• Tip for the weekend – January 22 – the Microsoft Catalog site

    Home » Forums » Newsletter and Homepage topics » Tip for the weekend – January 22 – the Microsoft Catalog site

    Author
    Topic
    #2420025

    Video here This weekend I’m demonstrating how the Microsoft Catalog site works. This month if you use business VPN software you may need to manually d
    [See the full post at: Tip for the weekend – January 22 – the Microsoft Catalog site]

    Susan Bradley Patch Lady

    6 users thanked author for this post.
    Viewing 13 reply threads
    Author
    Replies
    • #2420084

      Below is a screenshot of the warning I get on Firefox ESR across different devices when attempting to download anything from the MSFT Catalog.

      Simply clicking [Continue to HTTP Site] starts the download that creates a temporary exception to security and privacy settings HTTPS-Only Mode.
      (works consistantly here whether using Linux distro’s or Windows)

      FFHTTPSonly

      "-rw-rw-rw-" extreme computing
      2 users thanked author for this post.
    • #2420074

      @sb There’s a typo in the first line, Susan:
      “This weekend I’m demonstrating how the Microsoft Catalog site.”

      I presume you mean “This weekend I’m demonstrating how the Microsoft Catalog site works.”

      Thx

      1 user thanked author for this post.
    • #2420075

      I would think that most of your members do not use the Catalog as they wait for you to give permission to enable Windows Update.  I use the catalog, since I reject the rollups given to me by WU and download the security only updates. I used to get Internet Explorer updates there as well, but no more.  Thanks to PKCano for her list of available updates.

      My point is that I don’t have the problem you describe.  I also download with Firefox, and I have this plugin called HTTPS Everywhere which I believe solves the problem.

      Thanks for describing the problem.

       

       

      1 user thanked author for this post.
      • #2420116

        There are other times I will recommend the catalog site. It’s good to know that this is a normal bug.

        Susan Bradley Patch Lady

    • #2420103

      The reason why it’s OK to download the updates over HTTP instead of HTTPS is missing:
      It’s because every update in the Catalog is signed by Microsoft and installation is refused if the package doesn’t verify.

      This way, things like MITM are unheard of even if the package is from an insecure channel (HTTP). Of course, practice safe computing and only get your updates from official channels!

      Martin

      3 users thanked author for this post.
      • #2421226

        Knowing the update file is signed by Microsoft is good (since the update is only allowed to run if it is signed). A secondary check would be to upload the file to VirusTotal be double assured, the file is malware-free.

    • #2420117

      I use the Microsoft Update Catalog website often. It always throws a “not secure” warning. I find it pathetic that a trillion dollar company hasn’t even upgraded the entirety of their websites to https. It’s perplexing.

      GreatAndPowerfulTech

    • #2420122

      Ghacks : How to restore Firefox’s classic download behavior

      Mozilla plans to change the download behavior of the Firefox web browser in Firefox 97; this guide helps restore the classic download functionality of the browser.
      Firefox users who download files currently get a download prompt when they do so. The prompt displays options to open the file using an application or save it to the local system. Starting in Firefox 97, Firefox is not displaying the prompt anymore by default.
      The browser downloads files automatically when a download link is activated by the user. Files are downloaded to the default Downloads folder of the operating system, with no option to change the location as the whole process happens automatically. The behavior is identical to how Chromium-based browsers handle downloads…

      2 users thanked author for this post.
    • #2420129

      https://www.catalog.update.microsoft.com/Home.aspx

      Updates sought from the above link reflect the https: prefix.

      Correction: Not. It’s stripped off at download and you get “not invented here” as mentioned at the start of this article.

       

      On hiatus {with backup and coffee}
      offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender WuMgr
      offline▸ Win10Pro 20H2.19042.685 x86 Atom N270 RAM2GB HDD WindowsDefender WuMgr GuineaPigVariant
      online▸ Win11Pro 21H2.22000.675 x64 i5-9400 RAM16GB HDD Firefox101.0b6 MicrosoftDefender WuMgr
    • #2420132

      Chrome doesn’t download updates from Microsoft Catalog.
      There is no response which selecting a download link in the new window.
      I have to right-click and ‘save link as..’ in order to download.

      1 user thanked author for this post.
    • #2420173

      A tempest n a teapot. .

      I bought an iPhone three years ago (my first smart phone) primarily to use for banking apps and when traveling (which I ended up not doing because of Covid). I have Face ID on it. I haven’t banked on any of my computers in many years so, because of Covid and mostly staying at home, I decided to get an iPhone with Face ID for banking.

      I’m more concerned about the indexedDB Safari 15 leak that, of course, affects Firefox browser also on iOS. (But then I would NEVER have a Google ID so there is nothing much to be stolen because of this Safari leak).

      I prefer HTTP to HTTPS for websites as HTTPS is not usually needed as most websites are not banking sites. Also, I generally order very little online at any site and when I must do this (running shoes is one must have item that I cannot get locally) then I want HTTPS but this activity is a very tiny part of my surfing. Besides, I generally would call the company’s 800 number to order rather than do it online. So, I resent the forcing of HTTPS by browsers and more middle fingers given to power users.

      • #2422558

        Mele20 wrote:
        I prefer HTTP to HTTPS for websites as HTTPS is not usually needed … I resent the forcing of HTTPS by browsers and more middle fingers given to power users.

        By encrypting your browser traffic, HTTPS protects your browsing session, your data, your privacy…

        What Is HTTPS, and Why Should I Care?

        HTTPS is a good thing, friend.

        Hope this helps.

        • #2422917

          I try to use HTTPS as much as possible.

    • #2420175

      Personally I always download from the catalog – after Susan has given the go-ahead. I don’t trust WU to only download and install the update one needs and nothing more, and with the catalog I can choose what I want.

      For the downloading itself, I copy the link into Microsoft Download Manager which I find to be a handy little tool. Unfortunately it is no longer issued by Microsoft, but it can still be found online.

    • #2420189

      Another Microsoft update catalog issue is its built-in search function.  Entering a Windows version (e.g. 21H2) into the catalog’s search function does not find and display all of the latest updates for that version.

      • #2420687

        21H2+based term will show all updates, but you will get updates for Server 2022 too (easily differentiated)

        you can use same approach for other versions (1809 specially needs it)

        for Windows 11, the search filter is a bit harder (due not specific version)
        11+for+x64 is the closest i could find, but you get updates for some other products too (e.g. any update with month -11)

        1 user thanked author for this post.
    • #2420680

      I’m more concerned about the indexedDB Safari 15 leak

      It has been fixed with the latest iOS updates.
      Keep you iPhone OS updated.

    • #2420689

      One can manually copy the file link from download window, and in a new tab “Paste and go to ..”
      no warning or block

      having a download manager like IDM makes browsing and downloading life easier 🙂

    • #2420895

      I’m more concerned about the indexedDB Safari 15 leak

      It has been fixed with the latest iOS updates.
      Keep you iPhone OS updated.

      Thank you! I figured today might bring an update. There was nothing last night. It’s preparing to install now.

    Viewing 13 reply threads
    Reply To: Tip for the weekend – January 22 – the Microsoft Catalog site

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.