Microsoft: here's the new reality of Windows patches

Steve may have a correct idea about P2P on your network. From one of your computers to the rest of the computer on your internal network/domain.

I have not found any exact information from Microsoft explaining what their P2P Update method contains. What it does or doesn't do.
Getting information out of Microsoft lately is like getting blood out of a well done steak.

I couldn't believe Microsoft would except counterfeit Windows 7 for free Updates to W-10 but they did.

Microsoft will do any thing and I mean anything to get people off of Windows 7 and locked into W-10. Heads will roll in the board room if W-10 doesn't bring in revenue in huge amounts. So I believe the tricks so far are just the the tip of the ice burg of tricks to come from Microsoft.

I just today read on this forum today that Microsoft is going to bundle updates for W-10 and that includes Enterprise.
You take the (Good, Bad and Ugly) as a bundle or you get nothing.
The average user might fall for this method but Enterprise customers are going to start screaming very loud. One of the updates in the bundle might have been found by the I.T. department to screw up their setup and they don't want it. So they can't get the updates they want unless they take the junk also. That boat is not going to float.
If they also start using this bundle update in Windows 7 we are in deep do do.

Every few days Microsoft comes up with some ding a ling idea. I can't wait for the next one.

How sad is to see this politics, Nadela is way worse than Ballmer was...
Windows, as we know it, is dying slowly and becoming more a tool for draining personal data for money than an OS...

FerchogtX said:

How sad is to see this politics, Nadela is way worse than Ballmer was...
Windows, as we know it, is dying slowly and becoming more a tool for draining personal data for money than an OS...

I totally agree about Nutella being worse than Ballsmore. When I first heard Nutella was replacing Ballsmore, I was worried about it because he was the head of cloud development and would want to send MSpy more into cloud computing. If only that was the only danger. Nutella has his head in the clouds and is completely oblivious to reality and what life is for non-geeks; in other words, the majority of the world. He is has already come under fire for his naivety and condescending attitude on women's rights in the workplace. He has no clue about how many people do not have access to affordable, unlimited internet access and how the existing internet infrastructure worldwide will not be able to support his dreams for cloud based computing for decades, if ever. Despite the dream world he lives in within his personal cloud, he also realizes that the majority of people (sheeple) are easy marks and will take whatever is thrown at them simply because they do not know better. That makes Nutella a very dangerous man and he scares me witless.

Layback Bear said:

Why would anybody trust a W-10 update using P2P. How would one know if the P2P update was tampered with?

It's not the protocol's fault that some people package malware and distribute it using P2P.
Malware predates torrents and you can still get malware today without using torrent files.

Obviously if you never use torrents then you can't get malware from a torrented file, but that doesn't mean you can't get infected by something else.

Assuming that it works like standard torrent files, if you got the "main control file" from MS, then it should contain security numbers (hashes?) for the individual pieces.
If the "hashes" don't match, I don't think that the pieces will be merged into the final file (they will be marked as corrupted).

As with all downloads, it depends on the trustworthiness of the site (and how good the site's security procedures are).

Layback Bear said:

As far as I'm concerned P2P and Torrents are NOT to be trusted. Many infection are passed around the world using P2P and Torrents.

TCP and UDP are the main protocols used to deliver malware from the Internet.

No where did I state, indicate, stipulate in any fashion that a P2P or a Torrent is the only way one can get a computing device infected.
I know better than to make such a suggestion.

From post #2


Quote:
Originally Posted by Layback Bear
Why would anybody trust a W-10 update using P2P. How would one know if the P2P update was tampered with?

It's not the protocol's fault that some people package malware and distribute it using P2P.
Malware predates torrents and you can still get malware today without using torrent files[/QUOTE]

groze said:

Windows 10 puts certain verticals in a very tight place," said Goettl in an interview this month, citing healthcare as an example. Failing to keep a medical device up to date, for instance, voids FDA approval. "But if an update includes five ( security )bulletins, and one of those breaks the medical device, you can't apply the whole ( cumulative ) roll-out, and you've broken that chain

Is a pacemaker and/or a implantable cardioverter defibrillator (ICD) a computer? I wish the article was more specific on what personal medical devices they were talking about.

Aside from my question above I just had a scary thought. What if Microsoft started doing cumulative updates for windows 7 & 8.x operating system aside from Internet explorer. No way pick which updates you want to install.

edit I didn't see someone already posted that.