Saturday, January 15, 2011

Leaked "Official" Windows 7 Service Pack 1

It has been reported at several sites that the final Release to Manufacture (RTM) bits of both Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1 are in the wild.  A popular support forum posted that they have the SP available for download, stating that they:
"can confirm, with accuracy, that this is the final, official, digitally signed version of Windows 7 Service Pack 1 which has been scheduled for imminent release to manufacturers (RTM), but has not yet appeared on Windows Update."
Whether due to the popularity of people anxious to be among the first to get the final SP release or other issues, the site appear has been having stability problems, with regular outages.  Even when the site has loaded the past couple of days, it has taken a long time and often only partially loads.
Edit Note:  I have just discovered that yet another popular site has the information posted.  This download link hosted on another P2P site.  My advice:  Don't do it!  Wait for the release by Microsoft to Windows Update.

Warnings:
  • First and foremost, it is never recommended to download Microsoft software from any site other than directly from Microsoft.
  • Second, the SP download being offered by the aforementioned site (no, I will not provide a link to the site) is being provided via uTorrent, a popular P2P (peer to peer) program. 

    With P2P file sharing, what means do you have of identifying or authenticating the source of the download? In addition, a file can be distributed among many hosts, and peers will provide for download the sections that they have already downloaded. This results in the distinct possibility of a distribution method in which malicious bits are mixed with with good files.
  • Third, a Service Pack is essentially a collection of security and software fixes and enhancements for the operating system. Before a Service Pack is offered via Windows Update, your computer will be checked for missing prerequisites.  Installing the SP without the necessary prerequisites can result in a seriously damaged operating system, requiring a complete reinstall.
Why anyone would want to jeopardize the security and stability of their computer by installing software from an unauthorized source is beyond me.  A non-Microsoft site merely saying the download is "Digitally Signed by Microsoft Corporation" does not make it so nor does it mean the download is safe.

Be smart. Wait for the official release from Microsoft on Windows Update.


Clubhouse Tags: Clubhouse, Security, Information, Service Pack, SP1, Windows 7,



Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

4 comments:

Buffet said...

Be smart. Use ONLY Windows XP.

Buffet said...

I require no approval and will tolerate no censorship under the constitution. Ya dig?

anon408 said...

Just thought I'd correct a few things:

> the SP download ... is being provided via uTorrent

uTorrent is simply a utility for downloading torrents, and by downloading it you agree to the Terms of Use which include only using it for legal purposes. Many corporations use P2P for distributing updates, and it also works well for distributing large files such as Linux distributions.

> This results in the distinct possibility of a distribution method in which malicious bits are mixed with with good files.

uTorrent verifies every piece of data downloaded for corruption or alteration before saving it to disk with a hash check, and bans IPs that fail 3 hash checks. This way, it is impossible to download infected bits of a torrent that wasn't infected in the first place.

Corrine said...

Hi, anon408.

uTorrent is being used by one site I saw posting the SP. Mediafire was being used at another site.

Security issues aside, I'll still wait until Microsoft releases the SP on Windows Update. Then I know the SP will be complete. I don't need a 3rd party who obtained the bits from some unverified source to tell me the data isn't corrupt or hasn't been altered.

Besides, at least according to some sources, although close, the SP isn't quite ready to go out the door. See Sneak Peek: A Quick Look at Windows 7 Service Pack 1.

Your computer, your decision. :)