Re:Microsoft removes manual deferrals from Windows Update 't...
by userbinator on Friday June 26, 2020 @11:27PM
(#23659300)
I have had to keep machines vulnerable because update bundles contain code that breaks stuff and you cannot break them out.
Vulnerable to what, exactly? That is also the other part of the problem with these "security updates" --- if you look at the details (when they are provided, which seems to be diminishing too) the vast majority of them are local privilege escalations that assume the attacker can run arbitrary code on the machine; IMHO if an attacker can do that, you already have a much bigger problem to worry about!
The other fun thing is that if you run into a complex problem, there’s no scenario where it will get fixed for you. For some products, there is literally a two week window before they freeze changes.
There is no escape — this is the new way. Apple is even worse and more unpredictable.