Neowin has learned of a new beta released by Microsoft to its Windows Update Beta testers. The beta involves downloading an ISO of Microsoft's new "Windows Security Update CD". The CD, at 300 meg, contains most of Microsofts recent security patchs for Windows 2000 / XP users, although it is uncertain as to whether this CD is useful for Win 9x users. Specific to XP the CD has on it Service Pack 1 (a), Direct X 9, and Windows Media Player 9.

Microsoft have also included a useful tool on the CD called Windows Security advisor. In some ways, its sort of a trimmed down version of Microsoft Base Line Security Advisor (aimed more at Admins, find it here). The program essentially turns on automatic updating which for joe average this is undoubtedly a good thing, and also enables the firewall built into Windows XP. Again, undoubtedly a good thing for all users.

This CD is Microsoft taking an excellent step in the right direction. An easy to distribute, easy to use, tool, which could make a serious start on sorting out Microsoft's security issues. This kind of CD could easily be shiped with new PC's, getting them up to date many months after XP or the most recent Service Pack was launched. Aswell, for users on a sluggish connection this might be the end of that excuse for not updating.

However, some of the screenshot's below reveal a depressing point : The CD does contain "Winter 2004" in the top right hand side of the screen; is this a mistake? If so, a pretty big one! Could it really take Microsoft a whole year to deploy this? One hopes not.Update: Winter arguably includes Jan / Feb next year, which might be a more realistic release date. Take a peek at it below.

Screenshot: End page, Welcome page, Update page, Windows Security Advisor Screen
View: Betaplace (for testers)
View: Microsoft.com


About This CD
This CD contains a collection of updates for Windows 98, Windows 98SE, Windows Millennium, Windows 2000, and Windows XP. It is recommended that you install the service packs and updates offered for your operating system. You can improve your computer’s security and resolve known computer issues by running this CD. When you’re done, visit Windows Update to complete the process.

In addition to the updates, this CD also includes the Windows Security Advisor tool for Windows XP. This tool will help you configure your Internet Connection Firewall and turn on Automatic Updates.

Installing the Updates
This CD is detecting the operating system that is installed on your computer in order to offer you the correct set of updates. It is also detecting whether you have the latest service pack and security updates installed. If you do not have these installed they will be offered to you. If they are already installed on your system the item will indicate that it is already installed and you will not be able to select it.

After you complete installation of each update you may be asked to reboot your machine before proceeding with installation of the next component. Some computers will re-launch the CD after the reboot. If your computer does not automatically launch the CD after you have rebooted your machine you will need to insert the CD again to continue installing the next applicable update, or navigate to your CD-Rom drive and double-click on “launch.hta.”

After the Updates are installed
Once you have installed all of the updates you will need to return to the CD and all of the updates should indicate that they have been installed. Click the “continue” button to get more security information, including ways to bring your computer up-to-date with the latest security patches.

TECHNICAL SUPPORT OPTIONS
Product Name: Windows Security Update CD



There are 60 additional comments
Advertisement
(1 reply) Quote this comment Reply to this comment #1 Posted by DJ Prem on 15 Nov 2003 - 12:54
think they heard of AutoPatcher by Jason, smells like something burning
Quote this comment #1.1 Posted by mipra on 16 Nov 2003 - 08:12
hahaha..that should be pain in the ***
(7 replies) Quote this comment Reply to this comment #2 Posted by blowdart on 15 Nov 2003 - 13:33
QUOTE
...also enables the firewall built into Windows XP. Again, undoubtedly a good thing for all users.


Really? Lets see. If XP's firewall gets turned on on my main machine then ... internal networking stops, no more file shares. Local web server stops, no more asp.net development, no more connecting to sql from the live servers to pull the dev schemas off. Mail retrieval will slow because it closes the identd ports.

Crappy software firewalls are NOT a good thing for all users.
Quote this comment #2.1 Posted by AquaDex on 15 Nov 2003 - 13:58
if you are one of those geeky developer that has all the bells and whistles you mentioned, believe me, you won't be the ones needing that Microsoft Base Line Security Advisor nor Internet Connection Firewall
Quote this comment #2.2 Posted by JaggedFlame on 15 Nov 2003 - 14:41
It's a crappy software firewall because you're too lazy to configure it?
Quote this comment #2.3 Posted by SomeDork on 15 Nov 2003 - 19:29
ICF is part of the networking stack, which inherently makes it running at network speed. So, you must be either talking about the firewall speed (which would be synonymous with talking about the networking speed in XP ... hadn't heard any arguments there about efficiency) or the features.

Memory wise, I compared all the free or shareware firewall products. ICF is easily the memory use winner.

Function wise, I compared all the products from above. ICF is the clear loser in trojan or application protection. It also is weak in notification and logging support, and "weak" would probably be a nice way of putting it...

However, the sheer simplicity of the product can't be compared. It's easily argued that the function of an antivirus product easily outweighs the complication of two-way firewall protection. In other words, I don't want to tweak my "verified application list" in any firewall to allow it to make traffic outbound. Personally, I would prefer my system to verify the executable is good... and this is easily accomplished with very robust AV products.

Now I'll admit, this isn't good for everyone. For example, if a trojan isn't detectable by the AV product, it can still make external traffic. This would be caught by two-way firewall products. However, again, this is making a judgement call between simplicity and usability, vs micromanagement.
Quote this comment #2.4 Posted by mipra on 16 Nov 2003 - 08:13
I agree, Microsoft should stop forcing their customers to put on their firewall. It sucks
Quote this comment #2.5 Posted by y_notm on 16 Nov 2003 - 19:47
no one is forcing you to turn on the firewall. this CD is optional, it doesn't turn on the firewall as soon as put in the CD, and you have to run a tool that asks you if you want to turn it on. XPSP2 enables the firewall by default, but can be turned off with a few mouse clicks.

Everyone bitches about how insecure MS products are, but as soon as they try to lock them down and make them more secure everyone bitches about that. Its a lose lose situation for Microsoft, because, apparently, all people like to do is bitch
Quote this comment #2.6 Posted by ingrampj on 16 Nov 2003 - 21:55
Good Words...Microsoft are actually the reason that the complainers are actually able to complain, they also have to try and be "All Things to All People" which by the very nature of computing is an impossible task...but somebody please give them 10 out of 10 for at least trying...
Quote this comment #2.7 Posted by snippet1 on 17 Nov 2003 - 06:03
Gives you a button...
Still a bit misleading, tho.

Last edited by 24398 on 17 Nov 2003 - 06:18
(2 replies) Quote this comment Reply to this comment #3 Posted by mh508 on 15 Nov 2003 - 13:36
this is Microsoft AutoPatcher? hahaha

/Raptor
Quote this comment #3.1 Posted by FlishFun on 15 Nov 2003 - 18:11
Not quite... you can go here: AutoPatcher 4.1 vs. Windows Update ISO Beta and download a little comparison I made. They have a little ways to go still.
Quote this comment #3.2 Posted by mipra on 16 Nov 2003 - 08:16
so...can you tell us which one you prefer?
(1 reply) Quote this comment Reply to this comment #4 Posted by dblair on 15 Nov 2003 - 13:44
Guys... Winter 2004 is January/February... not a year from now.
Quote this comment #4.1 Posted by vetMr magoo on 15 Nov 2003 - 14:41
hmmm... good point. US / EN perspective coming in there!
(3 replies) Quote this comment Reply to this comment #5 Posted by FISKER_Q on 15 Nov 2003 - 13:53
Can you use it to slipstream onto a windows cd/dvd?

I'm also a tester but of course i got to delete the document with my login details. So i've requested my password again.
Quote this comment #5.1 Posted by AquaDex on 15 Nov 2003 - 14:09
no you can't do that, this CD is for the majority not-that-tech-savvy users with a not-really-that-fast internet connection so that they can also keep their copy of Windows Updated

for tech-savvy users that actually knows how to slipstream something into a Windows installation or installation media, just do it using the good old method (but of course you can still make use of the update files on this CD and save you download times to download the updates you need to slipstream)
Quote this comment #5.2 Posted by FISKER_Q on 15 Nov 2003 - 19:23
It would be cool if you could just do a command like with SP1.

I've come into many problems slipstreaming updates, like some old updates overwriting new ones. So i just decided to slipstream sp1 and the fix for blaster.
Quote this comment #5.3 Posted by snippet1 on 17 Nov 2003 - 06:05
The ISO is in Betaplace. That's just your passport. And BTW, the patches on the CD are in the standard format that you would download from the net.
(1 reply) Quote this comment Reply to this comment #6 Posted by Mister Lamar on 15 Nov 2003 - 14:18
I would like to get a copy of this, so when I do a clean install.

anyway it works I still like microsoft
Quote this comment #6.1 Posted by vetMr magoo on 15 Nov 2003 - 14:45
its good for techs as well, as it has all the updates in exe form - i.e. as they would be were you to download them normally of the web - on the cd. Thus, a great CD for when your doing a clean install.
Quote this comment Reply to this comment #7 Posted by CheeseCow on 15 Nov 2003 - 14:34
This is a step in the direction of more secure computing for Windows users, but I really don't think that turning on the Firewall by default is a great idea. A lot of my friends have had it turned on by the network wizard found in XP, and they have had problems with Messenger and other networking activities.
(2 replies) Quote this comment Reply to this comment #8 Posted by cybertlc on 15 Nov 2003 - 15:33
This isn't even anything new. I ran the CD and it didn't contain ONE NEW ITEM. It's nothing to do with SP2......just a bunch of crap for SP1 that they make sure you have installed. It just tells you that you should turn on the firewall, and checks to make sure you have the latest updates. If you run Windows Update, then you have everything. Don't see the point in this disc....
Quote this comment #8.1 Posted by vetMr magoo on 15 Nov 2003 - 15:35
I think you really need to think about why they have released this. Its not SP2, and its not new updates. Its a release mechanism. Its an alternative to Win Update for people on 56k. Its a way of making end users more secure simply and effectivly.
Quote this comment #8.2 Posted by params on 15 Nov 2003 - 16:17
Exactly right. It's essentailly the Windows Update detection technology on a disc.
Once WU5 goes live even those on 512/256 broadband will be waiting ages for updates to Windows, Office, SQL etc all to download. So, why not perfection the CD method of rollout prior to XPSP2, OFF2003SP1 etc all get released.

It works well, is simple to use and MS shoudl be commended for it.
Quote this comment Reply to this comment #9 Posted by MitchShrader on 15 Nov 2003 - 16:45
The idea is good as a distro mechanism. and very nice as a tech tool when forced to do an onsite reinstall during working hours (with minimal time & bandwidth available). Kudos for FINALLY coming up with a simple way to keep em in a pile and fairly current.. now if they'd just start SHIPPING EM SLIPSTREAMED.. why the HELL should a user be forced to update ANYthing more'n a month or two old? why cantcha get a (pay shipping, of course) (nearly) FREE CD of 'slipstreamed latest updated OS version' with ANY legit (activated) license # and a phone call? bleh. Not like they would go broke sellin 35c blanks for 6$..
Quote this comment Reply to this comment #10 Posted by bangbang023 on 15 Nov 2003 - 16:53
Well it was useless for me since I was already all up to date, but hey it's a nice idea by MS.
(2 replies) Quote this comment Reply to this comment #11 Posted by Ev1lg0at on 15 Nov 2003 - 17:18
errr, didnt bill gates predict that by 2006 the network speed would be at least 1gb fast?
Quote this comment #11.1 Posted by BobSmith on 15 Nov 2003 - 21:45
errr, you got a link for that?
Quote this comment #11.2 Posted by vetMr magoo on 16 Nov 2003 - 09:35
I think he mentioned it in a key note @ the pdc.
Quote this comment Reply to this comment #12 Posted by cybertlc on 15 Nov 2003 - 18:08
So what, they'd have to send a CD to the 56K people? Cuz downloading a 300MB ISO for a 56k person isn't going to help anything! And I really can't see the common user paying to get an update CD.
(5 replies) Quote this comment Reply to this comment #13 Posted by Bitz on 15 Nov 2003 - 18:29
It's a way that users who have a high speed connection through a friend or their employee can build a cdrom to keep computer safe. People helping other people you know.

And Mr. Magoo should realize that as a beta tester he has signed an NDA agreement with Microsoft and be aware that he has now violated this agreement.

Magoo is definitely "unprofessional" in his/her/their attitude toward this trust that he/she/they have been given.
Quote this comment #13.1 Posted by vetMr magoo on 15 Nov 2003 - 21:25
hey - i didn't leak the product. These screenshots and other information were sent to me by a 3rd party.

Quote this comment #13.2 Posted by BobSmith on 15 Nov 2003 - 21:47
Curious, is there an NDA with WU4 beta? All the betas (Microsoft or otherwise) I've been on, have said explicitly - this is NDA'ed confidential info. Does the WU4 stuff say that?
Quote this comment #13.3 Posted by Bitz on 16 Nov 2003 - 00:00
Well then Mr. 3rd party needs to reread their NDA information.
Quote this comment #13.4 Posted by BobSmith on 16 Nov 2003 - 01:49
QUOTE (#13.3)
Well then Mr. 3rd party needs to reread their NDA information.

Uh, is that your way of saying there is an NDA for the WU4 beta?
Quote this comment #13.5 Posted by mipra on 16 Nov 2003 - 08:17
hehehe..easy..easy..
Quote this comment Reply to this comment #14 Posted by SidVicious on 15 Nov 2003 - 19:32
Nice CD...very useful.
Quote this comment Reply to this comment #15 Posted by daveoc64 on 15 Nov 2003 - 20:39
I doubt MS intend to make people download an ISO. It is only an ISO at the moment because they haven't made any CDs and consider it important to get the disc working before they package it and ship it off.
(1 reply) Quote this comment Reply to this comment #16 Posted by cybertlc on 15 Nov 2003 - 20:50
So which is it. You guys think MS will send update CDs out.....or make users download them? That wouldn't solve any 56k problems that someone claimed they were going for.
Quote this comment #16.1 Posted by vetMr magoo on 15 Nov 2003 - 21:27
they will either distribute them for free in shops (dixons, Pc world etc), or ship them with IT magazines... Or get people to pay p and p to have them shipped.
Quote this comment Reply to this comment #17 Posted by xStainDx on 15 Nov 2003 - 21:39
QUOTE
However, some of the screenshot's below reveal a depressing point : The CD does contain "Winter 2004" in the top right hand side of the screen; is this a mistake? If so, a pretty big one! Could it really take Microsoft a whole year to deploy this? One hopes not.Update: Winter arguably includes Jan / Feb next year, which might be a more realistic release date. Take a peek at it below.


Who would think it would take until december of 2004 after which XP SP2 would have already been released 6 months prior which would include all these modifications already.

As stated it'll be around January or February.
Quote this comment Reply to this comment #18 Posted by cybertlc on 15 Nov 2003 - 22:12
Well, there is both a winter 2004 at the BEGINNING and END of the year. January is still winter, 2004. It depends on how they look at it.
(3 replies) Quote this comment Reply to this comment #19 Posted by dblair on 15 Nov 2003 - 23:53
Cybertlc, in the US, Winter is considered the very beginning of the calendar year, IME (and the very, very tail end, for that matter.) Keep in mind, Winter begins 12/22 in the northern hemisphere.
Quote this comment #19.1 Posted by BobSmith on 16 Nov 2003 - 01:57
QUOTE (#19.0)
in the US, Winter is considered the very beginning of the calendar year

I'm from the US and I don't consider it such. Winter 2004, to me, means Nov-Dec 2004. While it is true that what most consider winter spans Nov-Mar, if specifying a year with the season, I only think of Nov-Dec.
Quote this comment #19.2 Posted by gameguy on 16 Nov 2003 - 04:09
i'm from the US and i consider winter to be from dec to feb. it's november now and it's not that cold yet here... at least compared to what it will be like in a month.
Quote this comment #19.3 Posted by BobSmith on 16 Nov 2003 - 06:20
We had a solid week of snow through the end of October, so I consider this winter. Seasons aside, I'm sure this thing will be released in the next few months (regardless of what they call the season).
(1 reply) Quote this comment Reply to this comment #20 Posted by SiXXGuNNZ on 16 Nov 2003 - 02:01
SVCPACK ownz you all

AP is cool for ppl who are a little slow, but any half decent nerd should just make their own slipstreamed hotfixes svcpack cd
Quote this comment #20.1 Posted by mipra on 16 Nov 2003 - 08:18
hahaha..good point u got there
(3 replies) Quote this comment Reply to this comment #21 Posted by Shaahin on 16 Nov 2003 - 23:13
Windows update on a CD?? Dear Bill, I guess you havn't noticed that 40 GB drives won't grow on trees.

Quote this comment #21.1 Posted by vetMr magoo on 16 Nov 2003 - 23:26
eh?
Quote this comment #21.2 Posted by XP-RTM on 17 Nov 2003 - 01:40
i quote that
Quote this comment #21.3 Posted by blackice912 on 17 Nov 2003 - 08:57
40GB drives are dirt cheap dude, what are you on?
(1 reply) Quote this comment Reply to this comment #22 Posted by altecxp on 17 Nov 2003 - 04:17
my pc after a fresh install still needs:
Quote this comment #22.1 Posted by tmaxxtigger on 17 Nov 2003 - 16:43
Yes, I noticed the same thing, it's obviously not very up to date!
(4 replies) Quote this comment Reply to this comment #23 Posted by carlito on 17 Nov 2003 - 04:52
umm ok from that cd we have:
[QUOTE]
function start() {
//check if the date is past 10/1/04 and direct them to microsoft.com/protect
var theDate = new Date();
var yr = theDate.getYear();
var mo = theDate.getMonth()+1;
if (theDate.getYear() > "2004" || ((theDate.getMonth()+1) >= "10" && theDate.getDate() > "1" && theDate.getYear() == "2004")
{
ControlExpired.style.display="block";
initialdiv.style.display="none";
}
else
{
init();
}
}[/QUOTE]

someone who can read javascript tell me what's significant about the 10th of jan 2004 from taht script
Quote this comment #23.1 Posted by BobSmith on 17 Nov 2003 - 06:11
1 Nov 2004 from the way I read it.

If after 1 Nov 2004, no go, if prior, initialize.
Quote this comment #23.2 Posted by carlito on 17 Nov 2003 - 07:57
oh yeah... oops... im not used to reading american dates...
Quote this comment #23.3 Posted by FISKER_Q on 17 Nov 2003 - 08:52
Well i doubt they mean September and October is winter 2004
Quote this comment #23.4 Posted by JaggedFlame on 17 Nov 2003 - 14:12
QUOTE
1 Nov 2004 from the way I read it.

If after 1 Nov 2004, no go, if prior, initialize.


Except that 10 is October?
[1]

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.


Scroll to the Top
....
My Preferences
....
Communicating with server
Loading
Please Wait...
....
Loading
 X 
....