Why am I not Installing Windows security patches?

Reprinted: http://blogs.technet.com/ B /secure/archive/2008/03/28/ie-and-why-i-do-not-install-security-updates.aspx

By bullfrog

 

I have heard many complaints about this problem. For example, if too many patches occupy disk space, the system will become slower or even unavailable after installation, or "Patches may bring new vulnerabilities", and so on. I cannot correct or answer the patch one by one here. Besides, the patch is not designed by me. However, it should be noted that some Microsoft Security Updates may have a bunch of problems at the same time:

• What you do is out of proportion to your own volume;
• The problem may not be fundamentally solved;
• It is more likely that some programs cannot be used after installation;
• I have not seen any "errors" caused by Microsoft patching these patches ";
  
• ......

A typical example of these security updates is the IE patch. If you have installed some brand machines that are pre-installed with windows, or some Active X controls for work or other purposes, you may have installed the IE patch, some programs cannot be used-because the security update of IE is permanently killed
Bit them-it's just that a registry key has been modified, and it doesn't actually solve any problems such as overflow, and overflow on CVE. Why? Mostly because of active
The vendor "request" of X is squashed. That is to say, clsid9527, the lifetime code of these problematic controls, is no longer used by the owners. The update reminder that the owners did not "penetrate into the desktop, annoying, so only with the help of Microsoft Update hand click, if you still want to use the software to be squashed, you have to find the East site to download the update, just give an example such as Lenovo in MS07-045. Of course, there are still some active
The reason for X being squashed is that in fact it is no longer supported, rather than leave it alone, it is better to click off, and then such as OUACTRL. ocx in the MS07-045.

We still need to install monthly security updates as soon as possible, even if it is really annoying.