Windows patch KB 3139929: When a security update is not a security update

InfoWorld ^ | Mar 9, 2016 | Woody Leonhard

[Utilizer]

If Microsoft's documentation is correct, installing Patch Tuesday's KB 3139929 security update for Internet Explorer also installs a new Windows 10 ad-generating routine called KB 3146449.

Many people -- present company included -- feel that putting an ad generator inside a security patch crosses way over the line. In fact, you have to ask yourself if there are any lines any more.

Microsoft lays it all out in black and white in its inimitable, most obfuscatory way.

This month's MS16-023 security patch for Internet Explorer, KB 3139929, says:

This security update resolves several reported vulnerabilities in Internet Explorer. The most severe of these vulnerabilities could allow remote code execution if a user views a specially crafted webpage in Internet Explorer… Additionally, this security update includes several nonsecurity-related fixes for Internet Explorer.

[Bob434]

[[If Microsoft’s documentation is correct, installing Patch Tuesday’s KB 3139929 security update for Internet Explorer also installs a new Windows 10 ad-generating routine called KB 3146449.]]

Good riddance MS- I now only have windows installed for using windows only apps- but refuse to allow it access to Internet- linux is the only thing accessing the Internet now-

[Bob434]

[[Google GWX Control Panel]]

That’ll only likely work for a little while- until MS figures out a way to defeat that program too-

[dennisw]

thanks!

[minnesota_bound]

Why have they not been sued up the wazoo for this spyware?

[relictele]

We aren’t talking malware here...MS thinks its update is perfectly legitimate and doesn’t hide its content or its delivery method.

The utility writer can and will update it if needed.

[novemberslady]

bkmk

[taxcontrol]

I am a fan of RedHat / Fedora / CentOS. I work for IBM and I am required to us it on my laptop. I have been working with Linux since the 0.9x kernal and to be honest, I LIKE RHEL.

Many people who hate Ubuntu find that Mint is a better alternative for them.

[Bob434]

[[MS thinks its update is perfectly legitimate]]

Malware!

[Bob434]

Here’s a tool to stop all windows spying (or the majority of it anyways) with just one click

https://www.safer-networking.org/spybot-anti-beacon/

ZDNet review on it

http://www.zdnet.com/article/how-to-stop-windows-10-spying-on-you/

[Bob434]

juswt be aware that you may need to run the program again after windows updates each time- as it seems windows defeats such programs and re-enables the spyware features of MS windows

[smokingfrog]

It may be an add-on program in I.E. That you can disable.