Skip to content
Naked Security Naked Security

Zero days! First official Windows 10 patches arrive…

Given its "rolling update" model, you might have been wondering how long after launch the first Windows 10 updates would take to arrive. The answer? Zero days. (No hyphen.)

We’ve written (and spoken) about Windows 10 and its approach of “rolling updates” more than once already.

The idea is pretty simple, and at first glance, it’s hard to see a downside.

When a patch is ready, it gets published; and when your computer goes online and sees the patch, it gets applied.

As we’ve said in the Chet Chat podcast, “Why wait a month for a fix when you can wait 24 hours?”

Not everyone agrees that updates should “just arrive,” of course.

Some people want to choose, or at least the right to choose, even if they don’t exercise it, just because. (We sympathise with that opinion.)

Others think that they can make wiser decisions than Microsoft about how reliable each update will be, especially if they use “hindsight updating,” which is where you let loads of other people go first and see how they get along.

And there are those who need to watch their bandwidth, for example because they rely on a mobile phone data plan, where deferring an update, even for a few hours, might save both time and money.

→ Networks with “night owl” data periods are usually much cheaper at those times because they’re under-utilised, and therefore much faster as well.

However, it seems that Microsoft is sticking to its guns over giving you updates for Windows 10 (at least for the non-corporate versions), whether you’re ready and willing, or not.

There’s a way to stop an update from reinstalling, assuming that something goes wrong and you have to remove it.

But you have to get the update you don’t want in the first place in order to find out that you don’t want it.

→ Microsoft’s unwanted update inhibitor should at least partially assuage objectors in the first two categories above – those who prefer choice, or who want an escape route in case of trouble. But it won’t do much for those who have cost concerns over bandwidth, especially because they’ll have to spend money to find out they could have saved it.

Anyway, in case you were wondering how soon after the Windows 10 launch on 29 July 2015 you’d see your first Windows 10 updates…

…you need wait no more.

Microsoft officially published three Windows 10 updates dated 29 July 2015!

Strictly speaking, they aren’t really new updates, because they don’t patch security holes that were found and fixed after the 29 July 2015 launch date of Windows 10.

They’re updates that were prepared and shipped for other versions of Windows back on 14 July 2015, which was the Update Tuesday immediately before the official Windows 10 launch.

The updates are: MS15-073, MS15-074 and the latest Flash update for Internet Explorer.

In other words, these are updates that were completed between the publication of the so-called RTM (release to manufacturing) version and yesterday’s actual launch date.

Nevertheless, it’s a sign that Microsoft really means business with “update early, update often” as far as Windows 10 is concerned.

You may not be entirely in favour of totally automatic updating at the operating system level, but if it means more people are more likely to be patched more quickly than ever before…

…you have to admit, there’s an upside for the online community as a whole.

9 Comments

OK, you know how the bad guys can sometimes reverse engineer the patches to discover the vulnerability that’s being corrected, and then attack unpatched systems? Well, what happens when something is patched early in Windows 10, but the same bug exists in Windows 7 and 8, and those have to wait ’til Patch Tuesday?

Reply

I hear you, but [a] Microsoft’s patches aren’t quite as easy to extract a working exploit from as you might think; [b] I rather hope that Microsoft gets int he habit of putting out emergency (“out-of-band”) patches for earlier versions of Windows more frequently now; [c] the upgrade from 7 and 8.1 to 10 is entirely free, so if you are genuinely worried about this….there’s a way around it :-)

Reply

You are absolutely correct and this will have far reaching effects on Microsoft security. I’m not sure how they are going to address this, and it seems like they don’t really care about the billions of devices that use older security cycles.

Reply

I’m just waiting for that first forced feature update. That’s right feature updates will be forced upon Windows 10.

Imagine this system was in place on Windows 7. Suddenly you are forced to have the Windows 8 touch optimised Start Screen with all the issues that many people had on your 24 inch non touch screen, with no possibility to back track.

Reply

The thing is…this system *isn’t* in place on Windows 7, so it’s sort of pointless imagining what would happen if it were.

Reply

My point is that Windows 10 can get that forced feature update from hell that not many people want with no way of stopping it or going back.

Reply

great here comes that browser choice update nagging me again and anything else microsoft wants to add to the pile and you know sooner or later one of these updates will break my encryption and leave me for dead I SWEAR THIS WILL AND HAS ALWAYS HAPPEND just a matter of time . windows security updates being a must is good overall for most peoples security i cant complain about that part .

good post paul

Reply

i have windows 7 home premium and i am still waiting….it is almost a week since the official roll out. anybody else in my shoes?

Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

Subscribe to get the latest updates in your inbox.
Which categories are you interested in?
You’re now subscribed!