back to article England expects... you to patch your apps and not just Windows

Brits are getting better at patching Windows on their personal computers but worse at updating their applications, according to a new study. Stats from vulnerability management outfit Secunia Research reveal that 6.4 per cent of UK users had unpatched Windows operating systems in Q3 of 2016, up from 5.4 per cent in Q2 but down …

  1. Steve K

    "Sponsor offers" partly to blame?

    I wonder if "sponsor offers" are partly to blame here.

    If a user's experience is that last time they patched that they got their home page redirected and yet another browser toolbar they didn't want then they may not want to repeat the experience....

    1. tfewster

      Re: "Sponsor offers" partly to blame?

      I'm surprised no-one has mentioned Ninite yet - Handling app installs & patches. Of course Secunia have their own products to push...

      1. Roland6 Silver badge

        Re: "Sponsor offers" partly to blame?

        Re: Ninite and Secunia

        I use both because Secunia's main focus is security updates, whereas Ninite and others is general updates.

        Thus Ninite will flag all updates to an application, whilst Secunia will flag those that resolve security issues. However, neither cover all the packages on my systems, so there are still times when I have to perform a manual update.

        Given how long the issue of application updates has been around, it is a little surprising or concerning that Windows still doesn't have a common update service that is readily usable by any Windows package.

        1. Anonymous Coward
          Pint

          Re: "Sponsor offers" partly to blame?

          Concur and introducing them to those staying on Windows for whatever reason. Relatively painless and aside from the two gamers, perfect coverage. [I swear, gamers seem to have an IT death wish. I understand the motivation, patching other stuff including the OS may break their precious game du jour, but damn!]

  2. Fred Dibnah

    sudo apt-get update

    That is all.

    1. Voland's right hand Silver badge
      Joke

      Re: sudo apt-get update

      And? Who will execute sudo apt-get upgrade (or dist-upgrade)? The holy ghost?

      1. Chemist

        Re: sudo apt-get update

        "And? Who will execute sudo apt-get upgrade (or dist-upgrade)? The holy ghost?"

        Well OpenSUSE checks & pops up a reminder when any OS or (installed) application updates are available. Generally you can install them from the reminder if you want

    2. kyndair

      Re: sudo apt-get update

      Such things are great in the linux world (for arch it's pacman -Syyu), where distributions compile, test and package the applications for you and as long as maintainer can be found pretty much any software will be included (choice is a good thing), but do you really want Microsoft having that sort of control over the windows application ecosystem. I know that's what they want but it would make many people nervous at best.

      1. Dazed and Confused

        Re: sudo apt-get update

        But quite a bit on non disti SW also uses the same mechanism. So fir example I can update Adobe stuff on my Linux box at the same time as I can update the SW included in the distribution. Anyone can make use of the same tools.

        1. kyndair

          Re: sudo apt-get update

          true as long as you the repsotories you can update loads of stuff but microsft have seen the closed world of phone app stores and they would like to head that way for desktop, that's appears to be part of the thinking in windows 8+ and why some design decisions went the way they did, got to turn the heat up slow enough the frogs don't jump out before they're cooked.

    3. Gene Cash Silver badge

      Re: sudo apt-get update

      apt-get dist-upgrade

      Not here... I have grub-probe pinned by apt-listbugs since the latest bug can make the system unbootable... which means "apt-get dist-upgrade" thinks it's a good idea to just simply remove grub.

      Uh. No. It's called "unstable" for a reason... thank $DEITY for "apt-mark hold"

  3. Dazed and Confused

    > Most users do not devote the time and attention necessary to keep up-to-date with the latest security patches

    This is like car manufactures complaining that drivers don't spend enough time de-coking their engines these days, or don't check the play on their big ends.

    Most users just expect their PCs to work. They have no more wish to be IT specialist than they wish to get their hands dirty servicing their cars.

    So like the car industry has done, find a way to make things more reliable. Don't expect customers to have to be specialist in your product.

    MS should start by making their own system work, because the patching for Windows, particularly W10 is so broken it's beyond a joke. Once they've found a viable way to do it they need to make this easily available to all other SW vendors so that other everything can be patched in the same way at the same time with the same tool, and as SteveK above says, make damn sure that every time you update say your PDF reader it doesn't install some other random piece of SW onto your machine which then bombards users with messages they don't understand or want.

    You make a comment about non-Windows applications being difficult. Well my non-Windows updates are normally much easier. On my CentOS boxes I can typically just type in yum update and it all happens. If I wanted a GUI there's one of those too.

    1. Alfred

      "Most users just expect their PCs to work. They have no more wish to be IT specialist than they wish to get their hands dirty servicing their cars."

      But, on the other hand, when they buy a car, that's it. They don't spend the next three years adding shonky modifications they found on the internet, and they don't expect it to do anything it didn't do straight out of the factory gates (those few people who DO mod their cars do so knowing that they're taking it outside the official specs and go into it eyes open).

      People expect to be able to modify their PC on a daily basis to change what it can do for them. If people were willing to accept their PC as they accept their modern, reliable car (that is, as a fixed, sealed unit that, should they want it modified, will be taken back to the distributor to be done properly) and are willing to accept that they will not be changing its capabilities (i.e. the software on it when you get it is all there will ever be) then they could have their PC as reliable as their modern car.

      1. Terry 6 Silver badge

        Most people don't update or modify their computers. They usually don't even try alternatives to the well known software. Few even know that they have Flash installed. They don't update their third party software because they don't even know they have it. Slightly more tecchie folk may install Libre Office and the like, because it's free. And we may install lots of stuff on people's PCs for them because we recognise that there are better alternatives. But that's it.

        Beyond that they might install bits of software, games and the like, if they can work out how, now that you don't just buy a CD and stick it into the cup holder anymore. But they probably don't even recognise that they are installing software. They're just putting a game on the computer. As they would when they put the new version of Crossy Bird or Angry Road on an iThingy. So they do use their computers like they use their cars, in that sense.

        1. Alfred

          "Most people don't update or modify their computers..... might install bits of software, games and the like"

          Bingo. If they didn't do that, their computers wouldn't have to be capable of it, and a PC that was intended to never change once it left the manufacturer would be enormously more reliable.

          That's the constant modding that users do, and that's (and the fact that the PC has to be capable of being constantly modded in this fashion) what makes it not like a car. That users don't realise they're taking an enormously complex machine and constantly fiddling with it doesn't change the fact that they are.

    2. PrivateCitizen

      cars arent computers (yet)

      Most users just expect their PCs to work. They have no more wish to be IT specialist than they wish to get their hands dirty servicing their cars.

      I am not sure that is a viable model.

      When you buy a car, you get everything from the manufacturer that you are going to use for the lifetime of the car (and this is ignoring the recalls, services etc that cars need). You also have to pay for insurance, tax and, importantly, pass a test showing you have practical competence before you are allowed to use the device.

      Can you imagine saying I want an MS PC which can only run the MS software available at the time the PC was released and can only visit MS websites to make sure no browserpwnage takes place?

      Then finding out that every 6 - 12 months (depending on how often you use the computer) you need to take it back to an MS approved dealer to have it serviced and whatever the analogies for tyres / windscreen wipers / washerfluid etc are.

      Added in to this, you have to pay £400 a year to insure your device incase something you stupidly do causes a problem for other internet users, you have to pay an annual tax to be allowed to surf the internet (not just ISP fees), and you can only buy it if you can prove you have learned enough to use it safely. In the event you do anything risky you get points on your computer licence and should you get hacked and it causes problems for other internet users you get fined or go to jail.

      The reality is, people dont want to be IT specialists but want to put their computers through all kinds of unexpected activities. They attach disks they get off their mates, they plug in USB sticks, they visit sites, they click "accept" on pop ups and they (willingly or otherwise) install vast quantities of random software. They need to understand more about what they are doing or stick to living in the walled gardens of Apple devices.

  4. Anonymous Coward
    Anonymous Coward

    Do you know why I don't bother updating the apps on my phone?

    1) I go to substantially less dodgy sites on my phone than I do on the PC due to a lack of ad blocking software

    2) When I do update the app odds are good the UI has changed and moved or revamped the features of the app - usually in some insane "OH GOD WHERE IS EVERYTHING" fashion or made it even more Apple-lite (i.e. designed for 2 year olds with glowy bright colours)

    1. Anonymous Coward
      Anonymous Coward

      You get the crappy UI updates in windows PC applications as well (something to do with the crappy win8 to 10 UI I suspect).

      Although I don't use windows I have friends that do and know of several that have reverted to an older version of the application to get the better UI back.

  5. PacketPusher
    Megaphone

    Java

    I can certainly understand being reluctant to update Java. It seems like every other update breaks some Java app that I use.

  6. Robert Carnegie Silver badge

    VLC

    I've been putting off updating VLC as a previous update made it not get along with some of my video recordings. But I don't use it to download videos.

  7. AndrueC Silver badge
    Meh

    I finally gave up on letting Windows Update do its stuff a couple of years ago after it trashed both of my machines leaving me scrambling to recover my user profiles (one machine eventually had to be restored from backups). Now that the Win 10 offer is offer I thought I'd give my laptop the opportunity to update to whatever the current state of Win 7 is. After three attempts including leaving it on for over 24 hours I've given up. It never gets past checking for updates.

    Oh well.

    1. Chika

      Sounds like it's suffering from whatever Microsoft stuffed up in Windows Update last year. You could always try Autopatcher - it's not going to be fast on first use but it may be a better bet than trying to get WU to do its worst and if you save it once you are done, you can always reuse it should you ever need to do a reload.

      1. AndrueC Silver badge
        Facepalm

        I gave autopatcher a try tonight but it just keeps crapping out with various run time errors. Like I wrote before:

        Oh well.

        :)

    2. Roland6 Silver badge

      Well with a year's plus of updates to catch up on, you were asking for problems...

      Unfortunately, although MS have started releasing rollup packs they haven't made them as easily identifiable as the old SP's. Plus due to various cock-ups you are well advised to install certain updates out-of-release-sequence. If memory is correct there are articles on the web that list these key updates.

      In clearing the update logjam I found it helpful to:

      1. Only enable installation of important updates

      2. Disable the Win10 update settings (used GWX Control Panel).

      3. Disable participation in the Customer Experience Improvement Program, before starting WuP.

      4. Disable any AV/security software.

      These actions will remove many updates from consideration and avoid some conflicts arising from trying to install recommended updates at the same time as important updates. However, you are still well advised to be selective on which updates to install as I've found the third-party device driver updates to be the most problematic and so tend to install them individually.

      Once up-to-date with important updates repeat with the optional updates - taking care to avoid some of the problematic ones, such as KB3192403 the October 2016 Preview of Monthly Quality Rollup...

      Once complete, run Windows Disk Cleanup and clean up system files ticking the new option "Service Pack Backup files". Then take a full disk image, so that you can always recover our system to this point.

      However, do plan on the whole process taking a few days...

      1. Anonymous Coward
        Anonymous Coward

        ...and then the Windows guys complain that Linux is too complicated!

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like