Quantcast
Channel: Common Language Runtime Internals and Architecture forum
Viewing all articles
Browse latest Browse all 1710

SECURITY ISSUE: The "Fall Update" (i.e. version 1511) for Windows 10 is disabling StrongName Verification!

$
0
0

Is anyone else seeing this?  I've verified on several machines now.

The "fall update" (i.e. version 1511) for Windows 10 enters the following registry key on the computer system where it is installed which disables .Net StrongName checking on the system. 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\StrongName\Verification\*,*
This is a security issue!  The patch should not add this registry entry.

Steps to reproduce:

  1. Install the original release (July 2015) of Windows 10
  2. Check the registry and note that the registry key listed above is NOT there.
  3. Go to Windows Updates and install the latest updates include the fall update (i.e. version 1511)
  4. Check the registry and note that the registry key listed above IS there.
Note that this does not happen with the "Windows 10 Enterprise, Version 1511" ISO image from MSDN.  It only happens when it comes through Windows Updates.


Thanks in advance, LM


Viewing all articles
Browse latest Browse all 1710

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>