Win7 updates for upgrading to Win10

[RJARRRPCGP]

Originally Posted by Topcat

Linux to me in the past was nothing more than a command prompt....but using it as a desktop OS, its like learning to walk all over again for some of the simplest tasks & settings.

LOL @ the command prompt part... But even back in the Bush era, a GUI was a standard thing in Linux!

I hated that part where it feels like learning to walk again! But, I was able to get a usable Gentoo in summer of 2010!

KDE after 3x is bloated! Compiling KDE made me feel like I was on a 486 SX at 25 Mhz, if not a 386! (You know the chips where even Duke Nukem 3D in 320x240 is slow! LOL!)

[Per Hansson]

I'll just put this here:
https://support.microsoft.com/en-us/...-processor-tha

More details:
http://www.techspot.com/news/68553-m...ates-kaby.html

[TELVM]

You may find this video of interest: http://www.youtube.com/watch?v=u5mFI9spp10

[Topcat]

People still trust & use windows update?

[grss1982]

Originally Posted by Topcat

People still trust & use windows update?

I certainly don't. Just install and then turn off Windows Updates.

Have not had a problem or a even virus with my current Windows 7 installation since 2013.

Now only if Windows 10 had this ability to make Windows Update stay dead when I tell it to, I would be upgrading to it.

[momaka]

Originally Posted by grss1982

Now only if Windows 10 had this ability to make Windows Update stay dead when I tell it to, I would be upgrading to it.

There's more (negatives) to Windows 10 than just the Automatic Updates. For one, it sends who knows what kind of personal data back to MS. With Windows 10, your PC is basically NOT yours at all.

That aside, at least the Automatic Updates in Windows 10 are not as irritating (dare I say even somewhat unnoticeable), unlike in previous versions of Windows. So for Windows 10, I don't mind the updates that much - at least on the PCs we have at work. If I got a PC with Win 10 on it, I probably wouldn't use it for anything more than an internet browser. All of my important documents and files are to remain on my Win XP PCs.

[theDoctor]

I'd like to install a security update to protect against the WannaCry exploit released by the NSA.

Microsoft has released stand-alone patches for most operating systems. These patches are very small file sizes. Yet, apparently, the only way to update Win7 is with a larger Security Rollup which includes god knows what else.

Why no stand-alone patch for Win 7? Here is a list of current OS patches:

http://www.catalog.update.microsoft....aspx?q=4012598

[Topcat]

^
M$ wants to kill off W7, like they had a hell of a time doing with XP.

[theDoctor]

Maybe home users on a protected wireless network aren't vulnerable. I'm not sharing files on a network. I don't really know what the Server Message Block (SMB) vulnerability means but perhaps my home network is ok, using only good antivirus software?

[stj]

i suspect this will go under any security software.

[ratdude747]

Originally Posted by theDoctor

Maybe home users on a protected wireless network aren't vulnerable. I'm not sharing files on a network. I don't really know what the Server Message Block (SMB) vulnerability means but perhaps my home network is ok, using only good antivirus software?

You're screwed as soon as some twit gets on your network/wifi and clicks the link. SMB is what domains and workgroups (and mapped drives for that matter) run on... it's highly integrated into the core of the OS AFAIK. Without the patch or completely isolating (unplugged cables, disabled wifi) your computers from any and all networks the vulnerability exists. Even if AV catches it, it's too late, some/all of the damage will have already been done.

My understanding was that MS had no idea as the NSA found it and sat on it rather than quietly let MS know that they had a problem. Had the NSA not been hacked several months ago MS probably still wouldn't have known that pre-windows 10 SMB had an issue.

I don't think MS did this intentionally... I think that the NSA stumbled upon a backdoor before they had a chance to "ask" for one to be added. I couldn't see them adding this big of a hole and not doing anything about it for 4+ major (not counting windows server) operating systems. As for 10 not having the issue, my understanding was that for windows 10 SMB was redone and as a result the issue didn't exist in the new version of the SMB stack to begin with.

Just my $0.02

[theDoctor]

I'm sure you're right. Assuming that you and others are running
win7 with a limited number of security updates installed (the purpose of this thread), do you intend to install the security rollup put out by microsoft to protect against WannaCry? If not, what is your plan moving forward? Thanks

[RJARRRPCGP]

Originally Posted by RJARRRPCGP

Compiling KDE made me feel like I was on a 486 SX at 25 Mhz, if not a 386! (You know the chips where even Duke Nukem 3D in 320x240 is slow! LOL!)

And that reminds me of my 386 SX, IIRC, where NES emulation with Nesticle, was slllooowww!

And regarding Windows, WSUSOffline wins again!

There's an issue, which may still exist, where wsusscn2.cab is corrupted and the workaround is to change the DNS server!

When the cab is corrupted, it usually can't be more obvious, because if you double click on the cab, the cab file viewer will scream "Cannot open the cabinet file" or similar.

7-zip also will scream as well...

But, for me, wsusscn2.cab hasn't been corrupted for likely 5 or 4 months now...

[theDoctor]

Assuming that you and others are running win7 with a limited number of security updates installed (the purpose of this thread), do you intend to install the security rollup put out by microsoft to protect against WannaCry? If not, what is your plan moving forward? Thanks

This is what I did to protect my Win7 system from the WannaCry exploit. Please comment on whether you think this is effective.

Setup: WannaCry exploits outdated SMBv1 protocols. So, disable SMBv1. Do not disable SMBv2 or SMBv3.

I followed the instructions under 'How to enable or disable SMB protocols on the SMB client' (will post the link at the bottom). *My laptop isn't a server, so it must be the client, right?

It's a very simple copy/paste of two lines, into an elevated command prompt. To get an elevated command prompt, right-click the command prompt and choose Run as administrator.

Paste, or type, the commands one at a time and hit Enter each time. Here they are:
To disable SMBv1 on the SMB client, run the following commands:
sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
sc.exe config mrxsmb10 start= disabled

See the attachment for a screenshot showing the command prompt after entering both commands.

Here's a link to the instructions per Microsoft.
https://support.microsoft.com/en-us/...ws-server-2012

Feedback?

[Topcat]

My NAS is running S2K8R1, patched up...and that's the only system that has real data contained on it. S2K8R2 is basically Win7....and the patch doesn't work on it....imagine that, since R2 was included in that nonsensical 'rollup'

I did find this:

http://www.catalog.update.microsoft....px?q=KB4012212

Security only patches for S2K8R2 and Win7 without all the telemetry shit of the full rollup.

[Per Hansson]

Originally Posted by theDoctor

I followed the instructions under 'How to enable or disable SMB protocols on the SMB client' (will post the link at the bottom). *My laptop isn't a server, so it must be the client, right?
<snip>
Feedback?

Actually if you connect from another system, say using WannaCry to your laptop then it is performing the duty of a SMB server.
At least that is how I interpret it...

[theDoctor]

I did find this:

http://www.catalog.update.microsoft....px?q=KB4012212

Security only patches for S2K8R2 and Win7 without all the telemetry shit of the full rollup.

This is great. I read some stuff about Microsoft putting non-security items in "Security" updates. Are you pretty sure about this being legit?

Thanks for the link!

[Per Hansson]

^^Yes it's much better, still they do sneak some stuff in.
Like this blasphemy:
http://www.badcaps.net/forum/showthr...914#post733914