I think Microsoft got it into their head that they could-- and should do this sort of thing when they started taking down botnets.
I myself use Windows, on occasion, in a dual boot scenario. Most of my “important” work is done in MacOSX. So perhaps I’m disconnected from the whole experience of “microsoft choosing to abuse this power”
Q) Why do you think so many people disabled automatic security updates?
A) They didn’t. They disabled the automatic downloading and installation of bugs that broke their systems.
Security updates should be transparent and have no noticeable effect on the system to end-users more than 99% of the time. Updates that randomly change the UI around, mess with (or delete!) the user’s configuration, install unwanted apps, cause programs that have been working for years to suddenly stop working, and crash the entire system for a reboot every single time are not properly-done security updates. There’s a reason people turned them off.
We got put into this situation due to the incompetent deployment of the updates.
Security updates ideally should be automatic, but they also shouldn’t crash your system or mess it up.
You really have been away from windows for some time. Windows 10 now only operates with automatic updates by default, you can block individual updates though with the wushowhide tool but the recent version upgrade was ignoring this without taking additional steps to re-hide it.
Incidentally, i brought this issue up well over a year ago but it didn’t gain anywhere near the traction it seems to have now that we’ve been living with this telemetry leaking, adware riddled service. With, presumably, some OS features included.
At all i would say. If you take no steps the default is you get them when they’re pushed out. Basic steps are - use metered connection and/or schedule update installation. More complex steps are obviously registry, group policy and wushowhide but as i say, the latest upgrade to v1607 was ignoring all of it.
Not on windows 10 no, not unless you take the more complex steps which i imagine your average user is not gonna do. Isn’t that what this whole blog post was about? Forced updates. I’m surprised this is still news to people.
By the way, two really good resources for keeping track of microsoft’s ongoing crap are woody leonhard over on askwoody and susan bradley over on windows secrets (paid subscription).
And this is the key issue i think. Even if you go through all the steps of locking down win 10 to how you want it the next big update resets everything and you got to start again. As long as it remains a service then windows will never be ready and in perpetual beta and the fact they’ve laid off so many of their QA staff means customers are now their beta testers.
As opposed to the other operating systems that are nothing like this? Linux and OS X both have constant updates. Why? Well, for one reason, in the current world, if you don’t, then security problems cause your users to get pwned.
I’ve certainly updated Linux and had the new software completely failed to work afterwards. Of course, their users are their QA…
Chrome simply puts an icon in the tray telling you to restart the computer when convenient.
The “active hours” thing on Windows is pretty useless nowadays when people work very varying hours and then shut down their laptops. I came across one only the other day (W7) where no updates had been applied for two years. Why? Because the user had set to do updates at 2a.m. and the computer had never been on at 2a.m.
And this is why we can’t have nice things.
Seriously like I said above they tried to make it easy for you and people balked and let their machines get owned en masse. I am not particularly fond of it but the other choice I hate more so I live with it.
You don’t need to do it within the operating system. If it’s your house, your network, administrated by you, then you decide whether or not Windows 10 boxen are allowed to phone home for updates. The OS can insist, but you still (presumably) control the network it needs in order to be notified of updates and have them delivered.
You can’t turn WU off or configure it in any user friendly manner. You can’t even select what does and doesn’t get applied - it’s all or nothing. Bad driver being pushed down? Well, fuck you, you’re getting it whether you want it or not.