This is a most excellent place for technology news and articles.
PCWorld:
Microsoft’s latest Windows update breaks VPNs, and there’s no fix
What Microsoft actually said:
Windows devices might face VPN connection failures after installing the April 2024 security update, or KB5036893. We are working on a resolution and will provide an update in an upcoming release
I'm so fed up with everyone trying to make a quick buck on our constant struggle to stay safe.
The reality is that it broke "something* in certain lpt2/ipsec connections using certain authentication protocols, although they haven't yet specified which particular connection technologies are affected.
However this does not mean that a blanket affect of ALL VPN connection not working is an issue.
So far we are unaffected on clients using ipsec and PAP protocol authentication, nor connections using Anyconnect (aka Cisco Secure Connect).
I have also not seen any affect on private VPN clients such as PIA or Nord on machines that have this update.
I suspect what broke was clients using MSChap, Microsoft's own protocol for authentication for VPN clients.
Source: an admin with 200+ client machines with VPN connections that are not impacted after installing this update.
absolutely bonkers take
I dunno man. I'm convinced that pretty much any mention of VPN these days is just an ad for vpns. That's with this article looks like.
Yeah, you're not wrong that the article kinda sets itself up for the "lookit our recommended VPNs" pitch.
There's no way Microsoft would purposefully disable VPNs from working. I can guarantee that they require VPNs for thousands of roles in the company, let alone breaking it for government agencies that require VPNs, etc.
It is good to know that a specific update can break something ahead of time, though. Then at least you can avoid it.
There's no way Microsoft would purposefully disable VPNs from working
No, but they've done it accidentally before.
One time a few years ago it broke all LT2P VPN's unless you removed a specific KB########.
IIRC, six months later there was still no fix.
I think it's been fixed now, though.
And now a word from our sponsor, Nor-
Skip 10 seconds. Skip 10 seconds. Skip 10 seconds.
Give up and install SponsorBlock.
But it's NordVPN.com/BigMoney. The ad is the best part of the video.
Bounced on my boy’s Raycons to this for hours
I do hope you were playing an invigorating game of Raid Shadow Legends at the time.
all ad copy is an ad for sponsor block
Its actually real news
It may be unintentional bug. People in the enterprise world need VPN for corporate purposes, they will fix it dont worry
thats going to be an issue - at my work roughly 60% of the userbase is connected via VPN at any given point - so, ~40,000 people or so
That's a paddlin.
Doesn't seem to have impacted Wireguard.
Obligatory Linux plug.
Looks like their policy to prefer cheap labor they hire from Asia rather than paying local U.S. developers a living wage is starting to bite them in the ass.
You are gonna test the software for a multi-billion dollar cooperation and you are gonna like it!
Is it too late to turn off security updates and avoid this issue?
And this is exactly why I don't do auto updates (and people around here berate me for it, saying my systems are unsafe).
Hell, Windows LTSC only gets updates twice a year (which is what I run).
LTSC is great.
Much less bloat and bs too.
