2 ms·

> Of course Microsoft blasts Win10 installer files down our very expensive, very slow satellite link […] The lesson there is that you should always quarantine

> Of course Microsoft blasts Win10 installer files down our very expensive, very slow satellite link […] The lesson there is that you should always quarantine computers that need to be pinned on very specific versions of an OS, especially in such a precarious setting! Those computers should not have been able to communicate over the internet at all, except for those cases where communication is part of their purpose (e.g., monitoring the experiments), and that should happen via a dedicated VPN allowing only the traffic necessary. I'm surprised this isn't the standard operating procedure for this kind of case.

digi_owl 10y ago
Could be it had been sitting down there for years without any incident. Best i recall, MS was very very insistent with their Win10 "upgrade". To the point that they relabeled the installer patch as critical (aka, reserved for pushing 0-day patches or similar) after people found they could change certain settings to make it go away.
- emodendroket 10y ago
  > Could be it had been sitting down there for years without any incident. Well, sure, and if they ran a critical machine with no backups whatsoever it might have also been fine for years, but that hardly makes it reasonable practice.