6 ms·
Microsoft says April Windows updates break VPN connections
- systems 2y agomaybe its good thing, vpn is the security tool most people think vpn are good to workaround censorship , but i agree with the opinion that they are not a great security tool
- Unfrozen0688 2y agoCompanies use VPN technology to access their internal network over the internet.
- riffic 2y agoassume everything in the internal network is compromised already. the moat and castle model is dead. https://thenewstack.io/why-the-castle-and-moat-approach-to-security-is-obsolete/ https://thenewstack.io/why-the-castle-and-moat-approach-to-s...
- liveoneggs 2y agosales blogs for security?
- system33- 2y agoA VPN can be required to access internal network(s) without implying a lack of further roadblocks/restrictions/authorization checks/etc.
- riffic 2y agois the real world that disciplined?
- Underphil 2y agoIt's fairly typical, this. The world and his wife hears 'VPN' through the myriad of advertising vectors they're bombarded with and assume the advertised use case is the only use case. The 'P' in VPN is what confuses them I assume.
- Mengkudulangsat 2y agoWow, that explains a lot. Mullvad has been nigh unusable for me.
- rustcleaner 2y agoThe OS whose name plurally describes a particular Platonic solid will not have this issue. ADDENDUM: It starts with Q.
- javajosh 2y agoI dislike riddles like this. There are 5 platonic solids, the only likely one for a product name is "Cube" but I've never heard of an OS named "Cubes". And now, I don't want to . Tetrahedron - a polyhedron with 4 triangular faces Cube - a polyhedron with 6 square faces Octahedron - a polyhedron with 8 triangular faces Dodecahedron - a polyhedron with 12 pentagonal faces Icosahedron - a polyhedron with 20 triangular faces
- Hakkin 2y agoLikely meant Qubes OS[0], not sure why it was phrased as a riddle. [0] https://www.qubes-os.org/ https://www.qubes-os.org/
- rustcleaner 2y agoBecause I got flamed for it earlier. :^)
- boomboomsubban 2y agoSomebody called you out for your blatant Qubes promotion on an unrelated subject, and your takeaway was "make the Qubes promotion on an unrelated subject cryptic?"
- javajosh 2y agoI don't think you're doing your cause any good, and in fact some harm.
- rpmisms 2y agoHe means Qubes. I thought so, so I threatened chatGPT with the death of a puppy, and it agreed.
- jmole 2y agoI recently switched to whole-home VPN by routing everything except a few external services through a wireguard connection on pfSense. Have to say I'm pretty happy with it compared to running a random VPN client on my computer. Funnily enough, the only thing I've been unable to access while behind VPN was downloading a windows ISO direct from microsoft to reset a laptop.
- freedomben 2y agoI tried this, but the CAPTCHAs make browsing nearly impossible and (I think) are what breaks many of the devices on my network, and when it's on the whole home network from the router, it's a lot harder to turn it off when I just need to get something done. I'll probably end up spinning up an exit node on Linode or something, but I tried that on certain machines and it had some significant performance implications (though I'm not geographically near a datacenter so it probably wouldn't be the same problem for most people).
- jsheard 2y agoI gave up on VPNing my whole network when it progressed past CAPTCHAs and into getting blocked outright. Hard CloudFlare errors with no challenge, or getting my connections null routed altogether. Life's too short for this shit I'm afraid.
- blueflow 2y agoWhat tf did you do to get your ranges blacklisted?
- jsheard 2y agoProbably the fact that I was using Mullvad, the flipside of their commitment to privacy is they can't really do anything about abuse coming from their IP ranges and they inevitably end up on blacklists. With the desktop client you can at least mash the reconnect button until you get an IP that works, but that's a hassle if you are running the tunnel somewhere else.
- LightHugger 2y ago> However, it's important to note that Redmond includes all security fixes in a single update. Hence, removing cumulative updates removes all fixes for patched security vulnerabilities in addition to resolving VPN issues. Maybe they should stop bundling said fixes all in one update. This was not practiced so extensively in older vers of windows, and i always get the impression this system was switched to, as part of win10's push to exert more control over updates on end user computers.
- justsomehnguy 2y ago> This was not practiced so extensively in older vers of windows Yes, and the result was a billions of billions of combinations of those updates. While the current system is far from being ideal, it's way easier to test with a reduced set of permutations. And before you object, think of it this way - if the current shitshow is with a reduced set, imagine what it would be with a non reduced one. It wouldn't be a shitshow x 2 or shitshow^2, it would be around shitshow^99999.
- datenyan 2y ago> Yes, and the result was a billions of billions of combinations of those updates. I was recently talking to a colleague about this, and it was remarkable to me how "quickly" they had forgotten the hell of having Windows Update filled with 1 billion 10kb updates.
- LightHugger 2y agoWorked great though, w7 was the best, most stable version of windows and it worked this way
- wtallis 2y agoA billion tiny updates seems to work reasonably well for most major Linux distros.
- phatfish 2y ago
- throwaway918274 2y agowiped windows from my home PC and installed Ubuntu 24.04 last week zero regrets, tired of Microsoft's terrible quality, terrible security, terrible ads - good riddance
- leeoniya 2y agosame. been on EndeavourOS/KDE/Plasma exclusively for almost 4 years. tried Mint and Manjaro before that. if i had to use a ubuntu derivative, i'd probably try Pop!_OS.
- mjfl 2y agoit really is so much smoother of an experience nowadays.
- throwaway918274 2y agohad a few small bumps getting everything I need configured and running the way I need it, but now that I have everything the way I like it it's damn near perfect
- brian_herman 2y agoI'm gonna do this with debian in 2025 when windows 10 runs out of security updates. Proton has been great on my steamdeck so I probably won't miss out on many games.
- throwaway918274 2y agoi was also tempted to just go the debian route - but the free Ubuntu Pro subscription for personal use with 12 years of bug/security updates (and ultimately, peace of mind) was what won me over - I hate reinstalling or upgrading my OS so over a decade of not changing anything is really appealing to me. i've been playing my steam games with Proton so far and it's been solid
- mlv- 2y ago
- Rusdi 2y ago[flagged]
- deleted 2y ago[deleted]
- delfinom 2y agoHonestly, I wonder how many businesses this actually impacts because as far as I know, most people rather just implement firewall/security appliance based firewalls which are all OpenVPN based or something propertiary like Cisco secure client.
- RachelF 2y agoI wonder if Microsoft actually does any testing of their Windows builds? Do they still have a Windows QA department?
- OwenFM 2y agoMy first reaction is that it's not a bug, it's a side-effect of them being forced by the US government to break VPNs in certain scenarios.
- xyst 2y agoJust windows things