Author
|
Topic: What the Hell is with Microsoft Update?
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Marcel Birgelen
Film God
Posts: 3357
From: Maastricht, Limburg, Netherlands
Registered: Feb 2012
|
posted 04-18-2016 02:58 AM
I don't think there's a one-size-fits-all solution. In general, I don't like the idea of automatic updates for production machines. You essentially give control over your machine to someone else.
The accumulated experience of many years of "automatic updates" is that many updates, unfortunately, break stuff. Sometimes even intentionally...
For internet exposed systems, automatic updates are probably a good thing for most environments. It's certainly not perfect, it's actually the less of two evils. Too many machines get infected by malware because of lack of security updates. The risk of the sporadic bad update outweighs the risk of your system becoming hijacked, which is VERY real and seemingly happens to millions of people every day.
Then again, you shouldn't go surfing the web or opening up all kinds of ports to your servers and other backend infrastructure. So, you can ask yourself the question why you would even want to install updates if stuff works the way it should?
Besides bug fixes and added and required new functionality, the only reason to keep in line with updates on infrastructure on a secure network is to keep in line with your suppliers and to keep your system compatible with future updates. Then again, there is usually no need here to live on the bleeding edge.
| IP: Logged
|
|