{"id":17908,"date":"2020-03-17T20:32:49","date_gmt":"2020-03-18T04:32:49","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2020\/03\/17\/news-11641\/"},"modified":"2020-03-17T20:32:49","modified_gmt":"2020-03-18T04:32:49","slug":"news-11641","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2020\/03\/17\/news-11641\/","title":{"rendered":"Come on, Microsoft! Is it really that hard to update Windows 10 right?"},"content":{"rendered":"

<\/p>\n

Credit to Author: Steven J. Vaughan-Nichols| Date: Wed, 11 Mar 2020 07:47:00 -0700<\/strong><\/p>\n

Yesterday, on Patch Tuesday, as I was finishing up the column that follows lamenting the sorry state of Windows 10 patches and providing copious examples of things gone very wrong, a big, fat example landed in my lap (but happily not in my laptop). Word emerged that Microsoft had accidentally leaked news about a new Server Message Block (SMB) bug with a maximum severity rating<\/a>, a.k.a. SMBGhost<\/a>.<\/u> The leak also said that this bug wasn\u2019t patched in that day\u2019s releases.<\/p>\n

I\u2019ll get back to this latest outrage, but first, let\u2019s review the past several months.<\/p>\n

I\u2019ve written a lot about Microsoft\u2019s Windows 10 patch foul-ups. Frankly, I\u2019m tired of it. But you know what else I\u2019m tired of? Another month with yet more show-stopping Windows 10 update messes.<\/p>\n

And I don\u2019t even use Windows 10 as my main desktop. I primarily use Linux Mint on my desktops<\/a> and Chromebooks<\/a>, with Debian Linux<\/a> running on the side, as laptops. Woe to all of you who have to rely on Windows for work.<\/p>\n

I mean, when I look at the Windows 10 patching landscape, I can almost understand why some of you are still sticking with Windows 7<\/a>. It may be out of date and vulnerable to potential attacks, but at least when you patched it, you didn\u2019t have to wonder what would happen the next time you rebooted your computer.<\/p>\n

In February, we saw a standalone security patch \u2014 that\u2019s a thing again? \u2014 KB 4524244<\/a>. It was a screw-up. It knocked out a bunch of machines<\/a>, primarily HP PCs with Ryzen processors. If you had Secure Boot enabled \u2014 which you\u2019re supposed to have to keep your PC \u201csafe\u201d \u2014 your PCs wouldn\u2019t reboot normally and, in the worst cases, you would have to restore your system<\/a>. Oh, and even that might fail. Does Microsoft know how to give us a fun time, or what?<\/p>\n

Microsoft finally pulled that patch. Thanks, guys, for closing the computer door after the bytes have all ran away.<\/p>\n

Then there was KB 4532693. That one, the trusty Woody Leonhard tells us, gobbled desktop icons and moved files<\/a> on Windows 10 1903 and 1909. It also caused trouble with Windows Server containers<\/a>\u00a0up to and including this tidbit: \u201c32-bit applications or processes running inside the container might silently fail.\u201d I love silent failures. Don\u2019t you?<\/p>\n

And silent is what Microsoft has been about fixing this one. As I write this, on March 10, these problems are alive, well and causing trouble. Aren\u2019t you glad you paused your updates? Oh, you didn\u2019t? I\u2019m so sorry.<\/p>\n

OK, so much for specifics, although if you want more about the details of these and other Windows patch shenanigans, follow Woody<\/a>. He knows his stuff, and he\u2019ll keep you informed about when to pause updates and how to go about it.<\/p>\n

What I want to know is why Microsoft Windows quality assurance (QA) has become a joke, with our machines as the punchline.<\/p>\n

I don\u2019t get it. Microsoft introduced its Windows 10 Insider \u201cslow, fast and release rings<\/a>\u201d<\/u> to avoid just this kind of nonsense. Windows Insider got its start<\/a> way back on Sept. 30, 2014. Microsoft has had plenty of time to get the bugs out of this program.<\/p>\n

And the latest count I\u2019ve seen has 10 million people enrolled in the Windows Insider<\/a> program. That\u2019s a lot of beta-testers. No other software testing program even comes close.<\/p>\n

To quote Microsoft, \u201cSlow ring builds include Quality Update service packages to fix key issues and also receive the latest Microsoft Security Response Center security fixes<\/a> shortly after public availability.\u201d So why do the updates fail so hard?<\/p>\n

Well, maybe as Woody \u2014 smart guy, that Woody \u2014 pointed out a few years back, the Insider program is much more marketing<\/a> than it is a beta-tester program. His preferred term for the beta-testers: \u201ccannon fodder.\u201d In addition, Microsoft doesn\u2019t really do a decent job of helping Insiders post helpful beta reports.<\/p>\n

And of those 10 million Insiders, how many are providing useful information? Quick! Which version of Windows 10 are you running<\/a>? To find out, press the Windows logo key + R, type \u201cwinver\u201d in the Open box, and then select OK. Did you know that? Without that basic information, an Insider \u201cbug\u201d report is useless. Microsoft needs to make better use of all those brave early adopters.<\/p>\n

Finally, I don\u2019t know how many people Microsoft has working on Windows 10 QA, how much money it pours into the program, and what the expertise level of those people is. But because the results speak louder than words, I do know that Win10 QA is understaffed and under-resourced, with staff that aren\u2019t as experienced as they should be.<\/p>\n

Now, about that SMB bug, the latest bombshell from Microsoft. I\u2019m not sure there is a patch for it yet. In case you don\u2019t remember, SMB security holes are the ones responsible for the infamous WannaCry and NotPetya ransomware.<\/p>\n

And now, as I wrap this up, it appears that the Patch Tuesday patch will also be delayed. I presume because Microsoft now needs to shoehorn an emergency patch into the Patch Tuesday roundup.<\/p>\n

Come on, Microsoft! Enough is enough. Get your QA act together already!<\/p>\n

http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n

Credit to Author: Steven J. Vaughan-Nichols| Date: Wed, 11 Mar 2020 07:47:00 -0700<\/strong><\/p>\n

\n
\n

Yesterday, on Patch Tuesday, as I was finishing up the column that follows lamenting the sorry state of Windows 10 patches and providing copious examples of things gone very wrong, a big, fat example landed in my lap (but happily not in my laptop). Word emerged that Microsoft had accidentally leaked news about a new Server Message Block (SMB) bug with a maximum severity rating<\/a>, a.k.a. SMBGhost<\/a>.<\/u> The leak also said that this bug wasn\u2019t patched in that day\u2019s releases.<\/p>\n

To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[10516,714,10525],"class_list":["post-17908","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-microsoft","tag-security","tag-windows"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=17908"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17908\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=17908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=17908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=17908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}