automaticUpdates
Latest
Critical flaw forces Apple to push first automatic OS X security update
A critical security issue in the network time protocol (NTP) has prompted Apple to push an automatic OS X update to users for the first time. Google researchers discovered the flaw which could allow a remote attacker to "send a carefully crafted packet that can overflow a stack buffer and allow malicious code to be executed." NTP is a common protocol that's been successfully hacked before, so the security hole could result in remote DDoS attacks on many UNIX-based systems, including Linux servers and OS X. The US government deemed it serious enough to flag it, and at first Apple advised users of Yosemite, Mountain Lion and Mavericks to update "as soon as possible." However, several years ago it introduced an automatic OS X update system that requires no user action, and decided to deploy it for the first time ever. An Apple spokesman told Reuters "the update is seamless. It doesn't even require a restart." Update: Patrick Nielsen, Senior Security Researcher at Kaspersky told us the vulnerability is quite widespread. "The software is installed on everything from consumer gadgets to critical infrastructure; it's possible to execute malicious code on both servers and clients, a dream situation for worms which can spread very quickly by compromising servers and then all their clients," he said. What's more, many firewalls don't block attacks against NTP servers, especially in corporate networks.
Google Play Music and Movies purchasing reaches Google TV, patches a media strategy hole
It's been one of the more conspicuous omissions in the media hub space: despite Google Play being the cornerstone of Google's content strategy, you couldn't truly use the company's music or movie services through Google TV without depending on content you'd already paid for elsewhere. As of a new upgrade, the ecosystem has come full circle. Viewers with Google TV boxes can at last buy or rent directly from Google Play Movies and Google Play Music, and the content will be indexed in the TV & Movies section alongside third-party video services and traditional TV. The upgrade also helps Google's TV front end play catch-up with its mobile counterpart by adding automatic app updates and subscriptions. While device owners may have to wait a few weeks as the upgrade rolls out, the addition signals a big step forward for a platform that has normally leaned heavily on others for help.
Internet Explorer to start automatic upgrading across Windows 7, Vista and XP
Imitation is the sincerest form of flattery right? Well, in an attempt to keep its tenuous grip on the browsing crown, it's borrowing some tricks from its plucky upstart competitors. Microsoft's announced that Internet Explorer will now tie into future Windows Update releases. The new system will start in the new year in both Australia and Brazil -- no, we don't get the connection either -- with a graduated roll-out from there throughout 2012. Microsoft says that this will help keep their browser secure and on the cutting edge of all those HTML5 developments. Fortunately, according to the Windows Team Blog, auto-update antagonists will still be able to opt out of the system. See how Ryan Galvin, Internet Explorer's General Manager, explains the reasoning over at the official blog; the link's just below.
Windows 8 gets automatic updates, enforced restarts after 72 hours of polite harassment
Windows 8 is renaming the second week of every month. After "Patch Tuesday" comes "Gentle reminder Wednesday," "Polite yet firm suggestion Thursday" and "Automatic restart Friday". In order to keep everyone's system secure, Windows Update will download patches in the background before adding a notification on your lock screen that you're due a restart. If you haven't managed it within 72 hours, you'll be given a 15 minute warning to save your work and close up before it forces the shutdown -- unless you're watching a movie or conducting a presentation, it'll lie in wait for your next idle period to do it. With this system, you'll only have to complete the procedure once a month and can plan your schedule accordingly. The only time the system will deviate is when a security threat like a blaster worm appears, at which point Microsoft will ensure you're restarting as soon as a fix is available. What, you didn't know that "keeping end-users on their toes" was a feature?
