Install security patches regularly

Last revision July 21, 2004

All software has "bugs". Even if you correctly configure network services on your computer and use strong passwords, there could be a software defect that still allows a hacker to access your computer. Fortunately, as these bugs are discovered, all the major software vendors implement fixes, normally called security patches, which they make freely available on their web sites.

Because even a new computer comes with a copy of its operating system and software that is several weeks to months old, you must look for and download security patches as soon as you connect your computer to the Stanford network. Then, if you plan to allow any type of network connection, such as file sharing or web hosting, you must regularly check for and download new patches as they are made available.

Microsoft provides a Windows Update service for all versions of the Windows operating system. It is accessed at this web site:

http://windowsupdate.microsoft.com/

Apple Computer provides a similar service, called Software Update, that is built-in to newer versions of its operating systems. In MacOS 9, use the Software Update control panel; in MacOS X, this is found in the System Preferences application. Or, you can check Apple's web site for recent software updates and patches at:

http://www.info.apple.com/support/downloads.html

Both the Microsoft Windows Update and Apple Software Update features can be set to automatically check for new updates, say at weekly intervals. This is highly recommended.

Unix and Linux vendors also provide patches on their web sites. System managers for those computers should check for patches regularly or sign up for email lists that notify them when new patches are released.

Comments?