By TODD BISHOP
P-I REPORTER
Microsoft Corp. says it's reconsidering how it updates a key piece of Windows plumbing after a newsletter reported that the company delivered fixes over the Internet silently -- not telling PC users even when they had set the operating system to be notified.
The article, in the Thursday edition of the "Windows Secrets" newsletter, raises questions about the practice, and how it might be used later.
"If Microsoft can change things on your PC, after you've set it up to only take changes when you want them, that gives people a lot of fear for what might happen to their PCs" in the future, said Brian Livingston, the newsletter's editorial director.
Microsoft representatives sought to explain and defend the practice, describing it as a unique situation. But the company also acknowledged that it is now looking at ways to make the process more transparent.
The company "should have been clearer in our explanation of this process earlier in the game," wrote Nick White, a Windows product manager, in a post on the Windows Vista blog.
The dust-up involves the Update program, which checks for and downloads Windows fixes over the Internet. Users can set the program to download and install those fixes automatically, or they can exercise more control by setting it to alert them and let them choose whether to download or install Windows patches when they're available.
In the case uncovered by Windows Secrets, the fixes were downloaded and installed automatically, without notification, even in cases where users sought to exercise that greater control.
The twist is that the "silent" updates in question were for the Windows Update program itself.
That made these updates different from other types, contended Microsoft's Nate Clinton, Windows Update program manager, in an online post. Because they involved the Windows Update program, he wrote that it was important to download and install the updates automatically, even if users had opted for more control over the process.
"Had we failed to update the service automatically, users would not have been able to successfully check for updates and, in turn, users would not have had updates installed automatically or received expected notifications," Clinton wrote.
But the story, by Windows Secrets associate editor Scott Dunn, said Windows had alerted users about what was happening in a similar situation in the past.
"These files are by no means viruses, and Microsoft appears to have no malicious intent in patching them," Dunn wrote in the story. "However, writing files to a user's PC without notice ... is behavior that's usually associated with hacker Web sites. The question being raised in discussion forums is, 'Why is Microsoft operating in this way?'
http://seattlepi.nwsource.com/business/331579_windowsupdates14.html
