MS Security updates...Firefox?

[Bluefront]

I usually keep the MS security updates current. But since I use Firefox most/all of the time, are these updates doing me any good?

 

[n0cmonkey]

Firefox is not an excuse not to follow basic security best practices.

 

[mechBgon]

Originally posted by: Bluefront
I usually keep the MS security updates current. But since I use Firefox most/all of the time, are these updates doing me any good?

Absolutely yes, they are doing you good. Keep it up. And keep FireFox patched too, and your extensions.

 

[Bluefront]

Well I'm not talking about basic security.....I'm referring to the many updates that seem to be IE specific.

 

[mechBgon]

Originally posted by: Bluefront
Well I'm not talking about basic security.....I'm referring to the many updates that seem to be IE specific.

Install them anyway. Whether you use IE or not, malware can invoke it in an attempt to exploit it, as the many McAfee detections for QLowZones should illustrate.

 

[drag]

IE isn't a standalone application... the actual browser is just a shell around system/library calls that generate a browser from peices of Windows.

So if you look at it a certain way 'IE' is used widely in your system from the toolbar to your outlook express to the Windows Explorer (windows file manager) so included in the IE updates there maybe many fixes for those things, too. Plus there are somethings that won't work in Firefox... like Windows update website and you'll need IE for that anyways. Also Firefox has ability to call other applications to handle media and there have been windows exploits that use Firefox to start a IE session and use that to attack the computer.

 

[grimdeath]

so, you obliviosly dont care about windows updates huh? seeing as the only source to receive em without automatic updates turned on is through a IE window.....having a safer web browser and having a safe computer are TWO differnt things...dont let windows exploits ruin your experience.

btw, with as much FF love as i have, i do have to occasionally change over to IE, you cant get rid of it as much as some of use would like

 

[Bluefront]

Well that's just not true. Using Firefox you can browse the MS website, find out what new security patches are available for the month. Then you can download each patch separately, and apply it as you wish, or save it for other computers....whatever. At this point I'm completely up to date (I've checked using IE Update site).....never use automatic updates at all, and Firefox for all browsing.

I started this thread right after downloading some 18mb of October patches.....all of which are for IE.

October updates using Firefox

 

[tphong]

Firefox has the "open in IE" extension. Personally, I recommend using Firefox for everything. And for everything else that cannot be viewed in FF, use the "Open in IE" extension.

 

[firewall]

Subscribe to Microsoft's monthly OS/Software updates newsletter. When you get a mail from them, browse to the MS Technet website, and download the update patches. This way, you have a copy of the update files if you ever want to re-install your OS.

 

[gsellis]

Originally posted by: asadasif
Subscribe to Microsoft's monthly OS/Software updates newsletter. When you get a mail from them, browse to the MS Technet website, and download the update patches. This way, you have a copy of the update files if you ever want to re-install your OS.

Dang, where is the Mark as Answer button...
/thread

Edit - not so fast on /thread... Why not just use Autoupdate? It won't kill you.

 

[Bluefront]

gsellis......here's the deal. I have a bunch of computers, and I'm on dial-up. I want to download the patches one time only. Then I apply the patches to everything, without having to download more than once.

The recent 18mb download of these new patches was a pain....

 

[gsellis]

Originally posted by: Bluefront
gsellis......here's the deal. I have a bunch of computers, and I'm on dial-up. I want to download the patches one time only. Then I apply the patches to everything, without having to download more than once.

The recent 18mb download of these new patches was a pain....

Ah, the magic word, dial-up. That is part of the reason we roll the hotfixes up to a CD with an installer (dial-up, 56k connection, no connection, home user that we want to pamper.)

Best I can offer is sign up for the security bulletin (suggested already). You will get the notice automatically on patch Tuesday. DL the relevant files and put them on CD is the quickest route.

 

[firewall]

The advantage of downloading the updates yourself instead of using the WindowsUpdate feature is that you don't have to download the updates for every PC you have. As long as the OS is same on multiple PC's, you can use the same update files for all of them.

For instance, I download the updates for my PC running WinXP Pro. On my notebook, I have WinXP Home which mostly uses the same update files. I save a lot of time and money by downloading the updates only once.

 

[spherrod]

Originally posted by: Bluefront
gsellis......here's the deal. I have a bunch of computers, and I'm on dial-up. I want to download the patches one time only. Then I apply the patches to everything, without having to download more than once.

The recent 18mb download of these new patches was a pain....

If you have a spare server you could look into WSUS

It's a complete administration system for windows/office updates which is free to download from Microsoft

http://www.microsoft.com/windowsserversystem/updateservices/downloads/WSUS.mspx

Of course, it could be overkill depending on how many systems you have