Slashdot Mirror
No Patch On Tuesday For Internet Explorer Hole
An anonymous reader writes "Right on schedule, Microsoft on Thursday announced its usual advance notification for the upcoming Patch Tuesday. While the company is planning to release seven bulletins (two Critical and five Important) which address 12 vulnerabilities, there is one that is notably missing: a bulletin for the new IE vulnerability discovered on Saturday. For those who didn't see the news on the weekend, criminals started using a new IE security hole to attack Windows computers in targeted attacks. While IE9 and IE10 are not affected, versions IE6, IE7, and IE8 are."
Upgrade from XP and install IE9/10. What other manufacturer provides quick fixes for a decade old OS that is now three versions out of date?
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
They did release a FixIt, but yeah no real patch its looking like until Feb.
Is anybody going to notice? Are there still ppl out there who use internet explorer? Honestly?
Believe it or not, Microsoft does a *lot* of testing around security fixes like this to make sure they aren't leaving similar holes or creating new ones. It sounds like this vulnerability became higher priority late in the patch cycle and didn't make this one.
MS provides long support lifecycles, 10 years from release minimum and subject to extension, which XP has been. XP will continue to get updates until mid 2014.
I'm sure they intend to fix it, they just haven't gotten the fix tested yet. MS can't just go and bash out a fix and release it and hope nothing goes wrong, they have to regression test their fixes and it is not a fast process.
Is working as it should. Not a bug, but a feature only available in internet explorer.
They fought (clean and dirty) to become top dog on the OS and browser front. Now what?
Botnets aren't composed of mostly Windows computers just because it's the most prolific (bought and pirated). It's also because of more than a decade of complacency.
I hope we'll see more real competition on all sides for the company for all our sake. Please, MS, dip into that vast wealth of bought out resources and your own research to make genuinely better products going forward at least. Side note: it's fashionable to bash Windows 8 for both real and trumped up charges, but it's just a symptom of a bigger problem. Less on the lines of Win 8, more of IE10.
If computers were people, I'd be a misanthrope.
Apple generally charges $100 per upgrade and they only do fixes for 2 versions old, so they'll update 10.6 now, but not 10.5. At the rate they release, you have to update every few years to keep getting patches. RedHat charges $350-8600 per year depending on the options you want ($350 is for self support 2 socket x86, $8600 is for premium support 4 socket POWER). Oracle charges a retarded amount of Solaris support, it is kinda a hardware/software combo support and is thousands a year, and you have to uninstall any updates if you stop paying for support.
If you pay for the software, you pay for updates at some point. MS is pretty good in that regard. 10 years from the date of release, sometimes extended. So Windows Server 2012, for example, will be supported until 1/10/2023 at a minimum.
Even in the world of free software, updates are still required for support after a time. Canoical supports a Ubutnu release for a max of 5 years (for LTS, regular is 2 years). After that, you have to get the new version. It is free, but you still have to get the new version.
Also, Windows isn't "several hundred dollars" unless you are talking Windows Server, and even then only new usually.
What better way to convince IE6-8 users to stop being so stupid?
Upgrade from XP and install IE9/10. What other manufacturer provides quick fixes for a decade old OS that is now three versions out of date?
I am astonished that anyone sane would measure from the start of the XP cycle which was unnaturally long from extensive problems as Microsoft not the user. That means that 2007 when Vista was released is a much more reasonable time....If it was any good. It wasn't it ran badly on most (all) of the machines at the time which lest many people waiting windows 2007. I have four machines in my house...only one supports Windows 7, Windows 8 is quite but none have a touch screen...making Windows 8 a no no for me.
The reality is that scenario is not unusual currently 35% of people (1 in every three) currently run XP(Vista has already dropped to 5%)
Actually there's no need to upgrade, just install Firefox. Of course older hardware may actually not be able to upgrade to windows 7 and would benefit from a linux install. Just because you're lame doesn't mean everyone is.
The fact that Microsoft are so incompetent that they cannot support their own OS is he point. Using Firefox is work around.
With Linux's only 2% desktop share, everyday's a 'slow day' in Penguinland!
After being disappointed Penguinland was not a real place discovered that Girls Games 1 has a "Penguin Land" It did not work but I got blinded by pink...F**cking love pink.
Anyway...this shit is why Linux is 75% of mobile devices and Microsoft is on 2% (Not the penguin thing) People don't buy Microsoft Phone/Surface because they want software than just works...and well that is Android. If Microsoft put more effort into creating a great experience maybe things would be different now.
It's $40. Have fun.
Most XP machines will not run Vista/Windows 7/Windows 8...ignoring the fact that Windows 8 is awful. People will upgrade when their computer dies...if at all.
What better way to convince IE6-8 users to stop being so stupid?
Most won't even notice; They will just marvel that the tablet that cost a fraction of the PC runs several times faster...and no it won't be surface.
...That is right are either low or zero cost to upgrade, with smaller hardware requirements. If the same was true of Windows this wouldn't be the problem it is.
Haha, I actually bought a windows phone because I wanted a phone that just worked and the shitdroid I had didn't. Have fun managing which apps are on your SD card like it's 1996.
I am going to bookmark your post and point to it every time someone makes reference to Windows Phone.
the DiscoverCard points redemption, myaccountaccess.com to redeem Visa/MC points, US Treasury/IRS website to remit payroll withholding, the UNUM Insurance payment site, NetTeller online banking
to name just a few that are IE only. The will not work with ant version of Firefox or Chrome
Even if you take into account every single device running Linux, it's still nothing compared to the number of devices running Windows.
Windows PC is hovering around 1.25 Billion...and shrinking a little bit, Android had hit only 625Million End of last quarter with activations hitting 1.3million daily...the number people are quoting now is 1.5miillion(ignoring the Christmas spikes). Android is expected to pass Windows this year.
Its kind of sad really. At least with Secure boot they can establish a few more years of lock-in, Go out like you came in I say.
Windows 8 has lower requirements than Vista/7.
I am willing to bet that most Windows XP systems still in use are capable. I have an 11 year old old Pentium 4 PC that meets those requirements.
One of the problems when Vista launched was most computers were running intel chipsets i915 wih 256mb or less and below that aren't going to be suddenly capable now, and would be less functional with Windows 8. That is ignoring all the hardware that won't work with Vista+ a lot didn't get drivers. Whatever you think of Windows 8. Its only worth getting on contemporary hardware with a machine (Maybe with good Vista hardware...if I was given a touchscreen monitor...but I'd wait for those to dip in price.)
That's not Patch Tuesday. It's Pathetic Tuesday.
How can microsoft wait to release important patches once a month instead of pushing them out as soon as they are ready?
That's really sad how stupid windows administrators are that they agree to be treated like that.
The difference is, most other companies don't charge you several hundred dollars for an operating system upgrade just to patch important software vulnerabilities. In fact, most other operating system distributors don't even charge a penny for such a basic service.
They aren't charging you to patch the security problem, they are charging you to get you the hell off Windows XP, which they don't want to support going forward because it no longer represents a marginal ongoing income for them.
Windows XP support was was announced dropped several times, finally dropped, and I understand that people don't like this, and that Microsoft had finally made an OS that was "good enough" that people don't see an incentive to "upgrade" to an OS that can only laughably be called "improved". But they aren't selling the stuff any more, and the Windows XP fan boys need to get over the fact that it's dead.
Couching a demand for Windows XP support as if it's actually a demand for a security fix for a totally separate browser product because it's convenient for you to consider them separate after Microsoft has already been hauled into court and censured for it definitely NOT being separate isn't going to get you support for your antique Windows XP.
This is no more likely than that the tactic will get you support for Windows 95 SP 2, which was also an OS that was "good enough" for most business uses, and it was only the Windows 98 SP1 bait-and-switch that made Windows 98 suck so badly that people were willing to "upgrade" to Windows XP.
Maybe Microsoft needs to use the same tactic again, and release a sevice pack for XP that makes it suck worse than Windows 7/8 to cause people to *want* to upgrade?
I don't know... but it's time to pry the cold, dead Windows XP from your fingers.
See my subject-line above, & justify the downmod...
* I don't believe *ANYONE* can...
APK
P.S.=> I simply told it HOW IT REALLY IS, with facts, on both IE9/10 & yes, Opera also... & yes, also about JAVASCRIPT, PLUGINS, JAVA, ActiveX, COOKIES, IFrames/Frames & more being a MASSIVELY EXPLOITED THREAT online!
I.E.-> You "cut them out" as I do in Opera by it's "By Site Preferences"? You cut out avenues of exploitation (bonus), by default!
Especially on sites you do NOT NEED THEM RUNNING ON (most don't) & IN DOING SO, you surf faster as well as using less CPU cycles, RAM, & other forms of I/O as well (double bonus)
... apk