News Short

Microsoft: "Secret" Updates Were for Windows Update Itself

September 14, 2007 — IDG News Service (New York Bureau) — Microsoft claims updates sent out to Windows XP and Vista machines without users knowing about them were for the Windows Update mechanism, though the company acknowledged it could have been more "transparent" before changing files on user computers.

The company's response came after users expressed concern over updates to XP and Vista machines that were pushed out even when they had turned off the automatic updating feature of Windows Update. The updates were noted as "secret updates" in published reports and on user forums, and Windows users expressed concern that Microsoft would update their computer files without their knowledge or consent

Microsoft regularly pushes out updates to Windows machines, but will only update the machine without user action if automatic updating is enabled. If it is not, a user must activate Windows Update to upload an update to the machine.

In an e-mail through its public relations firm Thursday, Microsoft said that the Windows Update service automatically updates itself "from time to time to ensure that it is running the most current technology." "This is normal behavior, and it has worked this way since the service debuted several years ago," the company said.

However, Microsoft acknowledged that it could have better informed users about how Windows Update behaves so as not to spur the confusion that ensued with updates that were sent out last month.

"We could have been clearer on how Windows Update behaves when it updates itself," the company said in its statement. "Weâ¬"ve received helpful and important feedback on this point, and we are now looking at the best way to clarify [Windows Update's] behavior to customers so that they can more clearly understand how [it] works."

Despite the recent faux pas, Microsoft still is encouraging users not to turn off the automatic feature of Windows Update, claiming it's the best way to ensure they get critical updates from the vendor, including those that are security-related.

Comments

Share [+]

TOOLS

Comments

Digg This

SlashDot

CENTER OF EXCELLENCE

Infrastructure

» Outbound Email and Data Loss Prevention
This report shows the findings of a recent Proofpoint and Forrester Consulting study on e-mail security, data loss prevention, and includes statistics on electronic risks.

» A Modern Approach to On-Demand Email and Data Security
Learn how Proofpoint delivers a dedicated, hosted e-mail security solution that combines state-of-the-art anti-spam and virus control.

» A Proactive Approach to e-Discovery
Learn about the key e-discovery challenges facing legal and IT departments today and how businesses can develop an e-mail archiving strategy to deal with e-discovery requests.

» The Advantages of Identity Based Encryption
Download this paper to learn why e-mail encyrption is critical to an organization's overall security architecture and the advantages of identity-based encryption.

» Global Best Practices in Email Security, Privacy and Compliance
This whitepaper discusses the latest global regulations that impact the e-mail security policies and strategies of today's enterprises, universities and government organizations.

Center sponsored by