Microsoft To Provide IE Patches for Windows XP Only

← Back to Stories (view on slashdot.org)

Microsoft To Provide IE Patches for Windows XP Only

Posted by michael on Thursday September 23, 2004 @02:24AM from the lucy-pulls-football-away-again-from-windows-users dept.

Fortunato_NC writes "Microsoft has decided that future IE updates, including those related to security, will only be available to customers using Windows XP. This news.com article has the complete scoop. A choice quote: 'Microsoft may be turning the lemons of its browser's security reputation into the lemonade of a powerful upgrade selling point.' This should provide a huge boost to Mozilla and other alternative browser backers."

20 of 610 comments (clear)

Min score:

Reason:

Sort:

Not security updates but security enhancements by FuzzzyLogik · 2004-09-23 02:27 · Score: 5, Informative

They aren't saying they won't provide security patches for holes, they're stating they won't provide the features that are in SP2 in anything other than XP. That's what I got out of it. Which isn't such a big deal, did you expect anything less really?

"We do not have plans to deliver Windows XP SP2 enhancements for Windows 2000 or other older versions of Windows," the company said in a statement.

--
Kyle
http://www.unlogikal.net/
No, that's not what they said. by stratjakt · 2004-09-23 02:29 · Score: 5, Informative

First fucking line of the article.

Microsoft this week reiterated that it would keep the new version of Microsoft's IE Web browser available only as part of the recently released Windows XP operating system, Service Pack 2.

Only the new version of the browser is available under XP Service Pack 2, for architectural reasons the other OS's lack (NoExecute and whatever else).

It says nowhere they won't provide patches for the most current IE's available under 2000.

The new IE only runs under XP SP 2. You also need to upgrade if you want true HT support, BTW.

--
I don't need no instructions to know how to rock!!!!
Re:XP only ? by Anonymous Coward · 2004-09-23 02:29 · Score: 4, Informative

"We do not have plans to deliver Windows XP SP2 enhancements for Windows 2000 or other older versions of Windows," the company said in a statement. "The most secure version of Windows today is Windows XP with SP2. We recommend that customers upgrade to XP and SP2 as quickly as possible."

Seems pretty clear to me.. Unfortunate .. commonplace for larger companies to be using Windows 2000 ..

In other news Microsoft decides to stop patching Windows 2003 and recommends that everyone upgrade to Linux..
Re:just like them by miracle69 · 2004-09-23 02:31 · Score: 4, Informative

I haven't been to a website in years that I couldn't see in Mozilla.

Care to provide any examples?

--
Linux - Because Mommy taught me to Share.
Still patches for previous versions... by ImpTech · 2004-09-23 02:31 · Score: 4, Informative

According to the article, there will still be security updates for all supported versions of IE and Windows. What they're saying is that Win2k and older will not get the pop-up blocker or any other such enhancements.

Still sucks for the Win2k users though... Its clearly nothing more than a ploy to make them upgrade.
Re:XP only ? by guacamole · 2004-09-23 02:34 · Score: 4, Informative

IE/Solaris (and HPUX) has been dead for many, many years. OS X version of IE has been EOLed shortly after apple introduced Safari.
Read the EULA by overshoot · 2004-09-23 02:38 · Score: 4, Informative

When you license (not "buy") an MS product, you waive any claim on them for anything. Put another way: whatever problems you have are none of their worry.

--
Lacking <sarcasm> tags, /. substitutes moderation as "Troll."
1. Re:Read the EULA by CountBrass · 2004-09-23 02:54 · Score: 4, Informative
  
  Fortunately, at least in the UK, anything a company sells has to be of "merchantable quality" and "fit for purpose" and that's not something the company weasle their way around in anyway at all. Doesn't matter if they put up signs in the shop saying "sold as seen" or make you agree to an EULA: those consumer rights still hold regardless.
  In addition, it's a basic part of contract law that any clause that effectively takes away precisely the benefit you were contracting to receive is automatically void.
  
  --
  Bad analogies are like waxing a monkey with a rainbow.
Re:XP only ? by timeOday · 2004-09-23 02:39 · Score: 4, Informative

I have to side with the article summary on this one:
Microsoft promised "ongoing security updates" for all supported versions of Windows and IE.
The ongoing security updates do not, as Microsoft points out, include the latest security fixes with Service Pack 2, released last month. Those include a new pop-up blocker and a new system of handling ActiveX controls and downloaded content.
And it's those more substantial changes, rather than the bug fixes that come with routine upgrades for supported products, that security organizations have lauded for addressing IE's graver security concerns.
There you have it: there is no option for securing MSIE on Win2K.
Re:Classic M$ by Anonymous Coward · 2004-09-23 02:41 · Score: 5, Informative

No, their view, believe it or not, is that people don't want the security patches for older systems! At least, that's what Bruce Morgan, of the Internet Explorer team, posted on the IEBlog.
Sites not usuable by non-IE browsers by spineboy · 2004-09-23 02:45 · Score: 4, Informative

I work in the medical field, and plenty of sites for reading X-rays, checking patient labs seem to be only usuable by IE(active-X issues, etc). It's the only reason I keep Windows on my Linux boxes.

--
..........FULL STOP.
TROLL ALERT! by Anonymous Coward · 2004-09-23 02:46 · Score: 5, Informative

The story, if you read it, states the XP SP2 improvements to IE will only be available to XP SP2 customers. THESE imporovements will only be able to XP SP2.

The article DOES NOT state no more IE patches for 2000/NT 4.0

Very very misleading title to this story on ./
1. Re:TROLL ALERT! by Muerte2 · 2004-09-23 04:05 · Score: 5, Informative
  
  I'm not sure I totally agree with what you say. You see I'm one of the rare Slashdotters that actually READ the article.
  
  By refusing to offer IE's security upgrades to users of older operating systems except through paid upgrades to XP, Microsoft may be turning the lemons of its browser's security reputation into the lemonade of a powerful upgrade selling point.
  
  While I'm not sure it's 100% as cut and dried as what the /. title suggests, it does say that some security releases may not make it back down to the old OSes.
Re:XP only ? by HydrusZ · 2004-09-23 02:52 · Score: 4, Informative

"Microsoft promised "ongoing security updates" for all supported versions of Windows and IE."

It means you will still get all of the patches, but you will never get the popup blocker and other features specific to IE6 SP2. Not a big deal.
Re:Classic M$ by Zorilla · 2004-09-23 03:17 · Score: 5, Informative

I bet you're right too. I'm sure there are many large corps who won't move from W2K to XP.

Microsoft will definitely give it a second though when they realize organizations like this one are using Windows 2000 on user machines. It took them until 2002 to get fully upgraded from NT 4.0 where I was.

--

It would be cool if it didn't suck.
Re:Classic M$ by poincaraux · 2004-09-23 03:38 · Score: 4, Informative

Don't be silly. You make it sound like his view, and the view of the IE team, is that a large number of people don't want security patches for old systems. What he said is this:

Here's another eWeek article on the same subject. You'll note that some people interviewed want an update for Win2K while some people do not.

And the article he's talking about has one person saying

he would much rather see Microsoft spend resources supporting current and future product releases rather than older ones.

So, fine, you may disagree with that, but it's not quite the fantastical position that you imply.
Re:XP only ? by jekewa · 2004-09-23 03:40 · Score: 5, Informative

If you check the Product Lifecycle Dates they've already passed the end-of-life dates for many of the older versions of Windows.
Win3x, Win9x, and WinME are all long passed. WinNT Server remains until 31 Dec 2004, but other WinNTs are passed. Win2K is scheduled for demise on 30 June 2005 (start saving). Even WinXP is scheduled for desupport 31 Dec 2006. Win Server 2003 is scheduled for 30 Jun 2008, so you've got a while there, but it's on the plan.
It should not come as a surprise that they stop providing feature enhancements to the older versions. Profit and other greed aside, technically it's unrealistic to expect them continue to support systems indefinately.
Tick, tick, tick...

--
End the FUD
Re:Classic M$ by pbranes · 2004-09-23 05:12 · Score: 4, Informative

http://support.microsoft.com/default.aspx?scid=fh; [ln];LifeWin
Microsoft is already committed to supported Windows 2000 until **** 2010 ****.
All this article says is that Windows 2000 will not get a pop-up blocker and an add-on manager.
Re:Classic M$ by pbranes · 2004-09-23 05:20 · Score: 5, Informative

http://support.microsoft.com/default.aspx?scid=fh; [ln];LifeWin
Read it straight from Microsoft. Windows 2000 is supported until 2010. This article from cnet only states that Windows 2000 will not receive a pop-up blocker or an add-on manager. Hotfixes will still be released as needed.
Re:Classic M$ by Progoth · 2004-09-23 11:37 · Score: 4, Informative

Microsoft is already committed to supported Windows 2000 until **** 2010 ****.

All this article says is that Windows 2000 will not get a pop-up blocker and an add-on manager.

Mod this fellow up, if you bother to read the article you will see the post is correct. It specifically says security updates will be released, just not the sp2 "security enhancements." Didn't sp2 get some kind of protections against buffer overruns at a low level? that's what won't be backported.