Updating Desktop Programs: Should You Be Concerned?

The Evolution of Software Updates

Previously, maintaining software security involved the tedious task of manually updating desktop applications. Instances like Adobe Flash and Reader were frequently vulnerable due to a lack of automatic updates.

Fortunately, this era of manual intervention is largely a thing of the past.

The Unique Case of Windows

Currently, the Windows desktop environment stands as the sole major software platform that doesn't natively handle automatic application updates.

This necessitates that each software developer independently implement their own update mechanisms.

Developer Response

While not an optimal situation, the vast majority of developers have responded by integrating automatic update features into their applications.

This proactive approach ensures users receive critical security patches and improvements without requiring manual effort.

Automatic updates are now the standard for most software, greatly enhancing user security and convenience.

Automatic Updates: A Modern Convenience

Prioritizing security updates for applications with known vulnerabilities is crucial. This is particularly true for software like your web browser and its associated plug-ins, including Flash, Adobe Reader, and Java.

Historically, maintaining these updates demanded consistent user attention. Applications like Flash and Adobe Reader didn't feature automatic update mechanisms. Keeping browsers current also required manual downloads and installations of new Firefox or Internet Explorer versions.

Today, the update process is significantly more streamlined. Google Chrome now handles updates silently in the background, guaranteeing you're always running the newest iteration. Mozilla Firefox has adopted a similar approach, updating itself automatically.

Even Microsoft's Internet Explorer now updates independently of the core Windows operating system, ensuring users benefit from the latest security enhancements.

Adobe Flash now incorporates automatic update checks and prompts for installation when necessary. Furthermore, if you utilize Google Chrome, Flash updates are managed directly through the browser itself. Adobe Reader also benefits from automatic self-updating capabilities.

Java presents a unique challenge, as it defaults to checking for updates only once monthly. This process also involves downloading an updater that often bundles unwanted software, such as the Ask Toolbar. However, Java’s update frequency can be adjusted for more regular checks, which is vital if the software is essential. If Java isn't required, its uninstallation is strongly recommended.

The Windows operating system itself also benefits from automatic updates via Windows Update. This system represents a substantial improvement over the past, when users had to manually navigate to the Windows Update website within Internet Explorer to initiate update checks and downloads.

Automatic Updates are Common in Software

A significant number of applications incorporate automatic update mechanisms. Programs such as virtualization software like VMware and VirtualBox, messaging clients like Pidgin or Skype, and system maintenance tools like CCleaner routinely verify for newer versions.

These applications will typically notify you when an update is available for download and installation. Apple’s software, including Safari and iTunes, receives updates via Apple Update on Windows-based systems.

Modern video games frequently handle updates autonomously, particularly those acquired through digital distribution platforms like Steam or Origin.

Locating and installing patches manually on websites is generally unnecessary, except when dealing with older games installed from physical media.

Applications Lacking Automatic Update Mechanisms

This raises the question: which software programs do not feature automatic self-updating capabilities?

• Hardware Drivers: Drivers supplied by your hardware manufacturer typically do not possess automatic version-checking functionality. This is often a benefit, as frequent driver updates are generally unnecessary. A notable exception exists for gamers, who should maintain current graphics drivers; however, NVIDIA and AMD provide dedicated updaters to manage this process.
• Legacy Software: Applications acquired through physical media, such as discs, from previous years are unlikely to include integrated update features. Locating patches for older games and software installed from discs may require manual effort. However, these older programs generally do not receive regular updates.
• Standalone Utilities: Many independently installed utilities may not automatically scan for updates. For instance, file archiving tool 7-Zip and disk space analyzer WinDirStat do not include automatic update checks. However, the need for the newest versions of 7-Zip or WinDirStat is minimal. Updates are infrequent, and new releases rarely introduce significant enhancements, with security concerns being unlikely. This principle applies to most other applications that do not update automatically.

Often, these applications aren't critical for daily use, and the risk of vulnerabilities is low.

Maintaining awareness of which software requires manual updates is key to a secure and efficient computing experience.

The Limitations of App Update Checkers

Many applications don't possess automatic self-updating capabilities. Considering the past necessity of manually updating software like Flash, Adobe Reader, and even Windows itself, the idea of a utility that monitors installed applications for updates and provides alerts can be appealing.

Several software updater checkers are available, including Secunia PSI, which prioritizes identifying and addressing security vulnerabilities through up-to-date applications.

A single application capable of managing updates for all Windows-installed software would be ideal. This would eliminate the concern of outdated software and the need for multiple updating tools. However, achieving this with third-party utilities is unrealistic.

These tools will inevitably fall short of comprehensive coverage. They aren't essential for critical applications like web browsers, plugins, and frequently updated software, as these typically handle updates independently.

While potentially useful for less common utilities or older games requiring patches, these tools often don't address such needs effectively. Secunia PSI can quickly assess browser and plugin versions, but isn't necessary for standard desktop program updates.

The Need for a Centralized Solution

A centralized updating solution for Windows is highly desirable. However, its implementation requires Microsoft's involvement, as no third-party can reliably deliver such a system.

There's little practical benefit to using these tools or routinely checking for updates manually. Configuring applications for automatic updates – a default setting in most cases – is sufficient.

Software usage varies greatly among individuals. It’s possible you rely on an application that requires consistent, manual updates.

In such instances, you'll likely need to manage updates yourself, as a third-party updating tool may not provide assistance.

Image Credit: Docklandsboy on Flickr