• Horowitz: Windows Update on Win7 is not secure

    Interesting discussion from Michael Horowitz:

    When you run Windows Update on Windows 7 (I did not test other versions of Windows) it opens MANY connections to computers on the Internet over port 80. HTTP use port 80 and it is not secure. Not only can data sent with HTTP be spied on, it can also be modified in-flight. That is, what the sender sends is not necessarily what the receiver gets. Secure transmissions use HTTPS and travel over port 443.

    The title does not say it all. In addition to not being secure, Windows Update is also buggy with poor diagnostics. I’ll start there.

    He goes on to identify the leaky parts. Consider:

    When my router is blocking the IP addresses used by Cortana, Windows Update on Windows 7 fails.

    Yes, you read that correctly. Cortana.