Live data from Hacker News

Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set

doublepulsar.com

11–20 of 109 posts

Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set

#11
post #7

Earlier quoted context omitted.

Note that one of the antivirus software vendors that does this correctly is, in fact, Microsoft Defender. If you haven't installed dodgy third-party AV, you're fine.

Which third-party AV isn't dodgy?

clamav

Unfortunately I have no reason to use it, though. I don't even know whether it's any good. But at least I know it's not dodgy!

Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set

#12
post #9

Slightly OT if I may: Is there any reason to use anything else than Defender these days? Chrome+uBlock, good email security and update practices, Defender just in case, do we need more?

No, there isn't. Antivirus only protects against known threats anyway, and Windows Defender works fine for that.

Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set

#13
post #4
post #2

“Customers will not receive the January 2018 security updates (or any subsequent security updates) and will not be protected from security vulnerabilities unless their antivirus software vendor sets the following registry key” Another incentive to stop using questionable AV software (since this was implemented because they can't get their act together).

You can’t just stop using AV software I’m told. The key is checked for everyone, including people with no AV. Contrary to the sensational headlines, it is implied to be a temporary measure. It’s not really clear whether you’d have to only do this manually once, or on every subsequent update.

The questions and answers in Microsoft's own doco imply once.

* https://news.ycombinator.com/item?id=16076660

Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set

#14
post #9

Slightly OT if I may: Is there any reason to use anything else than Defender these days? Chrome+uBlock, good email security and update practices, Defender just in case, do we need more?

not the free consumer kind. Some business/enterprise stuff is useful (e.g. eset), but thats not helpful to the average consumer.

Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set

#15

My windows 10 machines will not receive the update automatically for some reason. I think it is because I had defender completely disabled via group policy since it interferes with some of my development activities surrounding node.JS. However I was able to install the security update manually from the Microsoft Windows update catalog download site. I did this after enabling defender briefly and updating it to ensure…

You could have also just manually created the registry key

Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set

#16
post #9

Slightly OT if I may: Is there any reason to use anything else than Defender these days? Chrome+uBlock, good email security and update practices, Defender just in case, do we need more?

Yes, http://www.bromium.com adds next level security to Windows environments.

Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set

#19
post #9

Slightly OT if I may: Is there any reason to use anything else than Defender these days? Chrome+uBlock, good email security and update practices, Defender just in case, do we need more?

Defender's presence on my XPS 2015 is the difference between a useable laptop and an eternity of hourglass cursors.

3rd party AV generally has better hit rates and the good ones are dramatically less demanding of system resources (happy with NOD32 here)

Re: Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set

#20
post #9

Slightly OT if I may: Is there any reason to use anything else than Defender these days? Chrome+uBlock, good email security and update practices, Defender just in case, do we need more?

I haven't used anything other than Defender (and the Microsoft tool that predated it, can't remember the name) in ages. I've never had any issues.
Post reply on HN