Slashdot Mirror


Microsoft has Delayed SP2, Again

I_am_Rambi writes "According to news.com.com "Microsoft has again delayed a long-awaited update to Windows XP, citing quality concerns. The company had planned to wrap up development this week on Windows XP Service Pack 2, but a Microsoft representative said late Wednesday that the software giant had decided that more work was needed on the update before if could be released to manufacturing." Yea, if 3 out of 5 machines failed to come back up, it needs some polishing."

40 of 425 comments (clear)

  1. New captain at the wheel? by FyRE666 · · Score: 1, Insightful

    Microsoft has again delayed a long-awaited update to Windows XP, citing quality concerns.

    Wow, now that's what I call a policy change! It's only taken them what... 20 fucking years to realise it might be a good idea to test their products in-house. You know, instead of just releasing the alphas as "stable" 2 minutes after the source hit the compiler and crossing their fingers over in Redmond...

    On the other hand I have to wonder just how bad a problem they could possibly have to force them to dig out their debuggers...

    1. Re:New captain at the wheel? by TykeClone · · Score: 2, Insightful

      And these kludges are the source of how many security problems?

      --
      A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
    2. Re:New captain at the wheel? by Gr8Apes · · Score: 3, Insightful

      Actually, the problem was there was no existing security to speak of. Rather, it was disabled so a lot of programs assumed that certain actions were legal and depended upon those actions to succeed to run. Now that MS is attempting to force some security within the OS, a lot of those earlier assumptions are causing lots of problems, much like the DLL debacle that only took 13 years to even begin to be addressed.

      I wouldn't hold my breath waiting for XP2 to come out. (Yes, it will come out, eventually, but if it even does half of what it was supposed to do, expect much pain/patching of third party products.)

      --
      The cesspool just got a check and balance.
    3. Re:New captain at the wheel? by Jonathan+the+Nerd · · Score: 2, Insightful

      That's why I love VMWare's "undoable" mode. You can mess up your machine in all kinds of horrible ways, and all you have to do to get it working again is shutdown and don't apply the changes. Real Windows PCs should come with an option like that.

      --
      Disclaimer: The opinions expressed are not necessarily my own, as I've not yet had my medication today.
    4. Re:New captain at the wheel? by Jugalator · · Score: 3, Insightful

      They're finding out just how screwy the security system within Windows really is.

      SP2 is supposed to be a big "security fix." Assuming that it really is, it sounds as if it's breaking lots of stuff that was previously able to work around existing security to function.


      I doubt their screwed security is that hard to fix, but rather finding out how many programs depends on this former screwed security. Which are marked with this logo. I guess this is why the final stages of this service pack has been delayed so much. It doesn't seem like the actual core coding took much longer than estimated, but rather what they're finding out in the QA stages.

      --
      Beware: In C++, your friends can see your privates!
    5. Re:New captain at the wheel? by Dasein · · Score: 2, Insightful

      Actually, just to back you up a bit, I remember someone I know who works out there saying that they have almost a 1:1 Dev to QA ratio. The industry standard is somewhere between 2:1 and 3:1 Dev to QA. So they have a lot of QA.

      So, my theory is that they've made the OS so huge by integrating everything in that a little change in one place means that a good deal of the product needs to be retested.

      --
      You are not a beautiful or unique snowflake -- but you could be if you got off your ass.
  2. Good by darth_MALL · · Score: 5, Insightful

    Nice to see a much-hyped rollout delayed as a quality control measure. From Microsoft no less. Step in the right direction PR-wise if you ask me.

    1. Re:Good by shotfeel · · Score: 2, Insightful

      Just for perspectice, PR-wise aren't all delays pretty much billed as a "quality control measure"? You'll never hear any company say the delay is because they can't figure out how to fix a bug.

      MS Says : We're delaying release to make sure the software is up to our quality control levels.

      I Hear : We still have several killer bugs we haven't figured out yet so tell everyone the delay is because we care about the users, not because we're incompetent.

      Either way you read it, its always about quality (and spin) control.

  3. I know it's popular to slag Microsoft... by Sheetrock · · Score: 4, Insightful
    But here it won't make sense, because not only are they making the system more secure but they're working to ensure the security doesn't break compatibility.

    If a bunch of machines won't boot -- even if it's the fault of the developers of third-party software as we've seen with faulty drivers impacting Windows 98 -- people will be slow to adopt what is perhaps the most critical software patch the Internet has seen.

    --

    Try not. Do or do not, there is no try.
    -- Dr. Spock, stardate 2822-3.




  4. Good For Them by USAPatriot · · Score: 4, Insightful
    Microsoft has decided not to rush a release just for the sake of releasing it.

    They want to get it right the first time. I congratulate them for doing the Right Thing and making sure they deliver a rock solid Service Pack for the millions of XP users out there.

    Before the slashdot editors and crowd crow over this delay, just remember the 503 errors and flakiness this site has experienced since "maintenance" was performed. Don't throw stones in glass houses, kids.

    --

    Slashdot Moderation: From positive to terrible in 2 "insightful" posts.

    1. Re:Good For Them by Zocalo · · Score: 2, Insightful
      Agreed, it's essential that they get this right before they release it because every WinXP using man and his dog with a iota of a clue about patching is going to be installing it. The other problem with SP2 is the people that are eagerly awaiting this patch are probably not responsible for the bulk of compromised PCs that are hammering my firewall with probes to ports 135 and 445.

      If Microsoft is now as serious about security as they claim then they should get this patch right *and* rescind their earlier edict against magazines carrying patches on their cover CDs. Combine that with an article that focuses more on the new features than the importance of security and you just might get the thing more widely deployed. More Windows users with fewer ports exposed to the Internet, even if it's only via ICF or whatever it's called now, has got to have an impact on the size of the BotNets out there, right?

      --
      UNIX? They're not even circumcised! Savages!
  5. so NOT a solution by cephyn · · Score: 4, Insightful

    most people will run anything they're asked to.

    --
    Moo.
  6. How configurable is the SP? by Greg+Larkin · · Score: 5, Insightful

    I read in the paper this morning that SP2 will be doing things like turning on the WinXP firewall by default and gawd knows what else. Does anyone know if we'll be able to easily see all of its proposed "helpful" actions and disable the ones we don't want? For instance, I already have a hardware firewall, so I don't need the software firewall to be enabled.

    --

    SourceHosting.net, LLC
    Ready. Set. Code.
    http://www.sourcehosting.net/
    1. Re:How configurable is the SP? by Wingit · · Score: 3, Insightful

      Greg, you may want to reconsider your opinion on this, depending on the network environment in which you live. I work as a network administrator at a public library and have been very anxious to run a software firewall on all workstations. We are a pure Windows 2000 network and have moved our XP migration up just to gain the software firewall. Granted, I have separated most public access computers from staff resources via VLANS, but the public still needs access to some critical systems. Our staff is constantly being educated and reminded of safe computing practices, but they are also a bit dangerous. No one in our environment needs to be connecting to workstations except for an assistant and myself and I welcome the added protection. All I would need is a worm to get inside the network from a stray floppy disk or CD and it could spread on its own. It may not be necessary for your environment, but I recommend both a hardware firewall at all places the LAN connects to outside resources AND at each computer within the LAN for most any network installation.

      --
      We win together or suffer without.
  7. Re:With every missed step... by poohsuntzu · · Score: 2, Insightful

    Wait, can you show me some statistics on why people who don't understand what the SP2 patch does anyways, would make this sudden and drastic switch to linux you are talking about?

    --
    "We're breaking out the ramen noodles. . . "
    "Really? Is it someone's birthday?"
  8. Users will see it as Microsoft's problem anyway by MooseByte · · Score: 4, Insightful

    "So the problem, then, with Windows XP SP2 RC2 is that it doesn't work when the operating system has been corrupted beyond repair by spyware that hooks into various DLLs and services in an attempt to prevent itself from being uninstalled."

    So if, say, 1/3 of all WinXP boxes out there are currently infected with spyware (probably a conservative guess), then 1/3 of all users applying XP SP2 would crash?

    I'd say that makes it Microsoft's problem. Users aren't going to care, all they will see is that before XP SP2 their system worked, and after it didn't.

    1. Re:Users will see it as Microsoft's problem anyway by TykeClone · · Score: 2, Insightful

      It also makes for a nice opportunity to clean that stuff up (for those of us who charge to do so :)

      --
      A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
    2. Re:Users will see it as Microsoft's problem anyway by 0racle · · Score: 3, Insightful

      So now MS has to make its OS work with spyware? If I let someone I don't trust work on my car, and they screw it up to the point that when I start it next time it blows up, is that GM's fault? Its my fault for letting that idiot work on it. If spyware causes the system to crash, its the users fault for not taking proper precautions. Users can whine and moan about it all they want, it doesn't change anything.

      --
      "I use a Mac because I'm just better than you are."
    3. Re:Users will see it as Microsoft's problem anyway by MooseByte · · Score: 2, Insightful

      "So now MS has to make its OS work with spyware?"

      Yes.

      Sucks to be them, but they got themselves into this position in the first place.

    4. Re:Users will see it as Microsoft's problem anyway by Tim+C · · Score: 3, Insightful

      How so?

      A lot of spyware either masquerades as legitimate software, or piggy backs on legitmate software installers. Sure, some gets in through ActiveX exploits and what have you, but by no means all.

      As for the "run as admin by default", that is changing, but will *not* prevent this sort of problem. Even if MS prevented interactive login by members of the Adminstrators group, you have to have a way of installing programs and performing system maintenance. That means an account that's capable of modifying system files.

      So all the malware has to do is get to the machine as above (piggy backing or pretending to be legitimate), and prompt the user to enter their admin password.

      Malware is not MS's fault. They've not made it as difficult for malware authors as they could have, but it's impossible to make it impossible, if the user has admin rights, and that includes *every* home user. The same applies to Linux, of course - as it grows in popularity, the malware authors will come. It'll take a little more social engineering, and an extra "enter your root password" step, but it cannot be stopped.

    5. Re:Users will see it as Microsoft's problem anyway by skyhawker · · Score: 2, Insightful

      Your attitude is well justified, but I think the folks at Microsoft would not agree with you. It would be a PR nightmare for them even though, technically speaking, they're not at fault. My guess is that they're trying to figure out ways to deal with this whole mess gracefully.

      --

      The best diplomat I know is a fully activated phaser bank.
      -- Scotty.
    6. Re:Users will see it as Microsoft's problem anyway by finkployd · · Score: 1, Insightful

      So now MS has to make its OS work with spyware?

      Actually the whole problem stems from the fact that it works so well with spyware. Spyware authors have a vast array of sickening vulnerabilities with which to discreetly load their software onto a user's machine.

      It is not MS's fault that SP2 doesn't work with spyware, but that have to take a healthy share of the blame for the spyware epidemic that exists on windows boxes today.

      Finkployd

  9. Good thing... by OS24Ever · · Score: 4, Insightful

    ..I mean anyone else remember service pack 2 for Windows NT 4.0? Talk about run for the hills day when that came out.

    I'd prefer they get their stuff together instead of rushing to market. Though personally the service pack thing to me is more of a PITA than patching the various subsystems and then creating a 'roll up' service pack vs. the service pack being the 'holy grail' update all at once breaking/changing things willy nilly (at least that is how it seems some days)

    --

    As a rock-in-roll Physicist once said, No matter where you go, there you are.

  10. Re:FYI: The SP2 RC2 problems are spyware related by Anonymous Coward · · Score: 1, Insightful

    I disagree with (not yours exactly) some of these definitions of spyware.

    Spyware, in the strictest sense, is something you agreed to put on your computer. Anything else, as far as I am concerned and as far as a court room would be concerned, is a freaking virus.

    Calling it spyware is a cop-op in some ways, these are just viruses, trojan-horses and computer hackings (bad use of "hack" I know). The more we refer to these in such evil terms, the more people will accept them as that. It's the war of position which will then aid the war of maneuvre when it comes to passing legislation and crushing these worms in the courts.

    You need the mindshare (war of position) before you can actually suceed in each tactical theatre (the policy/law, the police, the courtroom).

    So let us crush the virus writers, and hear the lamentations of their women. They aren't even writing for the beauty of the hack, or whatever, they are just writing for profit in the service of corporations - they are the most evil.

  11. Re:With every missed step... by poohsuntzu · · Score: 4, Insightful

    No, I really don't. So they keep pushing dates back. Who cares? Do you honestly think that the majority of Windows users hangs on the edge of their seat about new updates like a typical geek?

    No. They don't. And chances are, most could care less about Longhorn, and even more don't mind that it is pushed back because computing isn't a large part of their life. So it won't matter how fast linux improves, nor how far back Windows get's pushed. -Right now- Windows works perfectly for a good number of people, and it does what they need. There is no incentive for the flood of Windows users to care whether its in 2004 or 2006, because in their mind they know one thing: "We will get it when it is released".

    And no, I don't see this as a dangerous time for them.

    --
    "We're breaking out the ramen noodles. . . "
    "Really? Is it someone's birthday?"
  12. I am no MS apologist, but... by chuckw · · Score: 4, Insightful

    No one has ever been able to accuse me of being a Microsoft apologist. I've thrown my fair share of vitriol their way, but I always said what I felt was justified based on their actions.

    In this case, I have to congratulate Microsoft. Yeah, I said it... They deserve a pat on the back for finally realizing, at least in this one instance, that it doesn't pay to release crap software. I doubt this is the beginning of a trend or anything, but for this they deserve a pat on the back.

    --
    *Condense fact from the vapor of nuance*
  13. What's the big rush? by Anonymous Coward · · Score: 3, Insightful

    Ok, so it's been delayed again... So what? I mean, what's the big rush? Security updates are still coming through windowsupdate whenever they're required. Isn't it better that Microsoft take their time with the service pack and make it solid, rather than they releasing it unfinished?

  14. Come on now by kevinmf · · Score: 5, Insightful

    Come on now - you have to give microsoft some credit. This update is a major overhaul to the OS. Look at kernel updates for linux. You have to be careful as hell, making sure all of your drivers are still compatible, libs all still work, etc etc. SP2 is along the lines of a linux kernel upgrade.

    You really have to give MS some credit because all of their drivers will be working with SP2, as well as most software. Sure, linux upgrades might come out more often, but you have to admit - actually applying them is a lot more intensive than simply clicking 'next, next, next, yes i will reboot now.'

    Anyway, I think people are WAY to hard on MS. For going almost 15 years now and barely breaking backwards compatibility, they seriously deserve more credit than the slashdot crowd gives them. Good luck to em with this new upgrade.

    1. Re:Come on now by Minna+Kirai · · Score: 2, Insightful

      This update is a major overhaul to the OS.

      That's part of the problem. To plug a few exploits and switch to safer default settings should only need a small patch, not a 200 megabyte "overhaul".

      SP2 will change lots of things, more than most users care about. If Microsoft wants to rewrite half of XP out of a sense of perfectionism, fine. But security upgrades should be considered time-critical, and shouldn't wait on "nice to haves".

    2. Re:Come on now by shotfeel · · Score: 2, Insightful

      Is it really a major overhaul?

      Seriously. All the descriptions I've read say it rolls up all the previous security updates and changes some default settings. There may also be some other changes that are hinted at.

      What's so major about it? Seems all the previous security updates should have been fully tested along the way and changing default settings to something any user may have done on their own shouldn't be a big problem IMO.

      I know any type of upgrade is a big job, but I'm still struggling with why MS is having such a difficult time with this. IMO they have the resources, they have the talent, so where's the problem and why does it seem to be so persistent?

    3. Re:Come on now by TheNetAvenger · · Score: 2, Insightful

      That's part of the problem. To plug a few exploits and switch to safer default settings should only need a small patch, not a 200 megabyte "overhaul".

      SP2 will change lots of things, more than most users care about. If Microsoft wants to rewrite half of XP out of a sense of perfectionism, fine. But security upgrades should be considered time-critical, and shouldn't wait on "nice to haves".


      The OS hasn't been totally rewritten; however a lot of the code base has been recompiled with the newer compilers offering more speed and managed code.

      Remember that WindowsXP is over 3 freaking years old, since then Windows 2003 has been released (which is common code base) and offers many security and performance optimizations just due to the security model and newer compilers. Hence the reason people were finding that running Windows 2003 server as a workstation was faster than the RTM of XP.

      Please understand the difference between rewriting code and recompiling existing code with a new compiler that checks for security and adds performance.

      Microsoft could be like Apple, adding .xx revision number to the OS and charging their users $100 bucks just to get the security and bug fixes that were in the previous version of OSX.

      Microsoft is providing this update FREE, and is holding the faith of the users by making it a solid release. (Despite the spyware tested machines in the previous report "3 out of 5 didn't reboot")

    4. Re:Come on now by rmdir+-r+* · · Score: 2, Insightful
      For going almost 15 years now and barely breaking backwards compatibility, they seriously deserve more credit than the slashdot crowd gives them.

      Personally, I would have preferred that they sat down and did a _complete_ redesign of the OS, and said: screw backwards compatibility, lets do this right.
  15. I know. by bmajik · · Score: 4, Insightful

    I've run a few RC builds of XP SP2 on 2 different machines.

    Configuring the firewall is _easy_.

    I too have real firewalls. I leave the SP2 one turned on as well, because it hasn't gotten in the way of anything i do with the machines (yet). I did add a port or two to the allow list, and thats it.

    Remember, defense in depth. Having every XP machine tightened up out of the box as much or more as a default linux install is a good thing.

    But, you can turn the firewall features off _very_ easily.

    I really like the popup blocker and other IE changes in SP2 as well. I've stopped using proxomitron. I see inline ads where prox used to just put [Ad] but that doesn't bother since the super obnoxious stuff is gone. Also, the way IE handles ActiveX controls is _much_ nicer than it used to be - no being asked 23049 times per page to dismiss modal dialogs.

    finally, i wouldn't get too worked up over the headline that XP SP2 is delayed. I have some inside info on the delay.. and its (so far) not worth the sensational press its getting at sites with.. ABM slants :)

    People need to be honest. If MS said there's a problem and released it anyway, the ABM camp would grill them for releasing shitty unfinished product. By holding it for a while longer, MS gets grilled for delaying its release (with sideline comments about them being incompetant or SP2 being vapor or what have you). To the ABMer, MS can do nothing right.

    (ABM = "Anything But Microsoft" :)

    --
    My opinions are my own, and do not necessarily represent those of my employer.
  16. This just in: by Anonymous Coward · · Score: 5, Insightful

    "3 out of 5 machines failed to come back up"

    We've just recieved word that 3 out of 5 Windows systems use a commonly pirated CD-KEY.

    DeMe

  17. Re:Windows problems by js3 · · Score: 2, Insightful

    obviously these softies work in little teams mostly independent from each other. The few softies I know who directly work on the OS (and many softies don't) usually work in specialized area.. like the driver subsystem and what not. It is entirely reasonable that a guy who does drivers wouldn't have much of an insight on how other parts of the system work

    --
    did you forget to take your meds?
  18. Re:What are they doing? by tc · · Score: 2, Insightful

    If you're referring to the /GS compiler switch, then it's pretty well defined: you trash the stack, your process dies. Ugly, but better than letting malware inject code via buffer overflow exploits.

    Yes, this isn't a substitute for fixing overflow bugs in first place, but the point is that in a large codebase inevitably there will be some that get missed - so having some additional defense-in-depth is a good idea.

  19. They just can't win. by WhatAmIDoingHere · · Score: 2, Insightful

    Rag on 'em for security problems.

    Rag on 'em for buggy beta service packs.

    Rag on 'em when they delat the buggy beta service pack for some final tweaking so that it doesn't suck.

    You act like MS is hurting people by not releasing their buggy service pack when they loosly claimed they maybe kinda would.

    I'd rather have it come out late and bug free. Or as close to bug-free as it's going to get.

    --
    Not a Twitter sockpuppet... but I wish I was.
  20. Re:Someone tell me... by barfy · · Score: 2, Insightful

    Um... Because they did...

    XP is built on the NT kernal, NOT the DOS kernal of ME and previous.

    There is alot of emulation code to support, um arguably buggy or unsupported methods going forward.

    The problem is really NOT in the operating system, but in default security functionality, overly "functional" common applications, (outlook and IE), an ignorant user base (Really, a FREE kournakova JPG? How did they know?), and an extraordinarily malicious mal-ware community.

    SP2 changes default security functionality, and reduces the "functionality" of common apps, even adds some new clever code to prevent buffer overflows if the hardware supports it, because you can't do too much about the user base and the bastards...

  21. Re:If there is one software company... by phillymjs · · Score: 2, Insightful

    Microsoft should put more of an investment into their public image

    Bah! Talk about throwing money down the crapper!

    There is absolutely nothing that Microsoft could do or say to make me like/respect them as a company, and I'm far from alone in that sentiment. They have pumped out shitty software for too long and made too many false claims about the quality of said software. Hell, I've made a career out of cleaning up the mess when their shoddy products shit the bed, and my boss has built a multimillion dollar business around it. Their behavior during the antitrust trial was reprehensible, and when it was over and they got their little wrist-slap, they were completely unrepentant and for the most part went right back to doing all the same shit that landed them in court in the first place.

    Microsoft has earned its horrid reputation, and at this point no PR firm in the universe could improve it (though I'm sure some would love for Microsoft to give them a few dump trucks full of money to try). In light of that, Microsoft might as well put that money to better use and pay a few more people to try to fix Windows XP.

    ~Philly

  22. Re:Windows problems by IamTheRealMike · · Score: 2, Insightful
    No, they don't, in fact their own development teams have a habit of writing utility libraries and wrapper DLLs to abstract themselves from the lower levels of Windows. Unfortunately those DLLs themselves tend to morph into semi-public API: the SHLWAPI DLL is one example of this. The "Shell Lightweight API" was written by the IE team when they had to run on lots of different versions of Windows, and is sorta half documented these days. Layer MFC + ATL + SHLWAPI on top of all the other random DLLs Windows has, and you get something barely comprehensible.

    Don't even get me started on DCOM, which is involved in services as basic as the clipboard (that's why WinXP reboots if the RPCSS service dies). MSDN can't even describe some of the DCOM interfaces without making mistakes - they actually miss out methods and stuff. Only God (or Don Box) fully understands how it works, but it does ...