Questions tagged [updates]
The updates tag has no usage guidance.
18
questions
38
votes
8
answers
6k
views
Why is it a security problem not to update one's browser?
Is it in general a security problem not to update your browser. Firefox constantly prompts me to update my browser, but how dangerous is it to not update?
As part of this question, I would like to ...
103
votes
19
answers
16k
views
How to explain to traditional people why they should upgrade their old Windows XP device?
This is an issue I'm recurringly facing: older people from my family (or people who my family members know) can be surprisingly reluctant to apply most basic security measures when they're using their ...
3
votes
3
answers
618
views
Is it more secure to apply updates as soon as they get released? [closed]
Is it more secure to apply updates as soon as they are released, or wait to make sure the updates are not causing problems to the system. It might sound stupid but in the last few years I heard about ...
3
votes
2
answers
3k
views
Is it OK to not update devdependencies?
When checking third party libraries used in package.json and build.gradle files with tools such as Snyk, they allow the option to check for devdependencies. A lot of the time there is vulnerabilities ...
2
votes
2
answers
846
views
Is there a microcode or other hardware fix for Meltdown?
Linked to my question here, the MS support page states
In addition to installing the January security update, a processor
microcode update is required.
But previous articles I've read said ...
2
votes
1
answer
333
views
How to ensure Windows 10 is safe from critical security hole reported by NSA on 2020-01-14?
All over the news today (2020-01-14) is the story that the NSA and Microsoft have reported a critical security vulnerability in Windows 10.
But I haven't been able to find clear instructions about ...
57
votes
3
answers
10k
views
My Android phone is vulnerable, but there are no updates?
I bought brand new HTC Desire 526G with operating system 4.4.2 (Kitkat), everything is as it should be (not rooted) so it is still on factory settings.
But now I didn't get for a long time any ...
52
votes
10
answers
20k
views
Replacing Windows 7 security updates with anti-virus?
Microsoft has announced Windows 7 will no longer be receiving updates after January 14, 2020: Here.
I hate windows 10's forced updates and telemetry so I have always stuck with Windows 7, but it may ...
32
votes
4
answers
1k
views
Android security without updates
I have an android phone which, like many others, has quickly become unsupported and is not receiving any updates. At the same time there are publicly available exploits for privilege-escalation ...
12
votes
9
answers
3k
views
Where to download OpenBSD release ISO's over HTTPS?
OpenBSD claims to be highly secure. So why doesn't it allow downloading the release iso's over HTTPS? Or I'm missing something? Can someone please explain this to me?
10
votes
2
answers
3k
views
Are devDependencies in Node.js exploitable?
I am well aware that the best approach is to update any dependency, no matter whether it is a development dependency or a runtime/production dependency.
But from a research prospective, I want to know ...
8
votes
4
answers
1k
views
DNS spoofing of linux distribution repositories
Question(s)
Is it possible to "redirect" linux-update-repos via DNS spoofing (e.g. DNS cache poisoning) to a malicious website, so that harmful software (updates) will be installed, when ...
8
votes
3
answers
4k
views
Is there any way to use Nuget securely?
Visual Studio now includes a Package Manager that downloads and updates software packages from the internet. The common name for this is "Nuget"
The problem I have is that anyone can pretend to be ...
6
votes
6
answers
3k
views
Best source(s) for security related news? [closed]
What is the best place to go for security news? I am looking for everything from news updates to editorials to guides and research. Anywhere considered more reliable or particularly hard-hitting?
...
3
votes
2
answers
3k
views
Using Window Servers 2003 after security updates are discontinued
Let's say that Microsoft has stopped supporting Windows Server 2003 now so there is no any security updates and I use that system for Domain Controller (Windows XP/7 Professional Clients) and File ...
3
votes
3
answers
2k
views
How important is patch management?
Problem
I'm trying to sell the idea of organizational patch/update management and antivirus management to my superiors. Thus far, my proposition has been met with two responses:
We haven't had any ...
2
votes
4
answers
320
views
Patch management for avoiding issues like EternalBlue [closed]
Following the 2017 WannaCry attack against big institutions like the NHS or Telefónica did not apply the Microsoft security patches associated with EternalBlue and were forced to deal with a ...
0
votes
1
answer
139
views
Software update process (dependencies) in organization
Wondering how other organizations manage software update process.
We are a startup, were we try to define components owners, which should update them (security updates etc).
This does not to seem to ...