DEFCON 3 TODAY INSTALL

As the software industry has moved to more automation and fewer humans, the quality of updates has gone down. Note that these guys aren’t just talking about Microsoft quality, but quality across the board. Dustin also details his concerns in the Zero Day Initiative blog, in which he states that “over the last few years, we’ve noticed a disturbing trend - a decrease in patch quality and a reduction in communications surrounding the patch.” I am reminded of a recent Black Hat presentation by Dustin Childs of Trend Micro’s Zero Day Initiative (see the abbreviated YouTube interview by Intel’s Jerry Bryant) in which he discusses how patch quality has decreased.

DEFCON 3 TODAY INSTALL

If an update won’t install easily and quickly, demanding that the user go through extraordinary steps, then Microsoft must fix the update to improve ease and clarity of installation. Just read through the threads of many a forum poster trying to get this update installed.

In fact, I think it often causes more pain than benefit. The fact that this isn’t clear-cut is the reason I can lower the MS-DEFCON only to 3 this time around.īut if you are a normal user, with normal levels of paranoia to get you through the normal security risks of daily life, I’m not convinced that this update is mandatory.

If your computer holds the keys to the nuclear codes, then by all means install this update instantly. Unless, that is, you think you will be targeted by an overseas attacker with a malicious bootloader installer. This month’s updates are a great example of why my patching advice differs for consumers and businesses.įor consumer patchers, whether using Windows 10 Home or Professional, I’m not convinced that you need to install KB5012170, Microsoft’s security update for Secure Boot DBX (the Secure Boot Forbidden Signature Database). MS-DEFCON 3: Issues with bootloader patches

Defcon 3 today