How can I be sure software updates are legit?

Trouble viewing this email? Read it online.

February 22, 2013

CNET Community

Dear CNET members,

Happy Friday! I just love when the members who submit their questions that are presented in the weekly newsletter follow up and participate in the discussions. It not only validates my goal to bring together a helpful and cohesive community, but also helps acknowledge all your invaluable advice! Last week's member, Frances, who asked about cloud storage and whether it's secure, let us know that she has come up with a plan to move forward. Here is her follow up post. Thanks, Frances, and I hope it all goes well!

Now onto this week's topic from member Ken, who asks how we know if those pop-up notifications for software updates (example: Adobe or Java) are legitimately from the publisher and not spoofed by some phishing scam or hacker. As most members pointed out, you can never be sure those are legit -- frankly anything online can be manipulated or spoofed to fool you. So does that mean we should live constantly in fear and not click on anything? The answer is absolutely not, because if we did, then we might as well hang up our computers and throw the Internet out the door.

Though you shouldn't live in fear, you should always be cautious and be mindful of what you see and click on. Most of the time carelessness or having a "it won't happen to me" attitude is what gets people into trouble. So be a little more proactive when you see those pop-ups for updates. Do a little investigation before blindly accepting those downloads and running them.

In this week's discussion thread, many members pointed out ways that they ensure that those updates are legit; some people will tell you they only go to the publisher sites to get updates. We got some great answers this week, so please give them all a read and if you have anything more to add, please share. Thanks, and have a good weekend.

Lee Koo
Community manager

View profile | Email


Q:	How can I be sure software updates are legit?
Almost every week I get an authentic looking message telling me that an update for one program or another is available. Adobe Flash Player seems to be the most frequent. I blindly go ahead and click the Install button, but have become nervous that maybe one day some hacker will replicate the format to disguise an unpleasant surprise that will install something that will ruin my whole system. How can I be sure that what I'm accepting or installing is the real deal? There are several well-known antivirus/antispyware/firewall programs running on my computer - should they provide all of the protection needed to fend off that sort of attack? Thanks!
	-- Submitted by: Ken C.

A:	Featured answers of the week
•	"Can you trust update Notices? NO, you cannot trust anything "
	-- Submitted by: waytron

•	"Guarding against malware-loaded fake updates"
	-- Submitted by: El Alquimista

•	"Here's my suggestion. "
	-- Submitted by: Andrew Hay

•	"Auto update vs Auto install "
	-- Submitted by: netsiu

•	"You can NEVER be sure"
	-- Submitted by: Flatworm
	Click here to read all member contributions
	Thanks to all who contributed! Click here to see all previous Community newsletters

Q: Please help me understand today's tablet craze?!

I don't understand about the mobile tablets. I have used and programmed computers for over 30 years. I have always told everyone that laptops are so mobile. Now, everyone has gone nuts about tablets. Why???? There is little storage. The keyboard screen is pathetic. A tablet has no screen protection unless you buy a case. Don't get me wrong, I use touch screen phones but typing on a physical board is sooo much faster. Now, I was told that using a tablet with a printer can be very difficult. What is going on? I thought that maybe the cost is the key. Now there is an Apple iPad that costs $1000. Great laptops cost less! Please help me understand this craze, is this a fad? Your thoughts are appreciated.

-- Submitted by: John C.

If you have an answer to this question, click here and click the "reply" to submit your advice, suggestions, opinions, or tips.

Have a tech-related question?

Click here to e-mail us on one of these topics:

•	Hardware & software	•	Home audio & video
•	Internet security	•	Cameras & video
•	Mobile devices	•	Digital media & design

Need help tech right away? Don't wait for us, post your questions in the CNET Forums for all the tech help and how-tos.


•	Laptop starts to overheat as soon as I turn it on!

•	Regarding tablet ecosystems (specifically Android vs. Amazon)

•	In the market for computer: Quad core vs. dual core for photo editing

How we test and rate cell phones

Sit tight as we explain how CNET puts phones through their paces and make evaluations on what's good -- and not.

When you get a notification for a software update/patch, what do you do?

· I click on "download" and then "install" and let the software do its update.
· I have my system set to automatically download and update it.
· I go to the publisher's Web site, and download the update and install it on my own terms.
· I check the .exe file name, look it up to see if it's legit before installing.
· I use a third-party software update management utility to screen my updates.
· Other methods. (What is it?)

Click here to Vote and click here to discuss the poll.


•	Can anyone help me with a battery problem on a MacBook Pro?

•	Is fan noise after power cable fray a known issue?

•	2011 iMac model A1311 powering off by itself?


•	Security updates for Adobe Reader and Acrobat (APSB13-07)

•	Critical patch update for Java SE released

•	Security news for February 22, 2013

•	Vulnerabilities and fixes for February 22, 2013


•	Are there any current TVs that include a picture-in-picture feature?

•	How to overdub audio on a home video DVD?

•	Best prepaid featureless cell phone from T-Mobile?

Find yourself in a situation where iDevices outnumber outlets or chargers? This handy little unit can charge up to four of them at once. Click here to enter the Crave giveaway.