Frame-14

Privacy Ninja

        • DATA PROTECTION

        • CYBERSECURITY

        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

Windows 10 Is Offering A Confusing Mess Of Intel Driver Updates

Windows 10 Is Offering A Confusing Mess Of Intel Driver Updates

Windows 10 2004 is offering optional updates for Intel drivers that are a confusing mess for users who attempt to install them.

During the Windows 10 2004 July 2020 updates, Microsoft enabled the optional updates experience, allowing users to select the optional drivers they wish to install.

Windows 10 optional updates

This week, Microsoft began pushing out a confusing mess of Intel drivers that make it difficult to understand what should be installed.

After reading about this on WindowsLatest, I looked at my Optional Updates section and saw four different driver updates for supposedly the same ‘Intel – System’ device.

Optional Intel driver updates

It is even more confusing because three drivers have dates specifying they were created in 1968, 17 years before Windows 1.0 was first released.

In a 2017 blog post, Microsoft explains that using older dates is intentional as it enables Windows to pick the latest driver when multiple drivers are found for the same hardware device.

“When the system looks for a driver to use for a particular piece of hardware, it ranks them according to various criteria. If a driver provides a perfect match to the hardware ID, then it becomes a top candidate. And if more than one driver provides a perfect match, then the one with the most recent timestamp is chosen. If there is still a tie, then the one with the highest file version number is chosen”

“Suppose that the timestamp on the driver matched the build release date. And suppose you had a custom driver provided by the manufacturer. When you installed a new build, the driver provided by Windows will have a newer timestamp than the one provided by the manufacturer. Result: When you install a new build, all your manufacturer-provided drivers get replaced by the Windows drivers. Oops.”

“Intentionally backdating the drivers avoids this problem. It means that if you have a custom manufacturer-provided driver, it will retain priority over the Windows-provided driver. On the other hand, if your existing driver was the Windows-provided driver from an earlier build, then the third-level selection rule will choose the one with the higher version number, which is the one from the more recent build,” Microsoft explains in a developer blog post.

Intel has also stated in the past that they use the 7/18/1968 date for older drivers that should not be selected by Windows 10 when offering driver updates. This date is Intel’s foundation day.

“Intel Chipset Device Software uses an unusual date for the devices it is targeting. This is to make sure it does not overwrite any other drivers. The date 07/18/1968 has symbolic significance – Intel’s foundation day,” Intel explained in a tweet.

Also Read: 9 Policies For Security Procedures Examples

Even with an explanation, it is still confusing

Even with the explanation of how Windows 10 picks the most suitable driver for your computer, in my particular situation illustrated above, it still does not make sense.

According to research done by BleepingComputer, the drivers showing 7/18/1968 are Intel Chipset Drivers, while the driver with version 1910.13.0.1060 is for the Intel Management Engine.

Why are they all being offered as ‘Intel – System,’ when they are clearly for different components?

To make matters worse, Microsoft is offering two different drivers that display the same 10.1.16.6 version.

Microsoft has to do a better job of displaying what each offered driver is for and only offering the best choice for a particular device.

To offer three different Intel Chipset Driver, with two being the same version, is confusing as to what should be installed.

BleepingComputer has reached out to Microsoft to ask why the drivers are being offered in such a way but has not heard back.

Also Read: 4 Easy Guides to Data Breach Assessment

0 Comments

KEEP IN TOUCH

Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection

REPORTING DATA BREACH TO PDPC?

We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.
×

Hello!

Click one of our contacts below to chat on WhatsApp

× Chat with us