Author Topic: "Check for safe updates" confusion  (Read 5810 times)

0 Members and 1 Guest are viewing this topic.

Offline Basil

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 564
  • Formerly known as gr277
    • View Profile
"Check for safe updates" confusion
« on: March 25, 2014, 08:55:33 AM »
My Windows Vista, is always fully updated.

When checking for safe updates, WinPatrol tells me:

"There is a newer version of Internet Explorer.
You have version: 9.00.8112.16421
Microsoft has version 11.00.9600.16521 available for download.
Click Here to Download Directly from Microsoft."

Using Pale Moon as default browser, I save installer on desktop. I then, click on installer icon, to continue with installation/set up, and I am told:

"Internet Explorer did not finish installing.
Set-up can't continue because a more recent version of Internet Explorer is installed on your computer."

Using IE9 , I am told:

"Thanks!
You are using Internet Explorer 9, the latest browser for Windows Vista."

I don't get totally confused, too often...but this time, I am... :wub:

Is Scotty incorrect telling me that I need to update my Internet Explorer? (I very much doubt it!.. :))
If Scotty is correct, why can't I update and the system behaves like I have the latest version of IE for Vista?

P.S. Not sure I have this posted in the correct section... :(

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7424
  • Liverpool FC - YNWA
    • View Profile
Re: "Check for safe updates" confusion
« Reply #1 on: March 25, 2014, 11:24:38 AM »
IE9 is the latest version available for Vista.  Bill was notified of this "bug" on the day of release, and no doubt will have Scotty behaving properly in short order.  I'll ask Corrine to shoot him a note about your thread ...

This "mis-reporting" is not unique to WinPatrol.  There are a dozen sites I visit daily that put up a banner bugging me to update to a new version of IE.  It seems they also just check my version of IE versus the latest release without regard to whether the OS will support it or not.
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Basil

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 564
  • Formerly known as gr277
    • View Profile
Re: "Check for safe updates" confusion
« Reply #2 on: March 25, 2014, 02:01:29 PM »
Thank you winchester73. I got worried for a moment.... :mitch:

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20789
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: "Check for safe updates" confusion
« Reply #3 on: March 25, 2014, 06:26:51 PM »
Bill is aware of this now.  Thanks for the report!

Aside from IE, currently Safe Update is checking Adobe Flash and Oracle Java.  Bill is considering Adobe Reader/Acrobat.  I've suggested Shockwave Player and Adobe AIR.  What else would you like to see added, if it is feasible to include? 


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline LilBambi

  • LzD Friends
  • Sr. Member
  • *****
  • Posts: 488
    • View Profile
    • LilBambi's BambisMusings Blog
Re: "Check for safe updates" confusion
« Reply #4 on: March 26, 2014, 12:01:28 AM »
All of those you mentioned would be great Corrine!

But since Bill is adding some...

1. Quicktime
2. iTunes
3. Java
4. Silverlight
Bambi
AKA Fran
Jim-Fran.com

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20789
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: "Check for safe updates" confusion
« Reply #5 on: March 26, 2014, 12:29:34 AM »
Good suggestions!  I don't know how complex Bill wants to make the Check for Safe Updates but will pass your suggestions along!

I don't have Java installed so it didn't show up when I checked but I believe it is included.  I particularly like Quicktime & Silverlight being included. 


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline LilBambi

  • LzD Friends
  • Sr. Member
  • *****
  • Posts: 488
    • View Profile
    • LilBambi's BambisMusings Blog
Re: "Check for safe updates" confusion
« Reply #6 on: March 26, 2014, 12:40:50 AM »
Thanks Corrine!  :mitch:
Bambi
AKA Fran
Jim-Fran.com

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7424
  • Liverpool FC - YNWA
    • View Profile
Re: "Check for safe updates" confusion
« Reply #7 on: March 26, 2014, 01:04:30 AM »
Skype?
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Basil

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 564
  • Formerly known as gr277
    • View Profile
Re: "Check for safe updates" confusion
« Reply #8 on: March 26, 2014, 07:35:08 AM »
SpywareBlaster?

This, however,  is not meant as a criticism, far from it....... but I am starting to get a little concerned that WinPatrol is beginning to get a little too big/involved and diversifying away from its original concept/purpose.

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 703
    • View Profile
Re: "Check for safe updates" confusion
« Reply #9 on: March 26, 2014, 10:03:55 AM »
There has to be a line drawn, otherwise the SAFE UPDATE checker will just grow to duplicate other programs.

For example, Avast 8 and 2014 "bloated" to include a Software Updater module, and many users questioned this addition to an anti-virus program.

Personally, I prefer to run Secunia's PSI (Personal Software Inspector), which finds SECURITY updates for just about all the programs on my PC http://secunia.com/vulnerability_scanning/personal/

Alternatively, for those who are interested in ALL program updates available (regardless of whether the update is security based), you can use FileHippo's Update Checker http://www.filehippo.com/download_update_checker/

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7424
  • Liverpool FC - YNWA
    • View Profile
Re: "Check for safe updates" confusion
« Reply #10 on: March 26, 2014, 11:31:00 AM »
Good point about Secunia  :thumbsup:

Perhaps WinPatrol should only focus on itself and vital OS components?
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20789
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: "Check for safe updates" confusion
« Reply #11 on: March 26, 2014, 02:10:27 PM »
From what I read about the addition of the Check for Safe Updates feature in WinPatrol, the purpose isn't to be all inclusive.  Rather, the point is to include highly targeted programs that are found on the majority of Windows computers, thus why IE is listed and the plan to add Adobe Flash.  As Bill said,
Quote
"Even legitimate company websites like Oracle have partnered with search toolbar and anti-virus companies. They receive revenue if they can get you to agree to installing software when you are notified you need to download a new version of Java."

There won't be toolbars or other unwanted extras offered with the likes of Spyware Blaster and it isn't a malware target like Adobe products and Oracle Java.  So, rather than products we use that we'd like to make sure have the most current version installed, which programs are "targets" and receive security updates, not version updates?

What about this list?

1.  Adobe Flash Player
2.  Adobe Reader/Acrobat
3.  Adobe AIR
4.  Oracle Java
5.  Quicktime
6.  Silverlight
7.  Skype



Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 703
    • View Profile
Re: "Check for safe updates" confusion
« Reply #12 on: March 26, 2014, 03:46:36 PM »
Java is by far the single-most problematic program that needs attention http://www.securelist.com/en/analysis/204792318/Kaspersky_Security_Bulletin_2013_Overall_statistics_for_2013#06

Beyond that, we're looking for common programs (high market share) that have significant vulnerabilities.   The following data is about a year old... perhaps someone can link to something more recent:   http://secunia.com/?action=fetch&filename=PSI-Country-Report-(GB)-(2013Q1).pdf

So it would seem the primary candidates would be
Java
key "Windows Components" [articles mention win32k.sys & MS-XML Core Services] (if feasible)
Adobe Reader
Internet Explorer
Adobe Flash

For WinPatrol, monitoring that small group might be all that's really warranted.

If you want to go beyond that, I guess AIR, QuickTime and iTunes might be next???

Offline LilBambi

  • LzD Friends
  • Sr. Member
  • *****
  • Posts: 488
    • View Profile
    • LilBambi's BambisMusings Blog
Re: "Check for safe updates" confusion
« Reply #13 on: March 26, 2014, 07:58:02 PM »
Sounds real good to me.

I personally would swap Reader and Flash, but that's me.
Bambi
AKA Fran
Jim-Fran.com