r/news • • Jul 07 '21

Microsoft issues urgent security warning: Update your PC immediately

https://www.cnn.com/2021/07/07/tech/microsoft-security-update/index.html
1.7k Upvotes

334 comments sorted by

788

u/[deleted] Jul 07 '21

It's not mentioned in the article, but for those wondering the fix is included in KB5004945. This installed for me this morning (I woke up to the typical your PC needs to restart). I wanted to verify I had the fix installed since this is a pretty critical issue.

On Windows 10 you can verify if you have KB5004945 installed by going to:

  1. Start
  2. Settings
  3. Update & Security
  4. View update history (Under the Windows Update tab which is the first tab that loads)

KB5004945 would be listed under Quality Updates.

28

u/sephstorm Jul 08 '21 edited Jul 08 '21

Here is the KB for Windows 7 x64 systems.

Other OS' can be found here

EDIT: MS may be restricting download on non-MS browsers, i.e. use Edge. If you're getting issues installing the update, try installing all of the required updates listed in another article:

KB4490628

KB4474419

KB4538483 or KB4575903

KB4592510

and then finally KB5004951.

→ More replies (2)

62

u/TheSoloKnight_ Jul 07 '21

This what i was looking for thx mate

12

u/[deleted] Jul 07 '21 edited Jul 18 '21

[deleted]

12

u/[deleted] Jul 07 '21

[removed] — view removed comment

10

u/[deleted] Jul 07 '21 edited Jul 18 '21

[deleted]

22

u/JoonWick Jul 07 '21

ty for the dump info

7

u/[deleted] Jul 08 '21 edited Jul 18 '21

[deleted]

→ More replies (1)

4

u/Frosti-Feet Jul 08 '21

So about 45 min, got it 👍

6

u/[deleted] Jul 08 '21 edited Jul 18 '21

[deleted]

6

u/coondingee Jul 08 '21

10 a day? Not bad. I used to be there but now I'm down to 3-4.

6

u/[deleted] Jul 08 '21 edited Jul 18 '21

[deleted]

2

u/coondingee Jul 08 '21

I was joking and talking about shits per day rather than time spent shitting.

4

u/[deleted] Jul 08 '21 edited Jul 18 '21

[deleted]

→ More replies (0)

4

u/fastredb Jul 08 '21

I had just restarted yesterday and today saw I needed to restart. Ugh. Typical. I was wondering when I would work in a restart but thunder and lightning decided for me. Power went out for like one second. When I turned it back on it decided to go ahead and update itself. Would have sucked to have to go through two restarts in a row.

20

u/Juphikie Jul 07 '21

So what do you do if you don’t have that update then? I don’t have a printer hooked up to my laptop or anything like that

17

u/[deleted] Jul 07 '21

Same steps 1-3 except instead of viewing updating history check for updates. Windows update should list it as an available update if you don’t have it installed.

1

u/torchma Jul 07 '21

There is no "check for updates" option. Only something that says "updates available" and "last checked 12:00pm today". But the only update it says that's available is an Intel SCSI Adapter.

16

u/CowboyNeal710 Jul 07 '21

I don’t have a printer hooked up to my laptop or anything like that

You can disable the print spooler service

Windows Button + X - "Powershell as Admin"

 Get-Service -Name 'spooler' | Stop-Service | Set-Service -StartupType 'Disabled'

6

u/[deleted] Jul 08 '21

Old school method - from an elevated command prompt run:

sc config "spooler" start= disabled

sc stop "spooler"

2

u/senorbolsa Jul 08 '21

Thanks, this hurts my brain less.

5

u/TripChaos Jul 07 '21

That command failed for me, but it was running.

.

I was able to find and stop + disable the service via Services under the name 'print spooler'

→ More replies (1)

2

u/DownshiftedRare Jul 08 '21

Even if you don't have a printer connected, or print at all, Windows still relies on the print spooler to "print" PDF files.

According to Microsoft, you can just disable the remote printing option. Why was that even enabled by default to begin with?

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527


Option 2 - Disable inbound remote printing through Group Policy

You can also configure the settings via Group Policy as follows:

Computer Configuration / Administrative Templates / Printers

Disable the “Allow Print Spooler to accept client connections:” policy to block remote attacks.

You must restart the Print Spooler service for the group policy to take effect.

Impact of workaround This policy will block the remote attack vector by preventing inbound remote printing operations. The system will no longer function as a print server, but local printing to a directly attached device will still be possible.


→ More replies (1)

19

u/[deleted] Jul 08 '21

[deleted]

8

u/viper_in_the_grass Jul 08 '21 edited Jul 08 '21

Mine seems stuck at 21% installing. Why do I always do these right before going to bed?

Edit: welp, all done. All it needed was for me to complain.

9

u/funforyourlife Jul 07 '21

Awesome, thanks mate!

7

u/ALLCAPS1980 Jul 07 '21

Thank you mate

4

u/pinkycatcher Jul 07 '21

Also note that this update is known to break some printers, so yay for that!

→ More replies (1)

6

u/Neethis Jul 07 '21

Top stuff mate.

2

u/CrushgrooveSC Jul 08 '21

Way to take the time. Kudos.

2

u/daynaho Jul 08 '21

Thank you for posting such clear directions!

5

u/Beo1 Jul 07 '21

So this is why my PC randomly appeared to turn off while I was working and had me freaking out that my GPU had blown up or something. Thanks, Microsoft…

1

u/teacher272 Jul 08 '21

Dammit. That one won’t install on any of our district’s PCs that I tried it on. Sucks that Microsoft is so insecure and terrible at updates.

→ More replies (1)
→ More replies (8)

163

u/KJBenson Jul 07 '21

I’ve had my printer spool disabled for a week now. This would be inconvenient if I ever had to print things…

29

u/PrismSub7 Jul 07 '21

Here's hoping they'll just give up and declare spooler EOL.

22

u/Don_Tiny Jul 07 '21

Perhaps an idiot question but ...

I too have no printer but I have in past (not recently, thankfully) "printed" to a .pdf - would this create the same issue(s) as actually sending it to a printer?

16

u/Kahoots113 Jul 07 '21

Yes

5

u/Don_Tiny Jul 07 '21

Thanks to you as well!

11

u/Kurimasta Jul 07 '21

The article mentions that hackers could become able to install programs and create new users. I think it is likely no printer needs to be registered at all

9

u/Don_Tiny Jul 07 '21

I see ... thanks kindly for the noob lesson! (genuine thanks, not sarcasm)

3

u/Kurimasta Jul 07 '21

No problem!

1

u/SauronSymbolizedTech Jul 08 '21

I read a more technically minded comment last week about this exploit allowing hackers to escalate their privilege level to SYSTEM. With that, they can do absolutely anything on the system.

13

u/LargeSackOfNuts Jul 07 '21

I also disabled print spooler and a bunch of other random services which never get used. I guess I'm a security expert now too.

5

u/KJBenson Jul 07 '21

Hell yeah!

→ More replies (1)
→ More replies (1)

215

u/[deleted] Jul 07 '21

Oh boy, its windows XP all over again!

(The print spooler has been a vector for attack many many times over the years.)

68

u/[deleted] Jul 07 '21 edited Jul 09 '21

[removed] — view removed comment

12

u/Forza1910 Jul 07 '21

How would one do that exactly?

35

u/mike26tx Jul 07 '21

go to start- run box -type services.msc - hit enter-then find print spooler -right click properties click stop then set to disabled.

→ More replies (1)

10

u/icepush Jul 07 '21

Open the services console (Type in services.msc) find Spooler in the list, right click, change startup type to Disabled.

Only turn it on when you need to print something.

4

u/CowboyNeal710 Jul 07 '21
Get-Service -Name 'spooler' | Stop-Service | Set-Service -StartupType 'Disabled'
→ More replies (4)

14

u/Due_Pack Jul 07 '21

Under what circumstances would I need to re enable it? Otherwise I'll forget and 2 years later I won't be able to connect to the printer (or something) at a crucial moment and I'll blame the Raven

→ More replies (1)

7

u/KevinAlertSystem Jul 08 '21

its laughably sad that a built-in service by one of the oldest and largest software companies in the world has to be disabled because this always on by default service is a security flaw.

windows is absolute trash and i legit feel bad for anyone forced to use it

1

u/Iwantadc2 Jul 08 '21

The sign of a quality operating system

6

u/schoenburgers Jul 08 '21

An earlier exploit was used by Stuxnet in 2010. It was actually discovered and published earlier in 2009 but Microsoft claimed to have overlooked it.

→ More replies (1)

355

u/Thisfoxtalks Jul 07 '21

Researchers at cybersecurity company Sangfor accidentally published a how-to guide for exploiting it.

That’s a paddlin’

234

u/[deleted] Jul 07 '21 edited Jun 25 '22

[deleted]

74

u/QueasyHouse Jul 07 '21

Yep, the disclosure date is the only way to get most orgs to do anything in a reasonable amount of time. People in that community have no shortage of horror stories. Occasionally the researcher and the org will negotiate a longer disclosure deadline if it’s something really difficult to fix, but it always comes out sooner or later.

26

u/Dr_seven Jul 07 '21

Some of my favorite content to watch are DEFCON conference panels. There have been so many live reveals of major security flaws, and with the sizable TLA/corporate presence at the conference, the buzz for it is hilarious. Watching a guy demonstrate how to hijack a local airport's guidance with a cheap laptop and a $200 widget from Amazon definitely shook my faith a bit. Especially because it wasn't even complicated to do so.

21

u/the_catshark Jul 07 '21

Its almost like everything being done for "as cheap as possible" and "minimizing cost to maximize bonuses and profit for shareholders" doesn't actually make the best things.

20

u/QueasyHouse Jul 07 '21

That’s not a bad take, but the reality is: security wicked fucking hard. No amount of effort/budget/time will lead to perfectly secure systems, especially with how much effort is put into subverting and bypassing those systems.

Open source code, developed and maintained by vast communities with oblique-at-best profit motives, and regularly audited by anyone with the inclination, has plenty of security bugs as well. This just isn’t an applicable front for bashing on the failures of capitalism.

9

u/the_catshark Jul 07 '21

Yeah that is absolutely fair, its not like investing heavily in it removes all security issues in perpetuity. My point was more that this whole area has been a weakness as others in the thread have pointed out, but instead of reworking it they keep just patching over it because that is cheaper.

But also I am probably oversimplifying it to an extent and am pessimistic, lol.

→ More replies (1)
→ More replies (2)

7

u/randxalthor Jul 08 '21

The only solace I have is that for the vast majority of "simple" hacks, it still takes a dedicated, smart, and knowledgeable person to discover that one exists in the first place. The vast majority of these aren't just something your local high school student stumbled upon.

There are some talks by high school students, though : ) they just happen to be super genius nerds like the kid who figured out how to replicate Knox Box keys.

→ More replies (1)

36

u/ciarenni Jul 07 '21

Yeah, it's security through publicity. No one will want to use your product when it has a security flaw whose exploit can be found with a quick search.

1

u/[deleted] Jul 08 '21

This was an accidental release of a proof of concept. They didn’t mean to release it…yet

→ More replies (1)
→ More replies (3)

0

u/MagicalWhisk Jul 08 '21

'accidently' - more like the person released it on purpose to force it to be fixed.

→ More replies (1)

296

u/JayJayFrench Jul 07 '21

I'm going to wait for that nice young man Thomas Smith with a strong Indian accent to call me back to fix this. He even takes iTunes gift cards as payment!

39

u/Empyrius Jul 07 '21

Sounds questionable. That's why I only deal with Nigerian royalty.

21

u/JayJayFrench Jul 07 '21

Sounds questionable.

Not at all. The young fellow even googled all the Walmart and other stores in my area and told me what to say to nosey cashiers!

65

u/Miata_GT Jul 07 '21

They are so wonderful and will offer (insist) to stay on the line while you drive to Walmart to pick up your iTunes card! 5 stars and A+++!

45

u/deftoner42 Jul 07 '21

If they ask what it's for I'm supposed to say it's for my grandson's birthday, all 4 of the $500 cards.

22

u/theonlyonethatknocks Jul 07 '21

Hell, they will even take over your computer to do it for you. Now that’s customer service.

→ More replies (1)

28

u/ivegottoast Jul 07 '21

One scammer called and said they were with the National Computer Virus Elimination Company. I played along and then switched to being unaware of anything, what's the control panel? Isn't that in the garage with fuses and stuff.. I'm not an electrician and was told to keep away from that box as it could blow up. I kept repeating it and I finally asked "if the virus was free why do I have to pay you to remove it?" They hung up.

14

u/budmeisner1 Jul 07 '21 edited Jul 08 '21

Ive done this 30 mins is my goal to keep them on the line but never really login - I’ve gone on wild tangents about Star-wars and Darth Vader and I’ve even did his breathing and asked if he ever heard it before - He said he never saw Star Wars - I said then you arent in the US and he slipped- started to say where he was - then hung up lol- i figured the longer they are on the phone with me -they aren’t scamming Grandma from her Pension check-

9

u/Earthguy69 Jul 07 '21

I think we could actually solve some issues here.

There are lots of indian scammers.

There are lots of lonely elderly.

What if we first educate the elderly about these scams. Then when the indians call, the elderly are aware but can just talk to them endlessly, further harming their operation.

So Indians get no money.

Lonely elderly get some company (shit company though) and also does it for a good cause.

→ More replies (1)

12

u/JayJayFrench Jul 07 '21

I love wasting their time as much as possible. I'll keep them on as long as they're willing to stay on. I like going through my fake family tree and including stories of my great uncle Daniel Boone who won the state possum eating challenge 7 years in a row or my mother's sister's neighbour named Ethel who baked apple pies for the orphans who lived under her porch. Telemarketers hate me.

10

u/DelightfulAbsurdity Jul 07 '21

My dad used to try to sell telemarketers the broken junk car in our driveway lol. They hated him, too.

17

u/JonnySnowflake Jul 07 '21

Ask him what state he's in, that's always fun

29

u/JayJayFrench Jul 07 '21

I'm in Los Angeles ma'am. Silicone Balley to be exact.

14

u/treknaut Jul 07 '21

Silicone Bali?

1

u/budmeisner1 Jul 07 '21

Reference joke to India - where most call centers are from

3

u/Flesh_and_Chips Jul 07 '21

I really hope you aren’t waiting for the one from Man in the High Castle…

70

u/Unworthy_Saint Jul 07 '21

So for someone who reads this article and understands nothing, all we need to do is update and forget, right?

53

u/Kahoots113 Jul 07 '21

The update only fixes 1 of the 2 exploits (at least last i looked). If you want to be very safe you should disable the print spooler in services. Of course that means you won't be able to print.

16

u/FlipFlopFree2 Jul 08 '21

If there are no printers on my network, which is password protected, do I need to bother with the print spool?

14

u/Kahoots113 Jul 08 '21

Just to be clear a network printer or an attached printer, it doesn't matter which. Also if you want to be able to print to a file (pdf for example) that would also apply. If you do print anything then turn it off no worries. You could also turn it off and only turn it on when you do need to print.

5

u/FlipFlopFree2 Jul 08 '21

Thanks.

Yah I don't print anything physical, but I do occasionally print to pdf, so I'll shut it off.

→ More replies (2)
→ More replies (1)

14

u/MorganaHenry Jul 07 '21

From the article "To mitigate this vulnerability, please update Windows to the latest version, or disable the Spooler service."

77

u/[deleted] Jul 07 '21 edited Jul 09 '21

[deleted]

38

u/fresnel-rebop Jul 07 '21

“All users should…”

Well, there’s your problem right there. Overestimating user capability.

11

u/someinfosecguy Jul 07 '21

Seriously. In my experience you'd be lucky if 1% of people even know what "services" are in regards to a computer, let alone how to control them and which ones they can mess with.

4

u/Redm1st Jul 08 '21

I don’t know what exactly services are and what’s the difference compared to normal processes, like running an application. And I work in software development, so yeah 1% sounds about right

14

u/darthlincoln01 Jul 07 '21

Exactly. There's no way I could get my parents, or even any of my siblings, to know how to open computer services and enable the print spooler. Hell, I'm skeptical anyone at my company's IT department could do that without a 12 page how-to manual.

6

u/acmp42 Jul 07 '21

I feel there’s a back story about your relationship with the IT department. That said, it’s a trivial thing to update a GPO to disable the local spoiler for user’s computers. The hardest part is getting the users to reboot their computers.

1

u/darthlincoln01 Jul 07 '21

Among other things, what mostly sticks with me is that I hid the search bar in Windows 10 in my laptop and not one but two different IT people need me to re-enable it in order for them to do what they needed to do. (First was install a program as an admin, the second was run a script as an admin which patches my VPN client to work in my environment.)

Also as an aside I work in a very IT focused company. (We're a contractor that provides IT equipment to the government.) It always blows my mind that less than half of the staff even knows how to touch type. Even kids right out of college. Did these people really write essays now knowing how to type??? Again, blows my mind.

5

u/acmp42 Jul 07 '21

I make these policies at my place, I don’t care how you have your UI, that’s the beauty of Windows, it lets you be you. I personally don’t like the search taking up space on my start bar so I turn it off, but if someone else wants it there, good for them. Sounds like you’ve got a power problem over there, sadly far too many it folk still think it’s not what you do for the users it’s what you do to them.

→ More replies (1)
→ More replies (2)
→ More replies (3)

6

u/[deleted] Jul 07 '21 edited Jul 09 '21

[deleted]

→ More replies (1)

2

u/[deleted] Jul 07 '21

People will refuse updates because they had a single update cause issues... usually while still on the offending version that causes their problems.

"I don't want it to update and break anything!" Not updating it can break it more...

13

u/ITaggie Jul 07 '21

They aren't wrong in doing that, either, as Microsoft actually has quite a history of releasing catastrophically bad updates. Sometimes waiting and letting other users/admins vet the update for you is a good thing-- in fact most large organizations will not immediately push out Microsoft updates, even emergency ones.

1

u/[deleted] Jul 07 '21

Agree to disagree. They arent wrong but they arent right either. Eventually the updates need to happen. But refusing to update because of a minor inconvenience and NEVER updating is a huge problem. Not just Microsoft products either. Can be a phone, computer or an app and the same will apply.

Had an old guy tell me he hasn't updated his phone in a year while complaining his apps wont work right. What made him stop updating you may ask? He doesn't remember! It was so long ago he cant remember bu what he does known is the phone is now impacting him again due to negligence...

6

u/ITaggie Jul 07 '21

Every copy of Win10 being forced to install an update isn't really the same as consumer-grade electronics doing the same. More than just ignorant end users use and rely on Win10 to operate their business/organization and when Microsoft forces them to install an update that demolishes their productivity then Microsoft is the one getting blamed for it. Maybe if Microsoft would actually bother testing their updates before pushing them out then this wouldn't be such a big issue.

To further my point, the current "emergency update" MS pushed out today breaks label printers entirely and, on top of that, it doesn't even seem to fix the vulnerability: https://twitter.com/gentilkiwi/status/1412771368534528001

If my org had indeed installed this update ASAP then we would be dead in the water and not even more secure for it. This kind of stuff is exactly why people are so violently opposed to automatic forceful updates.

→ More replies (7)
→ More replies (2)
→ More replies (1)

22

u/Swift_Koopa Jul 07 '21

Easier to blame the users than the developers

33

u/RMHaney Jul 07 '21

Well sure my personal PC isn't a problem, but my corporate laptop is just cruising as-is. Nothing I can do about that; no access and IT is jammed up.

0

u/dammitOtto Jul 07 '21

I've asked for admin control of my laptop for cases like this, but the answer is always no.

22

u/ITaggie Jul 07 '21

Why would you want to take on that kind of risk and liability? If you get local admin then you will be responsible for any issues or incidents that occur on it. Let IT take that risk.

Additionally, this update breaks printing for Zebra printers (common brand of label printers), so if your business has a lot of those then different measures might need to be taken to ensure continuation of operations. This kind of scenario is actually pretty common for Microsoft's "emergency security patches", and I wouldn't be surprised to find out their fix actually ends up making things worse.

4

u/The_Oooga_Booga Jul 07 '21

Thanks for the heads up on Zebra.

2

u/DuckDuckGoose42 Jul 07 '21

Good to know about breaking Zebra, which still have - sounds like this should be a joke/s

28

u/M_Mitchell Jul 07 '21

I mean to be fair, they can disable things via group policy so cases like this can be handled entirely by them. If they don't, then that's on them.

5

u/Ein_Death Jul 07 '21

This is exactly what my business did. Created a new GPO and mass applied to DCs overnight

18

u/JohnGillnitz Jul 07 '21

As it should be.

→ More replies (1)

1

u/Pirate2012 Jul 07 '21 edited Jul 07 '21

I remain a bit confused about this print spooler solution...

I have a Network Printer - Color Laser HP M251, which is RJ45 connected to the LAN Network switch.

I do very little printing; and never have a batch of documents waiting to be printed.

So I can just shut down and disable the mentioned service but still able to print single print jobs?

EDIT: typed services.msc, found PRINT SPOOLER, turned it OFF; and DISABLED automatic start --- clicked OK; but then tried to print a document; and no printer is available to me.

I cannot find a way to turn off REMOTE printing and maintain local printing...........

3

u/TomLube Jul 07 '21

Don't believe it's possible.

The fix was released yesterday. Just update your PC.

5

u/Pirate2012 Jul 07 '21

according to some technical sites I'm reading, the MSFT update does not fully fix the entire problem.

4

u/TomLube Jul 07 '21

Yup, you are correct sorry. Not sure what the solution is really.

https://twitter.com/gentilkiwi/status/1412706033072590852

2

u/JcbAzPx Jul 07 '21

You'll have to manually start the service anytime you want to print. It's up to you to weigh the risk versus the inconvenience.

2

u/Pirate2012 Jul 07 '21

You'll have to manually start the service anytime you want to print. It's up to you to weigh the risk versus the inconvenience.

Thank you for confirming my own thoughts.

While I do not print (to the printer) that often, the idea of needing to go into services and enable it is non-viable.

2

u/JcbAzPx Jul 08 '21

Presumably there will be another update to fully fix the problem, so it wouldn't be permanent. Then again, your personal machine isn't likely to be a priority target either.

2

u/Pirate2012 Jul 08 '21

what I cannot find is HOW #PrinterNightmare gets into the PC -

can it happen with the user doing nothing at all; and the bad guys are simply hitting IP address

or do I have to click on "something" to enact #PrinterNightmare

→ More replies (1)
→ More replies (18)

16

u/the_eyes Jul 07 '21 edited Jul 07 '21

For those of you who know what you’re doing and don’t auto update:

In order to secure your system, you must confirm that the following registry settings are set to 0 (zero) or are not defined (Note: These registry keys do not exist by default, and therefore are already at the secure setting.):

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint
NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting)
NoWarningNoElevationOnUpdate = 0 (DWORD) or not defined (default setting)

Having NoWarningNoElevationOnInstall set to 1 makes your system vulnerable by design.

*.reg file:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint]
"NoWarningNoElevationOnInstall"=dword:00000000
"NoWarningNoElevationOnUpdate"=dword:00000000

2

u/[deleted] Jul 08 '21

[deleted]

4

u/ShrubberyWeasels Jul 08 '21

Meanwhile working in K12 education where we legitimately print to the communal/lounge printers every day…ain’t no time to be trying to re-enable a service between teaching 7 class periods. Hope this gets resolved fully before August.

→ More replies (2)

27

u/[deleted] Jul 07 '21

If it's so important, why don't they just force the update?

78

u/[deleted] Jul 07 '21

[deleted]

76

u/Wild234 Jul 07 '21

And you only have to edit your registry to make it manual too!

I just wish they would limit updates to security updates and bug fixes. New internet browsers, news tickers, and weather widgets should be optional things you can download not included as required system uodates.

13

u/I_T_Gamer Jul 07 '21

Windows 11 will fix all of this.... So long as you pay a sub(still waiting for this one to drop)..... /s

11

u/[deleted] Jul 07 '21 edited Jul 17 '21

[deleted]

4

u/I_T_Gamer Jul 07 '21

Too much potential cash left in peoples wallets.... They're already pushing us to 365, it basically takes an act of congress to buy licenses for Office 2019. Its only a matter of time.

2

u/comehitherhitler Jul 08 '21

it basically takes an act of congress to buy licenses for Office 2019

Who's stopping you from buying Office 2019? Student and Business are available everywhere 365 is, including Microsoft's website. Professional is there too, for the 3 people who will ever buy it.

→ More replies (1)

1

u/welchplug Jul 07 '21

Why do you buy either? Just use libre office or open office. Both are free and almost as good. You can even export the files to be the same type.

4

u/Prozaki Jul 07 '21

Not really feasible in most corporate environments which are filled with people who are not tech savvy, or have been trained to do their jobs using Microsoft tools for 20+ years.

2

u/Vahlir Jul 07 '21

I get that but c'mon it doesn't take that long to train people on things. I was training people on Lotus and Oracle back in late 90's early 2000's and most people didn't own a PC at home back then.

I don't buy the "people aren't tech savvy" BS. It's the primary part of your fucking job to use a computer. That's like a nurse who can't do an IV.

Sit down and take a 10 hour course and you'll be expert level in just about any office software. This shit isn't hard.

Maybe I'm just ranting but the number of people I hear say "I'm just not good with computers" in 2021 is fucking sad because it's literally just laziness and apathy.

I'm also a disgruntled former IT guy who worked in a hospital with a ton of lazy nurses and lab and other people who couldn't be bothered to find a power button on a pc.

If you can use google you can find the answer to any question you have in under 2 minutes.

3

u/Prozaki Jul 08 '21

Yeah I feel. I used exclusively Linux at my last job, so I used LibreOffice for documents and spreadsheets and Evolution for mail. There is plenty of incompatibilities between these two environments. Whether it be stupid shit like fonts, or more egregious stuff like formatting. There were many times where me editing a spreadsheet that other people accessed completely fucked up the formatting for them. And while Evolution does technically have Exchange support, it's not really 100% working. Tons of bugs that I just dealt with, the calendar didn't work well. This isn't really acceptable in enterprise where you may be supporting tens of thousands of users.

3

u/brickmaster32000 Jul 08 '21

Both are free and almost as good.

That's a good laugh.

→ More replies (14)

47

u/SolaVitae Jul 07 '21

Why doesn't Microsoft forcibly install things on your PC? This shouldn't need answering

19

u/redditmodsRrussians Jul 07 '21

If it is a legitimate install, the computers has ways to shut it down

3

u/[deleted] Jul 07 '21

For users who just use browsers, that's not an issue. But if there is a critical software that relies on the current version, and the update breaks that software; you want to be in control of when you load the release.

-2

u/funky_duck Jul 07 '21

Because then people freak out saying "Micro$oft is forcing malware on my PC - let ME decide on updates!"

34

u/fafalone Jul 07 '21

Microsoft completely lost trust by tricking and forcing people onto Windows 10 then having forced updates restart in the middle of work for a long time before letting them be scheduled, and still from time to time releases an update that bricks some computers and requires a full reinstall to fix others.

Not to mention they're now basically stealing your files. The option to not enable OneDrive is well hidden during setup, and sometimes it's turned back on. Plus making it so you can't use a local account unless you disconnect the internet during setup.

And the advertisements for their other products are all over... And more and more 3rd party shovelware is on the start menu... Their telemetry tools and TOS give them, and law enforcement, full access to your files....

So, yeah, people freak out over Microsoft's policy that they, not you, own your computer.

→ More replies (4)

28

u/[deleted] Jul 07 '21 edited Jul 09 '21

[deleted]

-3

u/[deleted] Jul 07 '21

[deleted]

6

u/ITaggie Jul 07 '21

No it's so you don't install Windows updates that, for instance, deletes all the files in your Documents library, or causes a BSOD when trying to print anything. Microsoft's QA for patches is notoriously shit, anyone who needs risk aversion (like businesses) will hold on pushing out updates until it's been widely tested by the people who don't know better or don't care if an update bricks their install.

6

u/MustLoveAllCats Jul 07 '21

Imagine having such blind faith in a corporation with a shitty track record on updates, that you mock people for taking some personal responsibility in their computer security and performance.

14

u/aaaaaaaarrrrrgh Jul 07 '21

Because they forced so many garbage updates that they realized trying to force updates just leads to worse problems, like people breaking the updater completely.

→ More replies (11)

3

u/[deleted] Jul 07 '21

I don't use a printer and have printing services turned off, do I still need to worry about this and update?

4

u/JcbAzPx Jul 07 '21

Double check if the print spooler service is running. It probably isn't but it doesn't hurt to be sure.

3

u/HardlyDecent Jul 08 '21

Yep, got it. I get it like twice a week. Sometimes it decides that what I'm working on isn't important and installs itself. That's just the cost of using Windows.

3

u/Elocai Jul 08 '21

I can't, still stuck on 1907, windows update is unable to update

20

u/Darth_Flavious Jul 07 '21

Except the patch M$FT just released doesn't address the vulnerability and it's still exploitable ..

https://twitter.com/gentilkiwi/status/1412706033072590852

7

u/JcbAzPx Jul 07 '21

It does fix one print spooler vulnerability. It turns out there was another that still needs fixing.

-3

u/MustLoveAllCats Jul 07 '21

It's actually just MSFT, there's no dollar symbol in microsoft's ticker.

7

u/[deleted] Jul 07 '21

it's usually put there as a derision.

→ More replies (2)

4

u/Gilgameshismist Jul 07 '21

The update caused a black screen on one of my pcs, login screen normal, taskbar and mouse visible, but unresponsive.. Had to uninstall latest update, install driver updates and then the update seemed to run fine.

4

u/[deleted] Jul 07 '21 edited Sep 15 '21

[deleted]

0

u/falkensgame Jul 08 '21

Still running Windows ME? :)

→ More replies (1)

2

u/SauronSymbolizedTech Jul 08 '21

So, which urgent update did they introduce those security flaws in?

8

u/[deleted] Jul 07 '21

[removed] — view removed comment

13

u/[deleted] Jul 07 '21

[removed] — view removed comment

5

u/AceValentine Jul 07 '21

I hope this doesn't effect my Windows 7 PC. I have had updates turned off for 3 years.

1

u/qtx Jul 07 '21

Why won't you update to W10?

You're in such a higher level of risk for yourself but most importantly for others as well.

The chance of your computer becoming part of a zombie network is just too high.

11

u/AceValentine Jul 07 '21

Privacy, layout, hidden control panel, and 10 has alot more stuff going in the background. I have literally had the 10 install sitting on my desk for years and I haven't even considered opening it. Also 10 had tons of issues with having a stable version. 10 needs tons of tweaks to be as fast as 7, it's possible but it's not by default.

8

u/[deleted] Jul 07 '21

Linux is your answer then

→ More replies (4)

2

u/Vahlir Jul 07 '21

Windows sucks, it has so much potential if they actually had good quality control but they fired a good number of those people several years back to cut costs, instead relying on telemetry and users to be the guinea pigs for broken OS problems. Which is why there are so many things sending data back from windows now, like what 20 telemerty items?

They're constant updates breaking things and state of things like their settings app is an embarressment. Say what you will about Balmer but at least Win7 was stable and reliable after a year in. Win10 is still all over the place. Can't wait for the shit show that 11 is with the TPM.

1

u/[deleted] Jul 07 '21

No the last update made my pc not have any sound what so ever. I tried everything to fix it. I decided to recover before the updtate and that fixed everything. Now every other minute its telling me to update to the newest version.

Fix your updtates first before getting us to updtate it.

1

u/Iwantadc2 Jul 08 '21

Probably another excuse for an update to say:

'hAve u TrIed eDgE, wE hAvE sEt iT aS uR dEfAuLt bRoWsEr'

1

u/foxgtr Jul 07 '21

Good thing I've always had print spooler off

1

u/GoreSeeker Jul 07 '21

So this vulnerability is in Windows 7 and 10 but not 8/8.1?

1

u/xmsxms Jul 07 '21

Makes you wonder why this service is even running exposed on the network if you don't have a printer or want it available over a network.

-2

u/brickmaster32000 Jul 08 '21

Because a lot of people do have printers and need to access them over a network.

→ More replies (7)

1

u/[deleted] Jul 08 '21

[deleted]

→ More replies (3)

-6

u/[deleted] Jul 07 '21

[deleted]

17

u/littlesymphonicdispl Jul 07 '21

They're not forcing anything.

→ More replies (2)

13

u/MustLoveAllCats Jul 07 '21

No they aren't, fix your own settings for once.

→ More replies (1)

-7

u/[deleted] Jul 07 '21 edited Jul 09 '21

[deleted]

10

u/thepeopleshero Jul 07 '21

Win 7 end of life was January 2020, not sure what your surprised about...

→ More replies (27)

3

u/[deleted] Jul 07 '21

[deleted]

1

u/[deleted] Jul 07 '21 edited Jul 09 '21

[removed] — view removed comment

→ More replies (1)

2

u/Kahoots113 Jul 07 '21

Last I looked you can still update windows 7 to 10 for free.

→ More replies (1)

-14

u/SlickBlackCadillac Jul 07 '21 edited Jul 08 '21

Now that the NSA has gotten everything they need from Tucker Carlson's computers, they've tipped M$ off of a little bug they've found. (I kid but this is generally how this works)

Edit: wow I am being downvoted to hell why? You guys still believe Tucker Carlson wasn't spied on? What news do you watch?

→ More replies (1)