Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
1–10 of 109 posts
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#2“Customers will not receive the January 2018 security updates (or any subsequent security updates) and will not be protected from security vulnerabilities unless their antivirus software vendor sets the following registry key”
Another incentive to stop using questionable AV software (since this was implemented because they can't get their act together).
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#3“Customers will not receive the January 2018 security updates (or any subsequent security updates) and will not be protected from security vulnerabilities unless their antivirus software vendor sets the following registry key” Another incentive to stop using questionable AV software (since this was implemented because they can't get their act together).
at initial patch release, not even all the well known had the registry key setting in place.... so its not just about questionable AV software when big corps considered "safe" (debatable) didnt have "their act together" either.
there was a list posted yesterday on compatibility that is continued to be updated: https://docs.google.com/spreadsheets/d/184wcDt9I9TUNFFbsAVLp...
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#4“Customers will not receive the January 2018 security updates (or any subsequent security updates) and will not be protected from security vulnerabilities unless their antivirus software vendor sets the following registry key” Another incentive to stop using questionable AV software (since this was implemented because they can't get their act together).
You can’t just stop using AV software I’m told. The key is checked for everyone, including people with no AV. Contrary to the sensational headlines, it is implied to be a temporary measure. It’s not really clear whether you’d have to only do this manually once, or on every subsequent update.
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#5“Customers will not receive the January 2018 security updates (or any subsequent security updates) and will not be protected from security vulnerabilities unless their antivirus software vendor sets the following registry key” Another incentive to stop using questionable AV software (since this was implemented because they can't get their act together).
Note that one of the antivirus software vendors that does this correctly is, in fact, Microsoft Defender.
If you haven't installed dodgy third-party AV, you're fine.
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#6My windows 10 machines will not receive the update automatically for some reason. I think it is because I had defender completely disabled via group policy since it interferes with some of my development activities surrounding node.JS.
However I was able to install the security update manually from the Microsoft Windows update catalog download site. I did this after enabling defender briefly and updating it to ensure that the registry key was written.
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#7“Customers will not receive the January 2018 security updates (or any subsequent security updates) and will not be protected from security vulnerabilities unless their antivirus software vendor sets the following registry key” Another incentive to stop using questionable AV software (since this was implemented because they can't get their act together).
Note that one of the antivirus software vendors that does this correctly is, in fact, Microsoft Defender. If you haven't installed dodgy third-party AV, you're fine.
Which third-party AV isn't dodgy?
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#8> The compatibility registry key exists for a reason. I know. I can also see it’s a messy hacky fix. But it needs an end of life date
I couldn't agree more. As I've been devising a patching plan over the past few days I couldn't help but wonder "how long will I have to do this"? My hope is that in future OS releases (say, Windows Client/Server 1803) the mitigations will be default-on for clean installations (minimally).
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#9Slightly OT if I may: Is there any reason to use anything else than Defender these days? Chrome+uBlock, good email security and update practices, Defender just in case, do we need more?
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#10Slightly OT if I may: Is there any reason to use anything else than Defender these days? Chrome+uBlock, good email security and update practices, Defender just in case, do we need more?
No, not that I am aware of. 3rd party AV are liabilities at this point.
https://www.pcworld.com/article/3020327/antivirus-software-c...