Slashdot Mirror


Interview of the Windows XP SP2 Dev Team

Masa writes "SuperSite for Windows has a nice interview called "Windows XP Service Pack 2: The Inside Story". The interview gives a good insight, what kind of a project the Service Pack 2 was, how it got started and how huge effort it actually was." The ITMJ Product Guide is part of OSTG, as is Slashdot.

12 of 392 comments (clear)

  1. what? by Nadsat · · Score: 5, Funny

    I followed the link, but it was only a story about the quest for the Holy Grail. Except the Holy Grail was a dixie cup, and the crusaders took twice as long to search for it, but still came up with nothing, except t-shirts with corporate logos.

  2. prophetic by OffTheLip · · Score: 5, Funny

    "The reason we called it RC1 was that we wanted people to think that we were serious." I for one welcome our serious microsoft overlords... for a change.

  3. This quote sums it up by TrollBridge · · Score: 5, Interesting
    From TFA: "I can make it so secure that it doesn't work, or I can have 100 percent compatibility"

    So at Microsoft, either something works and isn't secure, or is secure and doesn't work.

    I know, this isn't really news, but it's not every day you hear it from Microsoft.

    --
    There's a Mercedes gap too. I want one and can't afford one, but it's not government's job to do anything about it.
    1. Re:This quote sums it up by lordfener · · Score: 5, Interesting

      I know you're making a joke, but on a serious note in the Windows world the comment is not too far off-center. In the world of computer-illiterate (not meant in a offending way) end users, security is somewhat connected to usability. A bit like taking a Ferrari and then adding enough features that my mom could drive it in the snow without causing a genocide ;-) Non-Windows people--Linux in particular--reason in completely different terms, which result in overall safer, but far less usable for the layman, software. I prefer the Linux way, too... but not everybody thinks the same way :)

  4. Can it ever be fixed? by anicca · · Score: 5, Interesting
    Todd: I thought we'd never ship XP SP2. I just wasn't sure if we could get to the quality level that we need to be at in time. Paul: In time ... ? Todd: Before the next [round of dangerous exploits].
    That says it all. Even the team in charge of fixing the holes knows there will be new breaches almost immediately. Like http://it.slashdot.org/article.pl?sid=04/12/25/143 3236&tid=172&tid=128&tid=201&tid=1
    --
    A people that values its privileges above its principles soon loses both. Dwight D. Eisenhower
  5. Note IE by spac3manspiff · · Score: 5, Insightful

    Looking at the timeline, almost half of it was filled with 'fixing' Internet Explorer
    Just drop IE and spend more time on the freaking OS.

  6. Some windows bugs can't be fixed by SnappyCrunch · · Score: 5, Interesting

    I've been reading The Old New Thing for a few months now. It's a blog written by a guy at Microsoft (I don't know what department), and among the things he writes about is why windows sometimes works in unexpected ways.

    Yeah, Windows has lots of bugs. But some of those bugs can't be fixed, because certain major programs rely on those bugs . When you fix the bugs, you break the programs. Almost every bug fix windows gets these days is accompanied by a program breaking. MS has to try and decide whether enough users are affected by the bug to make the fix worthwhile.

    MS has been pussyfooting it about breaking programs in the past, and I'm glad MS finally bit the bullet with SP2 and broke all those programs in the name of security. It was high time. Of course, it means I have to keep a second PC around for some older games, but hey, that's life.

  7. such a waste... by erroneus · · Score: 5, Insightful

    The people at Microsoft know what is wrong with Windows. They have a variety of reasons for not fixing it. I can't say I agree with them completely but some of them make good "business" sense. It's too bad they care more about "business" than the quality of the product itself.

    When Apple did MacOSX, they basically created a "WINE" for MacOS9. Not everything was/is perfect but a great many things continue to work without problems. They didn't sit back and say "oh... we have business reasons for not overhauling the whole OS and starting over from something more secure and stable from the start."

    I have said it before and I say it again: Microsoft is perfectly capable of doing exactly what Apple did: Make a new OS and make a WINE to run the old stuff until people finally migrate over. I'm not a developer but there are plenty of examples out there to show it's not impossible. I know I can't be the only person who has ever thought of it and I wonder why they haven't done this at Microsoft already? Some people here have been kind enough to put forth some reasons why Microsoft hasn't just abandoned its current Win32 model -- essentially business reasons -- so can someone offer some likely reasons why Microsoft wouldn't build a new OS and then make a WINE for backward compatibility?

  8. Insightful quote... by gwiner · · Score: 5, Insightful
    "Todd: We knew we had a bigger problem than just enabling the firewall. And so at that point, I sent out a mail to everyone in the division saying, "This is what we're going to do. We're going to take a little bit more time to do it. And if you want to submit a security feature, you should do so, and then show up at this room." Well, the next day, it was standing room only, and everyone had a security feature that they wanted to check in. It went all the way down from things like the new Bluetooth stack, to the new Windows Media Player, to the new Group Policy stuff, and on, and on, and on, and on."
    I find it interesting that MS is so aware of their security problems internally, yet still claims to put an emphasis on security. This exchange seems to be good evidence that they ship ahead of any thorough security analysis/testing. Not only did they realize on closer examination that their own firewall didn't work, but half the division shows up with suggestions for known security concerns. Clearly this shows people's voices are not being heard. I guess I'm not surprised, but this seems like fodder for a lawsuit.
  9. Microsoft needs more programmers, it seems? by diegocgteleline.es · · Score: 5, Interesting


    Todd: I'm talking Windows [Division] in general, or Microsoft in general. The Longhorn wave ... we kind of took a year off. We kind of stopped the train, went back and fixed some problems in XP, and now we're gearing the momentum back up. We are getting ready to focus on Longhorn.

    As I had previously read this is not a joke, just look at this quote from a Microsoft worker: http://www.longhornblogs.com/robert/archive/2004/0 8/06/4352.aspx:

    Now, at the same time all this has been going on, there has been a lot of complaining about the constantly slipping Longhorn release date. I haven't weighed in on that too much yet, but I think it's time to break my silence. Microsoft shifted between 80-90% of the Windows Client Team off Longhorn development and onto Windows XP SP2.



    Is not that the SP2 is a bad thing. Is a great improvement, but it took so many time, it was delayed so many times...that's all what Microsoft can do? I mean, they just put all they resources in the SP2 and it took them forever to release it.

    Perhaps it's just me, but the open source world evolves much faster and has more resources than Microsoft. Every 6 months I see more evolution in the OSS field than what I saw in SP2 (and again, it's not that the SP2 was bad - it was great! But just look at fedora 3 with its SELinux integrationand all the rest. We're being faster than them IMHO, and how fast can you evolute is more important than "how good are you today"

  10. Sigh^2 by Ancient_Hacker · · Score: 5, Insightful
    After reading TFA I don't know whether to laugh or cry:
    • Microsoft's best are not able to turn off Media Player 8.
    • Media Player 9 went thru a "security audit", so it must be better than 8, which has been tested by several hundred million people.
    • Enabling a firewall breaks *everything*. Apparently they havent heard of a simple GUI with easily-understood checkboxes. (See IE options... for the classic counterexample).
    • They somehow expect a semi self-anointed czar of security patches to gain everyone's support.
    • Nowhere is it mentioned the (estimated) 45,000 uses of unsafe string functions in the source code.
    Sigh^3?
  11. Tux?? by tsager · · Score: 5, Funny

    Following the first link in the story leads you to this picture (eventually):
    http://www.winsupersite.com/images/reviews/war_tea m_85.jpg

    Isn't that a penguin?
    Isn't that Tux?
    What's he doing there?
    Spying?

    Or... noo. They hold him captive??!