The WannaCry and Petya ransomware epidemics both spread using flaws in the ancient SMBv1 protocol, which Windows still enables by default (for some ridiculous reason). Whether you’re using Windows 10, 8, or 7, you should ensure SMBv1 is disabled on your PC.
What Is SMBv1, and Why Is It Enabled By Default?
SMBv1 is an old version of the Server Message Block protocol Windows uses for file sharing on a local network. It’s been replaced by SMBv2 and SMBv3. You can leave versions 2 and 3 enabled—they’re secure.
The older SMBv1 protocol is only enabled because there are some older applications that haven’t been updated to use SMBv2 or SMBv3. Microsoft maintains a list of applications that still require SMBv1 here.
If you’re not using any of these applications—and you probably aren’t—you should disable SMBv1 on your Windows PC to help protect it from any future attacks on the vulnerable SMBv1 protocol. Even Microsoft recommends disabling this protocol unless you need it.
How to Disable SMBv1 on Windows 10 or 8
Microsoft will disable SMBv1 by default beginning with Windows 10’s Fall Creators Update. Sadly, it took a huge ransomware epidemic to push Microsoft to make this change, but better late than never, right?
In the meantime, SMBv1 is easy to disable on Windows 10 or 8. Head to Control Panel > Programs > Turn Windows features on or off. You can also just open the Start menu, type “Features” into the search box, and click the “Turn Windows features on or off” shortcut.
Scroll through the list and locate the “SMB 1.0/CIFS File Sharing Support” option. Uncheck it to disable this feature and click “OK”.
You’ll be prompted to restart your PC after making…
The post How to Disable SMBv1 and Protect Your Windows PC From Attack appeared first on FeedBox.