Confirmation of stealth Windows Update

[Gorilla]

I can now confirm that the stealth Windows Update that I blogged about yesterday actually exists - because I’ve detected its presence on a machine at the PC Doc HQ.

At the PC Doc HQ we have several systems set not to update automatically. This is so that they are kept at a specific patch level for testing duties. Many of these systems are virtual machines but some are physical. When I heard about this stealth update I decided to take a look at one of these systems that don’t update automatically (it was set to download and notify) - and within seconds I found what I was looking for.

Which files are updated depends on the OS you are running. The updated files on Vista are:

* wuapi.dll
* wuapp.exe
* wuauclt.exe
* wuaueng.dll
* wucltux.dll
* wudriver.dll
* wups.dll
* wups2.dll
* wuwebv.dll

And on XP SP2:

* cdm.dll
* wuapi.dll
* wuauclt.exe
* wuaucpl.cpl
* wuaueng.dll
* wucltui.dll
* wups.dll
* wups2.dll
* wuweb.dll

These updates without notification is a slippery slope. I just don’t like the idea of having updates foisted upon systems without being aware that they are coming in and having the option to postpone them. Why? Simple. IT’S MY PC!!! If a user chooses not to have updates installed automatically, Microsoft needs to respect this decision. Period. If this is not possible, notifications should be made after the update has been installed clearly identifying the updates, describing what it does and giving users a way to roll back the system if they want to.

Source:
» Confirmation of stealth Windows Update | Hardware 2.0 | ZDNet.com

Even though this type of behavior is probably a part of the EULA, I wonder if Microsoft will ever comment on the nature of the update, the nature of the mechanism it used (probably since the update tool starts up anyway even if you disable it) and would it be possible for a malicious party to use it as well.

[DBlack]

Most of those files are part of the Windows Genuine validation routine; Microsoft has been secretly developing the WGA functionality for years now and and instrumental part of that is being able to use our machines as test beds.

What's really messed up about it is that they use their monopolistic powers to get away with things they never would if a viable alternative existed. Last time I checked, Nissan dealership mechanics aren't allowed to come to my house and service my vehicle without my permission. Chemlawn can just decide to treat my yard without my consent.

This unethical practice is just yet another example of Microsoft abuse of the home user and the U.S. Government needs to wake up.

[Gorilla]

Originally Posted by DBlack

Most of those files are part of the Windows Genuine validation routine; Microsoft has been secretly developing the WGA functionality for years now and and instrumental part of that is being able to use our machines as test beds.

What's really messed up about it is that they use their monopolistic powers to get away with things they never would if a viable alternative existed. Last time I checked, Nissan dealership mechanics aren't allowed to come to my house and service my vehicle without my permission. Chemlawn can just decide to treat my yard without my consent.

This unethical practice is just yet another example of Microsoft abuse of the home user and the U.S. Government needs to wake up.

Indeed. I recognize a few of the libraries they reference as well but I'm just wondering how they're expanding the power of WGA. I remember reading earlier this week they've activated features that black out the vista screen completely so it makes me wonder about a lot of things. What further steps are they going to take?

People do need to wise up. People should take notice of how far this Intellectual Property v. Private Property war is going. A lot of countries are moving away from Linux and embracing open source for their respective government's computing needs.