Win Users Need to Patch Once Every 4.8 Days on Average.

JMH

Banned
Local time
6:38 AM
Messages
6,448
In order to make sure that their copies of Windows are bulletproofed against exploits in the wild, customers need to apply a patch every five days, according to Secunia. Of course, not all patches target the Windows operating system. Updates are also needed to plug security holes in the software that runs on top of the platform. Thomas Kristensen, the chief security officer of Secunia, revealed that security vulnerabilities were the main avenue for attacks, allowing for the affected systems to be compromised.
Source -
Windows Users Need to Patch Once Every 4.8 Days on Average - In order to keep their machines safe - Softpedia
 

My Computer My Computer

At a glance

Win 7 Ultimate 64-bit. SP1.Intel i7 -720QM.[1.6GHz Turbo Boost 2.8GHz. 6...8 DDR 3 RAM. 1066MHZATI 1024 MB. DDR3. Radeon HD5650
Computer Manufacturer/Model Number
LAPTOP. HP Pavilion dv7-4010TX .
OS
Win 7 Ultimate 64-bit. SP1.
CPU
Intel i7 -720QM.[1.6GHz Turbo Boost 2.8GHz. 6MB Cache.]
Memory
8 DDR 3 RAM. 1066MHZ
Graphics Card(s)
ATI 1024 MB. DDR3. Radeon HD5650
Monitor(s) Displays
17.3" High Definition Brightview LCD. LED Backlit.
Screen Resolution
1600 x 900.
Hard Drives
640GB
Case
Laptop / notebook.
Mouse
Logitech Anywhere mouse. MX.
Internet Speed
ADSL [ but too slow ]
eh....

I rarely patch anything. Maybe Windows Update is included, but it does the job for me. I don't ever patch stuff.

/lazy
 

My Computer My Computer

At a glance

Windows 7 Ultimate x863GHz Intel Pentium 4 Core 2 Duo2GBNVidia GeForce 7800GTX 256MB
Computer Manufacturer/Model Number
Dell
OS
Windows 7 Ultimate x86
CPU
3GHz Intel Pentium 4 Core 2 Duo
Memory
2GB
Graphics Card(s)
NVidia GeForce 7800GTX 256MB
Sound Card
Creative Sound Blaster Audigy ZS 2
Screen Resolution
1680x1050
Hard Drives
2x250GB
Internet Speed
disappointing
Ugh, does anyone use Linux around here?

A STOCK install, nothing extra other than the live CD will have an update atleast once a day, sometimes multiple times.

A stock install of FC12 installed then updated will have something like 300 MB of updates an it's only 2-3 months old!

Windows has FAR fewer updates than Linux does. And far fewer breakages because of it. It's rather remarkable actually.
 

My Computer My Computer

At a glance

Windows 7 x64 Ultimatei7 96012 Gig Corsair DominatorNvidia 480
Computer Manufacturer/Model Number
Scratch built
OS
Windows 7 x64 Ultimate
CPU
i7 960
Motherboard
Asus P6X58D
Memory
12 Gig Corsair Dominator
Graphics Card(s)
Nvidia 480
Sound Card
Maudio Delta 44 + breakout box
Monitor(s) Displays
Dell UltraSharp U2410 24in and Samsung 21 dual monitors
Screen Resolution
1920x1200 and 1280x1024
Hard Drives
Primary: Intel X-25M G2 160G SSD
Secondary: Segate baracuda 1.0 TB
HDs in AHCI mode.
PSU
Corasair TX850
Case
Cooler Master HAF
Cooling
Corsair H50
Keyboard
Logitech G15 + N52 game pad
Mouse
Logitech MX518
Internet Speed
15kbs down 4.5kbps up
Other Info
WEI 7.6
CPU & RAM 7.6
Graphics 7.9
Hard disk 7.7
lol.. very true.. the difference is linux doesn't stop working if you fail to update it regularly
 
Yeah it's sort of the opposite, it stops working if you do :D

I always set it up with all the latest updates, pray it keeps running, then set everything to off and use it for as long as possible before doing a reinstall.

Random ABI breaking kernel updates are NOT appretiated in a stable build machine (i.e. 2.6.31 that just came out)

I don't know what ever happened to not breaking the ABI in the even numbered "stable" kernels :(
 

My Computer My Computer

At a glance

Windows 7 x64 Ultimatei7 96012 Gig Corsair DominatorNvidia 480
Computer Manufacturer/Model Number
Scratch built
OS
Windows 7 x64 Ultimate
CPU
i7 960
Motherboard
Asus P6X58D
Memory
12 Gig Corsair Dominator
Graphics Card(s)
Nvidia 480
Sound Card
Maudio Delta 44 + breakout box
Monitor(s) Displays
Dell UltraSharp U2410 24in and Samsung 21 dual monitors
Screen Resolution
1920x1200 and 1280x1024
Hard Drives
Primary: Intel X-25M G2 160G SSD
Secondary: Segate baracuda 1.0 TB
HDs in AHCI mode.
PSU
Corasair TX850
Case
Cooler Master HAF
Cooling
Corsair H50
Keyboard
Logitech G15 + N52 game pad
Mouse
Logitech MX518
Internet Speed
15kbs down 4.5kbps up
Other Info
WEI 7.6
CPU & RAM 7.6
Graphics 7.9
Hard disk 7.7
I've heard this argument from Mac users as well...

At least MS put the effort in to keep it up to date, unlike Apple, they just release an update and make you download 400mb every 6 months instead of patching when it's needed. Also updating the version of the OS and making you pay for it for minor changes.
 

My Computer My Computer

At a glance

7i5 7504gb
OS
7
CPU
i5 750
Motherboard
GA-P55-UD3
Memory
4gb
PSU
Antec True Power 650
Case
Antec 902
damn if you do, damn if you don't. If MS (or other manufacturers) would not provide updates the same people would complain again.
I'm happy software gets updated, and automatically. I don't have to "patch" anything since it is automatic.
MS provide FREE updates for 10 years from release date on. Any other software with such service requires an expensive subscription.

sure one could do it right the first time, but the OS is so complex and there are new software, applications and hardware every day. How would that work and still be modern? today W7 supports USB 2.0. Now, next year therwill be USB 3.0. How wouldthat work without updates, unless USB 3.0 specs were known years ago and didn't change. Same with USB 4.0 in 3 years, or so.
 

My Computer My Computer

At a glance

W7 Pro 64Intel i3 3220 @ 3.3 GHz2x8GB DDR 3 1600 Kingstononboard
Computer Manufacturer/Model Number
homemade
OS
W7 Pro 64
CPU
Intel i3 3220 @ 3.3 GHz
Motherboard
ASRock H77M
Memory
2x8GB DDR 3 1600 Kingston
Graphics Card(s)
onboard
Sound Card
onboard
Monitor(s) Displays
two 21" LCD
Hard Drives
128 GB Samsung 830
PSU
OCZ400MXSP
Cooling
Stock
Internet Speed
DSL

My Computer My Computer

At a glance

Windows 7 Ultimate (64)i7-2600KG.SKILL Ripjaws X Series 8GB (2 x 4GB)ATI 5750
Computer Manufacturer/Model Number
Home Grown
OS
Windows 7 Ultimate (64)
CPU
i7-2600K
Motherboard
Asus P8P67-M Pro
Memory
G.SKILL Ripjaws X Series 8GB (2 x 4GB)
Graphics Card(s)
ATI 5750
Sound Card
On-Board
Monitor(s) Displays
LG W2486L
Screen Resolution
1920X1080
Hard Drives
Intel X-25M 80 Gig SSD | Intel X-25M 160 Gig SSD | WD Black 500MB - External eSata
PSU
Zalman ZM770-XT 770 Watts
Case
Antec 180 mini
Cooling
Cooler Master V8
Internet Speed
15MB - Cable
Other Info
Sissy OC - 4.6 @ 1.3175 24/7 | 18' Idle - 55' Load
MS never heard the wisdom "Do it right the first time, or don't do it at all"

article said:
Of course, not all patches target the Windows operating system. Updates are also needed to plug security holes in the software that runs on top of the platform

As a broad analogy, the same logic can be applied to a car manufacturer.

Every new model released will have some component that is not quite up to scratch. Which is only noticed under 'real world' usage.

Usually this only affects a small percentage of vehicles but on the whole, the model range is usually fine.

These problems are rectified by recalls and not using the same part in the 2nd or 3rd series releases of that model.

The same can be said for MS patches (and other Operating Systems as well)

3rd party apps are akin to someone modifying a stock with vehicle with after market parts.

If the after market part breaks the stock vehicle, who is to blame? Not the manufacturer.

Plus, how many drivers/mechanics actively seek to nefariously exploit a one particular vehicle model's flaws on a daily basis?
 

My Computer My Computer

At a glance

8 Pro x64i7 3770K 4.6GHz16GB G.Skill Trident X 2666mhzx2 EVGA 780 Ti Superclocked SLI
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Systems by SmartEyeball
OS
8 Pro x64
CPU
i7 3770K 4.6GHz
Motherboard
ASUS P8Z77 WS
Memory
16GB G.Skill Trident X 2666mhz
Graphics Card(s)
x2 EVGA 780 Ti Superclocked SLI
Sound Card
SB X-FI Surround 5.1 PRO USB / ATH-AD900 Headphones
Monitor(s) Displays
x3 Dell U2410 / 58" Samsung
Screen Resolution
5760*1200/ 1920*1200
Hard Drives
2x Intel 520 240GB (RAID 0) * 2x WD Caviar Blacks 2TB (RAID 0) * 2TB WD Caviar Black * Sony Optirac DVD
PSU
Silverstone Strider Evolution 1200W
Case
Thermaltake Level 10 GT Snow Edition
Cooling
Noctua NH-D14
Keyboard
Topre Realforce // Ducky Shine MX Black // Filco Ninja TKL
Mouse
Thermaltake Theron (Highly Recommended) + Razer Imperator
Antivirus
MSE
Browser
IE, FF, WaterFox
Other Info
GT Extreme V2 Sim Racing Cockpit + 40" LCD and K/B Mouse stand ▼
Fanatec CSR Elite Wheel + Clubsport V1 Pedals + CSR shifter/7G-H ▼Saitek X52 Pro ▼ TrackIR 5 Pro
Buttkicker v2 Seat Rumbler with Dedicated 5.1 and Sub Woofer attached to frame ▼
=
Bloody Big Grin
lol.. very true.. the difference is linux doesn't stop working if you fail to update it regularly
Nor does Windows...
actually it does.. and it says so in the EULA
[FONT=&quot]b. [/FONT][FONT=&quot]The software will from time to time perform a validation check of the software. The check may be initiated by the software or Microsoft. To enable the activation function and validation checks, the software may from time to time require updates or additional downloads of the validation, licensing or activation functions of the software. The updates or downloads are required for the proper functioning of the software and may be downloaded and installed without further notice to you.[/FONT]

in other words, if you install windows on a computer that has no internet connection at all, it will stop working
 
i think that what that means is that if its connected to the internet, the software will stop working until its downloaded the relevant "needed" services, in a completely offline machine, how does windows know when an update is needed?
 

My Computer My Computer

At a glance

Windows 10 Pro x64Intel Core i5 7400 @ 3.00GHz8GB 2133Mhz DDR4 (OEM supplied)Gygabyte Windforce GTX 1050Ti (Factory Overcl...
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Medion Erazer (note to self: insert model number) - with custom additions
OS
Windows 10 Pro x64
CPU
Intel Core i5 7400 @ 3.00GHz
Motherboard
OEM supllied with PC
Memory
8GB 2133Mhz DDR4 (OEM supplied)
Graphics Card(s)
Gygabyte Windforce GTX 1050Ti (Factory Overclocked)
Sound Card
Realtek
Monitor(s) Displays
Acer Al1980 + HKC
Screen Resolution
1360*768(HKC) / 1280*1024(Acer)
Hard Drives
1TB Toshiba
1TB WD Caviar Green
120GB Samsung Evo 840
PSU
OEM supplied (no power rating on case)
Case
OEM Supplied
Cooling
Stock
Keyboard
Logitech Wireless
Mouse
Logitect Wireless
Internet Speed
40Mb/s Down 10Mb/s Up
Antivirus
Defender
Browser
Firefox
Ugh, does anyone use Linux around here?

A STOCK install, nothing extra other than the live CD will have an update atleast once a day, sometimes multiple times.

A stock install of FC12 installed then updated will have something like 300 MB of updates an it's only 2-3 months old!

Windows has FAR fewer updates than Linux does. And far fewer breakages because of it. It's rather remarkable actually.

Yes, Linux user here. We use tons of Linux servers at work and I have usually kept a few Linux workstations at home.

While there are tons of updates available for many Linux distros, there are a few key things to keep in mind
#1). Most people obtain nearly all of the software they run from the distro vendor. Thus, these patches not only patch the OS, but almost every since piece of software installed on the computer

#2). Many of the updates which are released and installed are not of a critical security nature. Many are simply updated functionality, additional documentation or the completion of features which were not ready previously.

#3). Linux (in and of itself) is a constant work in progress. New versions are often released every 6 months or so and the updates are simply the collection of changes on the way to the new version. This is a very different philosophy from Microsoft who often goes 3-5 years between full major releases.


Yeah it's sort of the opposite, it stops working if you do :D
1 very important point to remember is that with a distribution like Fedora....that is a testing bed that is (by design) a bleeding edge distro to test and solidify changes for the Red Hat Enterprise product. They take chances with that version and those who are using that distro need to keep that in mind.

We use CentOS at work (a re-build of Red Hat Enteprise Linux) and it has far fewer updates and those updates "rarely" break anything as the key to this distro is an enterprise class OS providing the ultimate in security and stability. So, it doesn't have the absolutely latest versions of the sofware...but rather the older, proven, well tested versions of these components.

I use Ubuntu at home on my dekstops, and I have rarely had a problem with updates bringing down the box.


The beauty here of Linux is that "you", the end-user gets to choose what type of OS they want (bleeding edge or stable) and you can find tons of options in between. With Windows 7..you get Home Premium, Professional and Ultimate....which are very much the same thing at the end of the day. Linux isn't perfect and it isn't for everybody, but it sure is darn cool having so many options available that are freely available to use. Having more frequent updates is just the nature of the system.


And on the Windows 7 front, and the Vista Front...I don't find that I have to patch my box every 5 days to keep it running and secure. Tons of people barely stay current on their Windows 7 updates....nevermind all of the 3rd party apps that they install and forget to maintain. I don't think most people are tending to these maintenance tasks more than 1 time per week.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64Intel Q9550 2.83Ghz OC'd to 3.40Ghz8GB G.Skill PI DDR2-800, 4-4-4-12 timingsEVGA 1280MB Nvidia GeForce GTX570
Computer Manufacturer/Model Number
Self-Built in July 2009
OS
Windows 7 Ultimate x64
CPU
Intel Q9550 2.83Ghz OC'd to 3.40Ghz
Motherboard
Gigabyte GA-EP45-UD3R rev. 1.1, F12 BIOS
Memory
8GB G.Skill PI DDR2-800, 4-4-4-12 timings
Graphics Card(s)
EVGA 1280MB Nvidia GeForce GTX570
Sound Card
Realtek ALC899A 8 channel onboard audio
Monitor(s) Displays
23" Acer x233H
Screen Resolution
1920x1080
Hard Drives
Intel X25-M 80GB Gen 2 SSD
Western Digital 1TB Caviar Black, 32MB cache. WD1001FALS
PSU
Corsair 620HX modular
Case
Antec P182
Cooling
stock
Keyboard
ABS M1 Mechanical
Mouse
Logitech G9 Laser Mouse
Internet Speed
15/2 cable modem
Other Info
Windows and Linux enthusiast. Logitech G35 Headset.
Agree to the above points. And if you know what you're doing, Linux never breaks anything. You choose what you want to do with it, and if something doesn't work the way you want it to, you are free to change it.. as opposed to MS
You may not
· work around any technical limitations in the software;
..translation:
if we f*cked up, you're not allowed to fix it
 
Well I was referring to a base install if linux which is analogous to a base install of Windows. VERY basic tools and a default browser, nothing else.

And in my experience both Ubuntou and Fedora Core are about equal on the update issue. Just installed ubuntu 9.10 from live CD the other day and it also had 300 megs of updates including an abi breaking kernel update that killed VMWare even though it's only a couple months old :/ It also has a 6 month upgrade cycle like FC.

Even the slower release cycle distros still have a lot more updates than Windows does, including ones that break existing executables, drivers especially. The only way to keep a machine stable I've found is to simply never update it till you completely rebuild a new one. Course that leaves you open to attack vectors if you are running public servers so that's not a good option there.
 

My Computer My Computer

At a glance

Windows 7 x64 Ultimatei7 96012 Gig Corsair DominatorNvidia 480
Computer Manufacturer/Model Number
Scratch built
OS
Windows 7 x64 Ultimate
CPU
i7 960
Motherboard
Asus P6X58D
Memory
12 Gig Corsair Dominator
Graphics Card(s)
Nvidia 480
Sound Card
Maudio Delta 44 + breakout box
Monitor(s) Displays
Dell UltraSharp U2410 24in and Samsung 21 dual monitors
Screen Resolution
1920x1200 and 1280x1024
Hard Drives
Primary: Intel X-25M G2 160G SSD
Secondary: Segate baracuda 1.0 TB
HDs in AHCI mode.
PSU
Corasair TX850
Case
Cooler Master HAF
Cooling
Corsair H50
Keyboard
Logitech G15 + N52 game pad
Mouse
Logitech MX518
Internet Speed
15kbs down 4.5kbps up
Other Info
WEI 7.6
CPU & RAM 7.6
Graphics 7.9
Hard disk 7.7
Agree to the above points. And if you know what you're doing, Linux never breaks anything. You choose what you want to do with it, and if something doesn't work the way you want it to, you are free to change it.. as opposed to MS

Statements like this do not reflect reality at all.

IT people and Users are not coders and kernel hackers. Linux breaks itself with updates CONSTANTLY. As a software engineer, even though I have the ability to fix it, it's a complete PITA to /have/ to constantly fix it instead of getting my real work done. The actual reality is, because you CAN fix/config linux, you pretty much HAVE to, noone else does.

I would much rather PAY for software that is 10 times as stable over time, and I do. As a developer, Linux costs me far more in maintenence time than windows ever has in licensing costs.
 

My Computer My Computer

At a glance

Windows 7 x64 Ultimatei7 96012 Gig Corsair DominatorNvidia 480
Computer Manufacturer/Model Number
Scratch built
OS
Windows 7 x64 Ultimate
CPU
i7 960
Motherboard
Asus P6X58D
Memory
12 Gig Corsair Dominator
Graphics Card(s)
Nvidia 480
Sound Card
Maudio Delta 44 + breakout box
Monitor(s) Displays
Dell UltraSharp U2410 24in and Samsung 21 dual monitors
Screen Resolution
1920x1200 and 1280x1024
Hard Drives
Primary: Intel X-25M G2 160G SSD
Secondary: Segate baracuda 1.0 TB
HDs in AHCI mode.
PSU
Corasair TX850
Case
Cooler Master HAF
Cooling
Corsair H50
Keyboard
Logitech G15 + N52 game pad
Mouse
Logitech MX518
Internet Speed
15kbs down 4.5kbps up
Other Info
WEI 7.6
CPU & RAM 7.6
Graphics 7.9
Hard disk 7.7
And if you know what you're doing, Linux never breaks anything.
I wouldn't necessarily feel comfortable making this statement. I've certainly had some bumps along the way over the years..and some caused by updates. However, it's been no more significant than the bumps along the way for Microsoft and 3rd party patches for my Windows servers.

Well I was referring to a base install if linux which is analogous to a base install of Windows. VERY basic tools and a default browser, nothing else.
Even basic installations of Linux include quite a number of apps in addition to what Windows provides. Usually components of Apache web server are there, components for Sendmail are there, there are music rippers, graphics apps like TheGimp, office applications, bit torrent clients, PDF readers, instant messengers, etc.

Even the slower release cycle distros still have a lot more updates than Windows does, including ones that break existing executables, drivers especially
Again, there are more updates.... I won't disagree with that. But it's also most likely updating every single piece of software on your computer as well. For example, it patches your OS, your browsers, your PDF readers, your office application, your graphics applications, your SQL servers, your multimedia applications, etc. The breadth of updates includes far more than you have with a Windows update.

The only real driver issues that I have had after an update are
1). for graphics cards. And that's usually just on machines with eye-candy stuff enabled. Most often, you also need to recompile the video driver against the currently running kernel.

2). For any other piece of hardware that I compiled a driver for. With these, you have to compile again against the newly running kernel (that's usually 2 commands, make and make install)

Note: for both of the above issues, on my production servers, I often exclude kernel updates from yum and rather evaluate the kernel releases to only get the ones that fix a major security problem or performance issue that we are experiencing.

The only way to keep a machine stable I've found is to simply never update it till you completely rebuild a new one. Course that leaves you open to attack vectors if you are running public servers so that's not a good option there.
I update my servers, running CentOS which are command line only quite frequently without issue. As noted above, I am more selective on kernel updates. Also, with proper firewalling techniques and so forth, and having very few ports open to the outside, you can effectively mitigate a lot of the security concerns anyway to the point where they aren't really an issue. For work, scanning with tools like Qualsys to see what security vulnerabilities exist based on how you are running can shed quite a bit of light on what you are vulnerable to and what you really need to secure yourself against.

I usually update my Ubuntu desktops at home every month or so and experience minimal problems when I update.

Linux breaks itself with updates CONSTANTLY. As a software engineer, even though I have the ability to fix it, it's a complete PITA to /have/ to constantly fix it instead of getting my real work done. The actual reality is, because you CAN fix/config linux, you pretty much HAVE to, noone else does.
I guess people just have lots of different experiences. I've got nearly 130 different Linux machines running in all of our data centers, test labs and such and we are a software development shop writing mainly webapps which run on Tomcat or Solr and we don't experience anything remotely close to constant breaking of our Linux boxes because of patching. And I have been supporting Linux servers for over 8 years professionally for multiple software companies. So, it's not like I haven't been around enough or set up anything complex enough to see issues.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64Intel Q9550 2.83Ghz OC'd to 3.40Ghz8GB G.Skill PI DDR2-800, 4-4-4-12 timingsEVGA 1280MB Nvidia GeForce GTX570
Computer Manufacturer/Model Number
Self-Built in July 2009
OS
Windows 7 Ultimate x64
CPU
Intel Q9550 2.83Ghz OC'd to 3.40Ghz
Motherboard
Gigabyte GA-EP45-UD3R rev. 1.1, F12 BIOS
Memory
8GB G.Skill PI DDR2-800, 4-4-4-12 timings
Graphics Card(s)
EVGA 1280MB Nvidia GeForce GTX570
Sound Card
Realtek ALC899A 8 channel onboard audio
Monitor(s) Displays
23" Acer x233H
Screen Resolution
1920x1080
Hard Drives
Intel X25-M 80GB Gen 2 SSD
Western Digital 1TB Caviar Black, 32MB cache. WD1001FALS
PSU
Corsair 620HX modular
Case
Antec P182
Cooling
stock
Keyboard
ABS M1 Mechanical
Mouse
Logitech G9 Laser Mouse
Internet Speed
15/2 cable modem
Other Info
Windows and Linux enthusiast. Logitech G35 Headset.
Back
Top