[There's a reason that Yoda is the unofficial mascot of SBS.  Size indeed matters not.] A translation to a person in charge of patch management. - THE OFFICIAL BLOG OF THE SBS "DIVA"

A translation to a person in charge of patch management.

A Translation of "Apple's Windows Invasion" - Vox:
http://blech.vox.com/library/post/windows-invasion-translation.html

If the desktop has admin rights (many of us still do)

If the desktop has Quicktime (we're not talking Itunes sir, merely Quicktime needed for some Enterprise-y web broadcasts)

Person sitting at said computer, with Quicktime, with Admin rights, gets system tray updater. 

Being the end user trained to install security patches they install updates to Quicktime. 

Then in time they get offered iTunes that they don't need.

Then in time the get Safari that they don't need.

Unwanted software puts security holes/issues on a workstation. 

I don't care if MSN IM started it first, or Google doesn't precheck boxes, or Sun Java only advertises Open Office ... none of these make any justification for what Apple (or any vendor for that matter) has done.

KNOCK IT OFF.

http://blech.vox.com/library/post/further-thoughts-on-a-translation.html

Let me say this again, I DON'T CARE which vendor started it, all of you KNOCK IT OFF.

Just give me software that I asked for, update software that I only installed, and stop shoving crud on my clients, and anyone else that hasn't seen the light of Least Privilege and gotten their desktops under control.

People weren't asked if they wanted Safari, they were prompted for an update to a program they didn't have.

Saying "Microsoft does it with MSN IM" doesn't justify this behavior.  Apple crossed the boundary because they placed it in a position of trust. The security update User Interface.

Give me the software that I ask for and otherwise, KNOCK IT OFF all of you.

Microsoft Watch - Web Services & Browser - Apple Software Update is Ripe, Not Rotten:
http://www.microsoft-watch.com/content/web_services_browser/apple_software_update_is_ripe_not_rotten.html

I'm sorry Joe.. go run a network.

"Apple's Safari distribution tactic is sheer brilliance. Apple is co-opting Microsoft's monopoly product. Other developers shipping updaters should follow Apple's approach. "

Let's not encourage them Joe.  Every piece of software on a computer is a security risk.  The home user base is one big fat security risk right now.  We have enough insecurity with IE, we don't need to add another browser on a user base that didn't even realize they were installing it in the first place.  When people install Firefox, they make a choice.  When people just installed Safari, they had no clue.

"Enterprises should be concerned about rogue software updaters from a management and even security perspective. But in the larger context of competition, Apple has done something clever and competitively right. "

Prechecking that install box crossed the line Joe.  Saying something is appropriate in the larger context of competition doesn't justify what this or any vendor that tries this.  Don't applaud them or encourage them. 

Go run a network Joe, then tell me what you think about this "competition".  They don't have my best interests at heart for sure, Steve Jobs and Steve Ballmer can duke it out in a corner and leave me alone please.  This isn't competition, this is adding to the problem of rogue, unknown, possibly unpatched software.

(final edit)

P.S. Steve Ballmer?  Do me a favor and stop trying to install Silverlight on me when I visit the Microsoft download site as well.  When I want it to watch a video I'll get it then.  Otherwise all of you software vendors... knock it off...

Published Saturday, March 22, 2008 6:56 PM by bradley
Filed under:

Comments

# re: A translation to a person in charge of patch management.

Saturday, March 22, 2008 10:36 PM by Matthew Clapham

Apple sure doesn't understand enterprise usage scenarios even though some of their technologies are used in an enterprise (e.g. QT).  It'd be nice if they could hop on board the WSUS train or something like that.  I got so sick and tired of the Apple updated fiascos, I kicked it out of the home network.  No content is so compelling as to put up with that.  Furthermore, even in environments where the user doesn't have administrative rights the Apple Updater tries to push updates (and it isn't anywhere near as smoot an experience as Windows Update on Vista).  

Also, I'd much rather have IE or Firefox as a browser than Safari.  The former two browsers have been around much longer and have their security improvements much further along (with IE 7 in Windows Vista being the best given the protected mode).  Last I heard, Safari was still reinventing some of the same bugs that IE had fixed back in the version 5.5 days.  

# re: A translation to a person in charge of patch management.

Sunday, March 23, 2008 7:19 AM by Craig Brown

Apple have crossed the line with this one. Where does it end?

Say I have an antivirus program when I update is it OK for said company to install all there other software. If I take, for example, Symantec. I currently run Backup Exec on my server. Would it be OK for Symantec to install all there other server based programs (admittedly they would be trial versions) when I do this.  Clearly the answer is NO.

I would just like it if there was a simple way for end users to keep there systems up to date with the applications they do have installed. It been a long time, if ever, since I have seen a fully patched home user system. If im lucky they have Windows update turned and may even be updating there virus scanner but undoubtly they will have insecure applications such as older versions of java, flash, quicktime just to name a few.

This has to stop. It is impossible for end users to keep a machine

# re: A translation to a person in charge of patch management.

Monday, March 24, 2008 8:57 PM by Joe_Raby

BTW:  Do you ever notice that if you use Quicktime and install the (default option) Apple Software Update, that only the iTunes+QT package is listed?  I honestly think that the thing doesn't even track QT updates, but only iTunes ones.  If you only use QT, take my advice, and DON'T INSTALL APPLE SOFTWARE UPDATE - it does nothing for those that don't want iTunes.

Leave a Comment

(required) 
(required) 
(optional)
(required)