Stanford University Residential Computing

A department of Academic Computing, Stanford University Libraries and Academic Information Resources

Information & News: Practicing Safe Net: Patching: Get Vaccinated!

Security patches are like vaccinations that protect you from contracting harmful diseases. They remove vulnerabilities from your computer, such as open backdoor ports or other bugs in the operating system. If you do not patch your computer when necessary, a hacker can exploit one or more of those vulnerabilities and in the end, while a hacker might want to destroy some of your files or look at your personal data, the more likely attack is to take control of your computer's resources. Your computer can be used to spread viruses, send out spam, illegally serve up copyrighted material, launch denial of service attacks against Internet servers, and more.

To protect yourself:

  1. Download and install important security patches as soon as possible.

  2. Set up your computer to automatically and regularly check for new patches and then download and install them when they become available.

Want to learn more? Visit our security overview and rules to live by.

Get all your shots

As we all know, people are not perfect. We make mistakes. Sometimes we make huge gaping mistakes an elephant could pass through. And since people are the ones making computers and the software that runs on them, computers aren't perfect either. So, sometimes software needs to be fixed, or "patched," after it's been released.

A software patch is a type of fix to a software bug and is usually a piece of code that is inserted into ("patched into") the broken software. Patches can be used to fix any known problem with software, from the weird thing Microsoft Word does if you hit the wrong sequence of keys to the way your browser might display a certain Web page. But the most important patches are security updates and if you are going to own a computer and use it on the network, you must install them to protect yourself and others!

ITSS is now using BigFix to distribute operating system patches and help keep computers on the Stanford network up-to-date. For more information on this new service and to find out if its the right fit for your computing needs, visit our BigFix FAQ for Residential Students.

To check for the latest security patches for your operating system:

Windows 2000 and XP:

  1. Go to the Start menu.
  2. Click on Windows Update. This will launch an Internet Explorer window which will automatically go to the Microsoft Windows Update site.
  3. Click Scan for Updates. This will scan your computer for any patches it might need-- this process only checks for patches and does not send any private information to Microsoft.
  4. The most important thing is to install the Critical Updates and Service Packs. Other patches are usually additional software components that can be added to the operating system or driver updates. Those should be installed at your own discretion.

Mac OS X:

  1. Open up your System Preferences.
  2. Under System, open up the Software Update menu.
  3. Click Check Now to check for new updates and then follow the directions to download and install them.

Most of the time, vulnerabilities are discovered before we see anybody try to exploit them. However, if your computer is exploited or infected before a patch is available or you do not patch in time (bad computer user!), you will have to fix your computer and then patch as soon as possible (be careful-- sometimes patching an already exploited or infected computer can cause even more problems). Your anti-virus software may be able to remove the virus and fix any other damage. Otherwise, you can use specialized virus removal tools or refer to instructions on how to remove viruses manually at the Symantec Web site as well as talk to your RCC for help.

In addition to operating system patches, your software applications may also need to have patches installed. Many programs check for updates automatically each time you open them, but you should check with your software vendor.

Return to top

Regular visits to the doctor

As with anti-virus software, you must continually check for and install critical security patches as soon as they are available. It's just like keeping your vaccinations up to date. Luckily, you can set up your computer to automatically check for and install important operating system updates.

ITSS is now using BigFix to distribute operating system patches automatically. For more information on this service and to find out if its the right fit for your computing needs, visit our BigFix FAQ for Residential Students.

If you prefer to set up your computer to automatically check for updates without having to use BigFix or if you want to set up automatic checking in additon to using BigFix, follow these directions:

Windows 2000:

  1. Open up your Control Panel.
  2. Open the Automatic Updates control panel.
  3. Check the Keep my computer up to date option and then select an update set up best for your needs.

Windows XP:

  1. Open up your Control Panel.
  2. Open up the Systems control panel.
  3. Click on the Automatic Updates tab.
  4. Check the Keep my computer up to date option and then select an update set up best for your needs.

Automatic Updates

Mac OS X:

  1. Open up your System Preferences.
  2. Under System, open up the Software Update menu.
  3. Set up Software Update to check for updates regularly. (The default setting is to check weekly). You can also check to download important updates in the background-- when there are updates available, Software Update will notify you and you can then install them.

Software Update

Return to top

Quick Links

Anti-virus software
Security patches
Email
Good passwords
Spyware

Resources

Essential Stanford Software
Secure Computing
BigFix at Stanford
BigFix FAQ for Residential Students
List of general security resources
Symantec
Security news on the Web

Questions? Comments?

Contact your RCC.