[tbb-bugs] #18935 [Applications/Tor Browser]: MS bugs - Danger! Windows updates break everything on their way!

[Tor Bug Tracker & Wiki]

#18935: MS bugs - Danger! Windows updates break everything on their way!
------------------------------------------+-----------------------
     Reporter:  bugzilla                  |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  High                      |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Critical                  |   Keywords:  tbb-crash
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+-----------------------
 READ THIS BEFORE USING TOR BROWSER ON WINDOWS!

 With the April's 2016 patch Tuesday Microsoft has shown to everybody what
 grade of software it's going to supply from now on:

 [https://support.microsoft.com/en-us/kb/3147071 KB3147071] - Welcome new
 "fast-ring"/"pre-beta" quality (see #18171), now for production servers ;)
 Discussion: https://www.dslreports.com/forum/r30702359-MS-patch-
 installing-old-vulnerable-version-of-ntdll-dll Proof from MS filelist:
 {{{
 x64 Windows 8.1 and Windows Server 2012 R2
 File name,File version,File size,Date,Time,Platform,Service branch,
 Ntdll.dll,"6.3.9600.18194","1,737,080","13-Jan-2016","21:26","x64","Not
 applicable",
 }}}
 And together with the

 [https://support.microsoft.com/en-us/kb/3146706 KB3146706] - Welcome BSOD
 0x0000006B (http://www.windowsnewscenter.com/2016/04/26/is-microsoft-
 using-security-patch-kb-3146706-to-break-pirate-copies-of/)
 they present you:

 Problem with application hangs due to EMET 5.5 EAF mitigation after
 Windows 7 April 2016 updates
 https://social.technet.microsoft.com/Forums/en-US/7a681da9-d1d3-4566-a13d-
 55af0de0f2a5/problem-with-application-hangs-due-to-emet-55-eaf-mitigation-
 after-windows-7-april-2016-updates?forum=emet

 [https://support.microsoft.com/en-us/kb/3149090 KB3149090] - can be PITA
 too
 (https://www.reddit.com/r/sysadmin/comments/4ewule/windows_32bit_emet_kb3146706_issue/)

 [https://support.microsoft.com/en-us/kb/3145739 KB3145739] - can prevent
 you from installing all the April's crap until you install it manually.

 And even Windows Update can daunt you to stop installing April's crap by
 going to very long several days checking for it with full CPU load... (can
 be fixed as the previous item)

 Hangs and crashes of Tor Browser that are probably related to this crap
 are listed in comments:

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18935>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online