Internet Fixes

Operating Systems: Protect Your Platform

All Versions of Windows: Microsoft's Windows Update site automates the patching process by recommending downloads based on your PC's configuration; it can save you a lot of time. Windows Update also allows you to download everything in one fell swoop.

IS managers should visit the Windows Update Catalog page. There you can locate updates by operating system and program, and then install them manually.

If you want to stay on top of the latest security updates as they are released, or browse through past updates, head over to Microsoft's Security & Privacy pages, where you'll find the most recent bulletins, as well as the archived ones. You can also sign up to have Microsoft put you on its e-mail list to receive its security alerts.

If you prefer to obtain your patches a la carte, read on.

Windows XP: Whether you have XP Home Edition or XP Professional Edition, you have security problems stemming from Universal Plug and Play, glitches in the way XP handles SSL certificates from secure Web sites, a bug that could prevent you from accessing encrypted files after you change your password, and other issues. The fix: Install Windows XP Service Pack 1.

Windows XP users can avoid visiting the Windows Update site by turning on Automatic Updates, which will download patches as soon as they become available--and install them for you too, if you want. Right-click My Computer, select Properties, and choose the Automatic Updates tab. Put a check in the box beside Keep my computer up to date, and specify whether you want Auto Update to notify you before it installs the updates or you want it to do its thing automatically. Automatic updating is available for Windows 2000 users, too; it's included in Windows 2000 Service Pack 3.

Because patches themselves can cause difficulties (see " When the Cure Is Worse Than the Disease"), we recommend that you have Windows notify you before it installs any patches. If the notifications themselves become annoying, then turn off Auto Update--but don't forget to check periodically for new patches.

Windows Me: Windows Me has a number of security holes, including problems in the way Me handles digital certificates and a bug that lets other users on a network view shared folders on your PC even if they don't have the right password. There's no service pack for Windows Me, however, nor is there a single list of security patches for this operating system. The easiest way to patch your Me system is to go to the Windows Update site.

Windows 2000: This version has hundreds of serious security holes and bugs, including multiple flaws relating to password theft, denial-of-service attacks, and more. Service Pack 3 will help fend them off.

The Windows 2000 High Encryption Pack provides 128-bit encryption support for Web sites that run on a Win 2000 server, increasing the security of online transactions.

Windows 98 and Windows 98 Second Edition: The first edition of Windows 98 has a limited number of security problems, including a hole that could allow an intruder to get around log-in and password screens. The Windows 98 Customer Service Pack fixes the flaws, along with a few stability issues. Windows 98 SE users don't need this service pack.

Besides the Customer Service Pack, there are a dozen additional security updates for Windows 98 and Windows 98 SE. Among the security gaps corrected are weaknesses that allow hackers to run malicious code on your computer, crash your e-mail program, and retrieve stored passwords. Microsoft provides a list of Windows 98 security updates and links to the patches.

--Dylan Tweney