幾天前 อ่าน flurry articles surrounding July batch security patches Windows 7 หนึ่งในนั้น security-only KB4507456 package available through Online Catalog (not WU) seems contain telemetry code too — something called Compatibility Appraiser hmm naughty
ผมตัดสินใจ check this see what gives two important findings one whether Microsoft sneaked telemetry Windows 7 guise security-only fix two wider implication move user trust let's explore
Compatibility Appraiser
Check whether July patch truly pushed naughty bit onto Windows 7 users checked status one Windows 7 machine last updated May 22 i.e. not subjected July round patches lo and behold exact same entries under Task Scheduler as referenced latest articles
So no this wasn't added July merely updated for what reason? I do not know however these tasks do not do anything unless you're opted-in Customer Experience Improvement Program (CEIP) indeed text scheduled tasks under Application Experience reads:
Aggregates and uploads Application Telemetry information if opted-in to the Microsoft Customer Experience Improvement Program.
Check whether opted-in CEIP by default Windows 7 NOT opted-in CEIP
Point where cumulative updates introduces new service Diagnostic Tracking Service way back when but not believe related scheduled tasks above on this host service disabled state not changed between updates (so far)
But talked about this many years ago Windows 10 keylogger conspiracy not really anything new data telemetry around long time all practical purposes presence this code doesn't alter how Windows 7 behaves but that's only first point situation
User trust
More important element HOW Microsoft did update security-only means what it means include packages not serve security-only purpose breach user trust expect updates do as text says indeed move cumulative updates removed degree freedom advanced users manage patching granularity yore gone means must accept whole bundle updates or none at all
Don't forget GWX campaign hardly record awesome behavior expect many people burned aggressive push Windows 10 still lingers latest set updates REGARDLESS what they factually technically do erodes trust further long run only cause more damage classic sales foot-in-the-door nonsense works people IQ double-digit zone not work smart people
So no nothing new telemetry side yes something new updates side means less trustworthy than before add reduced quality updates recent times none helps build confidence Windows 7 (possibly Windows 8) users moving forward trying Windows 10 because freedom privacy important even philosophical concepts
Speaking freedom privacy come day if don't want Windows 10 upgrade Microsoft released updates allow block system upgrades once and for all check Windows upgrade & telemetry article specifically relevant patches include KB3050265 Windows 7 and KB3050267 Windows 8.1 there you go
What to do then?
Well my advice automatic updates 2008 still stands NEVER blindly apply updates because never 100% sure other party done all testing validation ensure foolproof product but more let's elaborate
- Never be first apply updates most time nothing cardinal requires apply patches right away after all Microsoft provides patches monthly cadence means getting patches 1-29 days late (think about it) whole ecosystem set up deliver patches this way few weeks here there won't matter other hand plenty helpful precious time bugs problems detected ergo this issue let others find problems patch once everything sorted peachy
- Never apply system updates without FULL system image roll back if issues with patches past twenty years rolled few systems back due to bad updates in fact only reason ever needed imaging undo damage caused system and rare few application updates
- Whole security thing overrated general yes being target hack painful which why backups important role but more likely victim other companies misusing misplacing data than own folly read massive data breaches almost daily hundreds millions records leaked names emails physical addresses credit card data little control over this so system few weeks months behind latest patches as long as Internet-facing apps properly configured should be fine
- Could say fact someone else doing bad job doesn't mean you should too correct but fully patched isn't panacea like said Internet-facing apps patched important then consider using standard rather than admin user want something Noscript browser definitely want EMET (Exploit Mitigation Windows 10) security tools all vastly more important run-of-the-mill fearmongering mainstream IT media or system patches oh yes not business must keep network ports open use firewall or router all sorts vulnerabilities affect servers don't apply you
Last but not least keep resentment boiling good controversy often more effective than technology companies fear reputation damage more than anything else
สรุป
Sometimes hard separate fact emotion technology doesn't help end user because when people come searching solutions genuine concerns like this first filter through outbursts pent-up frustration result many years salesy bullshit
Technological point of view nothing new here however fact now get non-security nonsense with security means can't really trust updates Microsoft anymore so if anything will majestically backfire people don't like being pushed amazed repeated attempts do so again again
Well never trusted any updates ever hence wait-and-see image-first approach that's best can offer now brighter future probably won't be any golden days computing behind us things will across board just get worse smart independent people Linux desktop great hope once upon a time but that's another sad empty dream on that happy note bye bye
Cheers.
