What guarantees that Updates are really from Microsoft?

If an update comes as an attachment to an email, do not install it.
Chanches are it's a virus.


--
Don
Vancouver, USA


"Earl Partridge" <(E-Mail Removed)> wrote in message
news:eg5li.6976$(E-Mail Removed)...
> What guarantees that Updates are really from Microsoft?
>
>

Earl Partridge wrote:
> What guarantees that Updates are really from Microsoft?

Can you be more specific?

If you visit http://windowsupdate.microsoft.com/ <-- pretty good chance the
updates are from Microsoft.

If you are using Automatic Updates in some fashion <-- pretty good chance
the updates are from Microsoft.

If you manually visit the Security Bulletin or Knowledge Base Article at
Microsoft's web pages and download the file <-- pretty good chance the
updates are from Microsoft.

However - your question is too open-ended to say that *your* updates are
from Microsoft.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

OK, I have automatic updates turned on so that I am notified when updates
have been downloaded, leaving it to my option as to say go ahead and install
them. What's to prevent some hacker from sending out "updates" disguised
as coming from Microsoft? In other words, is the update section of XP, or
any
other version, geared to authenticate the received updates are in fact from
Microsoft?

I did have automatic updates turned off and I would periodically visit MS to
download updates. However, with updates turned off, all the settings I did
to stop those constant reminders about my update status never worked.

Earl



"Shenan Stanley" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Earl Partridge wrote:
>> What guarantees that Updates are really from Microsoft?
>
> Can you be more specific?
>
> If you visit http://windowsupdate.microsoft.com/ <-- pretty good chance
> the updates are from Microsoft.
>
> If you are using Automatic Updates in some fashion <-- pretty good chance
> the updates are from Microsoft.
>
> If you manually visit the Security Bulletin or Knowledge Base Article at
> Microsoft's web pages and download the file <-- pretty good chance the
> updates are from Microsoft.
>
> However - your question is too open-ended to say that *your* updates are
> from Microsoft.
>
> --
> Shenan Stanley
> MS-MVP
> --
> How To Ask Questions The Smart Way
> http://www.catb.org/~esr/faqs/smart-questions.html
>

Earl Partridge wrote:
> OK, I have automatic updates turned on so that I am notified when
> updates have been downloaded, leaving it to my option as to say go
> ahead and install them. What's to prevent some hacker from sending
> out "updates" disguised as coming from Microsoft? In other words,
> is the update section of XP, or any other version, geared to
> authenticate the received updates are in fact from Microsoft?
>
> I did have automatic updates turned off and I would periodically
> visit MS to download updates. However, with updates turned off,
> all the settings I did to stop those constant reminders about my
> update status never worked.


Automatic updates are handled essentially in the same way that your web
browser uses to visit web sites. That means you're not "opening up" any
additional vulnerabilities by enabling automatic updates. There are also
checks and balances throughout the updating process - things are not just
'willy-nilly' installed - no matter what your setting. I would say your
risk is greater clicking on an emailed attachment, not being behind a
firewall or visiting a malicious web site.

Is it possible?

Yeah - someone I guess could hack into your computer - change it if they
knew enough, get you to download from elsewhere, get passed the checks and
balances and start pushing things to your machine. That's one of the
reasons why I recommend setting your automatic updates to "Download and
Notify" - then you can do a custom install and view everything you are about
to install and check on the validity/need for each update.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html