MS updates Windows without users' consent

Question

Not sure this is a good idea or if its even ethical.   http://windowssecrets.com/comp/070913/#story1

ky331 · Answer

three points:

1) the particular files they updated --- updates to Windows Updates, which will allow Windows Updates to find future updates --- pose no actual danger to users. So there's no need for anyone to panic over the changes implemented: there's no need to locate and uninstall/remove them.

2) the " ethics" are a separate, and perhaps troubling issue: Since Microsoft allows users to select if and when updates are to be searched-for and installed, why did Microsoft choose to disregard the decision of those users who opted to turn auto-updates off??

Note that each time a person manually/intentionally goes to the Windows Update site, the first thing it does is check to make sure you're running the latest version of Windows Update... and it would seem Microsoft could have just as easily waited until that point, advising you that an update was available/necessary, and allow the user to decide whether or not to continue the update process.

3) the " implications" of this action are indeed very troublesome: if Microsoft is able to "enter through a backdoor" and update files, when auto-updates are turned-off, what's to stop a real hacker from doing the same --- and inflicting real/major damage?

====================================================================

The most significant aspect of this "helpful intrusion" is that it is probably going to generate a major public-relations nightmare for Microsoft.

Message Edited by ky331 on 09-17-2007 10:30 AM

Bugbatter · Answer

It reminds me of the times I took my car in for routine maintenance and I was told that there was a Service Bulletin issued for a few things, so they went ahead and fixed them while it was there.

tomron · Answer

Sure,thats all well and good,but with the owners permission.

tomron · Answer

You're talking about the fine print,but whats wrong with asking and letting the consumer decide.

Bugbatter · Answer

As the saying goes: 'Education is when you read the fine print. Experience is what you get if you don't.' -- Pete Seeger

ky331 · Answer

Why all the complaints about Microsoft?   Because the general public has a double standard, with many people under the impression/belief that Microsoft has to live by a higher standard than other companies.   It doesn't matter that they may be doing something beneficial for the public --- the second highest court in the European Union just today upheld the fines and sanctions against Microsoft, making Europe the dominant anti-trust regulator (rather than the US) --- and the 'crux' of that case was that Microsoft was including Windows Media Player free as part of Windows!   [The European Commission ruled, and the court upheld, that Microsoft must produce a separate version of Windows which does n't come with Media Player pre-installed.]   People complain about all the windows updates they are 'bogged down' with.... they don't want UPDATES, rather, they wanted Windows to be 'perfect' in the first place.   So they complain about the need for updates, rather than appreciating that Microsoft provides all these updates for free --- can you name even one other company that, three to five years after the purchase of a product, continues to update/improve/secure that product for free?   I can't.   But apparently it's expected of Microsoft.   I personally think Microsoft does an admirable job, and people just don't appreciate it.

Bugbatter · Answer

Actually, the Service Dept. at the car dealership did not have my permission ahead of time. I did not know about it until I carefully analyzed the print-out from the maintenance performed. It was done for safety reasons, so yes, I was glad those items were taken care of. Who wouldn't be? They knew their software and hardware better than I did. It made sense to trust them.

People use automatic updates for other software. Would we hear such complaints because Symantec updated LU? Probably not, so why all the complaints about Microsoft? Microsoft informs users about this in a few places, including the EULA:

"3. RESERVATION OF RIGHTS AND OWNERSHIP. Microsoft reserves all rights not expressly granted to you in this EULA. The Software is protected by copyright and other intellectual property laws and treaties. Microsoft or its suppliers own the title, copyright, and other intellectual property rights in the Software. The Software is licensed, not sold.

2.3 Internet-Based Services Components. The Software contains components that enable and facilitate the use of certain Internet-based services. You acknowledge and agree that Microsoft may automatically check the version of the Software and/or its components that you are utilizing and may provide upgrades or fixes to the Software that will be automatically downloaded to your Workstation Computer.

tomron · Answer

No company is has the right to make decisions for the consumer especially when it comes to altering someone else's property,point being,no company is entitled Card Blanche.

tomron · Answer

'I am informed that stopping then disabling the service ' Automatic Updates' should prevent this in future.'   According to this excerpt 'However, with Microsoft's latest stealth move, updates to the WU executables seem to be installed regardless of the settings — without notifying users'.   It may be their legal right but all I'm talking about is this old fashioned word 'RESPECT'

joe53 · Answer

What a can of worms! You would think that MS learned something from the WGA Notifications fiasco, which earned MS a lot of distrust by users (myself included). Obviously not.   It is clear that the EULA gives MS the right to update their WU Agent without explicit permission. (And after all, they do own the OS). That they chose to do so in this case,  in such a non-transparent way, was a bonehead PR decision. All MS had to do was to generate a popup asking for permission. It's not likely that many would have denied this permission, given its necessity to download updates.   That said, I see nothing sinister here. Nor do I see a security hole (any more than my AV automatic updates represent a 'backdoor' that malware might exploit). But I am no expert. For those still concerned, I am informed that stopping then disabling the service ' Automatic Updates' should prevent this in future.

Dave Lyle · Answer

Nor do I see a security hole (any more than my AV automatic updates represent a "backdoor" that malware might exploit).

Your AV 'asks' for the update, and you can turn it off if you desire - the update is not pushed without your permission.

joe53 · Answer

'However, with Microsoft's latest stealth move, updates to the WU executables seem to be installed regardless of the settings — without notifying users'.   Tom, I believe that '...regardless of the settings' refers to the Security Center settings in Control Panel, not the Automatic Updates service settings. (I could be wrong). I agree with you about 'RESPECT'.   ddeerff:   I agree that I can turn off my AV updates. My point was that choosing not to do so does not represent a security risk. I've already expressed my opinion on MS' failure to ask for my permission.

mombodog · Answer

Negative effects of the stealth update   http://www.windowssecrets.com/2007/09/27/03-Stealth-Windows-update-prevents-XP-repair   http://blogs.zdnet.com/hardware/?p=817   and if you think that is a back door, check this out. http://securology.blogspot.com/2007/10/pgp-whole-disk-encryption-barely.html   I'm thinking if it is not open source, it has a back door of some kind.

ky331 · Answer

mombo,   thanks for the info.

Virus & Spyware

MS updates Windows without users' consent

Was this post helpful?