Slashdot Mirror


Microsoft To Provide IE Patches for Windows XP Only

Fortunato_NC writes "Microsoft has decided that future IE updates, including those related to security, will only be available to customers using Windows XP. This news.com article has the complete scoop. A choice quote: 'Microsoft may be turning the lemons of its browser's security reputation into the lemonade of a powerful upgrade selling point.' This should provide a huge boost to Mozilla and other alternative browser backers."

145 of 610 comments (clear)

  1. Classic M$ by scifience · · Score: 5, Insightful

    Then they'll come back in a couple of days/weeks and say that "our business customers are unhappy with this decision" and decide to extend the patches through the end of 2006.

    1. Re:Classic M$ by networkBoy · · Score: 5, Interesting

      We've been rollong our own patches for 3 years now. And while we're deploying XP Pro on all new notebooks we have a ton of older test equipment where the vendor has us locked into older revs of the WinOS (everything but ME, XP home, and PreNT4). It's a huge PITA when M$ tries a stunt like this and we are left holding the bag after our vendors (all smaller than us) give up and say they can't do anything about it. We employ roughly 60K people worldwide and have double that many PCs (at least). I'm sure other mega corps like us will be able to pressure M$ into supporting at least 2K for quite some time to come. With that said, half our data center and most all of our engineering data services are running on some form of *nix. -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    2. Re:Classic M$ by Anonymous Coward · · Score: 5, Informative

      No, their view, believe it or not, is that people don't want the security patches for older systems! At least, that's what Bruce Morgan, of the Internet Explorer team, posted on the IEBlog.

    3. Re:Classic M$ by deantallica · · Score: 5, Funny

      What are you all complaining about? The 640 previous patches ought to be enough for anyone.

    4. Re:Classic M$ by Anonymous Coward · · Score: 2, Funny


      There are lots of them with unusable desktop envionrments, though.

    5. Re:Classic M$ by Zorilla · · Score: 5, Informative

      I bet you're right too. I'm sure there are many large corps who won't move from W2K to XP.

      Microsoft will definitely give it a second though when they realize organizations like this one are using Windows 2000 on user machines. It took them until 2002 to get fully upgraded from NT 4.0 where I was.

      --

      It would be cool if it didn't suck.
    6. Re:Classic M$ by 14erCleaner · · Score: 5, Funny

      Nobody will ever need more than 640 patches.

      --
      Have you read my blog lately?
    7. Re:Classic M$ by poincaraux · · Score: 4, Informative
      Don't be silly. You make it sound like his view, and the view of the IE team, is that a large number of people don't want security patches for old systems. What he said is this:
      Here's another eWeek article on the same subject. You'll note that some people interviewed want an update for Win2K while some people do not.

      And the article he's talking about has one person saying
      he would much rather see Microsoft spend resources supporting current and future product releases rather than older ones.

      So, fine, you may disagree with that, but it's not quite the fantastical position that you imply.
    8. Re:Classic M$ by pbranes · · Score: 4, Informative
      http://support.microsoft.com/default.aspx?scid=fh; [ln];LifeWin

      Microsoft is already committed to supported Windows 2000 until **** 2010 ****.

      All this article says is that Windows 2000 will not get a pop-up blocker and an add-on manager.

    9. Re:Classic M$ by pbranes · · Score: 5, Informative
      http://support.microsoft.com/default.aspx?scid=fh; [ln];LifeWin

      Read it straight from Microsoft. Windows 2000 is supported until 2010. This article from cnet only states that Windows 2000 will not receive a pop-up blocker or an add-on manager. Hotfixes will still be released as needed.

    10. Re:Classic M$ by Old+Wolf · · Score: 2, Insightful

      So move your vendors to non-MS platforms, or stop whingeing.

    11. Re:Classic M$ by sagefire.org · · Score: 3, Insightful

      Well then, Classic M$ = Modern Apple policy

      Why has no one made a stink about Apple saying that Safari 2.0 will only work on MacOS 10.4 (Tiger).

      New IE only in WinXP, new Safari only in Tiger. It sounds the same to me.

      Maybe slashdot could add a Steve Jobs Borg to their list of possible icons?

    12. Re:Classic M$ by Progoth · · Score: 4, Informative

      Microsoft is already committed to supported Windows 2000 until **** 2010 ****.

      All this article says is that Windows 2000 will not get a pop-up blocker and an add-on manager.


      Mod this fellow up, if you bother to read the article you will see the post is correct. It specifically says security updates will be released, just not the sp2 "security enhancements." Didn't sp2 get some kind of protections against buffer overruns at a low level? that's what won't be backported.

  2. XP only ? by mirko · · Score: 5, Interesting

    What do they mean ?
    No update for Win2000 which is still used by my 50000-employees company ?
    Or do they mean they will not update IE/Solaris and IE/OS[9X] ???

    --
    Trolling using another account since 2005.
    1. Re:XP only ? by DogDude · · Score: 5, Insightful

      Well, my 6 employee company has standardized on W2K. We've been testing Firefox for the past month, and with the exception of a few IE specific apps, we'll be staying with Firefox now.

      --
      I don't respond to AC's.
    2. Re:XP only ? by Anonymous Coward · · Score: 4, Informative

      "We do not have plans to deliver Windows XP SP2 enhancements for Windows 2000 or other older versions of Windows," the company said in a statement. "The most secure version of Windows today is Windows XP with SP2. We recommend that customers upgrade to XP and SP2 as quickly as possible."

      Seems pretty clear to me.. Unfortunate .. commonplace for larger companies to be using Windows 2000 ..

      In other news Microsoft decides to stop patching Windows 2003 and recommends that everyone upgrade to Linux..

    3. Re:XP only ? by drinkypoo · · Score: 4, Insightful

      While they might stop patching everything but XP, the text you cite does not say that. Nor does it even imply it. They're only specifcally saying that SP2-related security enhancements will not be delivered to any other version of windows, until longhorn comes out sometime in 2014.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    4. Re:XP only ? by guacamole · · Score: 4, Informative

      IE/Solaris (and HPUX) has been dead for many, many years. OS X version of IE has been EOLed shortly after apple introduced Safari.

    5. Re:XP only ? by narsiman · · Score: 5, Funny

      What they mean is Windows 2000 is completely secure. It does not need anymore fixes. You should be happy that you selected W2K for all your 5000 employees.

    6. Re:XP only ? by overshoot · · Score: 5, Interesting
      What do they mean ?
      No update for Win2000 which is still used by my 50000-employees company ?

      Yup -- but you were supposed to upgrade to XP already, so what's the big deal? You have been paying for Software Protection, haven't you?

      --
      Lacking <sarcasm> tags, /. substitutes moderation as "Troll."
    7. Re:XP only ? by timeOday · · Score: 4, Informative
      I have to side with the article summary on this one:
      Microsoft promised "ongoing security updates" for all supported versions of Windows and IE.

      The ongoing security updates do not, as Microsoft points out, include the latest security fixes with Service Pack 2, released last month. Those include a new pop-up blocker and a new system of handling ActiveX controls and downloaded content.

      And it's those more substantial changes, rather than the bug fixes that come with routine upgrades for supported products, that security organizations have lauded for addressing IE's graver security concerns.

      There you have it: there is no option for securing MSIE on Win2K.
    8. Re:XP only ? by HydrusZ · · Score: 4, Informative

      "Microsoft promised "ongoing security updates" for all supported versions of Windows and IE."

      It means you will still get all of the patches, but you will never get the popup blocker and other features specific to IE6 SP2. Not a big deal.

    9. Re:XP only ? by kfg · · Score: 5, Funny

      You have been paying for Software Protection. . .

      Yeah, youse wouldn't want anything to 'happen' to yer software, now would you?

      KFG

    10. Re:XP only ? by Jeff+DeMaagd · · Score: 2, Interesting

      Software protection is a waste of money. It is cheaper to just buy a licence outright, then when Longhorn SP1 is released, you'll need to replace all your computers anyway, which pays for its licence outright.

      2000 has another year of full support anyway, making it about five years, like any other Microsoft OS.

      It looks like a NX support thing, not patches to fix the JPG execute problem, which have been rolled back to 2000.

    11. Re:XP only ? by Martin+Blank · · Score: 5, Insightful

      Man, you people are gullible.

      Microsoft has said that they will not make IE6 SP2 available for older versions of Windows, not that they won't provide security patches.

      Generally speaking, I don't criticize the Slashdot crew because they have enough story submissions to read through that things will slip past, but this is ridiculous. Microsoft has committed to several more years of Windows 2000 support, and there are still a couple of years left on Millenium. Because they view the browser as part of the OS, it would be asinine to think that they would patch XP's IE and leave the older ones to sit where they are now.

      --
      You can never go home again... but I guess you can shop there.
    12. Re:XP only ? by LiquidCoooled · · Score: 2, Funny

      I'll have it!!

      How much is the shipping to England? ;)

      --
      liqbase :: faster than paper
    13. Re:XP only ? by Austerity+Empowers · · Score: 2, Interesting

      I still can't see why any company would want to "upgrade" to xp, especially larger companies for which such an investment would be a huge amount of money.

      As far as Windows' go, 2000 is the lightest and most stable. XP is bloat, and seems to have more bugs in my experience. It also has that nasty DRM shit which no one, corporate or private, truly wants.

    14. Re:XP only ? by BlackHawk-666 · · Score: 2, Funny

      ...and the French just called, they want that Freedom Statue (tm) back again, so please box it up with the bridge.

      --
      All those moments will be lost in time, like tears in rain.
    15. Re:XP only ? by jekewa · · Score: 5, Informative
      If you check the Product Lifecycle Dates they've already passed the end-of-life dates for many of the older versions of Windows.

      Win3x, Win9x, and WinME are all long passed. WinNT Server remains until 31 Dec 2004, but other WinNTs are passed. Win2K is scheduled for demise on 30 June 2005 (start saving). Even WinXP is scheduled for desupport 31 Dec 2006. Win Server 2003 is scheduled for 30 Jun 2008, so you've got a while there, but it's on the plan.

      It should not come as a surprise that they stop providing feature enhancements to the older versions. Profit and other greed aside, technically it's unrealistic to expect them continue to support systems indefinately.

      Tick, tick, tick...

      --
      End the FUD
    16. Re:XP only ? by homer_ca · · Score: 4, Interesting

      "The option for securing MSIE on Win2k is the same as on any other platform, including XP - Don't use it"

      It's not as simple as don't use IE as a web browser. Outlook and Outlook Express use it. Quicken uses it. Any executable or VBscript could open an IE control and send an exploit to it.

      As other threads have pointed out, they won't be porting the XP SP2 enhancements like the popup blocker and the new, safe ActiveX handling (whatever that means). I'm guessing they'll still be releasing patches for exploitable bugs like the recent JPG decoder bug.

    17. Re:XP only ? by Epsillon · · Score: 2, Funny

      You have been paying for Software Protection, haven't you?

      No? Oh, dear. I'm very disappointed in your "business practice". Perhaps we'd better send our consultant, Knuckles, over to give you a hand with your "decision process". After all, you wouldn't want anything "bad" to happen to your machines, would you?

      --
      Resistance is futile. Reactance buggers it up.
    18. Re:XP only ? by LurkerXXX · · Score: 2, Insightful

      Software protection only gets you so far. We need hardware protection too. We've got a number of old machines that were originally running NT 4, which are now running (slowly) windows 2000. XP has even higher system requirements. The systems are already maxed out on the RAM that the motherboards can handle. XP won't work. It would utterly kill those machines. So MS is trying to force folks not only to upgrade their software, but their hardware as well.

    19. Re:XP only ? by pbranes · · Score: 2, Informative

      They do not mean that they are stopping support for Windows 2000 or IE under Windows 2000. They only mean that IE under Windows 2000 will not get a pop up blocker or an add-on manager.

    20. Re:XP only ? by pbranes · · Score: 2, Insightful
      The security enhancements that Microsoft adds in Windows XP don't in and of themselves make IE more secure - they only serve to educate the user better about what is good behavior and what is bad behavior on the Internet. The Information Bar and Pop-Up Blocker are the actual facilitators of this idea.

      These enhancements are totally separate from security holes. Microsoft has committed to supporting Windows 2000 with hotfixes until 2010. Read it straight from Microsoft:

      http://support.microsoft.com/default.aspx?scid=fh; [ln];LifeWin

    21. Re:XP only ? by LurkerXXX · · Score: 3, Insightful
      First of all, amortizing is nice, but it does not magically give you a fist full of cash to go buy a new machine. Sorry.

      Secondly, we are in an academic setting. I'm not being 'stupid' as you so kindly put it. We simply don't have the cash. We run SUS server, etc, to push out patches, so wasting the admin time isn't that huge of a deal.

      Windows 2000 machines are quite adequate for most desk jobs. Forcing an upgrade is silly when the machines are working fine as-is and don't require that much maintenence. And as for e-machines... their failure rate is *not good* (voice of experience here).

  3. Microsoft responsibility? by sofakingon · · Score: 2, Interesting
    IANAL but couldn't a corporation hold microsoft liable for damages incurred to an unpatched system? I know that where I work about half of our systems are Win2k and the other half XP and it would be assanine to go and buy new licenses for the 2k systems because they are over half their life cycyle replacement time.

    Just my $.02

    1. Re:Microsoft responsibility? by linsys · · Score: 3, Insightful

      "couldn't a corporation hold microsoft liable for damages incurred to an unpatched system"

      If that where the case people would be sueing microsoft for worms, holes, vulnerabilites etc... Most worms that have been written where created due to security problems Microsoft knew about MONTHS if not Years before the problem ever surfaced.

      Don't get me wrong I would love someone to try it, but I don't see that happening.

    2. Re:Microsoft responsibility? by sofakingon · · Score: 2, Interesting

      If M$ did not supply a patch for Windows 2000 for a known vulnerability, and they did for XP/Server 2003, would that be considred negligence in the eyes of a court of law? Could they be held at least partially responsible for damages?

    3. Re:Microsoft responsibility? by danheskett · · Score: 5, Insightful

      IANAL
      Not many people are.

      but couldn't a corporation hold microsoft liable for damages incurred to an unpatched system
      They could try, but they would probably fail. Others have tried, and failed.

      1. First off, with a security flaw, you need to be exploited to suffer damages. In a court case it will be easy to argue that MS shouldn't be responsible because even though they made a flawed product there was an overt criminal act involved that trumps their involvement. For example, if a car manufacturer makes cars with easily defeated locks, or locks that sometimes don't work, can the owner of the car sue the car company for damages if the car is stolen? They could try, butit probably won't get far just on that argument.

      2. Second off, in liability cases you have to do your honest best to mitigate your exposure to loss. If I buy a product, and later am notified that is defective, it is my obligation to act appropriately. That may include stopping to use the product. In this case, it may mean active content filters, firewalling, security zone changes, etc.

      3. Finally, many industries are exempt from liability in certain cases. For example, auto-manafacturers do not have to recall cars after a certain age. It doesn't make sense for the government to require Chevy to recall the remaining 1976 S-10's because of a latch that might go dangerously bad at 200,000 miles. Microsoft would have a good claim that Win2k and earlier is the equivalent of that outdated pickup truck. You drive that old pickup at your own risk. Windows XP is running on well over half of all Windows machines now. That percentage is getting bigger and bigger. Soon it will be 66%. At what point is it okay to stop supporting a product?

      One last point. It may be tempting to say that MS should be liable for exploited systems. That is a bad road to go down. If all of the sudden liability is assignable to software makers because of exploits like this, the whole software world has a major problem.

      Software liability could be exactly the tool that MS wants to destroy Linux in the business world. If an individual writing OSS software new that any possible flaw they introduced coul cost them everything they own you can bet that the number of checkins to Sourceforge will drop drastically. Companies like MS will be able to whither the storm. They'll force everyone to use only signed binaries. Machines will become locked down to the Nth degree, and proprietary will be back in. Every software vendor will force their users to run approved-only configurations. It'll be like the mainframe days of the 70s and 80s only worse. Companies like MS can afford to buy the liability insurance and the lawyers to hold on. Meanwhile, the Mozilla foundation will flounder and die.

      Software liability is a bad, bad, bad, bad idea for the entire industry, but absolutely deadly for Linux and FOSS in general.

    4. Re:Microsoft responsibility? by CountBrass · · Score: 2, Insightful

      I have four letters for you: E U L and A.

      Be interesting to see if this, finally, gets them tested in a court of law. Problem is, and much as a despise them, it would do an awful lot of damage to the software industry if they weren't upheld.

      --
      Bad analogies are like waxing a monkey with a rainbow.
    5. Re:Microsoft responsibility? by deadlinegrunt · · Score: 2, Insightful

      "couldn't a corporation hold microsoft liable for damages incurred to an unpatched system"

      Don't get me wrong I would love someone to try it, but I don't see that happening.

      Since this is /. I can assume your general feelings regarding this subject but please do not forget the law of unintended consequences resulting from such a move. [HINT: Think beyond Microsoft being sued here] It would be a two way street instead of situational ethics.

      --
      BSD is designed. Linux is grown. C++ libs
    6. Re:Microsoft responsibility? by mrsaggy · · Score: 2, Interesting

      So in a serious enough bug/security risk is discovered in a product and the developers aren't prepared to fix it, I can stop using it and get my money back ?

    7. Re:Microsoft responsibility? by JaredOfEuropa · · Score: 2, Interesting
      IANAL but couldn't a corporation hold microsoft liable for damages incurred to an unpatched system?
      Unlikely. I would be really worried if Microsoft was liable for damage due to a security bug, or obliged to provide patches to older versions of its OS.

      Suppose you wrote, say, a free FTP server. Some games outfit decides to use it, then due to a bug in your software, some cracker makes off with their upcoming blockbuster game. They claim $500 mil. in lost revenue and send you the bill. Or a company is happy with version 0.01 that you wrote 10 years ago, and insist that you provide all relevant patches for that version. Twice the work for you with no added revenue.

      Consider the implications to your own humble software efforts, if you're in favour of Microsoft's liability or obligation to patch old versions.
      --
      If construction was anything like programming, an incorrectly fitted lock would bring down the entire building...
    8. Re:Microsoft responsibility? by Reducer2001 · · Score: 2, Insightful

      Care to show some proof of this directly from Microsoft? I know this is true for a 'downgrade', but Microsoft isn't stupid enough to sell you a Win2k for XP, are they?

      --
      When you get to hell -- tell 'em Itchy sent ya!
    9. Re:Microsoft responsibility? by Denyer · · Score: 2, Insightful
      Software liability is a bad, bad, bad, bad idea for the entire industry, but absolutely deadly for Linux and FOSS in general.

      Less so if it only applies to software which is sold--a commercial Linux vendor would be liable, but Joe Developer who writes that email client and doesn't charge for it would be okay.

      --
      Ph-nglui mglw'nafh Gates M'dna wgah'nagl fhtagn.
    10. Re:Microsoft responsibility? by steveb964 · · Score: 2, Interesting

      Well, then Microsoft will not object if users return their copies of XP for complete refunds because they're not fit for purpose, do not work as advertised, etc, right?

      Very well put

      The EULA doesn't trump basic consumer protection law.

      It shouldn't...I mean, this is just opening the way for auto manufacturers to say "we are not liable for any loss or damage due to malfunctioning security and safety components..."

  4. Good by linsys · · Score: 5, Insightful

    I don't see this as anything but GOOD news for the alt browser market.

    I have already moved all my customers off IE and onto firefox and have received NO complaints as of yet, actually they are like wow I don't seem to get any more of those pop up ads, you're a great admin... ;)

    Microsoft continues to shoot them selves in the foot in the area of security. I thought they wanted to keep their market share, I guess the greed is getting to them.

    1. Re:Good by dtfinch · · Score: 4, Insightful

      Unfortunately, a great deal of home users will never even think of installing a browser besides the one that came preinstalled.

    2. Re:Good by linsys · · Score: 4, Funny

      Try turning it on!

    3. Re:Good by Quinn_Inuit · · Score: 4, Interesting

      It's not so much shooting themselves in the foot as shareholder pressure. One of the ironies of M$'s near-monopoly position is that their old products are their biggest competition (in most markets). Shareholders, of course, are not content to rest on the companies laurels, but want new profits.

      It may sound strange, but this is just an attempt to choke out the competition.

      --

      Stop learning! Only you can prevent esoterrorism.
    4. Re:Good by Second_Infinity · · Score: 3, Interesting

      I agree. This is some of the best news the 3rd party browsers could have hoped for.

      However it is terrible news for businesses. Consider a company with upwards of 10,000 people using Windows 2000... well let's just say that the "migration" to Windows XP would be a rough ride.

      How long now until Microsoft decides to stop supporting Windows 2000 altogether, as it's "not as secure as XP with SP2"? I see this a setting the stage. Since IE is integrated into the system, would this not also hinder other security updates?

    5. Re:Good by pete-classic · · Score: 3, Insightful
      The more users that use Firefox, the more it will be targeted with viruses/exploits/etc.


      Right. Just like Apache vs. IIS.

      It seems like we could declare this argument debunked at this stage of the game.

      And Firefox can't be updated automatically. At least with IE, you can rely on MS' eventual patch to be pulled down with WindowsUpdate.


      Firefox can't be updated automatically? Or it isn't updated automatically with MS tools?

      I'm sure that an admin of merely average ingenuity could come up with an automated process for updating Firefox on windows.

      Or are you trying to make the argument that MS is abusing its monopoly position?

      -Peter
    6. Re:Good by Entropius · · Score: 3, Insightful

      Unfortunately, getting people to stop clicking on that big blue E isn't enough to stop them from being exposed to IE holes. IE's rendering engine is all over windows.

  5. Servers? by brucmack · · Score: 3, Interesting

    The article mentions nothing about servers... Does this mean that Windows 2000 Server users will have to upgrade to Windows Server 2003? That'd be especially low, considering how many businesses won't have had time to upgrade that far yet. Heck, most of the places I've worked in still have NT servers running...

    1. Re:Servers? by Clover_Kicker · · Score: 2, Insightful

      A lot of product documentation is in HTML these days, often with foolish javascript/ActiveX menus, index etc.

      Having a functional browser on your server is not completely insane, especially in a small shop.

    2. Re:Servers? by jtharpla · · Score: 5, Interesting

      Actually, in a software company, it's not atypical at all to have Server installations used as desktops. We have a number of developers who develop/test software on top of databases, IIS, etc. Yes, some of this stuff is available for 2KPro and/or XP, but the only way to be sure it works 100% is to have access to the full server version. So it's not atypical for a developer to run Server as desktop. I myself use 2003 Server as my desktop because I wanted to be able to evaluate different server products (I'm a sys admin). I also wanted to get familiar with 2003 Server before it rolled out to our production systems--when you use it every day, you find all the nooks and crannies you'd overlook in terms of settings and whatnot. Finally, I prefer the remote access configuration of Server over XP. It's not unusual for me to use both remote sessions as well as the console, running different apps as different users, etc. Sometimes RunAs just isn't powerful enough for this.

    3. Re:Servers? by red+floyd · · Score: 2, Insightful

      Not to mention that if you're a dev with a bigger than 2-way SMP box (say 4 CPUs, for example), you *MUST* have W2KServer or better. XPPro and 2KPro support only 2 CPUs.

      --
      The only reason we have the rights we have is that people just like us died to gain those rights. -- Cheerio Boy
  6. Not security updates but security enhancements by FuzzzyLogik · · Score: 5, Informative
    They aren't saying they won't provide security patches for holes, they're stating they won't provide the features that are in SP2 in anything other than XP. That's what I got out of it. Which isn't such a big deal, did you expect anything less really?

    "We do not have plans to deliver Windows XP SP2 enhancements for Windows 2000 or other older versions of Windows," the company said in a statement.
    1. Re:Not security updates but security enhancements by Anonymous Coward · · Score: 2, Funny

      Thank you! Someone who RTFA!

    2. Re:Not security updates but security enhancements by Xawen · · Score: 4, Insightful

      I think the confusion is that the article says the recent security ENHANCEMENTS wouldn't be provided to anything but XP. This means no pop-up blocker/firewall/{insert service pack 2 goodie here} for Win2k or below.

      They are not saying that they're going to stop making hotfixes for the older versions. Windows 2000 is still officially supported...just don't hold your breath for a pop-up blocker.

    3. Re:Not security updates but security enhancements by FortKnox · · Score: 4, Insightful

      The key word in that quote is "Improvements"... I see that as tools to help you stay secure, not security patches.

      There's a difference between giving the user a firewall (improvement) vs giving the user a patch in a security flaw in the OS (patch).

      --
      Good quote, too many chars. Seriously, the slashdot 120 char limit sucks!
  7. just like them by alatesystems · · Score: 3, Insightful

    This sounds like microsoft. But you know they'll just say they are going to do give them out anyway until 2007 or something like they always do.

    The summary says that it will boost browsers like Firefox, but I highly doubt it. I don't know that many people who aren't already on Windows xp, but the plain fact is, plenty of people browse websites that can ONLY be viewed properly in IE. I hate it. You hate it. But the fact is, people need to put more pressure on webmasters to create standards-compliant websites.(AHEM SLASHDOT) COUGH COUGH /. rendering left side.

    Chris

    1. Re:just like them by miracle69 · · Score: 4, Informative

      I haven't been to a website in years that I couldn't see in Mozilla.

      Care to provide any examples?

      --
      Linux - Because Mommy taught me to Share.
    2. Re:just like them by ruiner13 · · Score: 3, Informative
      "I haven't been to a website in years that I couldn't see in Mozilla.

      Care to provide any examples?"

      Windows Update.

      There's one. Many financial sites are like that, as well as a few more i've seen. I love firefox, but it is still lacking in some CSS2 areas.

      --

      today is spelling optional day.

    3. Re:just like them by I+confirm+I'm+not+a · · Score: 2, Informative

      This site were/are providing download facilities for an album in aid of Oxfam's campaign for Darfur.

      Apparently, because the DRMed-album is in Windows-only format, people with browsers like Firefox are forbidden - presumably our use of Firefox proves we're going to try and use Winamp to bypass DRM...or something.

      You're right though - there are precious few web-developers stupid enough to build for IE and IE alone these days.

      --
      This is where the serious fun begins.
    4. Re:just like them by Oriumpor · · Score: 2, Informative

      Web consoles for the Cisco 3500's, the 3com corebuilders... oh you know... obscure shit like that.

    5. Re:just like them by TwistedSquare · · Score: 2, Informative

      Slashdot (the rendering bug), Odeon (past the first page), Powerhouse are the ones I've tried in the past week or two that have Mozilla problems. I still use Firefox though, Powerhouse lost my custom because of their IE requirement.

    6. Re:just like them by Nyarly · · Score: 3, Insightful
      There's one. Many financial sites are like that, as well as a few more i've seen. I love firefox, but it is still lacking in some CSS2 areas.

      There's something gutbustingly hilarious about saying "can't use alternative browsers for IE-only sites" and then going on to complain about a few CSS2 issues in Firefox.

      Granted, I don't know a browser that perfectly handles all of CSS2, but IE is one of the worst offenders. display: fixed, and most of the pseudo-attributes completely fail under IE. Not to mention the ongoing legacy of a broken box model in older versions (that simply will not die, and that MS has never patched). The box model! Not like it's at all essential to design or anything.

      --
      IP is just rude.
      Is there any torture so subl
    7. Re:just like them by RockClimbingFool · · Score: 2, Informative

      http://launch.yahoo.com/

      Lots of multimedia streaming sites will only work with IE.

    8. Re:just like them by dheltzel · · Score: 2, Informative

      I agree, the only sites I need IE for anymore are internal company sites that use stupid IIS tricks and refuse to work with FireFox (even when I trick them into thinking I'm using IE, the display is hosed). Everything on the internet seems fine with Firefox. The only site I've found that displays funny is /. (oh, the irony), but I can still read that ok.

    9. Re:just like them by Seehund · · Score: 3, Funny
      ... Powerhouse are the ones I've tried in the past week or two that have Mozilla problems.

      "Welcome to Powerhouse Online
      You may be experiencing difficulty in accessing our site because your Internet Browser needs to meet the following criteria:

      * IE 5 +

      If you wish to use our site you will need to update your browser accordingly."


      That's not a Mozilla problem.
      It's a powerhouse.co.uk problem.

      I will not "need to update" iBrowse/Voyager/Galeon/Firefox/Safari/whatever to IE5, thankyouverymuch. It's Mr Mongoloid Webmaster at Powerhouse who needs to get a clue.
      --
      Help savingAmigaOS and a free PowerPC market
    10. Re:just like them by rscrawford · · Score: 2, Informative

      Actually, with the User Agent Switcher extension, I've been able to set my UA string to "Internet Explorer 6" and get to almost all of the sites I regularly browse to that claim that they require IE. Many sites claim that they require IE, but they don't really.

      For those sites that really DO require IE (and for testing purposes, since I'm a web developer at work and, sadly almost all of our customers still use IE), I use the IE View extension.

      --
      -- The reason it's called the right wing? Irony.
  8. Perhaps. by Skye16 · · Score: 3, Insightful

    Though I must admit, there is some trepidation at the alternative browser approach. Just because the browser isn't used to, say, view webpages, doesn't mean a downloaded jpg (for example) won't be automatically opened in IE (for various reasons). Unless IE can actually be physically uninstalled easily and quickly, the threat still remains.

    Not that I'm saying you shouldn't use an alternative browser, it's just that the potential for harm is still there as long as the security hole remains present. And it worries me.

  9. Metaphorically speaking... by kahei · · Score: 5, Funny


    This article tries to turn the sow's ear of an overstretched metaphor into the silk purse of a pithy comment, but winds up counting it's chickens in a castle built on sand as the skeletons in the closet come home to roost.

    --
    Whence? Hence. Whither? Thither.
  10. How many reasons? by DigitalRaptor · · Score: 5, Insightful

    Really, how many reasons do people need to switch to another browser before they do it?

    I know a LOT of really intelligent, well educated people, many of whom are programmers or use linux in a server environment, who still use IE / Outlook [Express] on their desktops.

    That is just begging for it.

    I tell them over and over again the risks, and they still stay where they are. Ironically, complete neophites switch over as soon as I tell them about Firefox / Thunderbird.

    I guess the meek really will inherit the earth.

    --
    Lose Weight and Feel Great with Isagenix
    1. Re:How many reasons? by Mr_Silver · · Score: 4, Interesting
      I know a LOT of really intelligent, well educated people, many of whom are programmers or use linux in a server environment, who still use IE / Outlook [Express] on their desktops.

      This could be because those people have never been affected by all the exploits that are out there.

      Think of it like a house with a dodgy lock, you don't bother getting around to changing it because it's the last thing on your mind. As soon as you get broken into, you'll fix it.

      These people just haven't been given an incentive to change yet. They're happy with what they have and aren't interested in changing. Banks rely on this sort of apathy all the time - otherwise you'd get some decent competition when you're shopping around for a new current account.

      --
      Avantslash - View Slashdot cleanly on your mobile phone.
    2. Re:How many reasons? by Billly+Gates · · Score: 2, Informative

      Outlook has alot of nice features and is required for work I guess.

      Groupware is one of these features. Many just dial into work or use VPN and sync with the exchange server.

      IE is still needed for many audio drmed sited.

      There are plugins to enable activeX on firefox but they just make calls to IE dlls with all the insecure code which makes using firefox pointless.

  11. No, that's not what they said. by stratjakt · · Score: 5, Informative

    First fucking line of the article.

    Microsoft this week reiterated that it would keep the new version of Microsoft's IE Web browser available only as part of the recently released Windows XP operating system, Service Pack 2.

    Only the new version of the browser is available under XP Service Pack 2, for architectural reasons the other OS's lack (NoExecute and whatever else).

    It says nowhere they won't provide patches for the most current IE's available under 2000.

    The new IE only runs under XP SP 2. You also need to upgrade if you want true HT support, BTW.

    --
    I don't need no instructions to know how to rock!!!!
    1. Re:No, that's not what they said. by DigitalRaptor · · Score: 2, Interesting

      It's not that Microsoft *doesn't* upgrade IE, it's that they *can't*.

      They really screwed the pooch when they integrated IE so heavily into the OS. There is simply no other explanation for going so long without any new innovation in the browser market, when other browsers are growing in features, stability, and security by leaps and bounds.

      There were quite a few articles on this point a few years ago. The problem is even more pronounced now.

      And I highly doubt Microsoft has learned their lesson with Longhorn. This, above all else, will be Microsoft's undoing, IMHO.

      --
      Lose Weight and Feel Great with Isagenix
  12. the door is still open by pixelpusher220 · · Score: 2, Insightful

    This should provide a huge boost to Mozilla and other alternative browser backers.

    Even if people switch to a different browser IE is still installed on the machine and vulnerable to attacks without the security 'updates' in SP2.

    So even though you've installed a much more secure 'door' (Firefox, etc) your backdoor is still just as wide open.

    Since MS decided to 'combine' the browser into the OS they should be required to support ALL of the OS with their security fixes.


    --
    People in cars cause accidents....accidents in cars cause people :-D
    1. Re:the door is still open by Anonymous Coward · · Score: 2, Funny

      your backdoor is still just as wide open.

      You must be the guy that hosts the goatse server

  13. Integration by MikeMacK · · Score: 2, Interesting

    But I thought IE was heavily "integrated" into the OS, so they are basically saying they will not upgrade/patch the OS anymore?

  14. Wait a minute.... by FortKnox · · Score: 4, Insightful

    We do not have plans to deliver Windows XP SP2 enhancements for Windows 2000 or other older versions of Windows

    Seeing as IE isn't apart of windows (wasn't that part of the anti-trust agreement?), shouldn't I be able to D/L the latest and greatest version of IE (with patches already included) from MS??

    When asked about IE's origin as a free, standalone product, the representative said, "You're talking in software terms that might be considered ancient history."

    Oh, I see... the settlement is ancient history....

    I can see them only including it in windows update for XP only, but not giving out the latest and greatest as a standalone product? Bad move.

    --
    Good quote, too many chars. Seriously, the slashdot 120 char limit sucks!
  15. And my car? by Adam9 · · Score: 3, Insightful

    So, if there's a safety problem with my 1998 Ford Contour, do I have to upgrade to a 2004 Ford in order to have it corrected?

    This sounds more like a marketing move combined with laziness.

    1. Re:And my car? by sebol · · Score: 2, Funny

      So, if there's a safety problem with my 1998 Ford Contour, do I have to upgrade to a 2004 Ford in order to have it corrected?


      No, You have to upgrade to a Jaguar with Cosworth Engine, withdraw from Formula One.

      --
      -- Hasbullah bin Pit (sebol)
    2. Re:And my car? by Adam9 · · Score: 4, Funny

      Microsoft's definition of "SP2 enhancements" is quite vague. They're referring to securtiy features. These "security features" could easily translate to bug fixes.

      From TFA: "It's a problem that people should have to pay for a whole OS upgrade to get a safe browser..."

      This implies that the older versions of MSIE won't be considered "safe" anymore.

  16. Still patches for previous versions... by ImpTech · · Score: 4, Informative

    According to the article, there will still be security updates for all supported versions of IE and Windows. What they're saying is that Win2k and older will not get the pop-up blocker or any other such enhancements.

    Still sucks for the Win2k users though... Its clearly nothing more than a ploy to make them upgrade.

  17. This is NOT what the article says by pbranes · · Score: 3, Informative

    The article says that Windows XP SP2 enhancements will not be delivered to Windows 2000. This says nothing about security patches. This slashdot posting is FUD.

  18. Firefox shines, but free hard to believe for some by Leomania · · Score: 4, Interesting

    What I mean is this: no one believes that you can get something for nothing any longer. Case in point, I just installed Firefox (and Spybot/AdAware/SpywareBlaster) for my next-door neighbor who had a slew of popup-generating malware on his PC. As I installed Firefox, he kept asking "And it's free? Why? What's their business model?" As a salesman, he just couldn't swallow that it could be a full-featured application AND available for free.

    The good news is that he's happily using it now and he's starting to understand that IE was how the malware was getting onto his system. But I tell you, if I have to spend as long convincing/educating others as I did with him, it's going to become a full-time job pretty damned fast.

    - Leo

    --
    You don't use science to show that you're right, you use science to become right.
  19. So much for MS's new focus on security by Maestro4k · · Score: 4, Insightful
    You have to love this quote from the article:
    • "Microsoft is not using security issues or any security situation to try to drive upgrades," said a company representative. "But it only makes sense that the latest products are the most secure."
    Well yes that's true but it's also true that a large portion of the zombie PCs out there spewing spam, viruses, worms and DDoS attacks are NOT running the latest product from Microsoft. Effectivly Microsoft's saying "well we'll concentrate on security only in a future sense." Bet that once Longhorn finally arrives XP will stop getting security patches shortly thereafter.

    Frankly we can only hope that there's enough big business clients that have "legacy" Windows OSs that will raise holy hell with Microsoft on this. Otherwise we can expect the situation with compromised machines to not get any better. It seems most of the people with badly compromised PCs don't even try to get them fixed until they finally grind to a halt, they're not likely to be upgrading to XP anytime soon.

  20. Typically crappy Slashdot headline... by Andy+Davies · · Score: 2, Informative

    The article states that "Microsoft promised "ongoing security updates" for all supported versions of Windows and IE."

    All MS are doing is stating that the pop-up blocking and other new features in XP SP2 won't be made available to old OSs.

    1. Re:Typically crappy Slashdot headline... by stratjakt · · Score: 2, Insightful

      It makes complete sense.

      Ford is including OnStar in lots of its vehicles. They haven't showed up to install it in the 1978 Ranger I use to tear around in the fields.

      Slashdot, in it's "we hate MS" fervor has resorted to all-out bullshit. They lie worse than MS's marketting department.

      --
      I don't need no instructions to know how to rock!!!!
  21. Overblown by Goglu · · Score: 2, Interesting

    The quotes from Microsoft seem to indicate that they won't be releasing the XP2 enhancements. It doesn't necessarily mean that IE won't be patched anymore.

    Even Firefox (which I am using) doesn't offer an integrated firewall. Anyway, it would probably make little sense to integrate this kind of applications into browsers... It would be as strange as integrating the browser into the OS!

    There has already been articles about the fact that XP2 wouldn't be released for W2K, W98, W95, etc. This is just a new spin on it...

  22. hardly lemonade, more like ... by twilight30 · · Score: 2, Insightful

    Squatting on your old customers and letting a burst of yellow water go.

    Why? Because IE upgrades themselves drive other upgrades for Microsoft products. For the vast majority of people, nonIE choices simply aren't an option, particularly for users wanting to use the Windows Update site. (Yes, I know that you can use the Mozilla Firefox extension for Windows Update, but my point is that many people don't)

    Windows Update is actually usable now -- something I never thought I would have seen only a few years ago.

    I understand that MS has to draw the line somewhere; I understand that MS has to support a huge array of old code; I just wish they would be a touch more responsible about it.

    I have been dealing with this exact issue all this week for various clients, and I really wish I could just simply get them all to move off Windows permanently. Wishful thinking...

    --
    ========================================
    Death will come, and will have your eyes
    -- Pavese
    1. Re:hardly lemonade, more like ... by Demanche · · Score: 2, Interesting

      Why doesn't someone make a plugin for FF that allows windows to be opened up in ie if not displayed properly...
      like a button next to the "go" button that opens the link externally.

      I often see people complaining.. I for one would love this feature.

      --
      Mod me down im a newf (wiki)
  23. Hot Java?! by hey · · Score: 2, Insightful

    I see its the last alt browser mentioned.
    Does anybody use it. Does it have something that other browsers don't. Its it written in Java?

  24. Read the EULA by overshoot · · Score: 4, Informative

    When you license (not "buy") an MS product, you waive any claim on them for anything. Put another way: whatever problems you have are none of their worry.

    --
    Lacking <sarcasm> tags, /. substitutes moderation as "Troll."
    1. Re:Read the EULA by CountBrass · · Score: 4, Informative
      Fortunately, at least in the UK, anything a company sells has to be of "merchantable quality" and "fit for purpose" and that's not something the company weasle their way around in anyway at all. Doesn't matter if they put up signs in the shop saying "sold as seen" or make you agree to an EULA: those consumer rights still hold regardless.

      In addition, it's a basic part of contract law that any clause that effectively takes away precisely the benefit you were contracting to receive is automatically void.

      --
      Bad analogies are like waxing a monkey with a rainbow.
    2. Re:Read the EULA by ChumpusRex2003 · · Score: 2, Informative
      The law changed a few years ago. Items now have to be of 'satisfactory quality' (not 'merchantable quality'). This has not been very clearly defined, but probably means what a typical customer for that type of product would find acceptable.

      The Sale of Goods Act also only applies to retail sales to end-users. It does not apply to the agreement between the manufacturer and the retailer, nor does it apply to private sales.

      This means that if you a buy some software at a swap meet, or privately off ebay, and it is unusable, then you have no statutory recourse to either the seller or the manufacturer.

  25. An (eventual) win for alternative browsers! by Large+Bogon+Collider · · Score: 2, Insightful

    Everything is eventually motivated by money: MS figures that this calculated move will cause 1) fence-walkers to take the plunge and upgrade to XP and/or 2) allow them to focus their efforts on IE on one platform only. However, there still are many corporations that are trying to hold back due to the time and expense needed to upgrade. For most people, this is a way to get alternative browsers like the recently released Firefox 1.0pr in the door. As long as Firefox remains popular, the OSS community won't abandon it - one leg up that it has on MS. All we need to de is bide our time and wait for the masses to come onboard.

  26. Complaints by pastpolls · · Score: 2, Informative

    Here is a link to a page that contains the website for all Attorney General's offices. I encourage you to continue to complain about such behavior...http://www.thecomplaintstation.com/stat eattorneys.htm

    Let the 200 million non-XP users speak out. Heck, speak out even if you don't use windows. Unpatched machines can cost you your bandwith.

  27. What percentage of systems actually get patched? by Anonymous Coward · · Score: 2, Interesting

    My guess is that the vast majority of home computers never get patched. My kid is an example. Load the computer up with spyware and viruses until it actually doesn't work at all then re-install Win98 and start over. (I gave him a Linux box which he doesn't use.) Microsoft will still be a gaping security hole as long as it is on most home computers.

  28. MY favourite quote by ggvaidya · · Score: 2, Funny
    "I've always wondered what the problem is with the IE team," one respondent wrote in a feedback thread on IE evangelist Dave Massy's blog. "I mean, it's just a browser. You need to render a page based on well-documented standards...and that's it! You've opted to not have tabbed browsing or any other personalization. It's just a window shell and the browser content...I wonder if there are only like four people who work on IE or something? I seriously don't get it."

    That many? :) And I like Dave's blog's subtitle ... "Internet Explorer moving forward!". Looks like this bugger might have some competition ...

  29. They're just trying to 'save' money. by samberdoo · · Score: 2, Funny

    Billy - "We don't have enough people to fix all the bugs in all our products. What can we do?" Well if our corporate customers complain then, hire a city in China to handle all products other than XP.

  30. Lemme get this straight... by Worm5er · · Score: 3, Insightful

    Ok, so let's say that all the biggest car manufacturers in the world (that would be Microsoft) welded their hoods shut (closed source).

    I have my very nice 1969 Mustang soupped up and taking me every place _I_ need to go. Then we find out that the fuel pump has a problem with it that could cause a tremendous fire or explosion.

    Now I have to go to the dealer as they're the only one that can do work on the car, purchase a 2004 Mustang to prevent my car from potentially exploding and causing serious damage to myself and others _and_ I have to pay them for the new car?

    I don't think so.

  31. Sites not usuable by non-IE browsers by spineboy · · Score: 4, Informative

    I work in the medical field, and plenty of sites for reading X-rays, checking patient labs seem to be only usuable by IE(active-X issues, etc). It's the only reason I keep Windows on my Linux boxes.

    --
    ..........FULL STOP.
  32. You waived that right. by Andy+Dodd · · Score: 5, Interesting

    When you agreed to the EULA, you agreed not to sue M$.

    Odd that this is one of their biggest FUD weapons against OSS, "There's no one to sue.". Well, there's no one to sue with M$ software either.

    --
    retrorocket.o not found, launch anyway?
  33. TROLL ALERT! by Anonymous Coward · · Score: 5, Informative

    The story, if you read it, states the XP SP2 improvements to IE will only be available to XP SP2 customers. THESE imporovements will only be able to XP SP2.

    The article DOES NOT state no more IE patches for 2000/NT 4.0

    Very very misleading title to this story on ./

    1. Re:TROLL ALERT! by kidgenius · · Score: 3, Informative
      The article DOES NOT state no more IE patches for 2000/NT 4.0

      In a way it does. It basically says that the new version of IE will NOT be available for anything but WinXP. Therefore, any patches or fixes that are in the new version of IE will not be incorporated into the lesser IE's.

    2. Re:TROLL ALERT! by Muerte2 · · Score: 5, Informative

      I'm not sure I totally agree with what you say. You see I'm one of the rare Slashdotters that actually READ the article.

      By refusing to offer IE's security upgrades to users of older operating systems except through paid upgrades to XP, Microsoft may be turning the lemons of its browser's security reputation into the lemonade of a powerful upgrade selling point.

      While I'm not sure it's 100% as cut and dried as what the /. title suggests, it does say that some security releases may not make it back down to the old OSes.

    3. Re:TROLL ALERT! by William+Baric · · Score: 2, Informative

      It says patches for the new version of IE will only be available for people who have the new version of IE (i.e. the one with XP). It doesn't say anywhere that there won't be any new patches for the old version of IE (the one with 2000).

  34. That is not what the article says by waynegoode · · Score: 2, Informative
    Slashdot article: Microsoft has decided that future IE updates, including those related to security, will only be available to customers using Windows XP.

    That is not what the story says. From the news.com article:

    Microsoft promised "ongoing security updates" for all supported versions of Windows and IE.

    The specific security improvements to IE in XP SP2 will not be available to other versions of Windows, but security updates will be. I don't think Microsoft is stupid enought to stop security updates to IE for everyone.

  35. Found Letter by The-Bus · · Score: 3, Funny

    Dear Microsoft,

    Damn you! You shot me!

    Sincerely,

    Your Foot

    --

    Small potatoes make the steak look bigger.

  36. Slashdot by Andy+Dodd · · Score: 2, Informative

    Slashdot renders like crap in Mozilla 1.7.x

    Specifically, the "left side" menus and the main page overlap most of the time. (That's what the original poster meant by "Slashdot left side".)

    Half the time ONLY the left side menu and nothing else renders.

    For the past month or two, /. has been HORRIBLY broken in Mozilla.

    www.geocaching.com's front page is also broken in Mozilla.

    --
    retrorocket.o not found, launch anyway?
  37. OK try this one by spineboy · · Score: 2, Informative
    --
    ..........FULL STOP.
  38. Does this surprise anyone? by Xentax · · Score: 4, Interesting

    I'm a little annoyed (But not exactly surprised) that there's so much fuss about this.

    I can understand companies needing time to upgrade to a new version of the OS in particular, and software in general.

    But XP is the newest major version of the desktop OS. There is, AND SHOULD BE, and end-of-life for the older versions. Who's still running a 1.x kernel of Linux? What percentage are even running 2.2x? Does Apple still patch Mac OS 8 or 9 (I'm asking, I don't actually know the answer)?

    I see all this "MS forcing you to upgrade" talk - well they're HARDLY the only company out there that does this, how else will a company that makes software for profit stay alive? This includes every gaming company out there, Oracle, Peoplesoft, etc. etc., in addition to the other OS vendors (Apple, Sun, RED HAT...you get the drift).

    I guess maybe the sentiment is that 2000 isn't old enough "yet" to be back-burnered like this? That's at least debatable. But the notion that MS is wrong to wean people off of the older versions over time is folly.

    Xentax

    --
    You shouldn't verb words.
    1. Re:Does this surprise anyone? by C0vardeAn0nim0 · · Score: 3, Insightful

      problem here is, IE shoud _NOT_ be considered part of the OS, and as such it should be supported as a standalone product, no matter what microsoft says.

      --
      What ? Me, worry ?
    2. Re:Does this surprise anyone? by JPelorat · · Score: 2, Informative

      There's a difference between "Nobody uses product X so we're not going to support it anymore" and "We're not going to support product X so you better stop using it"

      XP accounts for only half of the Windows installed base of 390 million. Half. Win2000 is around 17%. That's what, 65 million installations? Nah, nobody uses that shit anymore.... fuck em.

      Sheesh.

      --
      Hokey statistics and ancient misconceptions are no match for a good thought in your head, kid!
    3. Re:Does this surprise anyone? by mod_parent_down · · Score: 3, Insightful
      But for a lot of people Win2k is their *favorite* Windows OS.

      It's kind of like how Ext2 is a big favorite even though there are all these clever new FSes. The maintainers never said "Hey, we're done. Upgrade to Ext3 or a journalized FS."

  39. Re:HotJava? by ImaLamer · · Score: 2, Insightful

    I fail to see how Opera is a viable choice considering that Mozilla and Safari are free (as in beer).

    I'm being completely serious here mind you. Opera will fill a niche market, but that is how Netscape "died". Internet Explorer was free, and un-bundled in the beginning. Being a Microsoft product it was favored by the masses.

    Now that Mozilla is gaining word of mouth marketshare it will again be the standard. Opera will not last long, all IMHO.

    After all, how many people want ads IN their browser.

  40. Reduced MS Market Share by JustAnotherBob · · Score: 2, Insightful

    All I see is this gives Google even more incentive to roll out their Gbrowser even sooner. M$ great job at shooting yourself in the foot... again... "Nobody will ever need more than 640k RAM!" -- Bill Gates, 1981

  41. Thank you, Microsoft! by ParnBR · · Score: 4, Insightful

    Timing couldn't be better. Until the end of the year, we'll have Firefox 1.0 ready. A Brazilian Portuguese version should be ready not long after. I'm happy with this, because I work as a network admin in a public school in Brazil, and this situation will enable me to mandate a no-IE policy in our LAN. We only have licenses for Windows 2000, therefore we aren't eligible for IE updates. IE6, by itself, is already dangerous, despite the fact SP2 is a step in the right direction. But an unmaintained IE6 is nothing but trouble, and I think it will be easy to convince the school's principal of this. I foresee this happening in many other places, now.

    Thunderbird is my next target, I'm eagerly waiting for a full-feature, almost-no-bugs release. I had some trouble this week with some recalcitrant Outlook Express users and viruses, and I already managed to convince them to change the e-mail client. You can use good arguments to convince them, but downtime can usually be even stronger than your arguments. ^^

    --
    My neighbor's .sig is better than mine.
  42. Outlook users are in trouble by mrkitty · · Score: 2, Insightful

    Now that IE patches are going to stop users of outlook (aka enterprise) on win2k will have to switch unless they want to get 'auto infected' by viruses. While people may switch to foxfire for browsing, switching away from outlook will be very difficult for enterprise users. Note: You will always have the idiot who will click on an attachment.

    --
    Believe me, if I started murdering people, there would be none of you left.
  43. More /. editor FUD by YU+Nicks+NE+Way · · Score: 3, Informative

    If you read the actual article, you'll see that what it says is that the new features provided in SP2 for IE (the popup blocker and the notification bar at the top) are not going to be back-ported to older operating systems. That's not the same as saying that "Microsoft To Provide IE Patches for Windows XP Only". In the article, Microsoft commits to continue patching IE for older versions, particularly for security bugs.

    (And don't tell me that the submittor picks the title. The editors pick the title -- in this case, the title doesn't even match the submission, much less the article.)

  44. Unfortunately though, by HerculesMO · · Score: 2, Insightful

    your logic isn't 100%. Microsoft has a share of the market that affects users to a much higher degree than does Linux or Macs. Macs are rarely used for internet edge type applications like web servers, and let's be honest -- if Linux ran as an internet edge with 1.x versions... they would be just as bad as MS is now.

    A *lot* of companies still run NT4 as their web servers and I agree, there should be an end of life for those servers entirely, as IT has an evolving cost and also helps to increase innovation in areas inside IT, by using more cutting edge technology. However, the example of Windows 2000 being pushed out is ludicrus, because many companies still use it widely since the difference between that and XP are few and far between.

    --
    The price is always right if someone else is paying.
  45. Re:Soup nazi ref? by Leomania · · Score: 4, Interesting

    Heh... I *just* saw that episode again last night. Classic.

    Really, how can ppl buy MS if they know that in the future they may not recieve any support for their insecure software?

    Let's compare Microsoft vs. OSS. The browser is one component (integrated into the core OS in Windows, yes, and that should NEVER have happened) but there's countless other bits of software that make up an operating system and its applications. I am still running a copy of Windows 2000 on one box, and I still get updates for various flaws from time to time, about four years after purchasing it. I'm pretty pleased about that.

    By contrast, I can't keep a Linux distro on a box for longer than about two years. I can modify a spec file and rebuild a RPM with (the second cousin of) the best of them, but at some point things just stop building properly. The solution? Upgrade to a new distro. Just went through this on my mail/web server a couple of months ago; damn but it's hard to make the new versions of all the software play nicely together. But I digress...

    Overall, I'd say MS is up there with the best of them in terms of shipping updates that are compatible with a fairly old version of their software, their broken security model notwithstanding. I'm a lot less concerned about broken components like IE that I can (happily) replace than core OS components needing an update that I am stuck with... thankfully those are rare enough in my case.

    Anyway, I'm a flip-flopper on the subject of the OS I use; both Windows and Linux (oh yeah, Solaris too) on a daily basis and have both a use for, and issues with, all of them. C'est la vie.

    - Leo

    --
    You don't use science to show that you're right, you use science to become right.
  46. M$ Partners by JambisJubilee · · Score: 5, Insightful
    This should provide a huge boost to Mozilla and other alternative browser backers.

    Unfortunately, I don't think it will. I work for a small business (a Microsoft partner) which provides IT services for other small to medium sized businesses. We provide both solutions and support. If we chose to use a non-microsoft product, we loose tens of thousands of dollars in support. No viruses, worms, spyware, hijacked browsers == no money.

    It seriously bothers me, but I would argue that the strength Microsoft has is not in providing well written software, but providing poorly written software prone to exploits.

  47. Security bugs vs. design flaws vs. enhancements by davidwr · · Score: 2, Interesting

    The pop-up blocker is an enhancement.
    To a non-naive user, pop-ups are an annoyance, even a temporarily crippling one, but nothing that can't be stopped by rebooting. They do no lasting damage to the computer itself, assuming the user ctrl-alt-deletes rather than hitting the Big Red Switch. I can't say I blame MS for not making that available on pre-XP-compatible versions of IE.

    Changing ActiveX is another matter. That's a design flaw or an outright bug, take your pick. Not changing it is irresponsible. Microsoft needs to take a lesson from the Kryptonite lock people, who are offering trade-ins on bicycle locks that were recently discovered to have a poor design.

    As for the other changes to IE for XP SP2, some are bugs, some are design flaws, and others are enhancements. Microsoft is morally obligated to give the 1st two to anyone using a supported version of IE.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  48. Interesting... by bcmm · · Score: 3, Interesting

    Microsoft has announced that security updates will be available to users of pirate copies of XP, but not to users of old versions of Windows...

    It looks like they are keen to keep even pirates in the update cycle. Maybe they would rather those who won't pay pirate Windows than use an alternative?

    --
    # cat /dev/mem | strings | grep -i llama
    Damn, my RAM is full of llamas.
  49. Quite OT, but.. Flash, Linux, Fonts by maskedbishounen · · Score: 2, Interesting

    In a completely unrelated, yet somehow similar manner, I have an issue with Flash (under Linux). Specifically, because of the lack of Windows' fonts, I oft lack text from Flash content (effectively breaking many sites). Case and point? Macromedia's very own site. The top navigation menu, as well as the drop-downs from that, are lacking all text.

    I hear that you can install the MSFT web fonts pack and have better luck. Perhaps I've done it improperly, but I'm still having such issues.

    The moral of the story? We need some Free^2, good, cross-platform fonts specifically designed for the web. Especially useful is bundled with our OS, or browser, or something.

    Yes, even proprietary web technologies needs to be accessable by anyone and everyone, regardless of browser/OS/available fonts.

    And no, I'm not implying we should have ActiveX ported to Linux. Honestly, ActiveX is fine, but it needs to stay off the web entirely for the general good.

    --
    "An infinite number of monkeys typing into GNU emacs would never make a good program."
  50. A Little Bit Of Dan Rathering Don't Ya Think? by The+Dobber · · Score: 3, Insightful

    Microsoft states:

    "We do not have plans to deliver Windows XP SP2 enhancements for Windows 2000 or other older versions of Windows," the company said in a statement.

    SlashDuh gurgles:

    Microsoft has decided that future IE updates, including those related to security, will only be available to customers using Windows XP.

    Slashdot generating it's own FUD now?

  51. 'Security patches' vs. 'security enhancements' by waynegoode · · Score: 2, Insightful
    That's what I like about slashdot--an interesting, intelligent and levelheaded conversation about topics of interest.

    There are two different things that are being confused in the news.com article, the slashdot article and the slashdot comments: 'security patches' and 'security enhancements' lets call them.

    'Security patches' are bug fixes to solve problems in the browser. These are needed to have a secure browser. They are not new features. The 'security patches' will continue for other versions of Windows.

    news.com: Microsoft promised "ongoing security updates" for all supported versions of Windows and IE. and The ongoing security updates do not, as Microsoft points out, include the latest security fixes with Service Pack 2, released last month.

    The 'security enhancements' are the new features added to IE in XP SP2 such as pop-up blockers. There are new useful features--nice to have, but the products still works without them. The security enhancements are only going to be available in XP.

    from news.com: Microsoft this week reiterated that it would keep the new version of Microsoft's IE Web browser available only as part of the recently released Windows XP operating system, Service Pack 2.

    The security enhancements are important though and there absence will be felt by those who use IE:

    news.com: And it's those more substantial changes, rather than the bug fixes that come with routine upgrades for supported products, that security organizations have lauded for addressing IE's graver security concerns.

    For me, it's all academic. I've been using Firefox/Firebird/Phoenix/Mozilla since Mozilla 1.2 and I used Netscape before that. I've never used IE as my main browser.

  52. Re:Firefox shines, but free hard to believe for so by Frank+T.+Lofaro+Jr. · · Score: 2

    Then don't try to educate them.

    Put free software on CDs, sell them, and make money doing so.

    With CD-Rs, you can make a nice profit with very low volume and very little investment.

    Just make sure the particular free software license allows that.

    --
    Just because it CAN be done, doesn't mean it should!
  53. Re:TROLL ALERT! WINDOWS TROLL ALERT!!! by Tony-A · · Score: 2, Interesting

    "The most secure version of Windows today is Windows XP with SP2."
    The most secure version of Windows tomorrow will still be my unpatched NT4 Workstation with a few gizmo handlers neutered.

  54. Be Scared, Be Very Scared by Nom+du+Keyboard · · Score: 2, Insightful
    is a steep price to pay to secure a browser that swept the market as a free, standalone product.

    Be very scared. If this trial succeeds, you'll be forced into the Microsoft upgrade schedule for everything, instead of upgrading on your own schedule.

    I don't upgrade operating systems because my old computer won't even run the modern OS well. WinXP would take nearly 2/3's of my maxed out 384MB just to load itself. I'm stuck with what my hardware can handle.

    It is in the best interests of all of us that Microsoft does not succeed in this!

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  55. Microsoft's Consistency is GUI by abb3w · · Score: 5, Interesting
    What part of THIS don't you get?


    How Microsoft is reconciling that with THIS:


    "Microsoft remains committed to providing security updates to our customers for all supported Windows versions."


    I suspect it means that the popup blocker, new download protector, IE plug in controls, window relocation blocker, e-mail screening, and e-mail bug blocker will not be made available for anything but XP-SP2. Which kinda sucks, but is mostly OK. If only it were possible to view the "Downloaded Program Files" folder without Windows Explorer filtering the contents; possibly the plug-in manager would improve that, but I doubt it. I've found the best blocker for these stupid add-ins and adware pieces is creating an empty NTFS folder where it wants to go... and then setting all permissions to "Everyone -- Deny".

    --
    //Information does not want to be free; it wants to breed.
  56. This is probably one of the biggest obstacles... by WebCowboy · · Score: 3, Interesting

    ...that Firefox and Thunderbird must overcome:

    As I installed Firefox, he kept asking "And it's free? Why? What's their business model?" As a salesman, he just couldn't swallow that it could be a full-featured application AND available for free.

    Almost *all* PC users who have never known anything but Microsoft Windows are suspicious of free software (and always confuse free/libre with free/gratis). People in sales/marketing are just extra slow learners in this respect ;-). Additionally, past experience with these folks is that you must either spend money on or pirate/"steal" software, because free==adware and spyware. They have been taught this by experiences with Kazza and other "free" P2P sharing software, comet cursors, custom smiley addons, Weatherbug, etc etc.

    I have converted my parents, my girlfriend, some of her family and a few of our friends (all running some MS Windows variant) to Firefox (and Thunderbird in a couple cases) and all have been happy with the change. However, there is one person (whom I know only through chatting on Yahoo Messenger) that is totally convinced that Mozilla is a company with a business model built around distribution of adware. This stems from the fact that he claims to have tried Thunderbird late last winter/early spring and it coincided with an increase of pop-ups and system crashes while he used it to browse. He cleaned his system up (removing Firefox and a few other things) and it worked better again.

    I told him that the crashes MAY have been due to the fact that he was using an earlier beta version (but not even guaranteed). I also told him it was ABSOLUTELY IMPOSSIBLE for an install of genuine Firefox to be the source of the pop-up ads and that it has always been my experience that Firefox gets RID of them. There was no convincing him that it was another one of his "free" programs (he has all manner of Yahoo Messenger toys like YTunnel, replacement smileys, booters to get rid of the dirty old men hitting on his 15 year old daughters, boot stoppers, etc). I even edvanced the theory that he may have gotten a tainted/hacked version of Firefox and that you should get it right from Mozilla. He contends that that is where it came from.

    He had the same kind of questions as your sales friend, and kept responding to my answers with more questions:

    Him: "If they give all their programs away and there was no ad-ware, how does Mozilla make any money?"

    Me: "They don't. Mozilla is a non-profit foundation. The programmers are volunteers or paid through donations"

    Him: "Well that just means they don't make a profit. The companies that donate money to Mozilla are getting ads in return for their sponsorship"

    Me: "Not all of the project sponsors are corporations and none of them want advertising. Some are individuals who give their time and/or money as well. Also, the idea is that the project is Open Source, so even though a company or person might only have/be one developer on the project they can reap the rewards of an entire team of people and see the code like everyone else"...etc etc

    Him: "I dunno...sounds fishy to me. I'd really check out that Mozilla outfit to make sure they are legitimate. Right now, I don't trust their programs on my computer. It's not like they are just little toys...the web browser and email are important parts of the OS"

    The lesson here: don't just tell doubters to download it and try it out. Actually be there to oversee the installation, and explain what is going on in ther PCs. If Firefox or any other software that is free is anywhere near their PC when bad things happen, it'll be the first think a sceptical convert that runs Windows will blame.

  57. As I've always said, IE was never 'free' by Rob+Y. · · Score: 5, Insightful

    Back in the days when Mozilla wasn't a great performer, lots of /.'ers would say stuff like, "if IE's a free download, why should I use this crappy Mozilla stuff". Well, now you know why.

    It was only a matter of time before MS decided to tie browser upgrades to OS upgrades. After all, for a large portion of users, the browser's the only app they use. With their ill-gotten browser semi-monopoly, why wouldn't MS force you to buy an OS upgrade to get a new browser. DOJ? Not this DOJ.

    Sounds like as good a reason as any to separate the browser from the OS. After all, this side-effect of bundling can't possibly be regarded as beneficial to consumers, and consumer benefit was the only defense they could come up with for exempting their bundling from antitrust regulations.

    --
    Posted from my Android phone. Oh, I can change this? There, that's better...
  58. So what about Win2k servers running IE? by Money+for+Nothin' · · Score: 2, Insightful

    Is MS going to let IE in the Win2k server series go unpatched then?

    Sounds like a r00ting waiting to happen.

  59. Suggested answer. by Balinares · · Score: 3, Insightful

    Here's what you can tell them:

    "Firefox is what you get when people get together for the purpose to write the best possible software, rather than to make money."

    This usually conveys the message pretty well, I found.

    --

    -- B.
    This sig does in fact not have the property it claims not to have.
  60. Huge boost? Not likely. by Trillan · · Score: 3, Interesting

    Think about it for a moment. The only boost to Mozilla and others will be users who:

    1. Are still using Windows 2000 or earlier.
    2. Are willing to try new things -- but not including Windows XP
    3. Have not already switched to an alternative

    Now, I'm not saying it's zero because clearly it won't be. But it's equally clear to me that those first three are at least somewhat contradictory, so it certainly won't be a huge boost.

  61. But, more specifically by soybean · · Score: 2, Interesting

    Only for XP systems that are upgraded to SP2. They know that there is _no_ way to secure (applications on) older operating systems.

  62. M$ Comments met With Fury on ArsTechnica by Starluck · · Score: 2, Interesting
    Hello everyone I posted a comment on the Arstechnica Discussion/forums on my thoughts and disgust with microsofts decision to only support SP2 on XP machines. I would really love to know if it's just me or are the posters on Ars being M$ loving asses? Hers the link to the discussion. The post I wrote are under my Ars Screenname Lynxplus, Take note of the Second posting and the comments that ensue as well as my last post ever on the Ars Forums. Iw ould really love to hear what a fellow Slashdotter or 2 thinks about what I wrote. If I'm wrong in anything I said I will gladly take the critisizm. So please tell me your thoughts... Regards, JH

    Here is the link
    http://episteme.arstechnica.com/eve/ubb.x?a=dl&s=5 0009562&f=174096756&x_id=1095956039&x_subject=SP2+ Internet+Explorer+enhancements+for+Windows+XP+only &x_link=http://arstechnica.com&x_ddp=Y

  63. Re:TROLL ALERT! WINDOWS TROLL ALERT!!! by Tony-A · · Score: 2, Interesting

    Umm, you can turn off services to make a system more secure on any OS - XP, 2000, NT 4, NT 3.5, ME, 98, 95, 3.1. So, it is misleading to say that NT 4 with services disabled is more secure. You are basically turning it into a stand alone box with very little networking functionality - of course it will be more secure.

    Plausible assumptions maybe, but dead wrong. It's the Domain Controller's main workstation that's up and logged in as root 24/7. The only services disabled are messenger (Kill the Messenger) and Computer Browser (Gateway Computer - Kill the moo cow). It has Outlook running, with peview active. No anti-virus software, but a few folders named VIRUS. It's got a copy of Melissa on the Desktop from when Melissa was fresh. It's even got a VNC server running that I haven't accessed remotely in over a year. The only thigs done to ehance security are sticking a _ in front of the name of the executables for Windows Scripting Host and friends and of course unhiding filename extensions and such. Piss-poopr security really, but when the big one hits it will be standing and Microsoft's latest and greatest will be dead.

    from Windows is the 'biggest beta test in history' - Gartner
    "Victor Wheatman, Gartner security veep, told delegates at the IT Security Summit in London that the most secure organisations spend less than the average and that the lowest spending organisations are the most secure."
    There's a message in that. I wonder if it's getting through. If you want gizmos instead of security you don't get security. This includes security gizmos.

  64. Re:This isn't going to help Apple one bit. by kilfarsnar · · Score: 2, Informative

    I agree with your basic point, but a new Mac can be had for $800 these days. Sorry to gripe, but as a Mac user I get tired of hearing about how overpriced Macs are. Yeah, the top Power Mac is expensive. But a high end Dell workstation (which is what a Power Mac is, a workstation) is as expensive with similar components.

    --
    "What the American public doesn't know is what makes them the American public." -Ray Zalinsky (Tommy Boy)