Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

steve2470

(37,457 posts)
Wed Dec 10, 2014, 01:31 PM Dec 2014

Microsoft sticks to vow, leaves XP exposed to ongoing attacks

http://www.computerworld.com/article/2489407/malware-vulnerabilities/microsoft-sticks-to-vow--leaves-xp-exposed-to-ongoing-attacks.html

Hackers are exploiting an Internet Explorer (IE) vulnerability that was left unpatched in Windows XP on Tuesday, Microsoft and outside security experts said.

The bug, identified as CVE-2014-1815, was one of two Microsoft patched with a critical update issued Tuesday for IE6, IE7, IE8, IE9, IE10 and IE11. In the accompanying security bulletin, Microsoft noted that the vulnerability had been both known to hackers and used by them prior to yesterday's update.

"Microsoft is aware of limited attacks that attempt to exploit this vulnerability in Internet Explorer," the bulletin stated.

But because Windows XP exhausted its support privileges last month, users running the aged operating system did not receive the IE security update, as did owners of Windows Vista, Windows 7 and Windows 8 PCs.


XP users, take heed, please.
43 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Microsoft sticks to vow, leaves XP exposed to ongoing attacks (Original Post) steve2470 Dec 2014 OP
How does this make sense from a business perspective? Fearless Dec 2014 #1
good point nt steve2470 Dec 2014 #2
Because, as far as big software companies like Microsoft go, kentauros Dec 2014 #7
The problem for them is that people will do exactly what you did Fearless Dec 2014 #13
However, kentauros Dec 2014 #17
In this economy tenths of a percent matter Fearless Dec 2014 #18
Oh, I'm sure some of them care kentauros Dec 2014 #22
Nah, they'll just fold and upgrade to the newer, more rapidly-expiring editions of Windows. Posteritatis Dec 2014 #41
Forced upgrading. chrisa Dec 2014 #10
It's a 12 year old OS mythology Dec 2014 #30
Snow Leopard and Ubuntu 10 do not have the usership that XP currently does. Fearless Dec 2014 #37
That is sad Faux pas Dec 2014 #3
Don't use explorer if you have XP AgingAmerican Dec 2014 #4
yep nt steve2470 Dec 2014 #5
I don't. KamaAina Dec 2014 #21
If you absolutely love XP... Glassunion Dec 2014 #6
good info nt steve2470 Dec 2014 #8
There is a registry hack that will make XP TM99 Dec 2014 #23
Sticking to my vow... working to pull all Microsoft software from my entire extended family. TheBlackAdder Dec 2014 #9
Run XP in Virtualbox if you have to use it. L0oniX Dec 2014 #20
Linux also runs well on older XP rated computers. hunter Dec 2014 #31
No one with any sense uses Internet ExploDer to start with. hobbit709 Dec 2014 #11
From reddit... Glassunion Dec 2014 #12
+10000! Fearless Dec 2014 #14
my warranty ran out on my 14 year old toaster. should I be outraged lol nt msongs Dec 2014 #15
such compassion nt steve2470 Dec 2014 #16
Stop and think before plying bullshit. TM99 Dec 2014 #24
The only bullshit is from people whining about Microsoft mythology Dec 2014 #32
I am still running routers from ten years ago. TM99 Dec 2014 #38
Why would you do that edhopper Dec 2014 #36
Yes. Things should be built to last. My goldfish is older than your toaster. postulater Dec 2014 #25
Should you see outrage here, please point it out. Otherwise, your petulance is irrelevant. LanternWaste Dec 2014 #26
Ubuntu. L0oniX Dec 2014 #19
My XP machine only goes to usenet- am I vulnerable to hacks? callous taoboy Dec 2014 #27
probably..... would take no chances nt steve2470 Dec 2014 #28
Does Anyone Actually Still Use Internet Exploder? MineralMan Dec 2014 #29
Time to delete IE. nt eppur_se_muova Dec 2014 #33
Got Linux? backscatter712 Dec 2014 #34
I see no problem with this. MohRokTah Dec 2014 #35
I switched to Ubuntu a few months ago aint_no_life_nowhere Dec 2014 #39
I agree with Microsoft in this Dwayne Hicks Dec 2014 #40
I run IE sometimes (Opera is my fave), however.... steve2470 Dec 2014 #42
XP Derek V Dec 2014 #43

Fearless

(18,421 posts)
1. How does this make sense from a business perspective?
Wed Dec 10, 2014, 01:35 PM
Dec 2014

Have one person create patches for XP at limited cost or piss off tons of xp users with more alternative options out there than ever before?

kentauros

(29,414 posts)
7. Because, as far as big software companies like Microsoft go,
Wed Dec 10, 2014, 01:49 PM
Dec 2014

the "business perspective" is "upgrades are more profitable than perpetual updates."

That's the same thinking that gave us "subscription-based software" as Adobe adopted in whole. They screwed over their hobbyist base in favor of the corporate base that would just say "Okay!" and write off that monthly or annual cost as a business expense.

And so I bought a copy of Corel Painter 2015 instead. At least they understand they're funded by both professional and amateur artists.

kentauros

(29,414 posts)
17. However,
Wed Dec 10, 2014, 02:24 PM
Dec 2014

I don't think it will be enough people switching to cause a big enough dent in their sales.

When Office 2010 was released and there was next to no documentation on how to navigate with the new ribbon bar, I was informed by people in the know that it's because MS relies on their own paid-training programs to get businesses up and running on new software packages like that. Your average Home Edition user doesn't have either $500-$1000 laying around or the full weekend available to take the information-intense training just to learn the damn thing.

And MS doesn't care because businesses do have that kind of funding and time for their employees. MS helped make the system like this, but I have to think that all businesses helped, too, and maybe even the IRS, due to how software expenses can be written off.

The consumer-end just isn't profitable enough compared to the business side of work-software.

Fearless

(18,421 posts)
18. In this economy tenths of a percent matter
Wed Dec 10, 2014, 02:28 PM
Dec 2014

On their profit margin. This is just foolish on their part.

kentauros

(29,414 posts)
22. Oh, I'm sure some of them care
Wed Dec 10, 2014, 02:34 PM
Dec 2014

such as with regards to quarter profits. But MS does seem to be better at looking further down the road than the next quarter, and that's where they don't care as much about losing a few consumer-end customers on the question of keeping XP up-to-date.

I haven't worked on an XP-based machine in an office for years. Ever since Win7 came out, that's been the new industry standard. Businesses did balk at switching to Win8, and rightly so. MS straightened up and took notice when their business customers refused to upgrade to that train-wreck.

Posteritatis

(18,807 posts)
41. Nah, they'll just fold and upgrade to the newer, more rapidly-expiring editions of Windows.
Wed Dec 10, 2014, 08:06 PM
Dec 2014

The other major competitors aren't meaningful competition in a workplace sense; not many companies are going to be willing to shell out the extra expense to switch their offices to Macs, and next to none are going to be insane enough drop Linux variants on an employee base which almost certainly has never heard of it.

Their lock here is pretty absolute, and they know it, hence ceasing updates for XP and pushing for a faster upgrade cycle otherwise.

chrisa

(4,524 posts)
10. Forced upgrading.
Wed Dec 10, 2014, 01:51 PM
Dec 2014

Microsoft sees this as another money-making opportunity. It's no wonder the company is running itself into the ground.

 

mythology

(9,527 posts)
30. It's a 12 year old OS
Wed Dec 10, 2014, 04:29 PM
Dec 2014

Nobody is supporting an OS that old. Apple doesn't still support Snow Leopard, Ubuntu doesn't still support version 10.

Microsoft announced end of life years in advance.

Fearless

(18,421 posts)
37. Snow Leopard and Ubuntu 10 do not have the usership that XP currently does.
Wed Dec 10, 2014, 06:42 PM
Dec 2014

It is foolish to piss off so many people, and for that matter companies as well.

Faux pas

(14,682 posts)
3. That is sad
Wed Dec 10, 2014, 01:37 PM
Dec 2014

xp is my fave even though I haven't used it for at least 6 yrs. It's still on my old laptop.

Glassunion

(10,201 posts)
6. If you absolutely love XP...
Wed Dec 10, 2014, 01:48 PM
Dec 2014

Look into getting an embedded version of the product. MS is still releasing patches on embedded versions of XP until 2016 on some (standard) and 2017 on others (Pro). As well as their POSReady (built on the XP platform), support does not end until 2019.

 

TM99

(8,352 posts)
23. There is a registry hack that will make XP
Wed Dec 10, 2014, 02:34 PM
Dec 2014

appear as WEPOS to Microsoft's update servers.

I have a machine that I simply must have XP running on. It runs old 16 bit electronics testing software, several older 32bit VST's that won't work with JBridge wrapping, and some software that will communicate with hardware samplers I still own that are themselves over 30 years old.

I now get all security updates for WEPOS. I just read the bulletins to find out which are really necessary and go from there. I got the IE updates that way, not that I use IE but instead IceDragon.

TheBlackAdder

(28,209 posts)
9. Sticking to my vow... working to pull all Microsoft software from my entire extended family.
Wed Dec 10, 2014, 01:50 PM
Dec 2014

Microsoft is really sticking it to senior citizens, the disabled, and the poor by doing this.

Many cannot afford to upgrade their machines to run a new OS.


===


Windows was supposed to have been running in protected mode for 15 years or more. Having waited and waited for that, only to find backdoor gate calls exist to provide speed and downlevel application support, just introduces numerous virus risks to the system. I'm tired of having to run multiple anti-virus products to cover all of the holes in their OS. They shoould have fixed this years ago, when they said they would... pre-NT.


===


In light of that, all new machines in my entire extended family should be pulled from Microsoft in the next two years, as devices fail, as systems are upgraded,... NO MICROSOFT. In my recent future, the XP home base machine will be upgraded to a Mini Mac. My kids are already moving to Non-Windows systems. But, this means you can't run Ubuntu, since that runs on the Microsoft Azure layer (and sends some of your data to the cloud) to be mined.

If Linux, it needs to be GNU based. Anything other Linux, such as SUSE, is NSA exposed.

hunter

(38,318 posts)
31. Linux also runs well on older XP rated computers.
Wed Dec 10, 2014, 04:35 PM
Dec 2014

I use Debian.

I won't use Microsoft products unless someone is paying me to. I liked Gnome 2, and the Mate desktop is working well for me. On lower powered computers, the sort that are considered doorstops in the Microsoft world, the LXDE desktop is a good one.

 

TM99

(8,352 posts)
24. Stop and think before plying bullshit.
Wed Dec 10, 2014, 02:38 PM
Dec 2014

1) Your actual hardware warranty expired 13 years ago on a toaster.

2) If your toaster breaks, you can fix it yourself, if you have the knowledge. (Plus one for Open Source software there!)

3) If after 14 years, your toaster became a major safety hazard, you better believe its manufacturer would have a plan to have it fixed even if by outside repairman. After all, unlike software companies, the company that makes your toaster would actually be liable for potential harms it might cause.

 

mythology

(9,527 posts)
32. The only bullshit is from people whining about Microsoft
Wed Dec 10, 2014, 04:40 PM
Dec 2014

And if you want to complain about a company not providing support, go check your router. It almost certainly has not had a firmware update in years. Last year a major vulnerability was found that impacts several hundred million routers.

 

TM99

(8,352 posts)
38. I am still running routers from ten years ago.
Wed Dec 10, 2014, 07:56 PM
Dec 2014

And yes, vulnerability patches were made available for it. It is a Cisco/Linksys.

Microsoft did a great job supporting legacy win32 until Windows 8 and Metro which bombed. Windows 10 returns to its roots.

edhopper

(33,591 posts)
36. Why would you do that
Wed Dec 10, 2014, 06:34 PM
Dec 2014

It would cost more and take more time than buying a new toaster.
Like buying a new computer after 14 years.
They are very affordable.
Companies don't need to support things in perpetuity.

 

LanternWaste

(37,748 posts)
26. Should you see outrage here, please point it out. Otherwise, your petulance is irrelevant.
Wed Dec 10, 2014, 03:45 PM
Dec 2014

Should you see outrage here, please point it out. Otherwise, your petulance is irrelevant.

backscatter712

(26,355 posts)
34. Got Linux?
Wed Dec 10, 2014, 06:17 PM
Dec 2014

The lightweight distros are good for older machines when upgrading to a newer version of Windows isn't realistic...

 

MohRokTah

(15,429 posts)
35. I see no problem with this.
Wed Dec 10, 2014, 06:25 PM
Dec 2014

Microsoft cannot be expected to support an outdated and obsolete OS forever.

aint_no_life_nowhere

(21,925 posts)
39. I switched to Ubuntu a few months ago
Wed Dec 10, 2014, 08:00 PM
Dec 2014

and I love it. I think it's much more user friendly than Microsoft. It doesn't require anti-virus software and best of all, it's free. If ever a major problem should arise, I can just download it again from the web ... for free.

 

Dwayne Hicks

(637 posts)
40. I agree with Microsoft in this
Wed Dec 10, 2014, 08:03 PM
Dec 2014

XP is 12 years old and very obsolete. If you own a business and cannot afford to upgrade to Win 7 then you have more problems than the lack of XP updates.

steve2470

(37,457 posts)
42. I run IE sometimes (Opera is my fave), however....
Thu Dec 11, 2014, 02:19 AM
Dec 2014

1- It's ALWAYS patched up to date
2- I'm running Windows 10
3- I'm very careful which sites I go to
4- I NEVER use it for my banking website
5- I'm very careful what I download
6- I very rarely get malware or viruses (last time because of a silly download)
7- The first sign of anything weird, I run a malware scan manually and a virus scan
with TWO or THREE different programs. It almost always comes back empty.

Am I recommending that anyone else run IE ? No, of course not.

If you're really worried about security with IE, you can go into the settings and manually turn off anything even the slightest bit risky. Browsing the net then becomes a royal pain in the ass, but hey, you're pretty much 100% safe.

Microsoft needs to completely disentangle IE from the OS. That's the big problem with IE.

If you're really concerned about security, you run Linux. Period. Linux has been known to get a few viruses, but on the whole Linux is free from attack. If Linux ever becomes the dominant default operating system for consumers (up from around 5%), then the hackers and criminals will target it. The Linux community will then stay super busy patching holes. With Linux, you also have to type in your password manually for every significant operation.

tl,dr: Don't run IE like me, but it's not uber-sucky like IE6.

Latest Discussions»General Discussion»Microsoft sticks to vow, ...