When Microsoft asked business final week for feedback on a portal that usually transposed a decades-long use of delivering minute confidence bulletins, it got an earful from unfortunate users.
“Hate hatred hatred a new confidence circular format. HATE,” emphasized Janelle 322 in a support forum where Microsoft urged business to post thoughts on a change. “I now have to manually register this information to my spreadsheet to disseminate to my customers. You have usually combined 8 hours to my workload. Thanks for nothing.”
Janelle 322 and others left sardonic comments on a support forum Microsoft touted Friday as a place to post comments and questions about a Security Update Guide (SUG), a online portal that took a place of informed bulletins.
Microsoft announced a passing of bulletins in Nov 2016, observant afterwards that a new routine would entrance Feb. 14. Those web-published bulletins had been a cornerstone of Microsoft’s patch avowal policies given during slightest 1998. The bulletins’ care and clarity were prolonged praised by confidence professionals, who deliberate them the benchmark opposite that all other vendors’ efforts were compared.
After a two-month delay, Microsoft forsaken bulletins with a Apr 11 collection of confidence fixes. A day later, one patch consultant pronounced a switch from bulletins to SUG had expanded his effort by about 6 times.
Customers echoed a added-work thesis in comments on a support thread.
“I typically spend 2-3 hours to review by and establish what updates need to go to a systems, document, etc. we spent a plain 8 hours perplexing to make clarity of all currently and get it organized, and I’m not tighten to being finished,” reported Jim24Mac. “What we had to go by currently was an abomination. we download[ed] a spreadsheet with 670 lines of feat info that I’m ostensible to somehow find useful to establish what we need and why. It’s terrible.”
Other critics got some-more specific.
“While pursuit out a confidence emanate around CVEs [Common Vulnerabilities Exposures] is valid, for a complement admin/patcher a new format doesn’t describe good during all to what we see to approve and patch,” wrote Susan Bradley, a remarkable Windows patch consultant who writes for a Windows Secrets newsletter. “While it’s appreciated to have a searchable database in a Security Update Guide, it is too unwieldy to use to fast get a information indispensable on Update Tuesday. To get a same information took approach too many stairs and compulsory partnership with other sources to endorse information.
“Bottom line we have a communication problem,” Bradley continued. “You are articulate CVEs [but] we’re still wanting something that showcases what we see wanting to be commissioned on a PCs. If there is any approach to improved filter down a information and make it improved trackable to what we see installed, that would be grand.”
“The change did zero to make a lives easier and finished it most some-more formidable to establish a inner astringency formed on a conflict methods,” combined J_DDS on a same thread. “I’m all for a searchable database though don’t rabble a complement that worked ideally in a past.”
Microsoft’s batch response in a support threads was penned by Chris Wojahn, a comparison escalation operative in a support group. “We know a regard about a changes finished to … a Security Update Guide replacing a countless KBs [knowledge bottom documents] of a past,” Wojahn wrote. “The change is to align with a pierce from particular updates to a accumulative refurbish process.”
Wojahn’s reason for a change was discordant to what Microsoft final year claimed had stirred a decision. “Our business have asked for improved entrance to refurbish information, as good as easier ways to customize their perspective to offer a different set of needs,” a Microsoft Security Response Center stated in November when it announced a latest switch.
Microsoft never related a genocide of bulletins to a progressing preference to discharge particular rags and in their stead, yield usually accumulative confidence updates for all versions of Windows. Instead, a deceptive motive usually confounded customers. “They were all scratching their heads, wondering because Microsoft finished it harder to find stuff,” pronounced Chris Goettl, product manager with patch government businessman Ivanti, of users who attended an Apr 12 webinar on a month’s patches.
The miss of communication was something another censor focused on in comments to a support forum. “Honestly we know you’ve communicated pointless fragments of this … change opposite pointless Microsoft blogs, though Microsoft should have finished a improved pursuit in creation it a bit clearer,” pronounced chicaneUK. “I don’t know how this is an alleviation of a process, nor how it is saving us time or creation things easier.”
Microsoft has also posted a FAQ that covers a SUG portal and a dashboard.