4 ms·
Microsoft has recommended turning off SMB1 support in the past: https://blogs.technet.microsoft.com/filecab/2016/09/16/stop-using-smb1/ https://blogs.technet.mi
by rythie 9y ago
Microsoft has recommended turning off SMB1 support in the past: https://blogs.technet.microsoft.com/filecab/2016/09/16/stop-using-smb1/ https://blogs.technet.microsoft.com/filecab/2016/09/16/stop-... - though perhaps not prominently enough.
However, you might be able turn off SMB1 support is if you still have machines with Windows XP or 2003. This is a similar situation to SSLv3 when POODLE was discovered, in that the difficulty of getting rid of old protocols, is that of getting rid of the last ones (Though I realise WCry exploits an implementation bug).
- chrisper 9y agoWhy is it enabled by default then? If you need such an old legacy thing, shouldn't it be the other way around? Like that you need to enable it if you need it rather than disable it if you don't.
- rincebrain 9y agoI would suspect because they initially shipped with it enabled in 7, and changing that default during the product's lifetime, even with the loudest notification they could muster, would break people.
- chrisper 9y agoYes, but it is also enabled on Windows 10 by default.
- arthurfm 9y ago> Why is it enabled by default then? SMB1 will be disabled by default in the Fall Creators Update [1] and removed completely in a future release of Windows 10 [2]. It should have probably happened a lot sooner, but the protocol is still used quite a bit [3] despite Windows itself not requiring SMB1 for the past 10 years [4]. [1] https://twitter.com/NerdPyle/status/863297941930246145 https://twitter.com/NerdPyle/status/863297941930246145 [2] https://twitter.com/NerdPyle/status/863519752429293568 https://twitter.com/NerdPyle/status/863519752429293568 [3] https://twitter.com/NerdPyle/status/863298534862340096 https://twitter.com/NerdPyle/status/863298534862340096 [4] https://twitter.com/NerdPyle/status/863520227576791040 https://twitter.com/NerdPyle/status/863520227576791040