I agree that most users don't want to play around too much.
But, I also think that we should be in control of what is put on our systems.
In answer to you dclive, the average user won't know which patches to use, and sometimes most 'experts' wouldn't either - Agreed.
The callouts I was referring to are usually to do with something along the lines of 'Ohmygodmycomputerdownloadedsomethingautomaticallyandwontreboot'.
After, if we are lucky tracking down the 'something' it SOMETIMES (yes, not always) turns out to be a patch. Don't ask me to document which patches have done this, but there are times (not often) when calls come in pretty simultaneously. On those days I know a new variant of some nasty worm is showing, or it is Microsoft Patch Day yeehah.
Sometimes the patches are released to cure another patch and often, the patches, as i mentioned earlier, are not needed for most users.
YES, you are right, again. I will cut and paste to stay friends with you......
I agree that most users don't want to play around too much.
and
...the average user won't know which patches to use, and sometimes most 'experts' wouldn't either.
Onto the next point about firewalls.
Well, most (all?) firewalls with reputation update their engine every so often.
I've never had something slip by my firewalls (hardware and software), and if I did, I am sure that other ppl would have as well, which would pretty much mean that that company goes bust due to bad publicity.
Onto antivirus - again. I completely agree with you that av progs can't be expected/trusted to keep up with the 200+(?) viriiiiiii that appear every day, but then I try and get the point over to the client about security. (Not always successfully)
Also, patches are NOT needed to keep a system healthy.
If a system is healthy, then it is healthy. A patch won't make it more healthy. This is the same argument as 'You must update your BIOS when a new rev. comes out." - Not at all. If it ain't broke, don't fix it.
Patches are usually to fix a hole/vulnerability that has just been discovered, or not?
MS aren't always that fast to fix a vulnerability (just go to Gibson research Dep't for starters. - Although tis a bit out of date at the moment.)
All in all,
Yes, you are right (I say it again) that most if not all users are not gonna be able to differentiate what they need.
But if it is for security reasons, then mostly I would dl the patch.
If it was to make pretty colours come on my desktop when I type in 'more flowers please', then no i wouldn't.
No offense to you meant by all of the above at all - this is typed with the greatest respect for your advice that you have given.