Security patches are like vaccinations that protect you from contracting harmful diseases. They remove vulnerabilities from your computer, such as open backdoor ports or other bugs in the operating system. If you do not patch your computer when necessary, a hacker can exploit one or more of those vulnerabilities and in the end, while a hacker might want to destroy some of your files or look at your personal data, the more likely attack is to take control of your computer's resources. Your computer can be used to spread viruses, send out spam, illegally serve up copyrighted material, launch denial of service attacks against Internet servers, and more.
To protect yourself:
Want to learn more? Visit our security overview and rules to live by.
As we all know, people are not perfect. We make mistakes. Sometimes we make huge gaping mistakes an elephant could pass through. And since people are the ones making computers and the software that runs on them, computers aren't perfect either. So, sometimes software needs to be fixed, or "patched," after it's been released.
A software patch is a type of fix to a software bug and is usually a piece of code that is inserted into ("patched into") the broken software. Patches can be used to fix any known problem with software, from the weird thing Microsoft Word does if you hit the wrong sequence of keys to the way your browser might display a certain Web page. But the most important patches are security updates and if you are going to own a computer and use it on the network, you must install them to protect yourself and others!
ITSS is now using BigFix to distribute operating system patches and help keep computers on the Stanford network up-to-date. For more information on this new service and to find out if its the right fit for your computing needs, visit our BigFix FAQ for Residential Students.
To check for the latest security patches for your operating system:
Windows 2000 and XP:
Mac OS X:
Most of the time, vulnerabilities are discovered before we see anybody try to exploit them. However, if your computer is exploited or infected before a patch is available or you do not patch in time (bad computer user!), you will have to fix your computer and then patch as soon as possible (be careful-- sometimes patching an already exploited or infected computer can cause even more problems). Your anti-virus software may be able to remove the virus and fix any other damage. Otherwise, you can use specialized virus removal tools or refer to instructions on how to remove viruses manually at the Symantec Web site as well as talk to your RCC for help.
In addition to operating system patches, your software applications may also need to have patches installed. Many programs check for updates automatically each time you open them, but you should check with your software vendor.
As with anti-virus software, you must continually check for and install critical security patches as soon as they are available. It's just like keeping your vaccinations up to date. Luckily, you can set up your computer to automatically check for and install important operating system updates.
ITSS is now using BigFix to distribute operating system patches automatically. For more information on this service and to find out if its the right fit for your computing needs, visit our BigFix FAQ for Residential Students.
If you prefer to set up your computer to automatically check for updates without having to use BigFix or if you want to set up automatic checking in additon to using BigFix, follow these directions:
Windows 2000:
Windows XP:
Mac OS X:
Anti-virus software
Security patches
Email
Good passwords
Spyware
Essential Stanford Software
Secure Computing
BigFix at Stanford
BigFix FAQ for Residential Students
List of general security resources
Symantec
Security news on the Web
Contact your RCC.