TweakHound

Computer stuff...

Security

Contact Tracing Apps

By 7 Comments

Apple, Google Release Virus Contact-Tracing Tools to App Makers
“Apple Inc. and Google released the first versions of their Covid-19 contact-tracing tools to public health organizations on Wednesday so the agencies can start building applications ahead of the system’s launch in mid-May.”

Contact tracing apps can help stop coronavirus. But they can hurt privacy.

EFF – COVID-19 and Digital Rights
EFF – Apple and Google’s COVID-19 Exposure Notification API: Questions and Answers

Americans split on use of contact tracing apps powered by Apple/Google API
“Americans are divided on whether they would be willing to use coronavirus contact tracing apps powered by the joint Apple/Google API. A Washington Post/University of Maryland poll found an exact 50/50 split between those who would use it and those who wouldn’t.”

So what say you, are you gonna install it?

Patch Tuesday

By Leave a Comment

Windows 7-10 updated. Patches between 3 and 7 dozen vulnerabilities depending on OS and version.
Windows 7
April 14, 2020—KB4550965 (Security-only update)
April 14, 2020—KB4550964 (Monthly Rollup)
Windows 8.1
April 14, 2020—KB4550970 (Security-only update)
April 14, 2020—KB4550961 (Monthly Rollup)
Windows 10
1909 & 1903 – April 14, 2020—KB4549951 (OS Builds 18362.778 and 18363.778)
1809 – April 14, 2020—KB4549949 (OS Build 17763.1158)

Security Update Guide > Release Notes > April 2020 Security Updates

Patch Tuesday

By 1 Comment

Windows Updates
Windows 10
1909 – March 10, 2020—KB4540673 (OS Builds 18362.719 and 18363.719)
1903 – March 10, 2020—KB4540673 (OS Builds 18362.719 and 18363.719)
1809 – March 10, 2020—KB4538461 (OS Build 17763.1098)

Windows 8.1
March 10, 2020—KB4541509 (Monthly Rollup)
March 10, 2020—KB4541505 (Security-only update)

Windows 7
March 10, 2020—KB4540688 (Monthly Rollup)
March 10, 2020—KB4541500 (Security-only update)
***IMPORTANT***
READ THE SECTION “Before installing this update”
Prerequisite:
You must install the updates listed below and restart your device before installing the latest Rollup. Installing these updates improves the reliability of the update process and mitigates potential issues while installing the Rollup and applying Microsoft security fixes.

Patch Tuesday

By 2 Comments

Windows 10
1909 is out. What’s new in Windows 10, version 1909
See: How to get the Windows 10 November 2019 Update
More at the bottom of this post.
1903 – November 12, 2019—KB4524570 (OS Build 18362.476 and 18363.476)
“Updates to improve security when using Internet Explorer and Microsoft Edge.”
1809 – November 12, 2019—KB4523205 (OS Build 17763.864)
Updates to improve security when using Internet Explorer and Microsoft Edge.
Updates to improve security when using external devices (such as game controllers, printers, and web cameras) and input devices such as a mouse, keyboard, or stylus.
Updates to improve security when using Microsoft Office products.
1803 – End of Life

Windows 8.1
November 12, 2019—KB4525250 (Security-only update)
Includes 3 security updates.
November 12, 2019—KB4525243 (Monthly Rollup)
Includes 3 security updates and 4 fixes.

Windows 7
November 12, 2019—KB4525233 (Security-only update)
Includes 3 security updates.
November 12, 2019—KB4525235 (Monthly Rollup)
Includes 3 security updates and 2 fixes.

Nvidia Geforce Game Ready WHQL Driver 441.20
Download | Release Notes

What’s new for Windows 10, version 1909 and Windows 10, version 1903 release notes
Windows 10, versions 1903 and 1909 share a common core operating system and an identical set of system files. As a result, the new features in Windows 10, version 1909 were included in the recent monthly quality update for Windows 10, version 1903 (released October 8, 2019), but are currently in a dormant state. These new features will remain dormant until they are turned on using an enablement package, which is a small, quick-to-install “master switch” that simply activates the Windows 10, version 1909 features.
To reflect this change, the release notes for Windows 10, version 1903 and Windows 10, version 1909 will share an update history page. Each release page will contain a list of addressed issues for both 1903 and 1909 versions. Note that the 1909 version will always contain the fixes for 1903; however, 1903 will not contain the fixes for 1909. This page will provide you with the build numbers for both 1909 and 1903 versions so that it will be easier for support to assist you if you encounter issues.

Feature Update via Windows 10, version 1909 Enablement Package
Windows 10, versions 1903 and 1909 share a common core operating system with an identical set of system files. Therefore, the new features in Windows 10, version 1909 were included in the latest monthly quality update for Windows 10, version 1903 (released October 8, 2019), but are in an inactive and dormant state. These new features will remain dormant until they are turned on through the “enablement package,” a small, quick-to-install “master switch” that activates the Windows 10, version 1909 features.
The enablement package is a great option for installing a scoped feature update like Windows 10, version 1909 as it enables an update from version 1903 to version 1909 with a single restart, reducing update downtime. This enables devices to take advantage of new features now. For version 1903 devices that receive updates directly from Windows Update, devices automatically get the enablement package by installing the feature update to Windows 10, version 1909.
If a device is updating from Windows 10, version 1809 or an earlier version, this feature update enablement package cannot be manually installed. Instead, it is bundled and automatically included with the feature update to Windows 10, version 1909. Note the installation time is not reduced in this scenario.

Patch Tuesday

By

Windows 10
1903 – October 8, 2019—KB4517389 (OS Build 18362.418)
1809 – October 8, 2019—KB4519338 (OS Build 17763.805)
Highlights
Updates to improve security when using Internet Explorer and Microsoft Edge.
Updates for verifying user names and passwords.
Updates for storing and managing files.

Improvements and fixes
This security update includes quality improvements. Key changes include:
Addresses an issue in security bulletin CVE-2019-1318 that may cause client or server computers that don’t support Extended Master Secret (EMS) RFC 7627 to have increased connection latency and CPU utilization. This issue occurs while performing full Transport Layer Security (TLS) handshakes from devices that don’t support EMS, especially on servers. EMS support has been available for all the supported versions of Windows since calendar year 2015 and is being incrementally enforced by the installation of the October 8, 2019 and later monthly updates.
Addresses an issue with applications and printer drivers that utilize the Windows JavaScript engine (jscript.dll) for processing print jobs.
Security updates to Windows Shell, Internet Explorer, Microsoft Edge, Windows App Platform and Frameworks, Windows Cryptography, Windows Authentication, Windows Storage and Filesystems, Windows Kernel, Microsoft Scripting Engine, and Windows Server.

Windows 8.1
October 8, 2019—KB4520005 (Monthly Rollup)
This security update includes improvements and fixes that were a part of update KB4516041 (released September 24, 2019) and addresses the following issues:
Addresses an issue with applications and printer drivers that utilize the Windows JavaScript engine (jscript.dll) for processing print jobs.
Security updates to Windows Cryptography, Windows Authentication, Windows Kernel, Windows Storage and Filesystems, Microsoft JET Database Engine, Internet Information Services, the Microsoft Scripting Engine, and Windows Server.

October 8, 2019—KB4519990 (Security-only update)
This security update includes quality improvements. Key changes include:
Security updates to Windows Cryptography, Windows Authentication, Windows Kernel, Windows Storage and Filesystems, Microsoft JET Database Engine, Internet Information Services, and Windows Server.

Windows 7
October 8, 2019—KB4519976 (Monthly Rollup)
This security update includes improvements and fixes that were a part of update KB4516048 (released September 24, 2019) and addresses the following issues:
Addresses an issue that may fail to disable VBScript in Internet Explorer by default after installing KB4507437 (Preview of Monthly Rollup) or KB4511872 (Internet Explorer Cumulative Update) and later.
Addresses an issue with applications and printer drivers that utilize the Windows JavaScript engine (jscript.dll) for processing print jobs.
Security updates to Windows Authentication, Microsoft JET Database Engine, Windows Kernel, Internet Information Services, the Microsoft Scripting Engine, and Windows Server.

October 8, 2019—KB4520003 (Security-only update)
This security update includes quality improvements. Key changes include:
Addresses an issue in security bulletin CVE-2019-1318 that may cause client or server computers that don’t support Extended Master Secret (EMS) RFC 7627 to have increased connection latency and CPU utilization. This issue occurs while performing full Transport Layer Security (TLS) handshakes from devices that don’t support EMS, especially on servers. EMS support has been available for all the supported versions of Windows since calendar year 2015 and is being incrementally enforced by the installation of the October 8, 2019 and later monthly updates.
Security updates to Windows Authentication, Microsoft JET Database Engine, Windows Kernel, Internet Information Services, and Windows Server.

Patch Tuesday

By

Windows Updates

Windows 10
Provides protections against a new subclass of speculative execution side-channel vulnerabilities.
Addresses an issue that causes high CPU usage from SearchUI.exe for a small number of users. This issue only occurs on devices that have disabled searching the web using Windows Desktop Search. (1903 only)
Security updates galore.

1903 – September 10, 2019—KB4515384 (OS Build 18362.356) ***This fixes the Bad Win10 1903 Update aka Search UI issue. I checked it myself and the issue is now gone.
1809 – September 10, 2019—KB4512578 (OS Build 17763.737)
1803 – September 10, 2019—KB4516058 (OS Build 17134.1006)
1709 – EOL, time to update to 1809 or 1903

Windows 8.1
Provides protections against a new subclass of speculative execution side-channel vulnerabilities… and a host of Security updates.
September 10, 2019—KB4516064 (Security-only update)
September 10, 2019—KB4516067 (Monthly Rollup)

Windows 7
Provides protections against a new subclass of speculative execution side-channel vulnerabilities… and a host of Security updates.
September 10, 2019—KB4516033 (Security-only update)
September 10, 2019—KB4516065 (Monthly Rollup)

Software Updates:

O&O ShutUp10 1.6.1403
NEW: Chinese (simplified) language integrated
NEW: Search field in task bar can be deactivated (from Windows 10 1903)
FIX***: Deactivating the Bing search is only recommended reservedly, as there are currently problems with Windows search under Windows 10 1903
FIX: The wording in the English version was changed from passive to active to make it clearer
Available in English, German, French, Italian, Spanish, Russian and Chinese (simplified)
***The fix about Bing is the Bad Win10 1903 Update that was fixed today with today’s Win10 1903 update (see above). So, kinda pointless?
Download | Home Page | Changelog

Nvidia Geforce Game Ready WHQL Driver 436.30
“Provides increased performance and the optimal gaming experience for the Call of Duty: Modern Warfare PC Open Beta, Gears 5, and Borderlands 3”
Download | Release Notes

Patch Tuesday

By

Patch Tuesday
Windows 7
July 9, 2019—KB4507456 (Security-only update)
Security updates to Windows Server, Microsoft Graphics Component, Windows Storage and Filesystems, Windows Shell, Windows Input and Composition, and Windows Kernel.
July 9, 2019—KB4507449 (Monthly Rollup)
Security updates to Windows Server, Microsoft Graphics Component, Windows Storage and Filesystems, Windows Shell, Windows Input and Composition, and Windows Kernel.

Windows 8.1
July 9, 2019—KB4507457 (Security-only update)
Security updates to Windows Wireless Networking, Windows Server, Windows Storage and Filesystems, Microsoft Graphics Component, Windows Input and Composition, Windows Kernel, and Windows App Platform and Frameworks.
July 9, 2019—KB4507448 (Monthly Rollup)
This security update includes improvements and fixes that were a part of update KB4503283 (released June 20, 2019) and addresses the following issues:
– Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.
– Security updates to Windows Wireless Networking, Windows Server, Windows Storage and Filesystems, Microsoft Graphics Component, Windows Input and Composition, Windows Kernel, and Windows App Platform and Frameworks.

Windows 10
1903 – July 9, 2019—KB4507453 (OS Build 18362.239)
This update includes quality improvements. Key changes include:
– Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.
– Addresses an issue that may cause Mixed Reality users to see a tilted world after connecting their headsets.
– Addresses visual quality issues some users may have seen with Windows Mixed Reality (WMR) headsets and Steam®VR content.
– Security updates to Windows Wireless Networking, Microsoft Scripting Engine, Windows Server, Windows Storage and Filesystems, Windows Kernel, Microsoft HoloLens, Internet Explorer, Windows Input and Composition, Windows Virtualization, Windows App Platform and Frameworks, Microsoft Graphics Component, Microsoft Edge, and Windows Cryptography.

1809 – July 9, 2019—KB4507469 (OS Build 17763.615)
This update includes quality improvements. Key changes include:
– Addresses an issue that may cause the system to become unresponsive when an application uses the CameraCaptureUI API.
– Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.
– Security updates to Windows Server, Microsoft Scripting Engine, Microsoft Graphics Component, Internet Explorer, Windows Input and Composition, Windows Virtualization, Windows App Platform and Frameworks, Windows Kernel, Microsoft Edge, Windows Cryptography, and Windows Fundamentals.

1803 – July 9, 2019—KB4507435 (OS Build 17134.885)
This update includes quality improvements. Key changes include:
– Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.
– Security updates to Windows Wireless Networking, Windows Server, Microsoft Scripting Engine, Windows Storage and Filesystems, Microsoft Graphics Component, Windows Kernel, Internet Explorer, Windows Input and Composition, Windows Virtualization, Windows App Platform and Frameworks, Microsoft Edge, Windows Cryptography, and Windows Fundamentals.

– – – – – – – – – –

Firefox 68
Download | Release Notes
This means Tails has been updated and Tor Browser will be.

Nvidia Geforce Game Ready WHQL Driver 431.36
“Provides the optimal gaming experience for Tom Clancy’s The Division 2, Strange Brigade, and Metro Exodus”
Download | Release Notes