Welcome back, Folks!
Today is Patch Tuesday for May 2020.
The next build of Windows 10 will be released in only two weeks. If you don’t want to be the guinea pig I strongly suggest you update to v1909 as soon as possible if you’re running an older build. This will grant you a reprieve from the new version for a couple months. Let everyone else beta test and you can upgrade when they’ve worked out the bugs.
Furthermore, yesterday was the last day of support for commercial versions of Windows 10 prior to v1809 (build 17763). If you’re running an older version upgrade to v1909 ASAP to maintain security updates for your device.
This Month in Technology
Send a text, get root.
Even more bad news for Apple devices, as Google’s Project Zero has discovered “numerous new vulnerabilities” on all Apple hardware, and all Apple devices with Thunderbolt ports are vulnerable to an unpatchable security exploit.
But it’s not just Apple. Samsung is patching recent devices from their Galaxy line, though every Galaxy device they produced over the last 7 years is vulnerable to a similar “perfect 10” vulnerability in image parsing.
Ghost and LineageOS were hacked using known vulnerabilities in SaltStack that were left unaddressed. Fortunately it doesn’t look like any serious damage was done.
Pitney Bowes has been hacked again.
Watering holes (places that aggregate data from many accounts and services) will always be prime targets. If you’re not increasing your defense-in-depth posture at your watering hole, expect to be repeatedly violated. Ask LabCorp.
Government-approved monopolies are far too frequently granted exceptions others are not. PG&E, despite causing the fires that killed over a hundred people and destroyed over 25,000 homes and triggering the current insurance crisis in California, has had their $200 million fine waived.
Racists take aim at technology, banning the use of names of colors in the UK.
If you support the lockdown, is it because you hate science or just math? Face masks increase your risk, not the other way around. There’s no such thing as perfect safety.
I won’t try to make a distinction between the junk science you worship and actual science. You’re too far gone for that.
The lockdown is proving more lethal than the coronavirus as suicides exceed COVID-19 deaths in Australia.
Now for the good news:
A massive 10,000+ device botnet is dying out. Sadly, this isn’t one of the truly evil ones that was used for severe malicious actions, but rather just for downloading Anime.
Let’s Get Busy
Now back to our regularly scheduled program. Thanks to the unstopping barrage of updates pushed during “weekly update quarantine”, Patch Tuesday this month is not that bad. The typical computer should see roughly 1.2 GB in updates today. Let’s get started.
Microsoft released updates for Windows, .NET, Internet Explorer, Servicing Stack, and MSRT (~800 MB). This includes security updates. A reboot is required.
Adobe Flash Player 32.0.0.371 is a security update.
Win: https://12pd.com/click?flash
Win: https://12pd.com/click?flashie
Mac: https://12pd.com/click?flashmac
Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.
Important Notes
Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.
The release of macOS Catalina (10.15) means that macOS Sierra (10.12) and older are no longer supported. If you can not install at least macOS High Sierra (10.13) on your Mac then you should immediately remove it from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.
The now-current release of the Windows 10 (1909) is a pretty small update so will install quickly. Windows 10 pushes you to get the latest Windows 10 release every 6 months. If you don’t let it finish and you’re on a slow connection, this process kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.
Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.
It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface.
Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.
Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com
Browser Updates
One or more of these are likely to be of interest to everyone.
Brave 1.8.95 is a security update. Use Menu, Help, About to install the most current version.
https://brave.com/
Google Chrome 81.0.4044.138 is a security update. Use Menu, Help, About to install the most current version.
Microsoft Edge 81.0.416.72 is a security update. Use Menu, Help, About to install the most current version.
https://www.microsoft.com/en-us/edge/business/download
Firefox 76.0.1 follows shortly after 76.0 which is a security update. 76.0.1 resolves several compatibility issues. Use Menu, Help, About to install the most current version.
Firefox ESR 68.8.0 is a security update. Use Menu, Help, About to install the most current version.
SeaMonkey 2.53.2 is a security update.
https://www.seamonkey-project.org/releases/
Vivaldi 3.0.1874.38 is a security update. Use Menu, Help, About to install the most current version.
https://vivaldi.com/
Email Updates
One or more of these are likely to be of interest to everyone.
Thunderbird 68.8.0 is a security update. Use Menu, Help, About to install the most current version.
Internet Updates
One or more of these are likely to be of interest to everyone.
Trillian 6.3.0.4 resolves several bugs. This is not a security update.
https://www.trillian.im/
Npcap 0.9991 resolves several bugs and improves compatibility. This is not a security update.
https://nmap.org/npcap/
Zoom 5.0.24046.0510 improves local privacy. This is not a security update.
https://zoom.us/
Media Updates
These are unlikely to be of interest to most people.
Picard 2.3.2 resolves several bugs and improves compatibility. This is not a security update.
https://picard.musicbrainz.org/
Game Updates
These are unlikely to be of interest to most people.
Nintendo Switch 10.0.2 resolves a pairing bug and improves stability. This is not a security update.
Tekkit Server 1.2.9i disables mod update checks resolving a crash bug. This is not a security update.
http://www.technicpack.net/modpack/tekkitmain
Office Updates
One or more of these are likely to be of interest to most people.
Adobe Reader DC 20.009.20063 is a security update. Use Help, Check for updates to install the most current version.
Adobe Acrobat 2020.009.20063, 2017.011.30171, and 2015.006.30523 are security updates. Use Help, Check for updates to install the most current version.
Atom 1.46.0 resolves several bugs. This is not a security update.
https://atom.io/
Adobe DNG Software Development Kit (SDK) 1.5.1 is a security update.
Win: https://supportdownloads.adobe.com/product.jsp?product=120&platform=Windows
Mac: https://supportdownloads.adobe.com/product.jsp?product=120&platform=Macintosh
Security Software Updates
One or more of these is likely to be of interest to most people.
RogueKiller 14.4.2 resolves a crash bug and updates service. This is not a security update.
https://www.adlice.com/download/roguekiller/
TinyWall 3.0.4 resolves several bugs. This is not a security update.
https://tinywall.pados.hu/
Capture Updates
These are unlikely to be of interest to most people.
ScreenToGif 2.24 resolves several bugs and adds two-pass FFmpeg option. This is not a security update.
https://github.com/NickeManarin/ScreenToGif/releases/latest
SnagIt 2020.1.2 resolves several crash bugs and improves compatibility. This is a security update.
https://download.techsmith.com/snagit/enu/snagit.exe
Converter Updates
These are unlikely to be of interest to most people.
MKVToolnix 46.0.0 resolves several bugs. This is not a security update.
https://www.fosshub.com/MKVToolNix.html
HandBrake 1.3.2 resolves several bugs. This is not a security update.
https://handbrake.fr/
Utility Updates
These are unlikely to be of interest to most people.
1Password for Mac 7.5 adds password sharing by link, and resolves several bugs. This is a security update.
https://1password.com/downloads/mac/
DesktopOK 7.17 adds silent install support, resolves several bugs, and updates language files. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK
Etcher 1.5.87 resolves several bugs and improves compatibility. This is not a security update.
https://www.balena.io/etcher/
GoodSync 11.1.8 improves compatibility. This is not a security update.
https://12pd.com/click?goodsync
IsMyHdOK 2.15 improves drive type detection. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/IsMyHdOK
MS ISO Downloader 8.36 updates libraries and adds new disk images. This should be treated as a security update.
https://www.heidoc.net/joomla/technology-science/microsoft/67-microsoft-windows-and-office-iso-download-tool
OSFMount 3.0.1006 resolves several bugs. This is not a security update.
https://www.osforensics.com/tools/mount-disk-images.html
PointerStick 4.01 updates language files. This is not a security update.
https://www.softwareok.com/?seite=Freeware/PointerStick
PowerToys 0.17.0 adds native automatic update and updates FancyZones behavior. This is not a security update.
https://github.com/microsoft/PowerToys/releases/latest
PSAppDeploy 3.8.2 resolves several bugs. This is a security update.
https://psappdeploytoolkit.com/
WifiChannelMonitor 1.60 updates the internal MAC addresses file. This is not a security update.
https://www.nirsoft.net/utils/wifi_channel_monitor.html
WinScan2PDF 5.33 improves WIA compatibility and resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF
Developer Updates
These are unlikely to be of interest to most people.
Android Studio 3.6.3.0 resolves a caching bug. This is not a security update.
https://developer.android.com/studio
Node.js 14.2.0 improves error handling and monitoring with assertions, and resolves several bugs. This is a security update.
https://nodejs.org/en/
Visual Studio Code 1.45 improves accessibility, color, syntax, and semantic highlighting, performance, and GitHub integration. This is not a security update.
https://code.visualstudio.com/
Web Package Updates
These are likely to be of interest only to web developers.
OpenCart 3.0.3.3 replaces all PayPal extensions with PayPal Commerce platform. This is not a security update.
https://www.opencart.com/
Adminer 4.7.7 is a security update.
https://www.adminer.org/en/
OpenPetra 2020.04 resolves several bugs, adds Sponsorship module, improves initial setup and updates libraries. This is a security update.
https://www.openpetra.org/
Autoptimize 2.7.1 resolves several bugs. This is not a security update.
Social Post Feed 2.14.1 resolves a bug in notices. This is not a security update.
Postie 1.9.51 removes functions from logon screen. This is not a security update.
Redirection 4.7.2 resolves several bugs. This is not a security update.
NextScripts Social Networks Auto-Poster 4.3.15 improves compatibility. This is not a security update.
Top Commentators Widget 1.6 removes deprecated functions. This is not a security update.
WooCommerce 4.1.0 updates dependencies, resolves several bugs. This is a security update.
WP Mail SMTP 2.0.1 improves compatibility. This is not a security update.
Show IDs 1.1.4 improves compatibility with WordPress 5.4.1.
That’s all for now folks. Keep it clean out there. 😉
Regards,
Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/