Slashdot Mirror


Microsoft has Delayed SP2, Again

I_am_Rambi writes "According to news.com.com "Microsoft has again delayed a long-awaited update to Windows XP, citing quality concerns. The company had planned to wrap up development this week on Windows XP Service Pack 2, but a Microsoft representative said late Wednesday that the software giant had decided that more work was needed on the update before if could be released to manufacturing." Yea, if 3 out of 5 machines failed to come back up, it needs some polishing."

99 of 425 comments (clear)

  1. FYI: The SP2 RC2 problems are spyware related by Anonymous Coward · · Score: 5, Informative

    The whole "three out of five machines failed to come back up" after installing SP2 RC2 should not frighten you from trying it.

    The original article said quit clearly that the problem they had was that they'd get a bluescreen and "A message stated that 'winserv' was missing."

    What the article didn't say was what "winserv" actually is. It's not part of Windows. In fact, it is spyware. Plain and simple.

    So the problem, then, with Windows XP SP2 RC2 is that it doesn't work when the operating system has been corrupted beyond repair by spyware that hooks into various DLLs and services in an attempt to prevent itself from being uninstalled.

    1. Re:FYI: The SP2 RC2 problems are spyware related by DAldredge · · Score: 4, Interesting

      That sure says a lot about the system restore and anticorruption tech that microsoft said was a reason for upgrading to XP.

    2. Re:FYI: The SP2 RC2 problems are spyware related by metaomni · · Score: 2, Informative
      While I agree with you on face, that the problem isn't inherent in the patch damaging clean installs of Windows, this still doesn't remove the fact that SP2 RC2 will damage a significant portion of consumer boxes.

      Microsoft created a product that allows random spyware programs to, as you put it, corrupt beyond repair various DLLs and services. No OS should allow itself to be damaged so irrevocably far.

      On point though, I think that it should frighten people from trying it. If your claim is that spyware is not a rampant problem, then you really do need to see the average consumer Windows box. If this service patch is not robust enough to deal with the fact that programs may have hijacked some DLLs (something that, as I said should never have happened), then it should be worrisome not only to the /. community, but the Windows community as a whole.

    3. Re:FYI: The SP2 RC2 problems are spyware related by amRadioHed · · Score: 5, Funny

      The problem is clearly with Microsoft's developer relations. Does MS give beta releases of their upcoming updates to all the trojan and spyware authors on a regular bases? I think not! How can they expect these poor developers to update their warez to run with the new service pack? You can't release a new OS and expect all the spyware to just work.

      --
      We hope your rules and wisdom choke you / Now we are one in everlasting peace
    4. Re:FYI: The SP2 RC2 problems are spyware related by lseltzer · · Score: 2, Interesting

      And if the user had done system restore to a clean config before the SP2 upgrade it would have gone well. Or do you expect the SP2 installation to include a full updated malware scanner?

  2. it's "imminent" by ack154 · · Score: 4, Funny
    Reuters had an article about this too.
    " Redmond, Washington-Microsoft originally had planned to deliver the final production version of Service Pack 2 (SP2) to computer makers on Wednesday, but instead said the update would be release "imminently," possibly within days."

    "imminently" ... so that's how long in "Microsoft" days? November?
    1. Re:it's "imminent" by RatBastard · · Score: 4, Funny

      About "Two Weeks" in id Software time.

      --
      Boobies never hurt anyone. - Sherry Glaser.
  3. Missed their goal by b12arr0 · · Score: 5, Funny

    I heard they were after a "4 out of 5" failure rate.

  4. Thank God by Anonymous Coward · · Score: 5, Funny

    Working for a broadband provider, I really wasn't looking forward to walking customers thru troubleshooting after their machines were hosed... this delay shoudl buy me enough time to find a new job.

    1. Re:Thank God by modernbob · · Score: 2, Interesting

      I own and opererate a wireless broadband service in western nebraska. The whole spyware malware thing has made windows almost unusable for the computer newbie. I encounter people everyday that get on the internet with their new shiney Compaq from wal-mart only to find out a week later that their browser has been hijacked and there computer is so slow (slower than it already was) that it is unusable. IMHO windows needs a pretty complete redo!

  5. Good by darth_MALL · · Score: 5, Insightful

    Nice to see a much-hyped rollout delayed as a quality control measure. From Microsoft no less. Step in the right direction PR-wise if you ask me.

    1. Re:Good by shotfeel · · Score: 2, Insightful

      Just for perspectice, PR-wise aren't all delays pretty much billed as a "quality control measure"? You'll never hear any company say the delay is because they can't figure out how to fix a bug.

      MS Says : We're delaying release to make sure the software is up to our quality control levels.

      I Hear : We still have several killer bugs we haven't figured out yet so tell everyone the delay is because we care about the users, not because we're incompetent.

      Either way you read it, its always about quality (and spin) control.

  6. Credit by ParticleMan911 · · Score: 4, Funny

    Come on, you've got to give Microsoft some credit. They used most of their resources to get Windows ME up and running flawlessly a few years back. They're only now shifting their man-power from the ME development squadron to the XP one.

    --

    --
    Are you a Chipotle Fan?
    1. Re:Credit by ParticleMan911 · · Score: 2, Funny

      I kid you not. Windows ME is not something to joke about. In fact, it is managing the entire Athens power grid!

      --

      --
      Are you a Chipotle Fan?
  7. What are they doing? by Aadain2001 · · Score: 2, Funny

    Rewriting the entire OS? That might explain why there is such a big gap between XP and when Longhorn is coming out LOL.

    --
    Space for rent, inquire within
    1. Re:What are they doing? by tc · · Score: 2, Insightful

      If you're referring to the /GS compiler switch, then it's pretty well defined: you trash the stack, your process dies. Ugly, but better than letting malware inject code via buffer overflow exploits.

      Yes, this isn't a substitute for fixing overflow bugs in first place, but the point is that in a large codebase inevitably there will be some that get missed - so having some additional defense-in-depth is a good idea.

  8. Re:New captain at the wheel? by LynchMan · · Score: 4, Funny

    Yeah, once it gets to only 2 out of 5 failing it will be ready for release...

  9. I know it's popular to slag Microsoft... by Sheetrock · · Score: 4, Insightful
    But here it won't make sense, because not only are they making the system more secure but they're working to ensure the security doesn't break compatibility.

    If a bunch of machines won't boot -- even if it's the fault of the developers of third-party software as we've seen with faulty drivers impacting Windows 98 -- people will be slow to adopt what is perhaps the most critical software patch the Internet has seen.

    --

    Try not. Do or do not, there is no try.
    -- Dr. Spock, stardate 2822-3.




    1. Re:I know it's popular to slag Microsoft... by fugas · · Score: 4, Informative

      Not that hard - people could use this superb little tool for a start...

  10. An improvement by Bull999999 · · Score: 4, Funny

    3 out of 5 machines failed to come back up

    I guess MS was right when they said that Win XP SP2 is more recure. You can't infect a computer that's down.

    --
    1f u c4n r34d th1s u r34lly n33d t0 g37 l41d
  11. Re:puts on the black glass by Anonymous Coward · · Score: 2, Informative
    http://slashdot.org/article.pl?sid=04/08/05/174222 4

    Also gets rid of the horrible tagline "It is where IT is", egads!

    - Seth

  12. Good For Them by USAPatriot · · Score: 4, Insightful
    Microsoft has decided not to rush a release just for the sake of releasing it.

    They want to get it right the first time. I congratulate them for doing the Right Thing and making sure they deliver a rock solid Service Pack for the millions of XP users out there.

    Before the slashdot editors and crowd crow over this delay, just remember the 503 errors and flakiness this site has experienced since "maintenance" was performed. Don't throw stones in glass houses, kids.

    --

    Slashdot Moderation: From positive to terrible in 2 "insightful" posts.

    1. Re:Good For Them by wolfemi1 · · Score: 4, Funny

      They want to get it right the first time

      First time? This is Service Pack 2. They missed "get it right the first time" by two revisions!

    2. Re:Good For Them by Zocalo · · Score: 2, Insightful
      Agreed, it's essential that they get this right before they release it because every WinXP using man and his dog with a iota of a clue about patching is going to be installing it. The other problem with SP2 is the people that are eagerly awaiting this patch are probably not responsible for the bulk of compromised PCs that are hammering my firewall with probes to ports 135 and 445.

      If Microsoft is now as serious about security as they claim then they should get this patch right *and* rescind their earlier edict against magazines carrying patches on their cover CDs. Combine that with an article that focuses more on the new features than the importance of security and you just might get the thing more widely deployed. More Windows users with fewer ports exposed to the Internet, even if it's only via ICF or whatever it's called now, has got to have an impact on the size of the BotNets out there, right?

      --
      UNIX? They're not even circumcised! Savages!
    3. Re:Good For Them by kdb003 · · Score: 2, Funny
      Don't throw stones in glass houses, kids.
      Don't worry, its safety glass. It will take more than rocks to bring such a great house down. :/
  13. With every missed step... by danielrm26 · · Score: 2, Interesting

    ...Linux and OS X pick up three. If they don't get their house in order soon, they are going to have more to worry about than browser marketshare.

    --
    dmiessler.com -- grep understanding knowledge
    1. Re:With every missed step... by poohsuntzu · · Score: 2, Insightful

      Wait, can you show me some statistics on why people who don't understand what the SP2 patch does anyways, would make this sudden and drastic switch to linux you are talking about?

      --
      "We're breaking out the ramen noodles. . . "
      "Really? Is it someone's birthday?"
    2. Re:With every missed step... by Khomar · · Score: 2, Informative

      This is exactly what they are doing. By taking the time to make sure that the patch is "in order", they are avoiding an even bigger backlash if they released a buggy patch.

      --

      I believe in de-evolution. God made the world perfect, man fell, and its been going downhill ever since!

    3. Re:With every missed step... by danielrm26 · · Score: 2, Interesting

      It's a promise unfulfilled - that's all. They tell us to keep waiting and keep waiting...meanwhile the competition is steadily improving and innovating. Longhorn in 2006? Will that get bumped to 2007?

      Come on, man - you have to see that this is a dangerous time for them.

      --
      dmiessler.com -- grep understanding knowledge
    4. Re:With every missed step... by poohsuntzu · · Score: 4, Insightful

      No, I really don't. So they keep pushing dates back. Who cares? Do you honestly think that the majority of Windows users hangs on the edge of their seat about new updates like a typical geek?

      No. They don't. And chances are, most could care less about Longhorn, and even more don't mind that it is pushed back because computing isn't a large part of their life. So it won't matter how fast linux improves, nor how far back Windows get's pushed. -Right now- Windows works perfectly for a good number of people, and it does what they need. There is no incentive for the flood of Windows users to care whether its in 2004 or 2006, because in their mind they know one thing: "We will get it when it is released".

      And no, I don't see this as a dangerous time for them.

      --
      "We're breaking out the ramen noodles. . . "
      "Really? Is it someone's birthday?"
    5. Re:With every missed step... by Coryoth · · Score: 3, Interesting

      Certainly these minor push backs on SP2 are largely irrelevant, but Longhorn delays are an issue. Microsoft is worried about Longhorn delays - I beleive they have started dropping proposed features to get it out the door earlier. Sure, no one is going to wipe windows and install Linux instead of waiting for Longhorn, but if Longhorn is too long coming and the Linux desktop starts looking attractive enough you might get a few more OEMs loading it on (HP now has Linux laptops for instance). Should that actually happen you'll get people "converting" to linux simply by upgrding their computer, and to be frank, if all they do is browse the web, write email, and use Word for trivial things occasionally, they aren't really going to notice a whole lot of difference. Should anything other than Windows get much of a real foothold Microsoft will have cause to worry. It's all about "mindshare" not market share. Once other options are widely seen to be both available and viable some serious rebalancing of market share could occur quickly. Sure, Microsoft will still be dominant in such a shakeup, but we might be looking more at 70% to 30% split between Microsoft and everything else. Once that happens they really will have to compete and compete hard.

      There are things to worry about for Microsoft. For now things are under control, but it only requires some small slips for things to get away from them.

      Jedidiah.

  14. Re:puts on the black glass by aftk2 · · Score: 2, Informative

    http://hireadesigner.slashdot.org/article.pl?sid=0 4/08/05/1742224&tid=201&tid=109

    Grab the bookmarklet, and with one click you never have to ask for the link again:

    http://www.electricstate.com/slashdot.php

    (sorry for the shameless whoring.)

    --
    concrete5: a cms made for marketing, but strong enough for geeks.
  15. NOO!!!! BLASPHEMY! WINDOZE SUX. by Anonymous Coward · · Score: 3, Funny

    I refuse to believe this. You must be spouting FUD, you astroturfer!

    How dare you imply that something is not M$ Windoze fault, heretic? Everyone knows that Winbloze boxen are terrible and crash, and GNU/Linux boxen own.

    Get out of here, M$ shill!

  16. so NOT a solution by cephyn · · Score: 4, Insightful

    most people will run anything they're asked to.

    --
    Moo.
  17. How configurable is the SP? by Greg+Larkin · · Score: 5, Insightful

    I read in the paper this morning that SP2 will be doing things like turning on the WinXP firewall by default and gawd knows what else. Does anyone know if we'll be able to easily see all of its proposed "helpful" actions and disable the ones we don't want? For instance, I already have a hardware firewall, so I don't need the software firewall to be enabled.

    --

    SourceHosting.net, LLC
    Ready. Set. Code.
    http://www.sourcehosting.net/
    1. Re:How configurable is the SP? by GoofyBoy · · Score: 2, Informative

      http://support.microsoft.com/default.aspx?kbid=283 673

      --
      The surprise isn't how often we make bad choices; the surprise is how seldom they defeat us.
    2. Re:How configurable is the SP? by Wingit · · Score: 3, Insightful

      Greg, you may want to reconsider your opinion on this, depending on the network environment in which you live. I work as a network administrator at a public library and have been very anxious to run a software firewall on all workstations. We are a pure Windows 2000 network and have moved our XP migration up just to gain the software firewall. Granted, I have separated most public access computers from staff resources via VLANS, but the public still needs access to some critical systems. Our staff is constantly being educated and reminded of safe computing practices, but they are also a bit dangerous. No one in our environment needs to be connecting to workstations except for an assistant and myself and I welcome the added protection. All I would need is a worm to get inside the network from a stray floppy disk or CD and it could spread on its own. It may not be necessary for your environment, but I recommend both a hardware firewall at all places the LAN connects to outside resources AND at each computer within the LAN for most any network installation.

      --
      We win together or suffer without.
    3. Re:How configurable is the SP? by RedBear · · Score: 2, Interesting

      For instance, I already have a hardware firewall, so I don't need the software firewall to be enabled.

      Does your hardware firewall protect you from other computers on your local network, or just from the Internet connection? It's getting to the point that all computers should really have software firewalls installed to augment the hardware firewalls. A lot of companies and universities have been noticing recently that their hardware firewalls don't cut it. Just like in the real world, much of the damage can come from an "inside job". It only takes one infected computer inside the firewall to endanger all the others. Unless of course each individual computer has its own firewall.

      Besides which, how do you know your hardware firewall is perfect? It can't be. It's hardware separate from your computer, but it's still run by software (firmware), and as we all know any program longer than 3 lines has bugs (who said that?). I think you're making a big mistake by comparing a hardware firewall outside the computer with an internal software firewall. Today, it's a good idea to have both. Security works best in multiple layers, and two is better than one. A single point of failure is always bad. Think it over.

      Why on Earth would you want to turn it off anyway? Do you think it will increase performance or something?

  18. Re:New captain at the wheel? by TykeClone · · Score: 3, Interesting
    They're finding out just how screwy the security system within Windows really is.

    SP2 is supposed to be a big "security fix." Assuming that it really is, it sounds as if it's breaking lots of stuff that was previously able to work around existing security to function.

    --
    A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
  19. Nope by Anonymous Coward · · Score: 4, Informative

    My Install of SP2 RC1 caused explorer.exe to crash on start up. I also took about 10mins for XP to boot and login. There is no spyware/trojans on my computer.

  20. Users will see it as Microsoft's problem anyway by MooseByte · · Score: 4, Insightful

    "So the problem, then, with Windows XP SP2 RC2 is that it doesn't work when the operating system has been corrupted beyond repair by spyware that hooks into various DLLs and services in an attempt to prevent itself from being uninstalled."

    So if, say, 1/3 of all WinXP boxes out there are currently infected with spyware (probably a conservative guess), then 1/3 of all users applying XP SP2 would crash?

    I'd say that makes it Microsoft's problem. Users aren't going to care, all they will see is that before XP SP2 their system worked, and after it didn't.

    1. Re:Users will see it as Microsoft's problem anyway by TykeClone · · Score: 2, Insightful

      It also makes for a nice opportunity to clean that stuff up (for those of us who charge to do so :)

      --
      A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
    2. Re:Users will see it as Microsoft's problem anyway by 0racle · · Score: 3, Insightful

      So now MS has to make its OS work with spyware? If I let someone I don't trust work on my car, and they screw it up to the point that when I start it next time it blows up, is that GM's fault? Its my fault for letting that idiot work on it. If spyware causes the system to crash, its the users fault for not taking proper precautions. Users can whine and moan about it all they want, it doesn't change anything.

      --
      "I use a Mac because I'm just better than you are."
    3. Re:Users will see it as Microsoft's problem anyway by MooseByte · · Score: 2, Insightful

      "So now MS has to make its OS work with spyware?"

      Yes.

      Sucks to be them, but they got themselves into this position in the first place.

    4. Re:Users will see it as Microsoft's problem anyway by Tim+C · · Score: 3, Insightful

      How so?

      A lot of spyware either masquerades as legitimate software, or piggy backs on legitmate software installers. Sure, some gets in through ActiveX exploits and what have you, but by no means all.

      As for the "run as admin by default", that is changing, but will *not* prevent this sort of problem. Even if MS prevented interactive login by members of the Adminstrators group, you have to have a way of installing programs and performing system maintenance. That means an account that's capable of modifying system files.

      So all the malware has to do is get to the machine as above (piggy backing or pretending to be legitimate), and prompt the user to enter their admin password.

      Malware is not MS's fault. They've not made it as difficult for malware authors as they could have, but it's impossible to make it impossible, if the user has admin rights, and that includes *every* home user. The same applies to Linux, of course - as it grows in popularity, the malware authors will come. It'll take a little more social engineering, and an extra "enter your root password" step, but it cannot be stopped.

    5. Re:Users will see it as Microsoft's problem anyway by skyhawker · · Score: 2, Insightful

      Your attitude is well justified, but I think the folks at Microsoft would not agree with you. It would be a PR nightmare for them even though, technically speaking, they're not at fault. My guess is that they're trying to figure out ways to deal with this whole mess gracefully.

      --

      The best diplomat I know is a fully activated phaser bank.
      -- Scotty.
    6. Re:Users will see it as Microsoft's problem anyway by sys$manager · · Score: 3, Funny

      Linux is 100% vulnerable to root users installing trojans.

      Must be Linux's fault that users install trojans.

    7. Re:Users will see it as Microsoft's problem anyway by MooseByte · · Score: 3, Interesting

      "So you would strip home users of admin rights? How would they apply patches then?"

      Same way we do it around here (6 machines in our house). First, they don't have admin privileges. On the OS X boxen, if they download something that requires admin privileges to install, it pops up the "Admin Password Required" dialog. Then they either get me or cancel and ask later. On the Winboxen I install everything personally.

      Simple. Never had a problem. Even our 5-year-old groks it.

      For the solo clueless home Win user, XP could add a little warning in addition to requiring the separate Admin password. Couple that with MS spending some of that $40-60 billion on user education. It's Redmond's ass in a sling after all.

    8. Re:Users will see it as Microsoft's problem anyway by Elwood+P+Dowd · · Score: 2, Informative

      So now MS has to make its OS work with spyware?

      Yes, whether or not it's their fault. The spyware is out there. If parts of the service pack rely on parts of the operating system that could not be secured from 'winserv', then the service pack needs to reaffirm that those DLLs & registry settings are intact.

      It's a challenge, but unfortunately it's a challenge that they have to cope with.

      --

      There are no trails. There are no trees out here.
    9. Re:Users will see it as Microsoft's problem anyway by Spellbinder · · Score: 2, Interesting

      and microsoft can whine and moan about it all they want, it doesn't change that the users will have defect computers and more important lost data
      and will blame microsoft for it
      they are not liable for it but they will be blamed anyway
      btw .. it would be the idiots fault to work on your car without knowing what to do, so your idiot would be to blame
      in case of spyware you trust the idiot because he is lying to you or you don't even know he works on your car

      --


      stop supporting microsoft with pirating their software!!!!!
    10. Re:Users will see it as Microsoft's problem anyway by Elwood+P+Dowd · · Score: 2, Informative

      OS X's solution to this problem has worked quite nicely. I've had several clueless users ask me "It's telling me it wants my password to run this. Is that a good idea?" when dealing with software that was kindof questionable.

      They are local admins. And due to the user interaction style, they think twice about what they're doing. Works great.

      --

      There are no trails. There are no trees out here.
    11. Re:Users will see it as Microsoft's problem anyway by Afrosheen · · Score: 2, Funny

      Sweet Jesus, I can almost hear my phone ringing off the hook already.

      I really can't wait for SP2 if it's going to break the vast majority of XP installs. I do onsite support for homes and businesses and removing spyware is my bread and butter. This will be even better, and I can probably charge out the ass for it.

      Show me the service pack, Microsoft, and show me the money.

  21. Perhaps they were busy by teamhasnoi · · Score: 3, Funny

    stealing the code from the iPhoto 4.0.2 update.

  22. Good thing... by OS24Ever · · Score: 4, Insightful

    ..I mean anyone else remember service pack 2 for Windows NT 4.0? Talk about run for the hills day when that came out.

    I'd prefer they get their stuff together instead of rushing to market. Though personally the service pack thing to me is more of a PITA than patching the various subsystems and then creating a 'roll up' service pack vs. the service pack being the 'holy grail' update all at once breaking/changing things willy nilly (at least that is how it seems some days)

    --

    As a rock-in-roll Physicist once said, No matter where you go, there you are.

  23. Windows Update by TykeClone · · Score: 4, Funny
    I was just at the windows update site to update fixes on a PC.

    On the welcome screen, it tells you what you can do to get Windows XP Service Pack 2.

    It doesn't say wait and pray.

    --
    A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
  24. SP2 Name Convention by mrpuffypants · · Score: 5, Funny

    "In other news Microsoft has announced that WinXP SP2 has been internally renamed "Longhorn" to more closely coincide with their projected release schedules."

  25. Dupe!! by wolfemi1 · · Score: 5, Funny

    HA! This is a duplicate!

    Oh, wait, it was delayed again?!

  26. Windows problems by IGnatius+T+Foobar · · Score: 5, Interesting

    Every 'softie I've heard from who has seen the Windows code base has said the same thing: it is a labyrinthine collection of objects and subsystems that nobody really understands at a high level. It's actually a miracle that the whole thing builds in the first place. So when they change a few things for a service pack, a dozen other things break.

    Microsoft deserves these problems. Their software is too tightly integrated. The benefit of having highly modular software is that problems tend to not spread beyond a single module or subsystem.

    --
    Tired of FB/Google censorship? Visit UNCENSORED!
    1. Re:Windows problems by js3 · · Score: 2, Insightful

      obviously these softies work in little teams mostly independent from each other. The few softies I know who directly work on the OS (and many softies don't) usually work in specialized area.. like the driver subsystem and what not. It is entirely reasonable that a guy who does drivers wouldn't have much of an insight on how other parts of the system work

      --
      did you forget to take your meds?
    2. Re:Windows problems by IamTheRealMike · · Score: 2, Insightful
      No, they don't, in fact their own development teams have a habit of writing utility libraries and wrapper DLLs to abstract themselves from the lower levels of Windows. Unfortunately those DLLs themselves tend to morph into semi-public API: the SHLWAPI DLL is one example of this. The "Shell Lightweight API" was written by the IE team when they had to run on lots of different versions of Windows, and is sorta half documented these days. Layer MFC + ATL + SHLWAPI on top of all the other random DLLs Windows has, and you get something barely comprehensible.

      Don't even get me started on DCOM, which is involved in services as basic as the clipboard (that's why WinXP reboots if the RPCSS service dies). MSDN can't even describe some of the DCOM interfaces without making mistakes - they actually miss out methods and stuff. Only God (or Don Box) fully understands how it works, but it does ...

  27. Goose Sauce by 4of12 · · Score: 4, Interesting

    Trying to be fair-minded about updates and what we'll call minor rev level releases to the OS (remember all the waiting for Godot that occurred for Linux 2.4.0 and 2.6.0), I think it is a good thing if MS doesn't release SP2 until it feels comfortable that it's ready and secure.

    The key difference, of course, is that knowledgeable and concerned XP sysadmins might want to expedite patches to their systems faster than MS would like and be willing to suffer other problems and risks that MS doesn't feel would be good for the general sysadmin population to experience.

    Now, if the Windows source tree and nightly builds were available, then those admins would be free to update at their own risk, an option they don't have because the OS source must remain under proprietary lock and key.

    --
    "Provided by the management for your protection."
  28. If there is one software company... by Nuttles · · Score: 5, Interesting

    Out of all the software compainies in the world, Microsoft is the company that has the resources to build and maintain software right. They definitely have the talent. I think the issue here is big corporation politics. Microsoft should put more of an investment into their public image (at least try to get an image comparable to lets say Google). Sure, it may not give them as big as returns pumping more people into the XP camp (service pak 2) and less into lets say Long horn, but get step one right before going to step two. The trust they will gain by the public would earn them money in the future...probably more than their current practices.

    Nuttles

    Christian and proud of it

    1. Re:If there is one software company... by phillymjs · · Score: 2, Insightful

      Microsoft should put more of an investment into their public image

      Bah! Talk about throwing money down the crapper!

      There is absolutely nothing that Microsoft could do or say to make me like/respect them as a company, and I'm far from alone in that sentiment. They have pumped out shitty software for too long and made too many false claims about the quality of said software. Hell, I've made a career out of cleaning up the mess when their shoddy products shit the bed, and my boss has built a multimillion dollar business around it. Their behavior during the antitrust trial was reprehensible, and when it was over and they got their little wrist-slap, they were completely unrepentant and for the most part went right back to doing all the same shit that landed them in court in the first place.

      Microsoft has earned its horrid reputation, and at this point no PR firm in the universe could improve it (though I'm sure some would love for Microsoft to give them a few dump trucks full of money to try). In light of that, Microsoft might as well put that money to better use and pay a few more people to try to fix Windows XP.

      ~Philly

  29. Re:puts on the black glass by Anonymous+Writer · · Score: 4, Informative

    Seems like you just have to remove the "it." prefix in the URL then it comes out okay, "http://it.slashdot.org/.." to "http://slashdot.org/.." for example.

  30. I work at Microsoft by Anonymous Coward · · Score: 5, Informative

    People are installing SP2 internally all over the place and I certainly haven't heard of "3 out of 5" computers dying. In fact I haven't heard anything bad at all.

    I have been running SP2 since RC1 with no problems myself.

    1. Re:I work at Microsoft by MooseByte · · Score: 5, Interesting

      "People are installing SP2 internally all over the place and I certainly haven't heard of "3 out of 5" computers dying. In fact I haven't heard anything bad at all."

      Then maybe you should email Ballmer and tell him the delay isn't needed, and he should just get some balls and release it.

      Or maybe, just maybe, the average user that's going to have to install this thing doesn't benefit from a huge Redmond IT staff, firewalls, NATs, etc.

      No offense, but if this is the typical thought in Redmond cubicals ("Works for me! Must be rock-solid!") then the last 15+ years of Microsoft treating their users as beta testers makes a lot more sense.

    2. Re:I work at Microsoft by YU+Nicks+NE+Way · · Score: 2, Interesting

      You don't understand what "support" we get for an install like this. We get an e-mail from JimA or BrianV with a pointer and a request to install both at work and at home. That's all. The only case when anything special happens is if an install blows up -- and the special thing there is a couple of requests: "Please send us your configuration and recent activity. And can we run this software inventory tool on the box, please?"

      Meanwhile, the company runs huge install fests around Redmond, recruiting as many non-employees as we can, trying to ferret out all the errors we can.

      The only case where I've had a problem is on the kids' gaming machine. One of them had installed something which came with a "present" attached without asking me first. He got to oversee the fun of flattening the machine down to the ground and rebuilding it.

    3. Re:I work at Microsoft by MooseByte · · Score: 2, Interesting

      "Ah, but my point was that the thirteen-year-old got raked over the coals...and then had to flatten and rebuild the box himself. ANd a lot of people have someone who will gladly rake them over the coals for installing spyware on their box."

      I think that's a great approach!

      Sadly though, I'm quite certain that's not the case in the average Joe User household because most of them simply don't know they've got malware running. :-/

      Every now and then when I visit friends and relatives, I become painfully aware of how even my kids take for granted computer system knowledge that is a complete mystery to others.

      I'm afraid households like yours and mine (and every other Slashdot reader) are rare outposts in the malware-infested forests of the 'Net.

  31. Re:New captain at the wheel? by Marxist+Hacker+42 · · Score: 4, Interesting

    Too right- my government agency that I'm contracting with is kind of late living up to this menace- I'm preparing a report for Monday on just how many "approved" software packages will be affected if we install internally. I'm only up to T in the 1400 software pagages that are approved for installation on these government computers- and already have 6.5 pages of Times New Roman 14point single-software-to-a-line list of potentially impacted software. The big sticking point is Microsoft SQL Server itself- the automatic personal firewall settings in SP2 limit SQL Server connections to named pipes, which are relatively new for a shop that has been on SQL Server since version 5....

    --
    SJW: a person who perceives an injustice, and while correcting it, commits a greater injustice.
  32. Re:New captain at the wheel? by dave420 · · Score: 4, Interesting

    So somehow someone guessing that Microsoft has absolutely no QA is judged "insightful"?? I hate to break it to you, but I'm sure there's just as much testing at Microsoft than in your local linux user group. You only make yourself look a little silly when you pull "facts" like that out your ass.

  33. I am no MS apologist, but... by chuckw · · Score: 4, Insightful

    No one has ever been able to accuse me of being a Microsoft apologist. I've thrown my fair share of vitriol their way, but I always said what I felt was justified based on their actions.

    In this case, I have to congratulate Microsoft. Yeah, I said it... They deserve a pat on the back for finally realizing, at least in this one instance, that it doesn't pay to release crap software. I doubt this is the beginning of a trend or anything, but for this they deserve a pat on the back.

    --
    *Condense fact from the vapor of nuance*
  34. What's the big rush? by Anonymous Coward · · Score: 3, Insightful

    Ok, so it's been delayed again... So what? I mean, what's the big rush? Security updates are still coming through windowsupdate whenever they're required. Isn't it better that Microsoft take their time with the service pack and make it solid, rather than they releasing it unfinished?

  35. Come on now by kevinmf · · Score: 5, Insightful

    Come on now - you have to give microsoft some credit. This update is a major overhaul to the OS. Look at kernel updates for linux. You have to be careful as hell, making sure all of your drivers are still compatible, libs all still work, etc etc. SP2 is along the lines of a linux kernel upgrade.

    You really have to give MS some credit because all of their drivers will be working with SP2, as well as most software. Sure, linux upgrades might come out more often, but you have to admit - actually applying them is a lot more intensive than simply clicking 'next, next, next, yes i will reboot now.'

    Anyway, I think people are WAY to hard on MS. For going almost 15 years now and barely breaking backwards compatibility, they seriously deserve more credit than the slashdot crowd gives them. Good luck to em with this new upgrade.

    1. Re:Come on now by Minna+Kirai · · Score: 2, Insightful

      This update is a major overhaul to the OS.

      That's part of the problem. To plug a few exploits and switch to safer default settings should only need a small patch, not a 200 megabyte "overhaul".

      SP2 will change lots of things, more than most users care about. If Microsoft wants to rewrite half of XP out of a sense of perfectionism, fine. But security upgrades should be considered time-critical, and shouldn't wait on "nice to haves".

    2. Re:Come on now by shotfeel · · Score: 2, Insightful

      Is it really a major overhaul?

      Seriously. All the descriptions I've read say it rolls up all the previous security updates and changes some default settings. There may also be some other changes that are hinted at.

      What's so major about it? Seems all the previous security updates should have been fully tested along the way and changing default settings to something any user may have done on their own shouldn't be a big problem IMO.

      I know any type of upgrade is a big job, but I'm still struggling with why MS is having such a difficult time with this. IMO they have the resources, they have the talent, so where's the problem and why does it seem to be so persistent?

    3. Re:Come on now by TheNetAvenger · · Score: 2, Insightful

      That's part of the problem. To plug a few exploits and switch to safer default settings should only need a small patch, not a 200 megabyte "overhaul".

      SP2 will change lots of things, more than most users care about. If Microsoft wants to rewrite half of XP out of a sense of perfectionism, fine. But security upgrades should be considered time-critical, and shouldn't wait on "nice to haves".


      The OS hasn't been totally rewritten; however a lot of the code base has been recompiled with the newer compilers offering more speed and managed code.

      Remember that WindowsXP is over 3 freaking years old, since then Windows 2003 has been released (which is common code base) and offers many security and performance optimizations just due to the security model and newer compilers. Hence the reason people were finding that running Windows 2003 server as a workstation was faster than the RTM of XP.

      Please understand the difference between rewriting code and recompiling existing code with a new compiler that checks for security and adds performance.

      Microsoft could be like Apple, adding .xx revision number to the OS and charging their users $100 bucks just to get the security and bug fixes that were in the previous version of OSX.

      Microsoft is providing this update FREE, and is holding the faith of the users by making it a solid release. (Despite the spyware tested machines in the previous report "3 out of 5 didn't reboot")

    4. Re:Come on now by rmdir+-r+* · · Score: 2, Insightful
      For going almost 15 years now and barely breaking backwards compatibility, they seriously deserve more credit than the slashdot crowd gives them.

      Personally, I would have preferred that they sat down and did a _complete_ redesign of the OS, and said: screw backwards compatibility, lets do this right.
  36. Re:New captain at the wheel? by Cariboo · · Score: 3, Informative

    I tried to install SP2 on a clean install this past weekend and it completely hosed my XP installation

  37. SP2 Automatic Updates service by thedillybar · · Score: 4, Informative
    I installed SP2 RC2 some time ago.

    It's interesting to note that the 'Automatic Updates' service must be set to 'Automatic' and be running in order for Windows Update to work through IE. Even if you choose not to use Automatic Updates (as I have), you *must* have the service running all the time for Windows Update to work (or change it to Automatic each time before going to Windows Update in IE). Rather annoying.

  38. I know. by bmajik · · Score: 4, Insightful

    I've run a few RC builds of XP SP2 on 2 different machines.

    Configuring the firewall is _easy_.

    I too have real firewalls. I leave the SP2 one turned on as well, because it hasn't gotten in the way of anything i do with the machines (yet). I did add a port or two to the allow list, and thats it.

    Remember, defense in depth. Having every XP machine tightened up out of the box as much or more as a default linux install is a good thing.

    But, you can turn the firewall features off _very_ easily.

    I really like the popup blocker and other IE changes in SP2 as well. I've stopped using proxomitron. I see inline ads where prox used to just put [Ad] but that doesn't bother since the super obnoxious stuff is gone. Also, the way IE handles ActiveX controls is _much_ nicer than it used to be - no being asked 23049 times per page to dismiss modal dialogs.

    finally, i wouldn't get too worked up over the headline that XP SP2 is delayed. I have some inside info on the delay.. and its (so far) not worth the sensational press its getting at sites with.. ABM slants :)

    People need to be honest. If MS said there's a problem and released it anyway, the ABM camp would grill them for releasing shitty unfinished product. By holding it for a while longer, MS gets grilled for delaying its release (with sideline comments about them being incompetant or SP2 being vapor or what have you). To the ABMer, MS can do nothing right.

    (ABM = "Anything But Microsoft" :)

    --
    My opinions are my own, and do not necessarily represent those of my employer.
  39. This just in: by Anonymous Coward · · Score: 5, Insightful

    "3 out of 5 machines failed to come back up"

    We've just recieved word that 3 out of 5 Windows systems use a commonly pirated CD-KEY.

    DeMe

    1. Re:This just in: by sinner0423 · · Score: 2, Informative

      "3 out of 5 machines failed to come back up"

      We've just recieved word that 3 out of 5 Windows systems use a commonly pirated CD-KEY.


      Funny you mention that.. Windows Update is now upgraded to "version 5" which prohibits updates from pirated keys. So, the only way to get SP2, would be to apply it manually. Even then, i'm not sure it would allow an install. I believe they rolled out that new update site to coincide with the release of the now delayed SP2.

  40. Re:But it's already stable! by caluml · · Score: 2, Interesting
    So, if your beloved XP is so perfect, why a service pack?

    That's a stupid comment. Every OS needs patching as bugs are discovered and fixed.
    Doh. Is this what a "troll" is?

  41. Re:New captain at the wheel? by Flower · · Score: 2, Informative
    the above gets "Insightful"? The bar is (apparently) low.

    Admit it. You're new here. There is no "apparently" about it.

    --
    I don't want knowledge. I want certainty. - Law, David Bowie
  42. Re:New captain at the wheel? by TykeClone · · Score: 2, Insightful

    And these kludges are the source of how many security problems?

    --
    A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
  43. roll other software packages into SP2 by insomnyuk · · Score: 5, Interesting

    Wouldn't it be fantastic if the SP2 updater would first run Ad-Aware or an equivalent and kill all the spywarer on the machine before installing the actual updates? After rebooting, users would be astonished by how quickly Windows would work.

    'Holy Crap Maude, my WeatherBug is gone but this thing shore is runnin quick!'

  44. Re:New captain at the wheel? by shotfeel · · Score: 2, Interesting

    LOL! Not meant negatively in any way, but just wondering how young you have to be to think MS has always tested using public beta's.

    IIRC prior to the Win 95 public beta, the term "public beta" didn't even exist for commercial software. Being old-fashioned, public beta's are still a bad idea for commercial software IMO.

    OTOH, prior to that time methods for delivering large software packages were rather limited (try that with your 9600 baud modem!).

  45. Re:New captain at the wheel? by Gr8Apes · · Score: 3, Insightful

    Actually, the problem was there was no existing security to speak of. Rather, it was disabled so a lot of programs assumed that certain actions were legal and depended upon those actions to succeed to run. Now that MS is attempting to force some security within the OS, a lot of those earlier assumptions are causing lots of problems, much like the DLL debacle that only took 13 years to even begin to be addressed.

    I wouldn't hold my breath waiting for XP2 to come out. (Yes, it will come out, eventually, but if it even does half of what it was supposed to do, expect much pain/patching of third party products.)

    --
    The cesspool just got a check and balance.
  46. XP SP2 SP2 by lolindrath · · Score: 2, Funny

    I'm waiting until SP2 for SP2 comes out.

  47. Multisession! by SharpFang · · Score: 3, Interesting

    Yeah, SP2 to XP is to include real multisessioning to Windows! Not just "switch user", one works, one waits, but true "two users at once"! Just like in original UNIX in on PDP-11!
    Well, almost. The catch word is "two".

    --
    45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
  48. Good security by Nahor · · Score: 5, Funny
    Yea, if 3 out of 5 machines failed to come back up, it needs some polishing.
    Yes, until 5 out of 5 machines fail to come back up, there will be security issues.
    The thing I don't understand is why it takes so long to prevent all machines from booting....
  49. Hm... That's NOT what I've been hearing... by Svartalf · · Score: 2, Informative

    MS'ers are saying it's robust for the OS itself, but that it's going to mess up a bunch of things because everyone and their dog was relying on the loopholes in past versions. And it's supposed to get worse with the next security upgrades I've heard. People may not have their machines die on them (word is that the virii, trojans, and spyware's causing the dying machines...) but you're going to have fun trying to use the apps you do have without a BUNCH of tinkering around with registry edits and all- and some apps may need a patch from the vendor for varying reasons because they're "fixing" a LOT of the OS with this service pack

    --
    I am not merely a "consumer" or a "taxpayer". I am a Citizen of the State of Texas
  50. Re:This may suck... by jazman_777 · · Score: 4, Funny
    I sure hope that SP2 gets released by Sept. 7. That's when the girls come back to school here. That's when they bring their spyware-infected, unpatched systems to school.

    Let's see, the girls come back to school, they need computing help, you are the man on the job, and you don't see the opportunity there? Must be a /. geek...

    --
    Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
  51. They just can't win. by WhatAmIDoingHere · · Score: 2, Insightful

    Rag on 'em for security problems.

    Rag on 'em for buggy beta service packs.

    Rag on 'em when they delat the buggy beta service pack for some final tweaking so that it doesn't suck.

    You act like MS is hurting people by not releasing their buggy service pack when they loosly claimed they maybe kinda would.

    I'd rather have it come out late and bug free. Or as close to bug-free as it's going to get.

    --
    Not a Twitter sockpuppet... but I wish I was.
  52. Re:Someone tell me... by barfy · · Score: 2, Insightful

    Um... Because they did...

    XP is built on the NT kernal, NOT the DOS kernal of ME and previous.

    There is alot of emulation code to support, um arguably buggy or unsupported methods going forward.

    The problem is really NOT in the operating system, but in default security functionality, overly "functional" common applications, (outlook and IE), an ignorant user base (Really, a FREE kournakova JPG? How did they know?), and an extraordinarily malicious mal-ware community.

    SP2 changes default security functionality, and reduces the "functionality" of common apps, even adds some new clever code to prevent buffer overflows if the hardware supports it, because you can't do too much about the user base and the bastards...

  53. Re:New captain at the wheel? by Jonathan+the+Nerd · · Score: 2, Insightful

    That's why I love VMWare's "undoable" mode. You can mess up your machine in all kinds of horrible ways, and all you have to do to get it working again is shutdown and don't apply the changes. Real Windows PCs should come with an option like that.

    --
    Disclaimer: The opinions expressed are not necessarily my own, as I've not yet had my medication today.
  54. Re:New captain at the wheel? by Jugalator · · Score: 3, Insightful

    They're finding out just how screwy the security system within Windows really is.

    SP2 is supposed to be a big "security fix." Assuming that it really is, it sounds as if it's breaking lots of stuff that was previously able to work around existing security to function.


    I doubt their screwed security is that hard to fix, but rather finding out how many programs depends on this former screwed security. Which are marked with this logo. I guess this is why the final stages of this service pack has been delayed so much. It doesn't seem like the actual core coding took much longer than estimated, but rather what they're finding out in the QA stages.

    --
    Beware: In C++, your friends can see your privates!
  55. Re:New captain at the wheel? by Dasein · · Score: 2, Insightful

    Actually, just to back you up a bit, I remember someone I know who works out there saying that they have almost a 1:1 Dev to QA ratio. The industry standard is somewhere between 2:1 and 3:1 Dev to QA. So they have a lot of QA.

    So, my theory is that they've made the OS so huge by integrating everything in that a little change in one place means that a good deal of the product needs to be retested.

    --
    You are not a beautiful or unique snowflake -- but you could be if you got off your ass.
  56. Re:New captain at the wheel? by kbielefe · · Score: 2, Funny

    Reminds me of an old joke. How many Microsoft engineers does it take to change a light bulb? None. They just redefine darkness as the industry standard.

    --
    This space intentionally left blank.