News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon

Daily Archives: January 22, 2020

  • Patch Lady – Does Woody tell you to not patch?

    Posted on January 22nd, 2020 at 15:02 Susan Bradley Comment on the AskWoody Lounge

    So over on Twitter Dave Kunkle is taking Woody (and I for that matter as I use the same wait to patch philosophy) to task for telling people to not patch.  With all due respect to Dave, Woody doesn’t tell people to not patch ever…. he just says (as I do) to hold back and wait for the dust to settle.  There is a balancing act one has to do with patching.  When the risk of attacks from attackers rises to a level higher than the risk of side effects of updates, that’s the perfect time to patch.  Right now attackers tend to use either zero day (for which we have no patch) browser exploits, Office exploits, or they go after tried and true entry points like email and phishing attacks.  Targeted attackers will do recon on a network and target the system for unpatched entry points and often use older operating systems to wiggle in.

    One of the problems I see in helping people is that they see someone getting hit with side effects of a patch and consider that it’s widespread for all.  It honestly is not.  Just because person X using Computer Y and having Z printer and whatever else installed gets an issue doesn’t mean you will.  Also many times the act of rebooting will expose and issue that was hiding all along.  Patching wasn’t the root cause, rebooting the machine finally exposed the issue.  But time and again I see people skipping over KB whatever because at one point in time it was noted in the news as causing issues for someone.

    Patching your systems should be an exercise in making sure you are ready for recovery of your system.  If you can’t restore from a backup, you can’t not only deal with an update side effect, you can’t deal with the bigger problem of ransomware.

    Woody does not tell people to NEVER patch ever.  He tells people to wait.  He and I realize the reality of the follow up process.  Security Patches are released on the second Tuesday of the month.  By the time people install them and realize there are issues it’s the end of the week.  Enterprises opening up support cases with Microsoft take time to get to the root problem.  So it’s typically the following week that issues are identified and noted on the Windows health release dashboard.  If there is a major problem with a release, whereby the problem is in Microsoft’s code and there’s a major bug,  Microsoft always will pull the update and re-release it.  But here’s the thing.  That honestly and truly rarely happens.

    The reality is that we beat up our Windows machines pretty badly.  We install multiple antivirus programs (please don’t do that), we install third party software that mangles our registries (I am not a fan of CCcleaner because of this) and every time we uninstall and reinstall software, it often doesn’t clean up itself well at all.

    Furthermore, if you look at the articles that have been posted, none of us are recommending browsing from a Windows 7 computer if you don’t get updates for it.  Woody, myself, Amy and Ted have gone out of our way to ensure that small businesses could make sure that IF they wanted to continue to get update after January they could.  This offer is still open and you can still purchase Windows 7 extended support patches by filling out this form.  Even small businesses who need only 1 license can purchase one.  We’re over 200 small businesses (and counting) that will be protected come February’s patch Tuesday.  We do not want you to use Windows 7 for online banking, tax preparation or ANY sensitive info.  I’ve even urged folks to change the DNS settings and take it off the web and isolate it.

    So Dave?  Read those Woody posts again.  He never says to NOT patch ever.  He’s just letting those of us without Technical Account managers, support contracts and extra IT support arms to not be the beta testing process for everyone else.  Just hold back a little bit and truly and honestly those of us that are not nation states, Governmental targets or Jeff Bezos will be (and historically have been) just fine waiting until the dust settles.  And if you have an old old update that you’ve not installed and it’s still in your hold list, by all means list the KB number here and I’ll give you my historical perspective on it.  Unless it’s an optional update like a later .NET release, if it’s security related I’ll urge you to install it.  Because by now it’s fine and we’ve figured out any issues with the update and dealt with it.

  • Will Microsoft forcibly change the Chrome default search engine to Bing?

    Posted on January 22nd, 2020 at 07:43 woody Comment on the AskWoody Lounge

    Is this “Office as a Service,” or just another poorly worded Microsoft announcement?

    I’m getting lots of questions about a bizarre but official post from ‘Softie Daniel Brown entitled Microsoft Search in Bing and Office 365 ProPlus. In it, Microsoft seems to be saying that everyone who installs the latest patch for Office 365 ProPlus will have their default search engine in Google Chrome changed to Bing.

    Starting with Version 2002 of Office 365 ProPlus, an extension for Microsoft Search in Bing will be installed that makes Bing the default search engine for the Google Chrome web browser. This extension will be installed with new installations of Office 365 ProPlus or when existing installations of Office 365 ProPlus are updated.

    Pardon me while I pick my jaw up off the floor.

    By making Bing the default search engine, users in your organization with Google Chrome will be able to take advantage of Microsoft Search, including being able to access relevant workplace information directly from the browser address bar. Microsoft Search is part of Microsoft 365 and is turned on by default for all Microsoft apps that support it.

    First of all, “Version 2002” is Microsoft’s incredibly stupid way of saying the February 2020 update to Office 365 Pro Plus. It’ll be available to the bleeding edge in February, but normal folks (on the “Semi-Annual Channel branch,” you gotta love the terminology) won’t see it until July.

    After the extension for Microsoft Search in Bing is installed, your users will see a Welcome screen. For example, the Welcome screen in Google Chrome looks similar to this:

    Can they do that?

    Not all devices with Version 2002 or later will receive the extension right away. That’s because we’re gradually rolling out this change, first to new installations and then to existing installations. So if you’re installing or updating to Version 2002 or later, and the extension isn’t installed, that is probably expected and not necessarily an error. It’s likely a future installation or update will install the extension and set Bing as the default search engine for Google Chrome.

    That’s either the worst Microsoft announcement I’ve seen this year — or it’s an incredible overstepping of antitrust proportions that deserves fire and brimstone.

    Do you read the announcement any differently? Is this perhaps an opt-in kind of thing, where you have to activate the extension (which is dirty pool, too, don’t get me wrong)? Or is Microsoft going to roll out Bing as the default search engine in Chrome for everybody who’s getting Office ProPlus … as a Service, of course.

    UPDATE: Catalin Cimpanu, over at ZDNet, is under the impression that this is for real — that Office 365 ProPlus will hijack your Chrome browser search engine. He goes over MS’s published methods for preventing the hijacking.

    Where’s the outrage? Or is this the new normal?

  • New Chromebooks will get 8 years of OS support

    Posted on January 22nd, 2020 at 06:55 woody Comment on the AskWoody Lounge

    Talk about putting your money where your mouth is….

    Yesterday, the folks at Google dropped quite the bombshell:

    When we first launched Chromebooks, devices only received three years of automatic updates. Over the years, we’ve been able to increase that to over six…  And now, devices launching in 2020 and beyond will receive automatic updates for even longer. The new Lenovo 10e Chromebook Tablet and Acer Chromebook 712 will both receive automatic updates until June 2028.

    The announcement doesn’t come out and, you know, actually say it, and everything is couched in the “for education” bafflegab, but the implication is that new Chromebooks will get eight years of guaranteed support. You can see the end-of-support dates on Google’s Auto Update Policy page.

    The Pixelbook Go, for example, is guaranteed support until June 2026. The Microsoft Surface Go, by contrast, is guaranteed support through… I’m not sure if Windows 10 Home in S mode is being actively supported, really, even now. It doesn’t appear on Microsoft’s end-of-life page.

    Sales of new machines with Win7 pre-installed officially ended on October 31, 2016. Add eight years and you get… one whole heckuvalot later than Jan. 14, 2020.

    Ball’s in your court, Microsoft.