Windows Update pushes out "stealth" updates, Microsoft explains

Microsoft kicked up a bit of a stir recently, when it began what appeared to be a practice of updating files on individuals' computers even when they had turned off the automatic update feature in Windows XP and Vista. That first came to light courtesy of the folks at the "Windows Secrets" newsletter, which found that nine files in XP and Vista were changed on or after August 24th, with no notification of the changes in Windows whatsoever. That was later confirmed by ZDNET's Hardware 2.0 blog, which tracked down the affected files and also pinpointed the update date as August 24th. Now, Microsoft has come out and explained itself, saying that the updates weren't really updates for Windows, but rather updates for Windows Update itself, which apparently didn't merit a notification. The company does admit that it could have been more "transparent" about the matter, however, and says it's now "looking at the best way to clarify" the behavior of Windows Update.

[Thanks, Robert J]

Read - Computerworld, "Microsoft changes Windows files on user PCs without permission"
Read - ZDNet Hardware 2.0, "Confirmation of stealth Windows Update"
Read - ITWorld, "Microsoft: 'Secret' updates were for Windows Update itself"

[rfv @ Sep 13th 2007 4:19PM]

looks like the need to update the updater code for windows update...

[Simon @ Sep 13th 2007 4:20PM]

Absolute bull****. When i first ran Windows Update on my new laptop, I was notified that Windows Update needed updating.. I agreed, and it was then updated. Why should this have changed since?

[John @ Sep 13th 2007 4:33PM]

While I do not agree that this is bull, it is rather shady. It does seem odd that something like this can go through to update Windows Update and yet there are updates we have to agree to to simply use Windows Update. Hmmm....?

[bob e @ Sep 13th 2007 4:20PM]

I for one really appreciate these updates!

[Brad @ Sep 13th 2007 4:21PM]

no big deal

[Mike @ Sep 13th 2007 4:27PM]

It is a big deal for IT people. When you are diagnosing why a computer is crashing when it ran perfectly fine before, AND you KNOW that no files on the computer have been modified, something like this can drive you crazy! Windows Update has been problematic earlier this year, with extremely long download times and the Update code freezing. Microsoft addressed this behavior with a update that required downloading and installing. Since they just had a problem with WU this year, they should notify everyone BEFORE modifying their code.

[Froggy @ Sep 13th 2007 5:20PM]

Brad - you're a moron. sorry mate, you just are.

Mike, that's not really where the big deal is ... it's the fact that M$ thought it could get into everyone's system's irrespective of their preferences and behave like a hacker. that is the worrisome part.

[Brad @ Sep 13th 2007 5:23PM]

Froggy - so you're the expert now huh? You have inside info and can prove thats what really happened......huh mate?

[John Doe @ Sep 13th 2007 9:17PM]

Brad you still are a moron. MS has not fucking business updating anything on my computer without my say so...no exceptions.

[Brad @ Sep 13th 2007 9:30PM]

not

[Jonathan Keim @ Sep 13th 2007 4:25PM]

Why would you want to update Windows Update if you don't want it to be used???

[mike @ Sep 13th 2007 4:27PM]

That is why I use Ubuntu :-P

[Jake @ Sep 13th 2007 4:43PM]

Quiet....Grown-ups are talking.

[mike @ Sep 13th 2007 4:48PM]

Whats wrong, can't handle a real OS?

[Brad @ Sep 13th 2007 4:53PM]

Ubuntu is not a "real OS" it's a mickey-moused version of Linux to make it more palatable to the "mass market"

[Javi0084 @ Sep 13th 2007 5:01PM]

Exactly mike, a real OS is not suppose to work properly, right Brad?

[Javi0084 @ Sep 13th 2007 5:09PM]

Brad is right, because a real OS is not suppose to work properly, right Brad?

[mike @ Sep 13th 2007 5:29PM]

Vista: A virus in every byte!

[chris @ Sep 13th 2007 6:51PM]

Thanks Mike. There is nothing wrong with Ubuntu. It's a great alternative to Windows. I guess this isn't saying much really. Anything is a great alternative to Windows. I'd rather eat dog poop for example.

[Clarion @ Sep 14th 2007 1:44PM]

Not every negative post about Windows needs to be a platform for prozelytizing in the name of Linux. If people want to use Linux, there's plenty of information out there. We don't need the childish attempts to tell people who prefer not to convert "I told ya so!" and "Nya nya, Linux is better!"

You use Linux? That's great. Congratulations. I use Windows. I'm going to continue to use Windows. Now lets move on, and stop threadjacking.

[yacoub @ Sep 13th 2007 4:29PM]

Testing the waters to see what the public will accept. The constant quest of both government and industry: "Can we push a little further beyond privacy and permission?"

;)

[AG @ Sep 13th 2007 4:37PM]

Isn't the point that customers who choose to turn auto update off specifically don't want anything on their pc 'updated' - that includes the updater mechanism itself. Im sick if Microsoft abusing 'updates' to tweak the OS to, (1) screw their competitors (2) spy on consumers (3) to pester legal owners.

Who owns your PC? You, or Microsoft? Do you trust them? I don't.

[DarkAardvark @ Sep 13th 2007 8:31PM]

lol and somewhere in the EULA it says that MS has full access to your files. boo microsoft for doing stupid things D=

[waiownsyou @ Sep 13th 2007 4:37PM]

I don't care if my computer starts downloading viruses by itself or even steal my credit card information-- I just want a damn update for Ultimate Extras that includes more than a game of Texas Hold 'Em and some video wallpaper designed for porno, damn it!

[John @ Sep 13th 2007 4:39PM]

I don't care about the updating of windows update without being told. What I care about is that they can change the files on my computer without asking me about it first. Isn't this something of a security hole?

[DS @ Sep 13th 2007 4:52PM]

So how do we know they are not hiding something else...now?

[Alan Partridge @ Sep 13th 2007 4:53PM]

It begins...

[Andrew @ Sep 13th 2007 5:00PM]

More own goal than back of the net

[strider_mt2k @ Sep 13th 2007 5:11PM]

Tempest in a teapot.

[Adrian Williams @ Sep 13th 2007 5:29PM]

Microsofts new PR guy is Baghdad Bob

[Dustin Frazier @ Sep 13th 2007 5:51PM]

This is just wrong. You do not change files on my PC without express permission from me for each event! In what universe did MS think this would fly? Go to hell MS!

[Randomness @ Sep 13th 2007 5:53PM]

Good thing they killed AutoPatcher first before making everyone hate WU even more.

[Wesburl @ Sep 13th 2007 5:54PM]

{o,o}
|)__)
-”-”-

The O RLY owl says:

When you can't see light... stop digging.

[223344917 @ Sep 13th 2007 8:21PM]

o rly?

[Wesburl @ Sep 13th 2007 5:55PM]

@ Brad btw

[Simon @ Sep 13th 2007 6:12PM]

Oh, look at that! I used the Reply button!

[Wesburl @ Sep 13th 2007 7:01PM]

So did I, except when you go to folder options under tools and click show hidden files while typing a reply... apparently that resets (refreshes the page). Thus canceling my reply button *click*.

Thanks for caring!

[Simon @ Sep 13th 2007 7:43PM]

0_o Sorry!

[Raptor007 @ Sep 13th 2007 8:33PM]

Why would changing Folder Options in Windows have anything to do with Firefox refreshing the page?

[Simon @ Sep 13th 2007 10:39PM]

Who said Wesburl is using firefox?

[Wesburl @ Sep 14th 2007 11:07AM]

@ Simon... No worries, and you're correct. At the time (work) I was using IE (6 and I am ashamed), but the 5 rigs I own all have firefox.

@ Raptor007... Thanks for assuming I was smarter than the average bear : ) Makes me feel all tingly inside...

[Jeve Sobs @ Sep 13th 2007 5:58PM]

More mundane MS bashing. Get a life. XP hasn`t crashed on me in two years...and that was due to a shitty ATI video driver. Never have problems with NVIDIA :)

[Simon @ Sep 13th 2007 6:13PM]

Why not upgrade to vista?
[ducks]

[xxdesmus @ Sep 13th 2007 6:11PM]

This isn't about any specific OS so stop bitching and whining about Vista.

This sucks because it shows that Microsoft has the capability to do this without virtually anyone knowing. That is scary. A firewall wouldn't have blocked this either because most likely it would have looked just like any other Windows Update connection.

[Sunjay @ Sep 13th 2007 6:22PM]

This is one of the reasons why people do not like Microsoft.
I blame Ballmer for lots of it though...

[roach @ Sep 13th 2007 6:31PM]

its like quicktime in my system. I shut off update and the damn thing keeps wanting to update. freaking bordering malware.

[Dinraj @ Sep 13th 2007 7:17PM]

Completely agree with that. No one seems to be complaining for that one.

[Ian Eisenberg @ Sep 13th 2007 10:14PM]

Because Quicktime asking if you want to update and MS just installing updates without asking even if you have expressly disabled them is exactly the same thing.

[slotsky @ Sep 13th 2007 7:34PM]

Yeah, see, on the one hand, Windows Update needs to let me know if it's wanting to modify itself - otherwise, there's no point at all to having the option of turning it off. Turning it off means that I don't WANT it to update itself - which is futile if it's just gonna go ahead and do it anyway.

All of us who use Windows want the updated - 'cuz they need to keep fixin' the stuff that still doesn't work. We want the patches, security updates, fixes, etc... we just want to know WHAT and WHEN they happen, and to give permission so that if something does stop working right, we'll have some freakin' clue where to start looking.

On the OTHER hand - too many of you guys are way to paranoid. You and all your conspiracy theories! Seriously - I know you don't have girlfriends already, but acting like a room full of dorks doesn't help the cause.

[Teetdogs @ Sep 13th 2007 7:40PM]

Can you say class action lawsuit. I am normally a pretty big fan of MS however this crosses the line, the updates themselves are not a big deal but the fact that microsoft can install files on a PC without the user knowing it is bullshit as a network administrator this is very VERY troubling. There is no way the MS can test this with every peice of software, for all they know these update could crash certain systems with certain software installed on them. I have a feeling the MS will be in big trouble over this espesially if they did it to government or buisness systems.