1

00:00:00,567  -->  00:00:03,905
We’re now going to discuss
updating or patching.

2

00:00:04,843  -->  00:00:08,618
It's important to update
all software applications,

3

00:00:08,727  -->  00:00:11,476
firmware, operating systems,
everything.

4

00:00:12,247  -->  00:00:16,167
An update or patch is simply
a fix to a bug.

5

00:00:16,581  -->  00:00:18,625
When it's an update
to a security bug,

6

00:00:19,025  -->  00:00:20,247
it's a security update.

7

00:00:20,705  -->  00:00:23,141
And it's the security updates
that we care about most

8

00:00:23,294  -->  00:00:24,370
in terms of security.

9

00:00:24,821  -->  00:00:27,760
Updating your software is
the most important thing

10

00:00:27,774  -->  00:00:29,614
you can do to remain
safe online.

11

00:00:30,240  -->  00:00:32,741
If you do just one thing
after this course,

12

00:00:33,214  -->  00:00:36,400
make it applying patches and
applying them promptly.

13

00:00:37,440  -->  00:00:40,036
Updating your software is
the most important thing

14

00:00:40,145  -->  00:00:41,665
you can do to remain
safe online.

15

00:00:42,225  -->  00:00:43,934
I cannot repeat that enough.

16

00:00:44,698  -->  00:00:47,309
Although updating software
is pretty simple,

17

00:00:47,454  -->  00:00:50,189
I'm going to go through it
step-by-step deliberately

18

00:00:50,320  -->  00:00:52,770
for those people that are
listening to the course,

19

00:00:53,178  -->  00:00:56,058
who are not familiar
with each step

20

00:00:56,145  -->  00:00:57,549
because it is so vital

21

00:00:57,760  -->  00:00:59,432
that patching is kept
up to date.

22

00:00:59,912  -->  00:01:01,374
Everything that you
need to update

23

00:01:01,672  -->  00:01:05,927
unfortunately has different ways
and different interfaces

24

00:01:06,014  -->  00:01:07,389
for each piece of software,

25

00:01:07,869  -->  00:01:10,916
so it's a bit of a pain
to update.

26

00:01:10,960  -->  00:01:14,421
But we'll explore some ways
to actually make it a lot easier.

27

00:01:15,047  -->  00:01:17,156
The products that need
updating the most are

28

00:01:17,447  -->  00:01:20,450
Number one, those that directly
interface with the internet,

29

00:01:20,763  -->  00:01:25,141
such as browsers like Opera,
Edge, Firefox, Chrome;

30

00:01:25,330  -->  00:01:27,178
browser extensions and plug-ins

31

00:01:27,636  -->  00:01:30,392
like Java, Flash, Silverlight;

32

00:01:30,821  -->  00:01:35,367
and if you use email applications
like Outlook and Thunderbird,

33

00:01:35,861  -->  00:01:38,123
those are important
as these interact

34

00:01:38,334  -->  00:01:39,796
directly with the internet.

35

00:01:39,890  -->  00:01:41,701
They're the biggest
attack vector.

36

00:01:42,065  -->  00:01:45,869
Second on the importance list
is applications that use,

37

00:01:46,218  -->  00:01:49,680
play, view any sort of file
that you download

38

00:01:49,716  -->  00:01:51,672
from the internet,
or any sort of file

39

00:01:51,687  -->  00:01:54,647
that you get from some
untrusted source.

40

00:01:54,829  -->  00:01:57,149
So for example, Windows Media Player,

41

00:01:57,403  -->  00:01:59,869
that plays movies, you might’ve
download a movie.

42

00:02:00,341  -->  00:02:04,203
Adobe Reader, that views PDFs,
you might have downloaded a PDF.

43

00:02:04,625  -->  00:02:08,545
Your Image viewer for
JPEGs, Excel, Word,

44

00:02:08,654  -->  00:02:11,025
these process the files
they download,

45

00:02:11,381  -->  00:02:14,210
so they can be and
are attack vectors.

46

00:02:14,770  -->  00:02:18,487
The example of macro viruses
within Excel and Word.

47

00:02:19,156  -->  00:02:21,061
And third, the operating system.

48

00:02:21,403  -->  00:02:24,654
This is important because it maintains
the core of your security

49

00:02:24,989  -->  00:02:26,501
so that needs to be updated too.

50

00:02:27,345  -->  00:02:30,378
There's a potential downside
to updating those.

51

00:02:30,421  -->  00:02:33,236
It’s not all great and
it's not all security.

52

00:02:33,338  -->  00:02:37,061
Sometimes, and this doesn't happen
often, especially with Microsoft

53

00:02:37,112  -->  00:02:38,734
and the big players,

54

00:02:39,120  -->  00:02:41,265
is that the patch comes
with another bug

55

00:02:41,600  -->  00:02:43,880
which can cause functional
problems.

56

00:02:44,516  -->  00:02:46,552
So for example, you get
a security update

57

00:02:46,581  -->  00:02:49,098
to the Edge browser
but then it crashes.

58

00:02:50,043  -->  00:02:52,472
Setting your updates
to just happen

59

00:02:52,654  -->  00:02:55,730
automatically is the most
secure option,

60

00:02:55,810  -->  00:02:59,243
but you could set them
to download only,

61

00:02:59,680  -->  00:03:02,224
and you can evaluate the patch
to see whether or not

62

00:03:02,225  -->  00:03:05,621
you actually want it and I'll cover
how we can do that next.

63

00:03:06,065  -->  00:03:10,858
As you've seen already in the sections
on malware, hackers, and exploits,

64

00:03:11,272  -->  00:03:13,563
if you maintain a poor
level of patching,

65

00:03:13,818  -->  00:03:16,400
it is just a question of
when you get hacked,

66

00:03:16,770  -->  00:03:17,770
not if.

67

00:03:18,334  -->  00:03:20,741
A friend who will remain
nameless

68

00:03:21,112  -->  00:03:22,960
came around just the other
day and asked

69

00:03:23,461  -->  00:03:25,563
what could he do to keep
his laptop secure,

70

00:03:25,592  -->  00:03:28,436
and was wondering why
it was acting all strange.

71

00:03:28,974  -->  00:03:33,934
So I had a quick look at the machine
and it had't been updated since 2011.

72

00:03:34,370  -->  00:03:36,574
I told him, “Forget
setting up security,

73

00:03:36,625  -->  00:03:39,716
you need to reinstall your operating
system and start again.

74

00:03:39,970  -->  00:03:42,000
The machine is very, very likely
to have picked up

75

00:03:42,050  -->  00:03:44,829
all sorts of undesirable
passengers.”

76

00:03:45,280  -->  00:03:47,010
So, don't let that be you.