lost among all updates in Win8.1

[Marie SWE]

Hi all
I just installed Win8.1 on my laptop to buy me three more years before windows EOL.
on sevenforums I have a thread with windows updates to avoid if you do not want updates with telemetry etc.
So I wonder what is it for updates in windows 8 that one should avoid if I want maximum privacy?

I also wonder what security updates after December 2017 should be avoided to avoid the specter and meltdown patches
They affect my computer's performance too much.

So far I have only installed known security updates until December 2017
The computer is still offline (except when I download updates) until I have secured the integrity part

I have also noticed a lot of background traffic, but I'll take that in another thread soon.

I thank you all for answering in advance
Best regards. Marie

 

[Slavic]

Here is my list of hidden updates in Windows 8.1 x64, which includes telemetry and GWX. Of course, other people may add more.
KB2976978
KB3044374
KB3046480
KB3080149
KB3150513
KB3184143

 

[Marie SWE]

Here is my list of hidden updates in Windows 8.1 x64, which includes telemetry and GWX. Of course, other people may add more.
KB2976978
KB3044374
KB3046480
KB3080149
KB3150513
KB3184143

Hi and thank you for your reply.
Those updates are included in my win7 list. Do you know if it's the same KB number on all the updates between win7 and win8?

 

[Slavic]

It depends. Some updates are released for all supported Windows versions, while some others only for the particular versions. Obviously, GWX were released only for Windows 7 and 8. You can always check any update in the MS Update catalog (input KBxxxxxxx in the search box): Microsoft Update Catalog

As for background traffic, I think you are a bit too vigilant. If you haven't installed the telemetry and GWX updates, it's mostly harmless. But if you are really concern of some hidden system info which is being delivered to MS, I suggest to review the scheduled task list and disable the telemetry-related tasks. CCleaner allows to do this easily on the tab Tools, Startup, Scheduled Tasks, select the Advanced Mode. First of all, disable the infamous Consolidator, which delivers the system reports directly to MS servers on scheduled basis. There are some others telemetry tasks too, but not all of them are potentially privacy-related. (CCleaner is known of some privacy problems too, uncheck the run at startup and help its improvement in the options; but it's a separate subject.)

 

[Marie SWE]

I have 78 updates (not security related) so reading through all in detail in English takes time, whereof I asked the question if anyone has made a list of updates to avoid if you do not want updates that have telematics and win10 stuff and updates that mess up the system. like i did in sevenforums. https://www.sevenforums.com/installation-setup/413301-reinstall-win7-what-updates-avoid-telemetry-winx-preparation-3.html#post3380063

I know that my mousepad drivers has telemetry (Symantec) and I guess some other stuff has it to.
I have disabled windows telemetry both by sabotage some files and in registry by alter the values. disabled some scheduled activities in windows scheduler and so on.. all tricks that I have learned in previous windows versions.
I only installed win8.1 a week ago to buy me another three years before EOL.

So I really miss the start button, and these apps and app store gets me frustrated, as it requires you to register an account to the computer.
No privacy anymore.

I talked to a friend yesterday about today's IT security/privacy and that it's ridiculous that it is possible to make windows XP safer(With a lot of modifications, of course) and it has more monitoring capabilities of what is happening in the computer and all internet traffic out of the computer and in, than what is possible to do win7, 8 and 10 and all desktop Linux distros together.

 

[Slavic]

Of course, you need some practice with Windows 8.1 if you never used it before. But it's not as hard as you might think.
For example, my Windows 8.1 looks very close to Windows 7. I use the Classic Start menu (www.classicshell.net), which is easily configurable similar to Windows 9x or XP or 7 whatever you like (don't forget to change the Start button to Windows 7 - like).

I uninstalled all apps except a few which cannot be uninstalled easily: Camera, OneDrive, PC Settings, Photos, Store, but I don't use them anyway except PC Settings (some Control Panel items are moved there). I don't connect Windows login to MS account, use only local account. Also I use Windows Mail, the guide how to re-activate and use it can be found here on the forum Browsers & Mail.

Your list on Windows 7 forum is very extensive. I also use to check the description of any new update before installing and I hide "unwanted" updates (the list above). All others become installed anyway even if they don't have the obvious benefits for me (like updating TZ for New Zealand or Samoa) because the consequent updates may have them as prerequisites.

 

[Marie SWE]

So true, but windows are still windows basically, there are some new features or some removed features and the looks that change over time and some program compatibility issues.... but it's still M$.
Linux is really hard to learn after more then 20+years of M$ OS

Well I noticed that it was impossible to uninstall onedrive and camera, so I trashed the content of the files, so the programs can't start, and write protected them as well as changed ownership so windows can't repair them or overwrite them not even my winadmin user can't touch the files.

I have now download the classicshell but I want to install all winupdates, basic programs I need and make all necessary privacy tweaks. So i can create recovery discs before installing other third party software like classicshell, firefox and so on.
Nice to see win start button on win8

I also installed win 8.1 on one of my lab computers to test some daring OS-tweaks and to test some third-party firewalls, but all firewalls exept those intended for big servers are junk. no good realtime monitoring, no detailed trafficlogs, no backtrace. They are completely toothless for desktops/laptops. haha

yes the list is pretty long, it took a couple of years to create it... but it's not finished yet, I just haven't updated it for a long time.
I am waiting to find out which updates after 2018/01 that contains specter and meltdown patches

 

[erpster4]

Here is my list of hidden updates in Windows 8.1 x64, which includes telemetry and GWX. Of course, other people may add more.
KB2976978
KB3044374
KB3046480
KB3080149
KB3150513
KB3184143

I agree with this list of updates except for KB3184143 which I find safe to install as the KB3184143 prevents unwanted upgrades to Win10 and removes some GWX stuff

 

[MGhee]

I thought I was in the clear on my recent fresh install iso from the MS download site, it unfortunately came with 2976978 preinstalled

 

[Marie SWE]

Hi to you all.
I am reviving my thread with some security only update questions.

I have installed security only updates up to Dec 2017 and i want to avoid the spectre and meltdown updates.

Is this right, or have I missed something?

Jan 2018 https://support.microsoft.com/en-us/help/4056898/windows-81-update-kb4056898 spectre and/or meltdown?
Feb 18 https://support.microsoft.com/en-us/help/4074597/windows-81-update-kb-4074597 Safe?
Mar 18 https://support.microsoft.com/en-us/help/4088879/windows-81-update-kb4088879 spectre and/or meltdown?
Apr 18 https://support.microsoft.com/en-us/help/4093115/windows-81-update-kb4093115 Safe?
May 18 https://support.microsoft.com/en-us/help/4103715/windows-81-update-kb4103715 Safe?
Jun 18 https://support.microsoft.com/en-us/help/4284878/windows-81-update-kb4284878 Safe?
Jul 18 https://support.microsoft.com/en-us/help/4338824/windows-81-update-kb4338824 spectre and/or meltdown?
Aug 18 https://support.microsoft.com/en-us/help/4343888/windows-81-update-kb4343888 spectre and/or meltdown?
Sep 18 https://support.microsoft.com/en-us/help/4457143/windows-81-update-kb4457143 Safe?
Oct 18 https://support.microsoft.com/en-us/help/4462941/windows-8-update-kb4462941 Safe?
Nov 18 https://support.microsoft.com/en-us/help/4467697/windows-8-1-update-kb4467697 Safe or it is contains spectre code?
Dec 18 https://support.microsoft.com/en-us/help/4471322/windows-8-1-update-kb4471322 Safe?

Jan 2019 https://support.microsoft.com/en-us/help/4480964/windows-8-1-update-kb4480964 spectre and/or meltdown?
Feb 19 https://support.microsoft.com/en-us/help/4487028/windows-8-1-update-kb4487028 Safe?
Mar 19 https://support.microsoft.com/en-us/help/4489883/windows-8-1-update-kb4489883 Safe?
Apr 19 https://support.microsoft.com/en-us/help/4493467/windows-8-1-update-kb4493467 spectre and/or meltdown?
May 19 https://support.microsoft.com/en-us/help/4499165/windows-8-1-update-kb4499165 Safe or it is contains spectre code?
Jun 19 https://support.microsoft.com/en-us/help/4503290/windows-8-1-update-kb4503290 Safe?
Jul 19 https://support.microsoft.com/en-us/help/4507457/windows-8-1-update-kb4507457 spectre and/or meltdown?
Aug 19 https://support.microsoft.com/en-us/help/4512489/windows-8-1-update-kb4512489 Safe or not do to: When attempting to print from a 32-bit app on a 64-bit operating system (OS), you may receive an error, or the application may stop responding or close.........This issue is resolved in KB4525250. However, the issue occurs when you install only KB4512489 (released on August 13, 2019) without installing KB4507457, the previous Security Only update (released July 9, 2019). KB4507457 is a spectre and/or meltdown update i want to avoid
Sep 19 https://support.microsoft.com/en-us/help/4516064/windows-8-1-kb4516064 Safe or it is contains spectre code?
Oct 19 https://support.microsoft.com/en-us/help/4519990/windows-8-1-kb4519990 Safe?
Nov 19 https://support.microsoft.com/en-us/help/4525250/windows-8-1-kb4525250 Safe or not?
Dec 19 https://support.microsoft.com/en-us/help/4530730/windows-8-1-kb4530730 Safe?
Jan 2020 https://support.microsoft.com/en-us/help/4534309/windows-8-1-kb4534309 Safe?
Feb 20 https://support.microsoft.com/en-us/help/4537803/windows-8-1-kb4537803 Safe?


It seems that each and every one contains Spectre or meltdown code.
Is there any other things about this updates above that you have had trouble with?


thanks for replies in advance
best regards Marie

 

[Slavic]

I cannot answer for sure because I never tested such option. But according to Microsoft principles, all quality rollups include the necessary previously released patches, so since the updates against Spectre and Meltdown were released, they should be included in all next rollups. As a result, you should stop to update system before these fixes have been introduced. Or, in theory, would it be possible to decompose the rollup and exclude a particular update. Unfortunately, end users don't have the tools for that.

 

[Marie SWE]

monthly quality updates are retroactive. But security only updates are not. You have to install all security updates one by one to get all updates. so if you know that one specific update is mess up your computer, then it's possible to skip that one. But that is not possible with monthly quality updates.

 

[marx]

I just install the december 2014 update after a clean install with last updated ISO.
all those hundreds of security updates & patches are useless for home users.
seriously, In 20 yrs I have never been hacked or virus damage my PC
even windows 10 has 1000s of security holes & only patch the publicly known ones.
prove me wrong.