Security Bulletin Advance Notification for October, 2011

On Tuesday, October 11, 2011, Microsoft is planning to release eight (8) Security Bulletins, addressing 23 vulnerabilities. Two of the bulletins are rated Critical and six are rated Important, addressing vulnerabilities in Internet Explorer, .NET Framework & Silverlight, Microsoft Windows, Microsoft Forefront UAG, and Microsoft Host Integration Server.

The bulletins address Remote Code Execution, Elevation of Privilege and Denial of Service, several requiring a restart. Whether required or not, it is advised to restart your computer after installing updates.  In addition, due to issues many people experience when installing .NET Framework updates, it is advised that update be installed separately.

References

• MSRC Blog: Advanced Notification for the October 2011 Bulletin Release
• TechNet: Microsoft Security Bulletin Advance Notification for October 2011

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

To Mozilla: Update Fatigue, Yes, Silent Updates, No!

Mozilla, what is the matter with your thinking?  Being stuck with a slow dial-up connection, I switched to Phoenix because it was faster that other browsers I tried.  I stayed with Firebird and then the final product name, Firefox.  That is a lot of years history, which I can envision coming to an end.

It has almost reached the point that the only thing that is keeping me from uninstalling Firefox is the extensions that I use throughout the day.

Update Fatigue

First came the rush out the door every six weeks with the "rapid-release process".  This nonsense put unnecessary stress and strain on both devoted Firefox users as well as developers of users' favorite extensions.  The process has not been error free, particularly as evidenced by the problems users encountered with the update to version 7, resulting in "hidden add-ons". 

There would be no "update fatigue" if the silly rapid-release process is put to rest, where it belongs.  New features important for maintaining excitement and interest in the product.  Prompt security updates are critical.  However, what value is there in introducing new features every six weeks when the users have not fully appreciated or become accustomed to the previous changes?

Silent Updates

Now, brought back from the dark channels is the ill-planned silent update currently in development for version 10.  Back up, Mozilla.  You have no right to override UAC in order to achieve your silent update plans.  Only the computer owner has the right to make any changes to UAC, not a third-party software program.  It is my computer and I will decide what I install on it and when it will be installed.

Can anyone hear the world-wide uproar if Microsoft switched to silent updates? 

Additional Reading

• Mozilla aims to add silent updating to Firefox 10
• Program Management/Programs/Silent Update - MozillaWiki
• Brian R. Bondy - Mozilla Firefox and silent updates
• Rapid Release Follow-Up | Mitchell's Blog

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Cyber Security Awareness Month 2011

For the eighth consecutive year, October has been declared Cyber Security Awareness Month. 

The purpose of Cyber Security Awareness Month is to provide both awareness and education for all digital citizens, whether using a desktop PC, laptop, tablet, smart phone, or multiple devices.

The official declaration was made in the United States in an official proclamation by The President. Again this year, the theme is "Our Shared Responsibility", with Stay Safe Online continuing as the official sponsor site. 


The United States is not alone in declaring October as Cyber Security Awareness Month.  Canada’s Minister of Public Safety kicked off Cyber Security Awareness Month in Canada with the launch of Get Cyber Safe.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...