|
Summary: Unless you're willing to pay a lot of attention on a very regular basis, automatic updates are an important part of keeping your machine safe.
This one's easy: I love automatic updates. Let me explain why, and some of the things to look for to make sure that your automatic updates are safe, and doing what you think. • First, I believe strongly that automatic updates for anti-spyware and particularly anti-virus packages is an absolute must. There are simply too many changes - quite literally every day - that keeping them up to date is a must. Doing it automatically is by far the easiest and most reliable way. "...automatic updates for anti-spyware and particularly
anti-virus packages is an absolute must."
Application updates I treat differently. I still want automatic notification of updates and new versions, but:
There are some software packages that do all that, and I really do appreciate them. And typically, I do accept the updates, but at a time that's convenient for me. Windows update is a special case. I believe that most users should have automatic updates turned on, and automatically install all updates. That being said, I have it set to notify only, and actually examine the updates being offered before I say yes. And I always say yes. The relationship of Automatic updates to Windows update is another case of a missed opportunity as well. It appears that Automatic updates only deal with critical issues. If you actually visit the Windows Update site, you may find additional updates that you were not alerted to. (Like Office SP2, which I just now learned of as visited the Windows Update site.) I would prefer some kind of proactive notification for those as well. As to your concern about security - in a nutshell, I'm not terribly concerned. Most automatic updates are handled through the same mechanisms that your web browser uses to visit web sites. The result is that for most, you're not "opening up" any additional vulnerabilities by enabling automatic updates. And as long as your dealing with reputable vendors, the chances of "automatically" downloading some kind of malware is next to zero. You're at much greater risk by mistakenly clicking on an emailed attachment, not being behind a firewall, or visiting a malicious web site. Related: Article 9530 | Posted December 16, 2005 |
Popular & Hot How do I make a new MSN Hotmail account? How do I delete history items from my Google tool bar? My desktop Recycle Bin has disappeared - why, and how do I get it back? I accidentally deleted my Recycle Bin in Vista - how do I get it back? New & Important How can I get the old Windows Live Hotmail back? Internet Safety: How do I keep my computer safe on the internet? Are free email services worth it? Would you please recover my password? My account has been hacked or I've forgotten it.
Stay Informed Archives Advertisers |
|
•
Thank you Leo, I have read the article and found it very helpful.
Posted by: Doug K. at December 16, 2005 3:12 PMIn IE 6, under tools, there is "Windows Update". I have mine set to check for updates every morning at 3 a.m. (when hopefully I am sound asleep).
Posted by: David Heym at December 17, 2005 7:03 PMWhy do you "love" automatic updates when you don't use them yourself? Personally, I much prefer be notified of updates, even though I, like you, always say Yes.
Posted by: pwb at December 19, 2005 12:29 PMI do use them. The only exception is Windows Update, and it's because I'm a geek and need to know what's going on - as much for here on Ask Leo! as well as for myself. "Normal" people should have it auto-install. I love that too :-).
Posted by: Leo A. Notenboom at December 19, 2005 12:36 PMApologies to others if this is a bit technical...
I'm a developer and I like the idea of automatic updates - it certainly helps to make sure users have problems fixed before they know about them, as well as making sure they have all the latest functionality.
My major gripe is that when automatic updates DO cause problems, they're usually whoppers. Added to which, not all companies use an overly secure mechanism - it's not that difficult to redirect a http (web) request to a different webserver - eg editing the hosts file (and yes, I know that's not easy on someone else's Pc but you can spoof DNS entries, poison routers/ARP caches, etc...).
Then, there's nothing to stop Mr. Malicious just substituting the genuine update with their own code. Admittedly, Microsoft and some others use secure HTTP (same as banks) and MD5 hashing (for the non-technical think of it as a short list of letters and numbers that sum up the contents of a file - any change to the file means a different MD5 hash, so you can check that what you've downloaded matches what you expected to download - at least the software should do this internally) but there are still a large number of companies that do NOT use MD5 hashing, secure conenctions or anything else - which I personally find to be a HUGE security hole.
To make things worse, there's already hundreds of programs that let you see what information is being passed back and forth between your computer and , which means anyone malicious can monitor the (legitimate) traffic on their own PC, deduce how it works and then substitute their own.
So I let anything notify me of new updates but if possible, I install them myself unless I trust the security used by the software company as well as the company itself - They may not be malicious but it doesn't always mean they're competent.
Posted by: Simon at May 2, 2008 9:16 AMautomatic updates in our point of vew are not good things to us it means giving way to Genuin programs to intrude in our machines informing us
Posted by: abdelrahimsagr at July 18, 2008 11:47 PMthat we are using malicious soft ware that why keep automatic updates closed
I have Automatic Updates enabled and like the feature, except for one irritating behavior. Some updates require a restart to take effect. I understand that, but I don't understand why Microsoft insists on doing the restart without permission. They give a brief notice and then do the restart. Several times, I've been working on something and have been called away from the computer momentarily. I know I should save before leaving, but I don't always remember. I hate it when I return to discover that the computer has automatically rebooted and I've lost what I was working on. Is there any way to disable this behavior and give me the notice so I can initiate the reboot when I'm ready for it?
20-Nov-2008
Posted by: Bill Nelson at November 18, 2008 10:57 PM