Another consequence of this is that windows will disable updates when you do not have any anti-virus software running as well.
Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
81–90 of 109 posts
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#82It's worth noting that Windows Update may also fail to apply the Meltdown/Spectre patch if other conditions aren't met. Some are mentioned on the KB page [1] but they don't mention another common scenario, which is that if your system firmware is not ready to accept the update, Windows Update will not apply it, and _it won't tell you_ that it's not applying it -- it will simply say 'Your device is up to date'. I had…
I know I won't get any updates for the system for my 2012 Dell XPS 8500 (256 GB SSD, 16 GB RAM, i7 CPU - I don't see a need for an upgrade, it's all there). Does that mean I'll just be left out cold? That's how I understand it. When I run the Microsoft Powershell plugin that they made available to check the protection status (`Get-SpeculationControlSettings`) I get a "True" for 3 of 8 items (only showing those 3): Wi…
Same boat for my XPS 8700, also kept around for same reason. 24gb ram i7 4th gen. Great for development, including VM work. Unless I was regularly doing video transcoding or heavy CAD work, it's more than fast enough.
Contacted Dell support and confirmed they will not be releasing a BIOS update for the system.
First harm to me from this issue. Not sure if it means I will have to join a class action against Dell or Intel
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#83Earlier quoted context omitted.
Right, but MS provides AV or you can install a third party option instead. Just like you can install aftermarket brakes, suspension, ECUs or even seats and seatbelts in your Audi.
PCs often (mostly?) ship with third-party anti-virus software because AV companies pay them to install it.
Ok but now you are talking about a different product (a PC) vs Microsoft Windows. The third party AV vendors are paying the PC manufacturer to bundle their products, they are not paying Microsoft.
In the PC case both Windows and AV are third party products.
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#84Earlier quoted context omitted.
No, another incentive to stop using Windows. 3rd party applications should NOT be responsible for insuring that the OS can receive critical security updates, and Microsoft should not be relying on 3rd party applications to determine whether or not their customers receive critical OS security updates (and of all things, hilariously defaulting to 'no')
Windows isn't going anywhere, if for no other reason than because Microsoft Excel is basically electronic paper to the business world -- and there is simply no adequate substitute for it. (No, neither OpenOffice Calc nor any of the Web-based offerings -- including Microsoft's own -- count.) Coping with Windows is a fact of life. Get used to it.
You've decided to make it part of your life.
Plenty of us have gotten rid of that virus years ago; yes even at work.
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#85Earlier quoted context omitted.
I know I won't get any updates for the system for my 2012 Dell XPS 8500 (256 GB SSD, 16 GB RAM, i7 CPU - I don't see a need for an upgrade, it's all there). Does that mean I'll just be left out cold? That's how I understand it. When I run the Microsoft Powershell plugin that they made available to check the protection status (`Get-SpeculationControlSettings`) I get a "True" for 3 of 8 items (only showing those 3): Wi…
Same boat for my XPS 8700, also kept around for same reason. 24gb ram i7 4th gen. Great for development, including VM work. Unless I was regularly doing video transcoding or heavy CAD work, it's more than fast enough. Contacted Dell support and confirmed they will not be releasing a BIOS update for the system. First harm to me from this issue. Not sure if it means I will have to join a class action against Dell or In…
Might want to check again tomorrow. My Dell Desktop (Ivy Bridge/3rd Gen era) received a BIOS update today, specifically noting "Update to the latest CPU microcode to address CVE-2017-5715." It updates the ME firmware too for those recent bugs.
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#86It's worth noting that Windows Update may also fail to apply the Meltdown/Spectre patch if other conditions aren't met. Some are mentioned on the KB page [1] but they don't mention another common scenario, which is that if your system firmware is not ready to accept the update, Windows Update will not apply it, and _it won't tell you_ that it's not applying it -- it will simply say 'Your device is up to date'. I had…
There's a lot of confusing information out there as you have found out.
This link helps clarify the steps needed. https://doublepulsar.com/important-information-about-microso...
Pay specific attention to the dataflow. Registry keys have to be set in a certain order in order for a) the patch to download and install and b) actually enable.
If there is not a BIOS fix (I'm in the same boat as you), the other hope is that the OS or virtualization provider includes CPU microcode in their update to address this.
At this time, I do not believe Microsoft has included microcode in their current update. However, they do have the capability so that's something you can ask them about doing so at some point.
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#87“Customers will not receive the January 2018 security updates (or any subsequent security updates) and will not be protected from security vulnerabilities unless their antivirus software vendor sets the following registry key” Another incentive to stop using questionable AV software (since this was implemented because they can't get their act together).
No, another incentive to stop using Windows. 3rd party applications should NOT be responsible for insuring that the OS can receive critical security updates, and Microsoft should not be relying on 3rd party applications to determine whether or not their customers receive critical OS security updates (and of all things, hilariously defaulting to 'no')
Agreed. MS should cut off shady AV software if they are interfering in the windows update or security of the system. If they don't it tells us they have AV vendors higher on their priority list than end users. And that sucks.
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#88Earlier quoted context omitted.
Same boat for my XPS 8700, also kept around for same reason. 24gb ram i7 4th gen. Great for development, including VM work. Unless I was regularly doing video transcoding or heavy CAD work, it's more than fast enough. Contacted Dell support and confirmed they will not be releasing a BIOS update for the system. First harm to me from this issue. Not sure if it means I will have to join a class action against Dell or In…
Might want to check again tomorrow. My Dell Desktop (Ivy Bridge/3rd Gen era) received a BIOS update today, specifically noting "Update to the latest CPU microcode to address CVE-2017-5715." It updates the ME firmware too for those recent bugs.
Thanks for the heads, I'll keep an eye out, but it's not listed on the following consumer systems list
http://www.dell.com/support/article/us/en/19/sln308587/micro...
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#89Earlier quoted context omitted.
Windows isn't going anywhere, if for no other reason than because Microsoft Excel is basically electronic paper to the business world -- and there is simply no adequate substitute for it. (No, neither OpenOffice Calc nor any of the Web-based offerings -- including Microsoft's own -- count.) Coping with Windows is a fact of life. Get used to it.
There's MS Excel (and office) for Mac and Wine supports Office 2013. The situation is getting better every year.
And MS Office for Android.
Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
#90“Customers will not receive the January 2018 security updates (or any subsequent security updates) and will not be protected from security vulnerabilities unless their antivirus software vendor sets the following registry key” Another incentive to stop using questionable AV software (since this was implemented because they can't get their act together).
The bane of open software: users can install any trash they want to.
Perhaps one advantage of the walled-garden of Windows S. No virus checker needed if every piece of software is vetted by an online repository and everything runs in its own sandbox