When is a fix not a fix? Google’s James Forshaw says MS’s CVE-2018-0826 fix is only half the story

Topic

New Reply

Let the mud slinging continue! This month’s patches for Windows 10 include a fix for the bug described as CVE-2018-0826. Microsoft claims that it plug
[See the full post at: When is a fix not a fix? Google’s James Forshaw says MS’s CVE-2018-0826 fix is only half the story]

1 user thanked author for this post.

AJNorth

Reply | Quote

Replies

You must remember this,

A fix is just a fix;

a glitch is just a glitch.

The fundamental things apply,

as space flies by.

Reply | Quote

I am not programmer but it seems to me that at least sometimes the fix is going to break something if its applied. We’ve now dealt with this in the Spectre Meltdown mess. After awhile of all these patches and fixes, It starts to affect the stability of the OS. This in my view is why we are seeing Windows 10 become a very big mess. Trying to fix, while at the same time introducing new versions every six months. I just think Microsoft is in over its head on Windows 10 and the rest of its entourage.

Reply | Quote

The good news is that older Windows versions such as 8.1 and earlier are not affected

Quoted from the article. So I guess in this case Windows 10 is not necessarily the most secure window os ever.

Edit to remove HTML from cut/paste

Windows 8.1 Group B, Brave & Mozilla ESR - grudgingly & Protonmail

Reply | Quote

I wonder if it is safer with Windows 10 (1709) to disable the rapid boot feature in the power settings? I noticed that the network and sharing settings page shows that my computer has been continuously connected to the internet via its wireless network adapter for many days, even weeks, despite the fact that I shut it down and turn it off when not using it and I only use that pc twice a week (about once every three or four days). It only indicates a fresh “count” on elapsed time connected to the internet if it goes through a restart, as in subsequent to a monthly cumulative software update. I assume that Windows 10 must be keeping a portion of the operating system alive in RAM when the system is shut down (as long as the pc remains plugged into an ac power source) to facilitate the rapid boot when it’s enabled (which it is by default, unless you choose to disable it); because otherwise the network and sharing settings page would not indicate that the elapsed time connected to the internet encompasses the time/days that the computer wasn’t running between boot-ups. I’m not sure I feel comfortable with that computer being continuously connected to the internet even when (for days at a time) I’m not using it.

Reply | Quote

Since Win8, the quick startup has been the default in Control Panel\Power Settings. When you shut down Windows it really doesn’t shutdown, it hybernates (basically saves the running system state). You need to uncheck this in Power Settings if you want Windows to shut down. When you do a “restart” (reboot) it actually shuts down and restarts.

The Power Settings quick start is different from the “quick boot” in the BIOS/UEFI.

 

2 users thanked author for this post.

Elly, woody

Reply | Quote

powercfg /hibernate off in an admin command prompt will disable hibernation and fast boot and will remove the huge hibernation file. I do it on most computers.

Windows can start your computer even if off. Tip: in the BIOS, if you activate APM ERP Ready, your PC will have to lower it spower consumption when off, so in fact it will not be wakeable no more. Some say c3 and C6 states need to be enabled for this to work though. From what I read, APM ERP Ready reduces phantom power draw (1 or 2W) if the Power supply supports it. Downside, maybe you won’t be able to use your USB port to charge when the power is off or to wake up the computer. It removes power from wifi, wake on lan, things like this. For me, that’s all fine.

Reply | Quote

Windows 7 has two years of shelf-life left. There will be no Windows 10 for me. Every corporation has a life-cycle.

I’m working on building a Linux system.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote