{"id":11448,"date":"2018-02-12T08:30:26","date_gmt":"2018-02-12T16:30:26","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/02\/12\/news-5219\/"},"modified":"2018-02-12T08:30:26","modified_gmt":"2018-02-12T16:30:26","slug":"news-5219","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2018\/02\/12\/news-5219\/","title":{"rendered":"Get Windows Update locked down in preparation for this month\u2019s problems"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security14-100734743-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Mon, 12 Feb 2018 06:44:00 -0800<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">January 2018 will go down in history as one of the <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-windows\/microsoft-patch-alert-lots-of-lingering-problems-in-a-very-messy-month.html\"><span style=\"font-weight: 400;\">worst patching months<\/span><\/a><span style=\"font-weight: 400;\"> in Microsoft\u2019s very checkered history. That isn\u2019t an isolated muck-up. It\u2019s a harbinger. We had a couple of really bad months in 2017 \u2014\u00a0<\/span><a href=\"https:\/\/www.computerworld.com\/article\/3170876\/patch-management\/security-fixes-delayed-as-microsoft-postpones-patch-tuesday.html\"><span style=\"font-weight: 400;\">February <\/span><\/a><span style=\"font-weight: 400;\">and <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-windows\/microsoft-patch-alert-lots-of-lingering-problems-in-a-very-messy-month.html?page=3\"><span style=\"font-weight: 400;\">November <\/span><\/a><span style=\"font-weight: 400;\">come immediately to mind \u2014 but an unconscionable number of patches left bricked machines and busted programs in their wake. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">With the onslaught of February security patches due tomorrow, you should take a few minutes to make sure Microsoft\u2019s problems won\u2019t immediately turn into your problems. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">Security luminary Brian Krebs has already reported that we\u2019re in for a potful of patches for February\u2019s Patch Tuesday. His list of <\/span><a href=\"https:\/\/www.askwoody.com\/2018\/lots-of-critical-remote-code-execution-patches-coming-on-tuesday\/\" rel=\"nofollow\"><span style=\"font-weight: 400;\">ten critical patches<\/span><\/a><span style=\"font-weight: 400;\"> due out tomorrow should give you pause.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">(By the by \u2014 in case you didn\u2019t know \u2014 Microsoft sends out a list of its upcoming patches every month, late in the week preceding Patch Tuesday. That list only goes to large installations that pay for the privilege. Theoretically, the list is under NDA, but in actuality everybody passes it around. The list used to be widely and freely available. Now it\u2019s under a pricey fig leaf. Another entry in the \u201csecurity by obscurity\u201d tradition, with a pecuniary twist.)<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As is always the case, folks who aren\u2019t willing or able to keep their machines updated should turn on Automatic Update and pray that the Update Gods don\u2019t swallow their machines whole. Contrariwise, Windows users who understand what\u2019s happening should take the necessary steps right now to make sure their machines are braced.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Get out of the unpaid <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3213929\/microsoft-windows\/the-case-against-windows-automatic-update.html\"><span style=\"font-weight: 400;\">beta testing pool<\/span><\/a><span style=\"font-weight: 400;\">. Set yourself a reminder, if you need one, to check back in a few days and see if the screams of pain have reached, oh, let\u2019s say, January levels.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you\u2019re using Windows 7 or 8.1, the Automatic Update block is easy: Click Start &gt; Control Panel &gt; System and Security. Under Windows Update, click the &#8220;Turn automatic updating on or off&#8221; link. Click the &#8220;Change Settings&#8221; link on the left. Verify that you have Important Updates set to &#8220;Never check for updates (not recommended)&#8221; and click OK.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you\u2019re on Windows 10 Pro Creators Update, version 1703, or Pro 1709, you can use Windows\u2019 built-in tools to hold off on the looming patches \u2014 just follow Steps 7 and 8 in<\/span><a href=\"https:\/\/www.computerworld.com\/article\/3215668\/windows-pcs\/8-steps-to-install-windows-10-patches-like-a-pro.html#slide8\"> <span style=\"font-weight: 400;\">8 steps to install Windows 10 patches like a pro<\/span><\/a><span style=\"font-weight: 400;\">. \u00a0Other Windows 10 users, including all Win10 Home owners, aren\u2019t quite so lucky, but the general approach is detailed in<\/span><a href=\"https:\/\/www.computerworld.com\/article\/3138088\/microsoft-windows\/woodys-win10tip-block-forced-win10-updates.html\"> <span style=\"font-weight: 400;\">Woody&#8217;s Win10Tip: Block forced Windows updates<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A few minutes now could save you hours of headache. Get Automatic Update turned off, then watch here, or on your favorite bug reporting site, to monitor for widespread pandemonium.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you find a security \u201cexpert\u201d who tells you to turn on Automatic Updates after all the hassles we had last month, send \u2018em to the AskWoody Lounge and we\u2019ll knock &#8217;em upside the head.\u00a0<i>Those who don&#8217;t know history are destined to repeat it.<\/i><\/span><\/p>\n<p><i><span style=\"font-weight: 400;\">Join the MS-DEFCON 2 brigade on the <\/span><\/i><a href=\"https:\/\/www.askwoody.com\/forums\/topic\/ms-defcon-2-for-feb-2018-make-sure-automatic-update-is-turned-off\/\" rel=\"nofollow\"><i><span style=\"font-weight: 400;\">AskWoody Lounge<\/span><\/i><\/a><i><span style=\"font-weight: 400;\">.<\/span><\/i><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3254746\/microsoft-windows\/get-windows-update-locked-down-in-preparation-for-this-month-s-problems.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security14-100734743-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Mon, 12 Feb 2018 06:44:00 -0800<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p><span style=\"font-weight: 400;\">January 2018 will go down in history as one of the <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-windows\/microsoft-patch-alert-lots-of-lingering-problems-in-a-very-messy-month.html\"><span style=\"font-weight: 400;\">worst patching months<\/span><\/a><span style=\"font-weight: 400;\"> in Microsoft\u2019s very checkered history. That isn\u2019t an isolated muck-up. It\u2019s a harbinger. We had a couple of really bad months in 2017 \u2014\u00a0<\/span><a href=\"https:\/\/www.computerworld.com\/article\/3170876\/patch-management\/security-fixes-delayed-as-microsoft-postpones-patch-tuesday.html\"><span style=\"font-weight: 400;\">February <\/span><\/a><span style=\"font-weight: 400;\">and <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-windows\/microsoft-patch-alert-lots-of-lingering-problems-in-a-very-messy-month.html?page=3\"><span style=\"font-weight: 400;\">November <\/span><\/a><span style=\"font-weight: 400;\">come immediately to mind \u2014 but an unconscionable number of patches left bricked machines and busted programs in their wake. <\/span><\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3254746\/microsoft-windows\/get-windows-update-locked-down-in-preparation-for-this-month-s-problems.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[714,10761],"class_list":["post-11448","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-security","tag-windows-10"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/11448","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=11448"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/11448\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=11448"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=11448"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=11448"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}