microsoft, but I don’t feel warm and fuzzy thinking of Microsoft has an advertising giant. Perhaps Google’s purchase of DoubleClick for $3.1 Billion should freak me out too but at least for now, Google makes it clear what are “sponsored links”.

My real fear, besides “ad pollution”, is that the advertising costs will shut out many low overhead, quality products. The big winners will be companies and products that suck the ad costs back out from their customers.

Read More