Windows critical update note

[Steele]

Don't trust "Microsoft Driver" updates... EVER. *new rule!*  

They're written for a HUGE "GENERIC" range of ATI, NVIDIA, VIA Audio hardware and have no SPECIFIC code written for one particular hardware device.

It's more of a plain generic driver.  
Better to go DIRECTLY to your hardware source for quality drivers.

PS: The one I have not installed for the "Windows XP" category is the .NET framework. I have NO need for that.

PPS: The driver update? Like I said... I won't install it. My Creative Labs Sound Blaster card has NEWER drivers at www.creative.com compared to the 2 year old ones being displayed on Windows Update!  

[Steele]

Don't you just love the "generic" terms they use to describe a vulnerability?

I read the SAME thing in the basic description with each release.  

[kubecj]

Hi,

few advices (or just the description how I'm doing that  )

1) I'm subscribed to the MS security newsletter. It usually comes sooner than the Windows Update service notices.

2) I use MBSA (Microsoft Baseline Security Analyser) for checking which updates I'm missing. Althought it has few glitches, it displays all the missing updates, even for Office & stuff. Windows Update does display _only_ OS patches. MBSA is available for free download.

3) Then I download the files manually from http://download.microsoft.com, usually I enter KBxxxxxx in the search box and then I select the file for my OS/language.

I install the updates then and archive them, just in case of some crash or something. As I have on my notebook the very same OS, I just download them once, install twice.

Yeah, it's some manual work, but at least you know what you did and if you use download manager, it can be also resumed without problems...

[CharleyO]

Nice tip on the servers overloaded, Techie! Re-running the scan if all don't download is a good idea.    

Yes, it seems everyone went at once to get those updates.

[Lisandro]

1) I'm subscribed to the MS security newsletter. It usually comes sooner than the Windows Update service notices.

Where? I tried in the past but unsucessfully...

Then I download the files manually from http://download.microsoft.com, usually I enter KBxxxxxx in the search box and then I select the file for my OS/language.
I install the updates then and archive them, just in case of some crash or something. As I have on my notebook the very same OS, I just download them once, install twice.

Why with the last updates the user just 'need' to be connected to apply them? They were small (200-300k) but, after starting, download more than double or third times this size... Does anybody knows why?

[kubecj]

1) I'm subscribed to the MS security newsletter. It usually comes sooner than the Windows Update service notices.

Where? I tried in the past but unsucessfully...

I can't remember, but at the end of the bulletin there is:

* Microsoft has created a free monthly e-mail newsletter containing
  valuable information to help you protect your network. This
  newsletter provides practical security tips, topical security
  guidance, useful resources and links, pointers to helpful
  community resources, and a forum for you to provide feedback
  and ask security-related questions.
  You can sign up for the newsletter at:

  http://www.microsoft.com/technet/security/secnews/default.mspx

* Microsoft has created a free e-mail notification service that
  serves as a supplement to the Security Notification Service
  (this e-mail). It provides timely notification of any minor
  changes or revisions to previously released Microsoft Security
  Bulletins. This new service provides notifications that are
  written for IT professionals and contain technical information
  about the revisions to security bulletins.
  Visit http://www.microsoft.com to subscribe to this service:

  - Click on Subscribe at the top of the page.
  - This will direct you via Passport to the Subscription center.
  - Under Newsletter Subscriptions you can sign up for the
    "Microsoft Security Notification Service: Comprehensive Version".

Why with the last updates the user just 'need' to be connected to apply them? They were small (200-300k) but, after starting, download more than double or third times this size... Does anybody knows why?

AFAIK this applies only to SPs of MSIE. For example this week I downloaded only few larger exes.

[Lisandro]

Thanks kubecj but that 'requires' to register, you are required to get a Microsoft .NET Passport that I don't want. Thanks for your time...  
 
 

[Vlk]

required to get a Microsoft .NET Passport that I don't want.

Well why don't you create a passport-only mailbox using a freemail service?

[Lisandro]

Well why don't you create a passport-only mailbox using a freemail service?

How?
Where can I quickly learn more about passport .net? Please, not tons of MS help files...