Fri, Jul 31 2009 17:29
bradley
Patchers Demand Security Updates Only
Spread the word. If you want to put in your blog site a campaign to showcase that you too are sick and tired of prechecking of software installers that are included in security updates.
Put this code below into your blog site (in Community Server it's in the News section) to showcase that you have had it with vendors that are sneaking software onto consumer machines in the guise of security updates.
=====start here=====
<a href="http://www.bleepingcomputer.com/blogs/mowgreen/index.php?showentry=1564"><img src="http://imk3xq.bay.livefilestore.com/y1p1UoWJx5pbfw0Eua0Ybyw20g4Nb3NSaNwtb57Dy3ITBVUguIg513j_SoQHAjUuLg0RuhDZVbD8AMTDiUbDfNb92wldtgJuOGU/banthechecksmall.PNG" alt="[Security updates should only offer Security updates]" title="Let's get vendors to stop offering toolbars and extra software with Security Updates" border="0" /><br /><br />
=====stop here=====
It will resolve into that red banned check logo you now see on the left side of the blog and point to Steve Wechsler's campaign to stop vendors from doing this.
As Bill Sanderson said it best (inspired by Steve Wechsler) .... "It's time for security folks to come to a united front on this issue--Microsoft is guilty as well, with their toolbar installs pre-checked on certain Java updates.
In addition to an update process which is technically secure--(I think the community is pretty clear on this)--the process needs to be one consumers can trust--and that trust is violated when non-security related updates or add-ons are offered as part of what is fundamentally a security update process.
Microsoft's own update process does this well. We need to convince the competition that they don't need that crutch to get their product out there."

Filed under: Security