Since Flash update is now bundled with Windows Updates it means that Edge users will be using vulnerable Flash for one more month, wow :/
wasn't edge originally supposed to be updated via store?
Microsoft’s February security update release delayed to March
21–30 of 53 posts
Re: Microsoft’s February security update release delayed to March
#22I don't get it. So because of one issue, they're not going to deliver any other security patch either?
Re: Microsoft’s February security update release delayed to March
#23One foreign government organisation must be hacked this month, but NSA doesn't have enough time, so they asked MS to delay patches.
It did cross my mind as well. Considering the whole Russia drama right now, I wonder if the NSA just asked Microsoft to delay its patches for this month so it doesn't interrupt the agency's on-going operations against Russia.
I doesn't help that Microsoft has been moving in a direction where it provides less and less information about what its updates do these days, while sneaking through dozens of new root certificates at once every now and then.
http://www.theverge.com/2017/1/25/14381174/microsoft-thailan...
http://www.networkworld.com/article/2348143/security/microso...
https://hexatomium.github.io/2016/10/11/unannounced-root-cer...
https://hexatomium.github.io/2015/06/26/ms-very-quietly-adds...
Re: Microsoft’s February security update release delayed to March
#24Earlier quoted context omitted.
To the downvoters: Red Hat, et al. can roll out security updates on running systems. Except for kernel updates, though kexec avoids long restarts.
This is a somewhat unpleasant semi-misconception. You can , indeed, update everything but the kernel without rebooting. In fact, I suspect you could even replace the kernel image and the modules while they're running (but this will certainly break any attempt to load modules at a later point without rebooting first). (Edit: most distributions choose to keep the old image along in case the new one breaks. It's relativ…
[deleted]
Re: Microsoft’s February security update release delayed to March
#25Since Flash update is now bundled with Windows Updates it means that Edge users will be using vulnerable Flash for one more month, wow :/
The "Disable Falsh" button is under Advanced Settings on Edge. Switched it off and I barely notice anything is missing these days.
Re: Microsoft’s February security update release delayed to March
#26One foreign government organisation must be hacked this month, but NSA doesn't have enough time, so they asked MS to delay patches.
Do you use a pay_pal account, because you can get an additional 1600 every week to your check just working on the internet 4 hours every day.. check this link.. http://bit.ly/2atnA1a
Re: Microsoft’s February security update release delayed to March
#27Earlier quoted context omitted.
To the downvoters: Red Hat, et al. can roll out security updates on running systems. Except for kernel updates, though kexec avoids long restarts.
This is a somewhat unpleasant semi-misconception. You can , indeed, update everything but the kernel without rebooting. In fact, I suspect you could even replace the kernel image and the modules while they're running (but this will certainly break any attempt to load modules at a later point without rebooting first). (Edit: most distributions choose to keep the old image along in case the new one breaks. It's relativ…
If memory serves, Microsoft cannot actually do it, due to differences in file system semantics. In Windows, it's not possible to replace a file that's in use.
Re: Microsoft’s February security update release delayed to March
#28One foreign government organisation must be hacked this month, but NSA doesn't have enough time, so they asked MS to delay patches.
What do you base that on? Faith? :)
Re: Microsoft’s February security update release delayed to March
#29Earlier quoted context omitted.
This is a somewhat unpleasant semi-misconception. You can , indeed, update everything but the kernel without rebooting. In fact, I suspect you could even replace the kernel image and the modules while they're running (but this will certainly break any attempt to load modules at a later point without rebooting first). (Edit: most distributions choose to keep the old image along in case the new one breaks. It's relativ…
If memory serves, Microsoft cannot actually do it, due to differences in file system semantics. In Windows, it's not possible to replace a file that's in use.
Unfortunately, the last time I had to do system-level Windows programming was such a long time that all I remember are a bunch of things starting with hwndsomethingsomething, so I certainly don't remember if this is the case, nor the specifics (if I ever knew them, I was very young and therefore very stupid at the time).
However, the opposite problem - that of (thread-safely) ensuring that you're not stepping on another process' file when you're writing, wiping or moving it - is pretty tedious under Unix. The only way to do it reliably - that I know of - is via flock, which is opt-in and therefore not always an option (e.g. the other process is a third-party application that doesn't lock its files), and doesn't work on remote filesystems
There is no design decision without at least one compromise hanging on its tail.
Re: Microsoft’s February security update release delayed to March
#30I don't get it. So because of one issue, they're not going to deliver any other security patch either?
There are speculations that Windows Update itself could be broken:
http://www.computerworld.com/article/3170633/microsoft-windo...
https://www.askwoody.com/2017/what-happened-to-the-february-...