Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

steve2470

(37,457 posts)
Sun Mar 30, 2014, 12:57 AM Mar 2014

Five Steps to Mitigate Risks After Windows XP Security Updates End

http://www.itbusinessedge.com/slideshows/five-steps-to-mitigate-risks-after-windows-xp-security-updates-end.html

*very heavily edited*

Limit access by other machines in your environment.

Reduce the privileges of your existing user accounts

Use an up-to-date browser (duh)

Read email in an updated browser (another duh)

Always monitor your systems

IT people, feel free to chime in, as always.

44 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Five Steps to Mitigate Risks After Windows XP Security Updates End (Original Post) steve2470 Mar 2014 OP
Well, there is one other thing you can do BlueStreak Mar 2014 #1
nailed it nt steve2470 Mar 2014 #2
I wish. phylny Mar 2014 #39
DU rec ucrdem Mar 2014 #3
One step to mitigate risks after updates end. PowerToThePeople Mar 2014 #4
Switch to Linux mindwalker_i Mar 2014 #5
I can't switch. silverweb Mar 2014 #6
I guess you have a point. defacto7 Mar 2014 #9
Inform your employer... eggplant Mar 2014 #11
Our tech people are aware. silverweb Mar 2014 #24
Cool! eggplant Mar 2014 #38
Thanks! silverweb Mar 2014 #40
If your hardware isn't something upgraded from windows 98 Aerows Mar 2014 #7
Dump it. defacto7 Mar 2014 #8
Would you suggest Ubuntu, or soemthing else? truedelphi Mar 2014 #10
There are a lot of great Linux OS systems defacto7 Mar 2014 #12
*crickets* cprise Mar 2014 #16
Yep.. good fish bate. defacto7 Mar 2014 #22
I'd probably recommend you try Ubuntu Spider Jerusalem Mar 2014 #15
Nice choice. defacto7 Mar 2014 #20
That looks enticing. However, here is one question - truedelphi Mar 2014 #41
Yes Spider Jerusalem Mar 2014 #43
Got it. Thanks for posting this info. n/t truedelphi Mar 2014 #44
The way I look at it is whether the user is a high risk user ffr Mar 2014 #13
Publish one news article critical of Monsanto, and suddenly beign virus-free truedelphi Mar 2014 #42
Thanks for the link. ladyVet Mar 2014 #14
Glad you brought this up davidpdx Mar 2014 #17
for giggles I name mine NSA_FT_MEADE_MD steve2470 Mar 2014 #18
I suggested NSA Special Ops davidpdx Mar 2014 #21
heh Cha Mar 2014 #27
My mom's reaction was davidpdx Mar 2014 #28
hehe.. can't fault Cha Mar 2014 #29
thread on XP steve2470 Mar 2014 #19
Limit XP to a game OS for things that don't run under wine. Spitfire of ATJ Mar 2014 #23
Additional considerations... lupine25 Mar 2014 #25
Just remember when you upgrade to 7, get Vista first Rex Mar 2014 #26
the only thing dumber than putting on Vista would be installing 8. hobbit709 Mar 2014 #31
Actually Vista works great all updated. Rex Mar 2014 #36
Get the free version of Sandboxie (at least) Bosonic Mar 2014 #30
Don't forget that MalWareBytes will still support WinXP ... eppur_se_muova Mar 2014 #32
This message was self-deleted by its author Bosonic Mar 2014 #37
If possible uninstall Adobe Flash Player, Adobe Reader and Java mythology Mar 2014 #33
Also be aware Win 7 will no longer be safe in XP Mode. lpbk2713 Mar 2014 #34
Install Ubuntu 12.04 on a new WD Raptor ...then run your .exe's from your XP hard drive with Wine. L0oniX Mar 2014 #35
 

BlueStreak

(8,377 posts)
1. Well, there is one other thing you can do
Sun Mar 30, 2014, 01:22 AM
Mar 2014

Upgrade to software that was produced in the past 12 years.

phylny

(8,380 posts)
39. I wish.
Sun Mar 30, 2014, 01:59 PM
Mar 2014

Work computers run a program that only runs on XP. Owners do not want to convert to another program. So, at work, it is what it is.

silverweb

(16,402 posts)
6. I can't switch.
Sun Mar 30, 2014, 01:38 AM
Mar 2014

[font color="navy" face="Verdana"]The company I work for owns the PC I use at home and runs XP, so I don't have the option of changing. Therefore, the suggestions in this article are very useful to me.

Thanks for posting.

defacto7

(13,485 posts)
9. I guess you have a point.
Sun Mar 30, 2014, 01:42 AM
Mar 2014

That is unfortunate though. Everything that XP has is compatible with Linux but if your work owns it, well that's that.

eggplant

(3,911 posts)
11. Inform your employer...
Sun Mar 30, 2014, 03:04 AM
Mar 2014

...of their risk and potential liability of having unsupported business systems out in the wild. As soon as the first exploit is found for XP that ISN'T patched (after next month), all XP machines will be at risk forever, and that includes all of their private business matters.

On the other hand, using a business machine for personal things is asking for trouble. Your employer owns the machine, and thus they own everything on the machine, including all of your personal history. I understand the temptation, but in the long run you are just asking for trouble, especially if they suddenly want it back. Try to migrate away from it for your personal stuff, if possible.

You should be able to find your own personal machine running Windows 7 (used, even) for a few hundred bucks at the most. The really nice new all-in-one Lenovo I got my kid was $300, and it's one the best in our house aside from my development boxes.

silverweb

(16,402 posts)
24. Our tech people are aware.
Sun Mar 30, 2014, 04:25 AM
Mar 2014

[font color="navy" face="Verdana"]They even sent out notices before XP support stopped to say that they're "working on" the situation, whatever that means.

I don't normally use the PC for personal stuff, but have had to since my old laptop died. There's nothing so earth shattering that I'd be suicidal if the boss snooped, though. Since I've been through a number of PCs over the years I've been with this company, all my personal stuff is saved in a cloud storage account.

Meanwhile, a new laptop is getting very near the top of my priority list.

eggplant

(3,911 posts)
38. Cool!
Sun Mar 30, 2014, 01:05 PM
Mar 2014

Glad you seem to be on top of it. If you are patient, you can find really good random deals (in various price ranges) here: http://slickdeals.net/

Good luck.

 

Aerows

(39,961 posts)
7. If your hardware isn't something upgraded from windows 98
Sun Mar 30, 2014, 01:38 AM
Mar 2014

Chances are, you can upgrade to Windows 7.

defacto7

(13,485 posts)
8. Dump it.
Sun Mar 30, 2014, 01:40 AM
Mar 2014

put on Linux. There's no reason in fact to keep XP, there hasn't been for years and if it's on the net in any form it's vulnerable. Or if there is data transfered via cd, dvd or thumb drive (or diskette) to any other computer, that computer is vulnerable.

It's not worth it !!!



truedelphi

(32,324 posts)
10. Would you suggest Ubuntu, or soemthing else?
Sun Mar 30, 2014, 02:46 AM
Mar 2014

There was another Linus, something like deanna? so maybe a discussion about the options would be good to hear.

defacto7

(13,485 posts)
12. There are a lot of great Linux OS systems
Sun Mar 30, 2014, 03:05 AM
Mar 2014
Ubuntu is a good option with different desktop choices. There is Mint which is a stable Ubuntu/Debian knockoff. Many love it. There are some Linux OSs that are for more experienced users like Debian and Slackware and some for very old and small machines. There are some OSs that run completely on ram at an extremely fast rate like Puppy Linux and Damn Small Linux. There are also different desktop options that have totally different screen functions or in my case... I like the good old Gnome Classic. I also run Enlightenment desktop but that is sort of experimental. Bodhi Linux does a great job of putting up Enlightenment desktop.

Here's a link to a vast collection of Linux OSs you can browse: http://distrowatch.com/ It has explanations for each, their origin, what application they work best with. When you decide, you just download and install. I suggest a live cd.

To make it simple, you can always choose Ubuntu, try it out with the standard desktop (Unity) and if you don't like the unity desktop, download the Gnome classic and give Ubuntu a whirl with that one.

The possibilities are endless... and free.

Any specific issues with installation or the like, I'd be glad to talk with you. It's a favorite subject for me.
 

Spider Jerusalem

(21,786 posts)
15. I'd probably recommend you try Ubuntu
Sun Mar 30, 2014, 03:23 AM
Mar 2014

and specifically the Lubuntu distribution--it uses LXDE, the "Lightweight Desktop Environment", which runs quite well on older hardware and is similar enough in look and feel to WinXP that you'd be comfortable with it.



And here:


http://www.omgubuntu.co.uk/2014/02/four-reasons-why-windows-xp-users-should-switch-to-lubuntu-this-april

 

Spider Jerusalem

(21,786 posts)
43. Yes
Sun Mar 30, 2014, 11:48 PM
Mar 2014

it installs the Flash plugin you need to play web content like Youtube videos. Or rather, there is an option for you to install it when you set up the system; Flash and certain other software for DVD/MP3 playback is non-free/not opensource, so you have to tick an extra box to have it included.

ffr

(22,670 posts)
13. The way I look at it is whether the user is a high risk user
Sun Mar 30, 2014, 03:14 AM
Mar 2014

that's always in trouble with viruses. Otherwise, I'm not concerned at all. Personally, I don't even use anti-virus software. And before the flamers get too carried away, I have installed them, but after I scan once and find nothing, I remove them. I'm like many users who are low risk. Our Internet behavior, the sites we visit, are not likely to contain viruses and if on the odd chance they did, I doubt they'd make it through my browser.

I have a Windows 98 PC, three Windows XP Pro SP3 PCs and one Windows 7 64-bit PC. 30 years of computing, not one virus to show for it.

You guys go ahead and upgrade. I'm not.

truedelphi

(32,324 posts)
42. Publish one news article critical of Monsanto, and suddenly beign virus-free
Sun Mar 30, 2014, 11:42 PM
Mar 2014

becomes a thing of the past.

ladyVet

(1,587 posts)
14. Thanks for the link.
Sun Mar 30, 2014, 03:14 AM
Mar 2014

My old computer (currently on XP Pro) won't handle anything newer than Vista. My sons are thinking of switching me to some variety of Linux.

We just stripped the thing down and reloaded Windows, and I hate to start over again on all my programs, but we'll do it.

davidpdx

(22,000 posts)
17. Glad you brought this up
Sun Mar 30, 2014, 03:31 AM
Mar 2014

My mom was just asking about this. I'll send it to her. She bought a new Samsung notepad, but still has an outdated computer with XP on it.

Way OT:

She also asked for suggestions on what to name her wireless connection. Apparently someone in the neighborhood had theirs labeled "FBI Surveillance Van". Probably someone trying to prevent people from messing with their connection.

If anyone has suggestions I'll pass them on.

steve2470

(37,457 posts)
18. for giggles I name mine NSA_FT_MEADE_MD
Sun Mar 30, 2014, 03:33 AM
Mar 2014

For more info about XP, we have pinned threads in Computer Help and Support.

davidpdx

(22,000 posts)
21. I suggested NSA Special Ops
Sun Mar 30, 2014, 03:37 AM
Mar 2014

I think the others were:

Secret Service
Guantanamo drop off point (I know, bad)

and my favorite...

Putin Stinks

davidpdx

(22,000 posts)
28. My mom's reaction was
Sun Mar 30, 2014, 06:26 AM
Mar 2014

Yeah, that's true but I'm not going to use that. So much for a sense of humor.

lupine25

(33 posts)
25. Additional considerations...
Sun Mar 30, 2014, 06:03 AM
Mar 2014

Remember that security holes don't just stop at the operating system.... Windows XP support is ending on 4/8/14, but also Microsoft is pulling support and updates for Microsoft Office 2003! If you must stick with Windows XP, make sure you upgrade your MS office to 2007 or 2010. (2013 is not supported on Windows XP). Or, if spending bucks is out of the question, consider a free Microsoft-compatible suite such as LibreOffice.

Update your browser, yes! As much of an Internet Explorer fan as I am, I'd recommend staying off of even IE8, the last version supported by Windows XP.

Lastly, my 2 cents so take it for what it's worth... but I'm currently running Windows 8.1 Pro and have been running various derivations of Windows 8 since the first consumer preview version came out in early 2012... That said I don't agree with all the negative press about it. It IS different than previous versions and for newbies will take some getting used to... but it's not bad in my opinion. Especially 8.1 as it gives a lot more options to cater to those who prefer to stay on the Windows 7/XP-like desktop.

As an IT pro, my best advice is to ditch XP. With a 12 year old operating system, this would be like running Windows 3.0 in 2002. Ridiculous! But, if you absolutely have to (or prefer to) stick with XP, treat it as a vulnerable machine.... because it will be. Avoid handling sensitive info such as bank passwords, credit cards, bill payments if at all possible.

 

Rex

(65,616 posts)
26. Just remember when you upgrade to 7, get Vista first
Sun Mar 30, 2014, 06:11 AM
Mar 2014

then do a full install. Skip the update. Back up your files first. Might want to think about using Ctrl+Shift+N when just surfing. Don't ever buy any version of Home anything or Premium from microsoft. Spend the extra bucks and get Pro or Ultimate.

Or skip all that get 8.1.

You still get a few years of MSE updates on XP, but I would switch to Vista or 7 asap.

hobbit709

(41,694 posts)
31. the only thing dumber than putting on Vista would be installing 8.
Sun Mar 30, 2014, 07:05 AM
Mar 2014

It's always best just to do a total fresh install than upgrade.

The main security problem is the ID ten T error.

"I don't understand why I got a virus. I have protection" I've heard that more times than I can count.
My response "When you click on something you just gave it permission"

 

Rex

(65,616 posts)
36. Actually Vista works great all updated.
Sun Mar 30, 2014, 12:09 PM
Mar 2014

I actually had to replace the HDD I had Vista installed on, it outlasted the hardware. Once updated, it runs like 7. Of course I recommend 7 Ultimate.

Yeah 8 is total crap, you have to automatically update it to 8.1 just for it to work on some systems.

STICK WITH 7 folks.

eppur_se_muova

(36,263 posts)
32. Don't forget that MalWareBytes will still support WinXP ...
Sun Mar 30, 2014, 11:41 AM
Mar 2014

some may find this article useful: http://www.digitaltrends.com/computing/end-support-windows-xp-survival-guide/#!A8vsP

I have to point out, though, that just having the original WinXP install disk may not help. I bought a Dell refurb years ago, and when I reinstalled WinXP from the CD the new installation needed to be activated -- MS would not do this, because the OS was too old (this was well before the end of XP support was announced).

Response to eppur_se_muova (Reply #32)

 

mythology

(9,527 posts)
33. If possible uninstall Adobe Flash Player, Adobe Reader and Java
Sun Mar 30, 2014, 11:56 AM
Mar 2014

Or at least uninstall Java from your browser.

Additionally running NoScript will stop a lot of things in your browser.

lpbk2713

(42,757 posts)
34. Also be aware Win 7 will no longer be safe in XP Mode.
Sun Mar 30, 2014, 12:06 PM
Mar 2014




MS will no longer provide support for XP Mode after the cutoff date.


This from MicroSoft ...




See number 5 ... http://gcn.com/Articles/2014/03/27/XP-mitigation-ISC2.aspx?Page=2


 

L0oniX

(31,493 posts)
35. Install Ubuntu 12.04 on a new WD Raptor ...then run your .exe's from your XP hard drive with Wine.
Sun Mar 30, 2014, 12:07 PM
Mar 2014
Latest Discussions»General Discussion»Five Steps to Mitigate Ri...