Slashdot Mirror


Google To Support Windows XP Longer Than Microsoft

An anonymous reader writes in that Google plans to support XP longer than Microsoft. "Microsoft will officially retire its Windows XP operating system early next year, but Google on Wednesday announced it will continue to support its Chrome browser for the platform through at least early 2015. The Mountain View, Calif., Web giant announced it will keep sending out updates and security patches to the Windows XP version of Google Chrome 'until at least April 2015.'"

154 comments

  1. not news. by Anonymous Coward · · Score: 0

    also doesn't matter.

    1. Re:not news. by Joining+Yet+Again · · Score: 1

      Yeah, but, "The Mountain View, Calif., Web giant announced..." according to an "anonymous reader".

    2. Re:not news. by Anonymous Coward · · Score: 1

      I like how the sensationalist title tries to imply that Google is going to be publishing patches and updates for Windows XP just like Microsoft has for the past 10 years.

  2. Google WTF are you doing? by Anonymous Coward · · Score: 2, Insightful

    Just let XP finally die...

    1. Re:Google WTF are you doing? by CohibaVancouver · · Score: 5, Insightful

      Just let XP finally die...

      Why? My retired parents have a Gateway PC that runs perfectly fine and runs XP perfectly fine. Doesn't crash, doesn't blue screen, they just turn it on and it works. If it ain't broke don't fix it.

    2. Re:Google WTF are you doing? by Neo-Rio-101 · · Score: 5, Insightful

      The trouble is that unless it's going to stay disconnected from the internet, one day it's going to get owned, and then you'll need a upgrade plan and you won't be in any position to make a transition because your PC is toast.

      --
      READY.
      PRINT ""+-0
    3. Re:Google WTF are you doing? by fuzzyfuzzyfungus · · Score: 2

      Just let XP finally die...

      Probably betting that they can score some IE6 marketshare that might otherwise turn into IE9/10 marketshare by telling risk-averse microsoftie corporate admins that, while they aren't Microsoft, they are your best chance if you still want to cling to XP after MS hangs you out to dry. I'm assuming that the job will not be a plum assignment on the Chrome team; but it isn't necessarily an illogical strategy.

    4. Re:Google WTF are you doing? by fuzzyfuzzyfungus · · Score: 5, Funny

      If I hadn't already commented, I'd give you +1 Funny for using the future tense when describe when the system is going to get owned.

    5. Re:Google WTF are you doing? by Anonymous Coward · · Score: 1

      I hate when people say "If it ain't broke don't fix it" as that has so many bad applications.

      1. Windows would still use IE6 (it still renders webpages, so it clearly ain't broken - hell, we could go back to mosaic with this)
      2. We wouldn't have spoked wheels (it's not like the original design of the wheel was broken)
      3. Fiber internet connections wouldn't exist (did dial-up ever actually break?)

      Even if you were to counter something like "things move on" or "improvements don't mean it was broken" well couldn't the same thing be said about XP to virtually any newer OS?

      Are you against software updates that add features too? (because clearly a bug fix update is for something that is broken)

    6. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      There is no IE 6 market share.... at least not outside of China. For that matter there is very little IE 7 market share. The best they could hope for is to pick up some IE 8 market share.

    7. Re:Google WTF are you doing? by FuzzNugget · · Score: 1

      Just wait until April of next year and see if you can say the same thing.

    8. Re:Google WTF are you doing? by Neo-Rio-101 · · Score: 0

      Yeah I guess I was a little optimistic there wasn't I?

      --
      READY.
      PRINT ""+-0
    9. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      "8.1's UI sucks" - which is why I'll be sticking with XP.

    10. Re:Google WTF are you doing? by UnknownSoldier · · Score: 1

      You're seriously going to use IE6 as a bastion of standards?!?!

      The concept of the wheel has been around for *thousands* of years. The *implementation* is what has been modified and improved upon.

    11. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      People who comment this stuff: are you stupid or trolling?

      If you're trolling, congrats, you got me.

      If not trolling, I'm sorry to break it to you, but you're just dumb.Someone above already explained this. Using 2001 technology in 2013 is just not a smart move. You said your parents are retired. Are they also poor? It seems mean that you can't afford to buy them a new PC. Christmas is coming up you know. Don't be a scrooge. Windows 7 is pretty good. Or like, Ubuntu or something. But surely you love your parents enough to give them a bit of an upgrade. Do you also wear the same underwear for 12 years? It lasts but at some point, you gotta buy fresh undies.

    12. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      And XP has been modified and improved on. Using "If it ain't broke don't fix it" in this case is stupid.

      Instead, you can say that you have no incentive to move onto a newer version because it currently fulfils the needs of the user.

      That is completely different than the off-hand and dismissive "If it ain't broke don't fix it".

    13. Re:Google WTF are you doing? by Anonymous Coward · · Score: 1

      XP is fine for an OS you toss in a virtual machine to run for Web browsing

      If XP is fine for browsing in a VM, then XP on a physical machine should be just as fine for browsing if you simply put a hardware firewall between it and the Internet. Since ISPs tend to deny inbound connections on consumer-grade plans, chances are the ISP's firewall is sufficient already.

    14. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      Using 2001 technology in 2013 is just not a smart move.

      Windows XP + Patch Tuesday October 2013 = 2013 Technology, dumbass.

    15. Re:Google WTF are you doing? by bill_mcgonigle · · Score: 5, Funny

      If it ain't broke...

      If it weren't broke, they wouldn't be getting new fixes every second Tuesday.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    16. Re:Google WTF are you doing? by Lisias · · Score: 4, Insightful

      1. Windows would still use IE6 (it still renders webpages, so it clearly ain't broken - hell, we could go back to mosaic with this)

      Are you nuts? IE6 was utterly broken since the very beginning!!!

      2. We wouldn't have spoked wheels (it's not like the original design of the wheel was broken)

      The original wheel design was broken for the use the guy that invented the spoked wheels had in mind. He needed a big but lightweighted wheel, and solid wheels couldn't be properly used that way - so, it was broken! =P

      3. Fiber internet connections wouldn't exist (did dial-up ever actually break?)

      Are you kidding? I jumped out dial up in the very instant I could afford broadband! :-)

      Constant "no carrier" breakouts, slow speed, busy lines... Dial up was used just because it was what we could afford in the time.

      On the other hand...

      I still have an old Athlon XP box here at my side for some retro-gaming, and guess what? It's running Windows XP. WIth all the security measures I implemented here to protect my inner network, the fact is that my XP box is secure as never it was before.

      I simply don't have the slightest incentive to throw it away and waste more money on a "newer" box, as the current one is fullfilling perfectly the computational niche it plays now.

      Of course I use another box to day to day computing (a Mac Mini), but why bother setting up a virtual machines if I can play my games perfectly on a 3GHz Athlon XP with a Soundblaster Audigy and an ATI Radeon 4670 with 1GB?

      Until this machine is dead, I don't have a single unique reason to buy another (it handles the games I play, and that's all).

      --
      Lisias@Earth.SolarSystem.OrionArm.MilkyWay.Local.Virgo.Universe.org
    17. Re:Google WTF are you doing? by Anonymous Coward · · Score: 1

      You cannot be sure that it is an energy hog. It might have a lower performance per watt, but its overall power usage is not necessarily higher than a modern PC which is what actually matter when we are talking about a lightly used single personal system.

    18. Re:Google WTF are you doing? by Stormwatch · · Score: 1

      That same PC might also run a fully modern (more secure) lightweight Linux distro.

      On the other hand, parents...

    19. Re:Google WTF are you doing? by atlasdropperofworlds · · Score: 0

      But it's dead simple to install a 3rd party start menu. Also, 8.1 boots to desktop, so now you don't need to see the new interface.

    20. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      And if it does break, my first step would be to dump Windows entirely, not upgrade it to a newer version.

      In that sense I don't really care whether Microsoft continues XP support or not. When/if lack of XP updates becomes an actual security issue rather than a hypothetical one, it's getting dumped. Problem solved.

      It's not like security updates stop people from clicking "Yes" to everything anyway.

    21. Re:Google WTF are you doing? by cbiltcliffe · · Score: 1

      Since ISPs tend to deny inbound connections on consumer-grade plans, chances are the ISP's firewall is sufficient already.

      Really? I've been receiving incoming connections on my consumer-grade plan for a decade or more. I've seen plenty of others do the same. In fact, I've never heard of a consumer plan having inbound connections blocked.
      I've heard of carrier grade NAT, but only in theory. Never seen it actually implemented. What ISPs actually do this?

      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
    22. Re:Google WTF are you doing? by avandesande · · Score: 1

      I hope he has a disaster plan for when the basement floods...

      --
      love is just extroverted narcissism
    23. Re:Google WTF are you doing? by Anonymous Coward · · Score: 2, Insightful

      I'm going with "I must be stupid", because I don't see anything wrong with continuing to use something that's perfectly functional and doesn't have any issues. I'm waiting until it *actually* breaks. Windows XP has been updated ever since 2001. Is it old and creaky? Yes. But it's been maintained. Does it have all the neat new OS security features? No. That probably does make it more vulnerable overall, and I certainly wouldn't recommend it in a business or shared environment where security issues are particularly important. But properly configured it's fine for plenty of uses.

      Am I cheap? Hell, yes. So, no, I won't be upgrading to Windows 7. I run Win 7 on some higher-end machines that I have, but XP on my home machine has run for years without issues. I don't see any significant advantage to Windows 7 other than 64-bit support. It runs slower on the same hardware. So, why spend more than $100 for something that is marginally better in some ways and worse in others? When the security updates are demonstrably becoming an issue because of lack of updates for XP, *then* I will install a Linux distro. For now it's only a hypothetical, and by the time significant problems crop up I'm expecting that the hardware will have been retired or failed anyway.

      Don't get me wrong. If there's a good reason I'll spend plenty of money on hardware and software. But I don't see the point if the gain is this minimal and things are working well as-is.

    24. Re:Google WTF are you doing? by AHuxley · · Score: 1

      That self updating, free, XP friendly, 2013 aware anti virus software will save them :)

      --
      Domestic spying is now "Benign Information Gathering"
    25. Re:Google WTF are you doing? by antdude · · Score: 1

      And sometimes fourth Tuesday of the month. Once in a while, out of bound!

      --
      Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    26. Re:Google WTF are you doing? by mixmasta · · Score: 2

      I agree with the sentiment, but XP is a bit dangerous and will get worse.

      My advice... back up the important files and install Xubuntu.

      --
      #6495ED - cornflower blue
    27. Re:Google WTF are you doing? by OhANameWhatName · · Score: 1

      Doesn't crash, doesn't blue screen

      How does such blatent trolling get a +5 Insightful?

    28. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      I'm waiting until it *actually* breaks. Windows XP has been updated ever since 2001. Is it old and creaky? Yes. But it's been maintained.

      Come April next year, it won't be maintained anymore, and at that point Google would be supporting an unmaintained OS.

      I don't see any significant advantage to Windows 7 other than 64-bit support. It runs slower on the same hardware.

      It may run slower on the same slow hardware, but it actually runs faster on the same fast hardware.

    29. Re:Google WTF are you doing? by thsths · · Score: 3, Interesting

      Not really. The OS does not protect you against the internet, because it has only minimal contact with it. Most attacks will not come through the router, and client based attacks should be prevented by the browser. Using XP with Chrome throughout 2014 may not be a dangerous as some people fear, as long as Google includes workaround for relevant flaws of the OS such as font handling.

    30. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      But it's dead simple to install a 3rd party start menu.

      Which one works fully? When I tried Classic Shell, I still got the tablet UI in some situations, e.g. when I needed to get to the Control Panel.

    31. Re:Google WTF are you doing? by cbope · · Score: 1

      If it ain't broke, then why does MS still keep pushing out patches for XP? Because there are exploitable holes, that's why.

      The whole thing falls apart after April 2014 when MS stops pushing out any patches for XP. Zero-day exploits will undoubtedly appear shortly thereafter, and now black hat hackers will have a huge incentive to target XP machines because they know that once they are in, a patch is not coming to close the hole. Think about that for a moment...

      The only way to keep an XP machine safe from attacks after April 2014 is to unplug it from the internet completely.

      Please let it die, it's had a good run. It's time to move on.

    32. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      Are you nuts? At the time it was released, IE 6 was the best browser around. There was seriously not a better option in 2001.

      Now, between 2001 and 2006 (when IE 7 was finally released), other browsers overtook it and IE 6 was no longer very good compared to the state of the art. But to say it was never good is either delusional or you are too young to actually remember browsers in 2001.

      No right thinking person would run IE 6 today. But similarly, no right thinking person would run Netscape 6 today. Or fvwm95 on Linux kernel 2.0.

    33. Re:Google WTF are you doing? by sd4f · · Score: 1

      It's simple, Microsoft doesn't make any money from WinXP anymore, so support is pointless, whereas, google still does make money from it.

    34. Re:Google WTF are you doing? by Daimanta · · Score: 1

      But it's dead simple to install a 3rd party start menu.

      Which one works fully? When I tried Classic Shell, I still got the tablet UI in some situations, e.g. when I needed to get to the Control Panel.

      Using Windows 8 + Classic Shell. I have configured Classic Shell in such a way that it never shows the tablet UI. And it's nothing more than checking some boxes in the configuration, easy as pie.

      --
      Knowledge is power. Knowledge shared is power lost.
    35. Re:Google WTF are you doing? by JohnnyMindcrime · · Score: 1

      Most attacks will not come through the router

      Erm, explain?

      Attacks that aren't coming from the router could only be on the local network by implication, so that possibly means locking down wi-fi and making sure any devices on the local network are locked down with secure passwords on all accounts.

      But the above would apply to computers running *ANY* OS, not just XP...

      --
      Windows 10 is great - I used it to download Linux.
    36. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      Because someone funner than the troller had mod points?

    37. Re:Google WTF are you doing? by Noughmad · · Score: 1

      Most attacks will not come through the router

      Erm, explain?

      Attacks that aren't coming from the router could only be on the local network by implication

      They could also be between keyboard and chair.

      --
      PlusFive Slashdot reader for Android. Can post comments.
    38. Re:Google WTF are you doing? by JohnnyMindcrime · · Score: 4, Insightful

      Rubbish!

      For any PC to get owned that is tucked behind a NAT router, it's the user that has to do something stupid first.

      If all you ever do is use a web browser to go to well-known sites and you know how to read and interpret a URL, then unless one of those sites has been hacked and some malware has been injected into it, nothing will happen to you. In my experience in computer and Internet security, it's going to dodgy sites for pr0n or warez that opens the doors to something nasty.

      Likewise for email - don't use a client like Outlook that has deep hooks into the OS, use a lighter client and always delete emails that are from sources you don't trust.

      Security has very little to do with what's built into the OS, it is far more about educating users to understand what the likely attack vectors are and to moderate their own behaviours to mitigate their risk of being exposed to those vectors.

      --
      Windows 10 is great - I used it to download Linux.
    39. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      I'm running 2.0.36 with an uptime of 15 years, you insensitive clod

    40. Re:Google WTF are you doing? by Luckyo · · Score: 1

      Not really. Keep it behind safe firewall and OS itself is unlikely to become a vector.

      At which point other vectors become important. One of them being web browser. Which google is going to keep up to date.

    41. Re:Google WTF are you doing? by TractorBarry · · Score: 2

      I have a machine running XP. It runs my music software beatifully. The associated, expensive, not optional to replace hardware has no drivers for 7 and above. Additionally Windows 8 is a total pile of shit.

      XP is staying on this machine.

      --
      Sky subscribers are morons. They pay to be advertised at !
    42. Re:Google WTF are you doing? by JohnnyMindcrime · · Score: 2

      Or fvwm95 on Linux kernel 2.0.

      I do wish people would remove from their minds the notion that "newer always is better".

      There is absolutely NO reason to not be running a Linux kernel 2.0 with fvwm95 if it delivers what is required on the system on which it is running - why would you upgrade a system which is perfectly happy running this set up?

      --
      Windows 10 is great - I used it to download Linux.
    43. Re:Google WTF are you doing? by Anonymous Coward · · Score: 1

      You are implying that:
      1) there is no firewall
      2) that the firewalls won't be updated
      3) they are stupid
      4) they don't have a computer(s) before the XP machine that has cutting-edge hardware and software that is all up to date and is cleaning up anything before it even reaches the XP machines.

      I've never had a single virus since early 90s when I started using computers. I started when I was basically 15-ish.
      Most viruses are a user problem (even ones that use very easily seen exploits). The rest actually are stealth exploits that have 0 visibility to the user and require no actions. And those are still small.

      That makes me wonder why one of these security software companies hasn't made a Sanitisation Proxy that cleans up files for you as you browse through it.
      Would be great for crappy machines, of course everyone would Panic and collectively begin to crap their pants because "onoz privacy". (while they post using a VPN...)

    44. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      The trouble is that unless it's going to stay disconnected from the internet, one day it's going to get owned... ...which is why MS shouldn't EOL it yet. It's one of the most popular OS's, even 10 years after it was introduced.

    45. Re:Google WTF are you doing? by agentgonzo · · Score: 1

      Just let XP finally die...

      Why? My retired parents have a Gateway PC that runs perfectly fine and runs XP perfectly fine. Doesn't crash, doesn't blue screen, they just turn it on and it works. If it ain't broke don't fix it.

      I see that you're typing these slashdot posts on your abacus then?

    46. Re:Google WTF are you doing? by Aqualung812 · · Score: 1, Insightful

      Your experience is wrong.

      Cross-site scripting has allowed ads on very normal sites (MSN.com, CNN.com, etc) to infect XP computers that are fully patched.

      --
      Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
    47. Re:Google WTF are you doing? by The+Pirou · · Score: 1

      I understood it to mean 'Most attacks will be thwarted by the router setup,' as it is less likely that he was implying there would be a greater amount of physical or local threats.

    48. Re:Google WTF are you doing? by geekoid · · Score: 2

      That's becasue its a server/browser issue, not an OS issue.
      Has there been a successful XSS attack on a fully patched XP in the last 2 years?

      Basic Home systems used casually where people don't click on pop up ads, go to trusted site are pretty safe. The risk analysis show pretty clearly that a patched XP behind a NAT is pretty safe, and certainly not worth the cost of upgrading.

      IF they poster has set them up with auto back-up, then there is no reason for them to change.

      IF we are talking about 100's of machine in an organization where the data is extremely valuable, and the recovery process is expensive, then the cost of upgrade can be worth iit.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    49. Re:Google WTF are you doing? by odie5533 · · Score: 1

      Isn't that because of bugs in the browser?

    50. Re:Google WTF are you doing? by CohibaVancouver · · Score: 1

      How does such blatent [sic] trolling get a +5 Insightful?

      Because it's the truth. (c) 2005 Gateway hardware running a patched XP, Chrome, Thunderbird & Office 2000. No crashes.

    51. Re:Google WTF are you doing? by RabidReindeer · · Score: 1

      If I hadn't already commented, I'd give you +1 Funny for using the future tense when describe when the system is going to get owned.

      And I'd mod the whole thread ironic, considering the number of zero-day exploits that have come up for Windows 7 and 8.

    52. Re:Google WTF are you doing? by geekoid · · Score: 1

      "The only way to keep an XP machine safe from attacks after April 2014 is to unplug it from the internet completely."
      SO when MS stops support, their going to also turn of my firewall and AV programs? No? STFU.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    53. Re:Google WTF are you doing? by LordLimecat · · Score: 2

      For any PC to get owned that is tucked behind a NAT router, it's the user that has to do something stupid first.

      If all you ever do is use a web browser to go to well-known sites and you know how to read and interpret a URL, then unless one of those sites has been hacked and some malware has been injected into it,

      Yea! Except thats the MOST COMMON ATTACK VECTOR out there. Most viruses are coming from "legitimate" websites which either have ads or have been hacked and are serving up infected PDF, Java, or flash objects.

      Plus, the whole idea of "just go to well-known sites" is the stupidest advice ever to come from redmond. This isnt 1995; it is neither uncommon nor particularly far-fetched to use google to look up some bit of information, and find your answer on a site youve never been to before. Should the user now vet every restaurant site, every reviews site, etc?

      In my experience in computer and Internet security, it's going to dodgy sites for pr0n or warez that opens the doors to something nasty.

      Your experience is wrong, and Id suspect is the result of confirmation bias. In business settings ive been in, ive seen countless viruses appear in the morning (8-9AM) on receptionist PCs where the user visiting a "dodgy site" is incredibly unlikely, and their browser history has tended to prove that.

    54. Re:Google WTF are you doing? by LordLimecat · · Score: 1

      Except for the whole "XP lacks separation of privileges" thing, which makes every minor attack on a webpage capable of rooting your machine, together with the lack of any sort of OS hardening other than DEP, sure.

      XP is as old as Linux 2.4 (which was EOL'd 3 years ago). Would you ever run Linux 2.4 as your desktop OS?

    55. Re:Google WTF are you doing? by JohnnyMindcrime · · Score: 2

      I don't claim to be as much an expert on Windows 7 as I am on Linux and perhaps XP, but the only additional security that I understand Windows 7 has but XP doesn't is the UAC stuff - and that's primarily there to stop idiots who are logged in with administrator privileges not allowing everything to run that asks to run.

      If you are the average clueless user that used to use XP that has migrated to Windows 7, are you suddenly going to start paying attention to UAC prompts asking you questions?

      And please define what you mean by "EOL'd" when applied to Linux 2.4? Yes, development has stopped on the 2.4 branch but I am sure there are still many individuals and organisations using it, and any vulnerabilities in it can be mitigated through backporting of existing patches or other external mitigation. Either of those two might be easier solutions for certain organisations than upgrading to a later kernel.

      With closed source software that has some Internet functionality, there's a strong case for buying the latest upgrades in order to avoid security issues - but there are, as I've shown, other alternatives open to you with Open Source software, not least to fix the vulnerability yourself.

      --
      Windows 10 is great - I used it to download Linux.
    56. Re:Google WTF are you doing? by Aqualung812 · · Score: 1

      That's becasue its a server/browser issue, not an OS issue.

      When the default browser is tied to the OS, and the OS will not permit running the latest version of that browser, it is an OS issue to me.

      Has there been a successful XSS attack on a fully patched XP in the last 2 years?

      No. If I were someone writing these, though, I would wait until April 2014 to release anything I had since Microsoft will not post fixes after this date.

      --
      Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
    57. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      "Why?" - This! XP (32bit) is the best Windows version yet.

    58. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      I don't want to support it anymore! It's 5 versions back now. If they want to use it until the end of times, fine but I'm not going to help them and google shouldn't either. This isn't like firefox or chrome where version numbers jump everyday. We're talking about major changes in the OS both at the UI and kernel levels at this point. Can you imagine running a 2.4 linux kernel right now? How about Mac OS 10.3? It's insane.

    59. Re:Google WTF are you doing? by JohnnyMindcrime · · Score: 1

      Yea! Except thats the MOST COMMON ATTACK VECTOR out there. Most viruses are coming from "legitimate" websites which either have ads or have been hacked and are serving up infected PDF, Java, or flash objects.

      With all respect, much of that still comes down to common sense of the user. Why would someone like me, with years of experience in IT and IT security, blindly open every PDF, Flash Object or Java app that is fired at me? And much of this comes down to keeping the appropriate executables updated - it's the PDF, Flash Object or Java program exploiting a vulnerability in the unpatched executable dealing with that format that's the problem - if you keep those updated regularly and avoid dodgy sites serving them, you've mitigated against most of those attack vectors full stop.

      As for ads, yes, it can happen that malware is served up within those - but again, highly unlikely in legitimate sites and mostly mitigated with a good ad-blocker.

      Your experience is wrong, and Id suspect is the result of confirmation bias.

      I've no idea what "confirmation bias" means, I've never come across that term before. I can only go by my experience in the industry and what I've seen with my own eyes. I've used XP since around 2003, in all that time I've had one piece of malware on any one of my PCs and I believe that came from downloading a dodgy zip file of an ancient DOS game I was after that I couldn't find anywhere else. I've never used anything more than a basic free virus checker, most recently Microsoft Security Essentials. Don't believe me, I don't care.

      In business settings ive been in, ive seen countless viruses appear in the morning (8-9AM) on receptionist PCs where the user visiting a "dodgy site" is incredibly unlikely, and their browser history has tended to prove that.

      In my experience, receptionists tend to be the brunt of practical jokes within their own organisations and IT people frequently work overnight - put the two together and I'd definitely want to rule out internal (to the organisation) tampering as a possible cause. I'd also consider the possibility of the receptionist herself unknowingly installing a trojan program which, over a longer of period of time, installed other malware on her machine. Just because it's there in the morning doesn't mean that what installed it only appeared during that previous night.

      --
      Windows 10 is great - I used it to download Linux.
    60. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      We surely live in a world of millionaires where people can just shell out money for software and hardware upgrades over night.

    61. Re:Google WTF are you doing? by Anonymous Coward · · Score: 1

      "XP lacks separation of privileges"

      Which is complete and utter bollocks, the NT kernel in NT 3.1 has the same security model as windows8. The difference is that the _DEFAULT_ user has admin privileges until vista.

      So, its easy in winXP. Make your user a normal non admin user, and right click "run as" and type the password if you want to run something with administrator privileges.

    62. Re:Google WTF are you doing? by tlhIngan · · Score: 1

      Just let XP finally die...

      You realize why Google's doing it right? Google knows a good chunk of their ad viewing population consists of users on Windows XP. They also know that XP browser support ends at IE8, with Firefox keeping current for maybe another year beyond that. They need to keep Chrome too because as long as there's a good chunk of people on the XP teat, there's a good chunk of ad-viewing population they make money off of.

      What, you expect Google to give up what probably amounts to 40-50% of their ad revenue by desktop OS?

      If XP continues to be a significant player, Google will keep supporting it as the money is there.

    63. Re:Google WTF are you doing? by jedidiah · · Score: 1

      > With all respect, much of that still comes down to common sense of the user.

      If you are still depending on the "common sense of the user" in 2013 then you are an idiot. This is an approach that has been proven wrong time and time again. It's a fundementally broken approach to system design. This is not news. This isn't even old news.

      It borders on computer archeology.

      --
      A Pirate and a Puritan look the same on a balance sheet.
    64. Re:Google WTF are you doing? by Monsuco · · Score: 1

      And I'd mod the whole thread ironic, considering the number of zero-day exploits that have come up for Windows 7 and 8.

      Except flaws in 7 & 8 will be fixed. Flaws in XP won't be. In fact, many of the vulnerabilities that affect 7 will also plague XP and due to XP's inferior security model, they'll probably be worse. When security notices for 7 go out, hackers will know to try those flaws out on XP.

    65. Re:Google WTF are you doing? by JohnnyMindcrime · · Score: 0

      No, I'm not an idiot - and the fact that you've had to resort to personal abuse just tells me I've already won this argument with you.

      I'm an IT security professional who understands what makes a system insecure by virtue of what attack vectors can be used to gain access to a system, and you would be very surprised to learn that fixing vulnerabilities within an OS are only a small part of securing against those vectors being exploited - this is why good security takes a layered approach, this is why you deploy firewalls and Access Control Lists that all help to stop the wrong people getting to those vulnerabilities in the first place. It's a fact, deal with it.

      Lack of common sense in a user is also an attack vector and therefore education of the user serves as mitigation to that vector - how that is or is not dealt with in the real world is irrelevant to this discussion, it exists. Period.

      It borders on computer archeology.

      That borders on nonsense - "computer archeology"???

      --
      Windows 10 is great - I used it to download Linux.
    66. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      What is Google doing? Capitalizing on a marketing gold mine without actually having to do anything. I mean seriously, how do you think Google Chrome updates?

      Most likely by using the same version-checking-auto-updater code that runs on all versions of Windows, from XP on up. Why would they bother changing it if it simply works? After XP is long dead, they'll probably stilll be using the same update process. This isn't news. There is one version of Chrome for Windows. Not one for each version of Windows...

    67. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      If Microsoft is smart they might "accidentally" leak some new flaws for XP as soon as they drop support, thus forcing everyone to upgrade or be hacked.

    68. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      but I cannot just leave this Nigerian princes that call my dear hubby alone.....

      not after whole life in parent's cellar.

    69. Re:Google WTF are you doing? by fuzzyfuzzyfungus · · Score: 1

      XP will obviously be the more important one in real terms (given that people actually use it); but it would be interesting to know whether XP or Vista will be more screwed by malicious actors either hunting exploits in 7 and 8 or studying patches issued for 7 and 8 for clues to use against unpatched systems.

      Both will be largely unsupported by MS in the near future; but while XP has the fundamentally more broken security model, Vista is much closer to 7 and 8 architecturally, and so probably has (inferior) versions of anything that was changed when they jumped from XP to 7.

    70. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      IE6 was broken from its inception. By "broken" I mean it didn't conform to standards; Microsoft had the retarded idea that they owned the internet and didn't have to follow standards. It was a real pain in the ass for webmasters to code around IE6's clusterfucks.

    71. Re:Google WTF are you doing? by tibit · · Score: 1

      The firewall is not an antivirus proxy. People normally get owned because they pull malware from the network. Said malware may be as "simple" as a PDF or JPEG file that exploits a vulnerability. Firewall doesn't help here.

      --
      A successful API design takes a mixture of software design and pedagogy.
    72. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      The standards you wish it conformed to did not really exist in 2001. Netscape 6 was no better.

      Sure, it's not standards compliant by 2013 standards, or even 2006 standards. But by 2001 standards, it was not bad.

    73. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      I never had any bluescreens with XP (just like the other guy who responded to your comment). However, I did have crashes, which got worse and worse and more and more frequent, while the Mandriva side (dual-boot) never had a hiccup -- until the flaky power supply that was making XP crash went out completely. Windows is simply not tolerant of flaky hardware, never was, still isn't with W7.

      If your post-W98 box is crashing and bluescreening, you have hardware problems.

    74. Re:Google WTF are you doing? by WuphonsReach · · Score: 1

      Bullshit. The vast majority of drive-by browser infections these days come from either hacked sites or ad-networks that serve up malware in an ad (usually JavaScript or Flash, but sometimes Java plug-in).

      Case-in-point. I have a user who would get infected monthly, just from doing research on the web using Internet Explorer on WinXP. Not visiting dodgy sites, but doing regular business research on companies / products / etc.

      Finally got tired of cleaning/wiping the machine monthly so we installed Firefox + FlashBlock + NoScript. Problem went away and no further infections have occurred (even as other machines in the office got infected). Because the JavaScript / Flash objects don't run unless they are white-listed, they can't be used to infect the machine just because it loaded an ad object.

      --
      Wolde you bothe eate your cake, and have your cake?
    75. Re:Google WTF are you doing? by LordLimecat · · Score: 1

      You wouldnt open them, but your browser would unless you (unlike 90% of users) changed the default setting and used an extension or browser which makes those objects click-to-play.

      You can argue the point but it is statistically the most common vector, and my experience is that users who are infected are usually not "doing something wrong", other than failing to update their plugins.

      it can happen that malware is served up within those - but again, highly unlikely in legitimate sites and mostly mitigated with a good ad-blocker.

      You call it unlikely, I call it statistically common. It has historically happened a LOT.

      I've no idea what "confirmation bias" means, I've never come across that term before.

      It means that you have a hypothesis, and most evidence that you get will be interpreted to support that hypothesis. If you are dealing with home users, you may be aware of certain bad habits they have and use this to reinforce your idea that viruses are because of computer misbehavior. But the two may not be related at all, and my experience when narrowing down the point of infection is that they generally arent.

      I'd also consider the possibility of the receptionist herself unknowingly installing a trojan program

      I do consider that possibility, and its easily checkable by looking in the downloads folder and in the browser history. Every virus (save maybe one or two) ive seen in the last several years has originated in the temp folder, which is not used except for plugin objects (these users are on firefox / chrome, so no "InternetExplorer-clicked-run-not-save").

      Just because it's there in the morning doesn't mean that what installed it only appeared during that previous night.

      Well, thats true, but there are actual statistics out there about where this malware comes from:
      http://www.securelist.com/en/images/vlill/q2malware2012_pic04_all.png
      (Source: http://www.securelist.com/en/analysis/204792228/Monthly_Malware_Statistics_April_2012 )
      This shows Adobe + Java accounting for ~70% of detected attacks; these are usually drive-bys that trigger a plugin exploit.

      There are other sources showing the same sort of thing, but the basic trend has been to use drive-bys as they are more reliable, and it is incredibly difficult to keep all users up-to-date with all of their plugins. Virus-writers go for the low hanging fruit, and it is simply going to get a higher hit-rate to infect every user with an out of date Adobe plugin than to try to entice users to download and run a file. You have to keep in mind that Adobe Reader is installed on something like 95% of internet-connected computers (one stat I saw said 98%), and that it has historically been riddled with security problems.

    76. Re:Google WTF are you doing? by LordLimecat · · Score: 1

      I don't claim to be as much an expert on Windows 7 as I am on Linux and perhaps XP, but the only additional security that I understand Windows 7 has but XP doesn't is the UAC stuff - and that's primarily there to stop idiots who are logged in with administrator privileges not allowing everything to run that asks to run.

      TO some degree, thats right, but it does a lot more than "stopping idiots". I tried running as non-admin, and I tried setting it up for many users, but the reality was that many programs simply would not work without admin privileges, and it was a nightmare to configure and work with. Runas only worked some of the time, some programs inexplicably refused to run if they failed the admin check, there was no real capability of modifying protected files while logged in as a normal user (as you cannot easily / without hacks do a "runas" on explorer.exe), etc etc etc.

      UAC allowed non-admin logins to actually be feasible for 99% of users. It also introduced the idea of truly gaining and dropping privileges on the fly, rather than the binary "either you are or arent an admin".

      And please define what you mean by "EOL'd" when applied to Linux 2.4?

      I simply went to the Linux Kernel wikipedia page, which noted that 2.4.37.11 was released in 2010, and it stopped being maintained in December 2011. The official announcement is here:
      https://lkml.org/lkml/2010/12/18/73

      and any vulnerabilities in it can be mitigated through backporting of existing patches or other external mitigation

      The term EOL refers to when it no longer has support. Attempting to backport patches to a kernel that hasnt been supported in 2 years sounds rather daunting and ill-advised. Running 2.4 in production on anything that is not heavily resource constrained boggles the mind, honestly. Even newer DD-WRT builds are using 2.6, and they generally have under 64MB of RAM and processors clocked under 500mHz.

      not least to fix the vulnerability yourself.

      Are you aware of how time-intensive a job like that would be for something as simple as Firefox, let alone the monstrosity that is Linux? How many lines of code are we dealing with here? Ever heard the term "regression"?

      If you want to be the one to explain to your boss how your backported patch caused all sorts of unexpected fun, and there are no companies who can provide anything resembling support because of that backport, go ahead. EOL is EOL, and theres a reason people stay away from it.

    77. Re:Google WTF are you doing? by LordLimecat · · Score: 1

      The difference is that in practical terms the most popular accounting software on the planet will not run in XP if you are not the administrator. It is not the only software that does this.

      You can get away with non-admin on XP, but its a gigantic pain in the butt, and UAC is honestly the best thing about windows 7.

    78. Re:Google WTF are you doing? by rahulov · · Score: 1

      Windows XP is by many critrerias still better than any newer Microsoft OS. It is fast, takes less resources (RAM), supports more devices, can run more applications. Windows XP is actualy so good OS that Microsoft actualy needs to shut it down in order to make people buy new HW and OS. Security is only excuse they have.

    79. Re:Google WTF are you doing? by Lisias · · Score: 1

      Are you nuts? At the time it was released, IE 6 was the best browser around. There was seriously not a better option in 2001.

      I beg your pardon, but I'm nuts^w^w I don't agree with you. :-)

      IE6 was a terrible nightmare for security - I can't even start to count how many exploits IE6 users were vulnerable. I just can't understand why IN HELL Microsoft thought it could be a good idea to expose inner OS mechanisms (COM objects, by God's sake!) to Joe HoTMeTaL .

      The only people I know that thinks IE6 was good was people that develops IE6 only webpages to be visualized in Intranets were the user just can't access, openly, the Internet.

      --
      Lisias@Earth.SolarSystem.OrionArm.MilkyWay.Local.Virgo.Universe.org
    80. Re:Google WTF are you doing? by Anonymous Coward · · Score: 0

      Your PC toast ?....come on.

      By that time run Lubuntu 14.04 LTS Live ,download Gparted if not already there and clean HD to make it unallocated.
      Subsequently install Lubuntu 14.04 LTS and use it like Win XP for many years to come ....free and with free upgrades.
      Linux is King !

  3. Flip side of monopolizing by Anonymous Coward · · Score: 0

    When we all worried about MS bundling IE, the flip side is their incremental cost and surface area make supporting IE for example untenable past the OS date, because it is so intertwined

  4. The headline should be by Anonymous Coward · · Score: 5, Funny

    Google To Support Windows XP Longer than Its Own Fucking Products

    Really, who cares about this kind of marketing Gotcha stunt. It's for the likes of eweek and cnet to analyze.

    1. Re:The headline should be by bondsbw · · Score: 1

      Yeah, by the headline you'd think Google is providing support for Windows XP itself. You know, if you take any headline coming from this site without a grain of salt.

      --
      All my liberal friends think I'm a conservative, all my conservative friends think I'm a liberal.
  5. Priorities by Anonymous Coward · · Score: 2, Insightful

    Nice one Google. I really appreciate how you are keeping support for XP when there will soon have been four new releases and 13 years since XP was released, and yet you dropped support for the latest version of RHEL.

  6. Version Number by dysmal · · Score: 0

    Maybe this is is just a ploy by Google to keep their Chrome version number larger than FF's.

  7. because Windows Server 2003, obviously by Anonymous Coward · · Score: 0

    Microsoft will support Windows Server 2003 until July 14, 2015. Windows Server 2003 is basically the server edition of Windows XP. So in actual fact, XP is not really retiring until 2015 anyway.

  8. Not surprising by Anonymous Coward · · Score: 0

    I'd imagine their cost to do this is very low. What exactly is different about Chrome for XP from Chrome for Vista? Not much, I bet.

    Furthermore, Google makes recurring income from their browser in the form of ads and data. If there were a reasonable amount of users who wanted to pay by the month to continue using XP, I'm sure that Microsoft would support it for longer.

  9. for most retired people, up-to-date Chrome (no IE) by raymorris · · Score: 4, Insightful

    These retired parents probably aren't playing massive online games, so approximately all of their online activity will be through the browser.

    As long as the browser is a) up-to-date and b) not tightly coupled with the system shell, that's almost an up-to-date system as far as the internet is concerned. What I mean regarding coupling is that if Explorer gets exploited, the system is owned because Explorer the browser ~ Explorer the desktop ~ Explorer the file manager. If Chrome gets exploited, the worst that can happen is that web pages get messed with, not the system.

  10. Big deal... by Anonymous Coward · · Score: 0

    It isn't a hard job to make updates to a single application that is already buildable on some existing operating system. It's much harder to keep an entire operating system patched and updated. So, it isn't surprising that Google - or anyone else - will keep applications updated on XP long after Microsoft's own support for XP itself ends. I plan to do the same thing for my own Windows applications: since XP is still so widely used, the benefits of a larger user base for my applications easily justifies the minimal differential cost of providing updates for it.

  11. Wine or ReactOS Opportunity by digitaltraveller · · Score: 4, Interesting

    It would be hugely amusing if one of these projects announced (even in jest) that they were would continue to issue patches for XP after EOL.

    1. Re:Wine or ReactOS Opportunity by Anonymous Coward · · Score: 0

      I'm going to probably sound retarded here, but how hard would it be to harden an XP install? You know, drop a proper firewall in there, install Chrome, get rid of Outlook and put Thunderbird or some other email client on there that doesn't promiscuously execute attachments, lock down all unnecessary services, close open ports, install some good anti-virus and anti-spyware, etc. I heard tell that the Chinese who use XP use a product called "360" that does something like that. I mean, yeah, end to service patches, but so what if you close off any obvious means to infiltration? "How hard can it be?"

    2. Re:Wine or ReactOS Opportunity by AHuxley · · Score: 1

      SP2, Avast?

      --
      Domestic spying is now "Benign Information Gathering"
    3. Re:Wine or ReactOS Opportunity by OhANameWhatName · · Score: 1

      how hard would it be to harden an XP install?

      It's easy. You setup a headless linux system with VirtualBox and script it to load an XP Virtual machine on boot. Take a regular backup of the virtual machine, if it gets owned .. roll back.

    4. Re:Wine or ReactOS Opportunity by Antique+Geekmeister · · Score: 1

      You can't get rid of Outlook. This was a source of monopoly abuse lawsuits with Microsoft, it's woven into the OS too deeply to gracefully remove and replace completely. You can't keep Java updated for it. Hardening the remainder is infeasible if you have other computers inside the same home network or if the host is exposed to the Internet, because another host that is infected even temporarily inside your local network can spread worms and viruses to such an old host quite easily.

      I've worked with people to try to secure such environments, but it becomes so labor intensive and so limiting so quickly,and so vulnerable to becoming a zombie and a security risk inside even a small network, the time and work are better spent setting up a new host in almost all cases. Even VM;ing it in a way that offers a "golden snapshot" that can be re-activated at whim and hae the active system deleted on a weekly basis can help, but the time and work exceed the cost of a new license or switching the host to a handy small Linux server for something useful.

    5. Re:Wine or ReactOS Opportunity by ananthap · · Score: 1

      Not sure whether it would be allowed (legal). I mean that AFAIR, the EULA said that windows (xp in this case) is the property of microsoft and even though the buyer bought a copy, they cannot disassemble, patch or modify it. Also you can't just sell your XP copy.
      OK

  12. yeah, but we can still ./install_chrome.sh by raymorris · · Score: 2

    I hear you. On the other hand, Red Hat and Centos users can still install the latest Chrome:

    # wget http://chrome.richardlloyd.org.uk/install_chrome.sh
    # chmod u+x install_chrome.sh
    # ./install_chrome.sh

    That's about 10 times too complex for most XP users.

    1. Re:yeah, but we can still ./install_chrome.sh by Anonymous Coward · · Score: 0

      You download a script from the internet and run it as root? WTF.

    2. Re: yeah, but we can still ./install_chrome.sh by jopsen · · Score: 2

      Sure you run script of the internet as root, just like on Windows XP :)

    3. Re:yeah, but we can still ./install_chrome.sh by n7ytd · · Score: 1

      You download a script from the internet and run it as root? WTF.

      I don't see "su -" or "sudo ./install_chome.sh" as any of the three steps...

  13. Good news by Anonymous Coward · · Score: 0

    This is actually good news, because people can start dropping support for IE8, and XP users still have an option in Chrome and FF. If Microsoft doesn't even support it, why should anyone else?

    Developers can tell customers to use Chrome, Firefox or upgrade to Win7 (and therefore making IE9 and 10 an option).

    Hurray!

    1. Re:Good news by Tridus · · Score: 1

      IE 8 is the base version in Windows 7 and used by a lot of corporate installs of that.

      Don't expect it to go away anytime soon, unfortunately.

      --
      -- "So they told me that using the download page to download something was not something they anticipated." - Bill Gates
  14. Re:for most retired people, up-to-date Chrome (no by VortexCortex · · Score: 4, Insightful

    Hell, if that's use the case, install GNU/Linux. Did that for lots of old folks at the community center who were in the same boat. Few, if any complaints. Wine can run most old programs -- Even re-united a guy with a few of his old DOS games via DOSBox. Most folks are surprised the system can actually run faster in most cases, and that it's free... So are the updates. "Why would anyone pay for Windows if this is free?" I just shrug. Beats the hell outta me. Going from XP to XFCE or Mint/Cinnamon is far less of a shock than Windows8 or Unity. Chrome and Firefox work the same.

    Throw in a spare RAM sim from my junk cache to top it up and you're good to go for as long as the hard drive holds out -- Laying down a new format track gives 'em a bit more life, and in most cases I can leave the XP partition there for dual booting into if they really need to run windows for some odd reason afterwards.

    Also, sure Chrome may be updated, but it talks to the OS and its that OS interface that'll get exploited through chrome whether the browser is up to date or not. Just ditch the OS, and learn your lesson: Don't use an OS you don't have the source for or be prepared for planned obsolescence.

  15. how long will EOL last? by Anonymous Coward · · Score: 1

    Wouldn't it be hilarious, if by June or July of 2014, Microsoft resumes pushing out the Malicious Software Removal Tool and patches for Windows Firewall again, after all the world's XP machines get malware at the same time?

    1. Re:how long will EOL last? by Anonymous Coward · · Score: 0

      They won't do that.

    2. Re:how long will EOL last? by Anonymous Coward · · Score: 0

      Microsoft will do what is best for Microsoft on any given day. If that means reversing course they will do that. Maybe they will maybe they won't and nobody here knows for sure.

  16. Wikipedia Blocks Qatar (January 2007) by tepples · · Score: 1

    I've heard of carrier grade NAT, but only in theory. Never seen it actually implemented. What ISPs actually do this?

    Mostly mobile ISPs and ISPs in less-industrialized countries. See what happened a few years ago when Wikipedia blocked the proxy that the whole country of Qatar was behind.

  17. Simple! by Anonymous Coward · · Score: 0

    Turn off the computer.

  18. Why is this even news? by ksemlerK · · Score: 1

    I can still download modern software that will run perfectly fine on Windows NT4 SP6a. I wouldn't run that POS OS, but if I were to do so, I could run pretty much everything that I wanted to and be able to have modern software on my machine that fills every conceivable need.

    1. Re:Why is this even news? by wonkey_monkey · · Score: 2

      that fills every conceivable need of mine.

      FTFY. Some people's computing needs may be fulfillable with DOS. People are different from each other.

      --
      systemd is Roko's Basilisk.
    2. Re:Why is this even news? by Anonymous Coward · · Score: 0

      The problem is that an important way that Microsoft deprecates the old OS versions is by removing support from them in Visual Studio. For instance, VS 2005 was the last one that could compile for Windows 2000, and I think VS 2008 is the last one that supports XP.

    3. Re:Why is this even news? by Anonymous Coward · · Score: 0

      This.

      Microsofts problem is that they have based their company around reselling basically the same OS with some new paint and annoying re-arranged interfaces (or scrapped and replaced with literally dog shit for an interface, wooo Vista interface...!)

      If they actually supported all of the OSes to a minimum extent and focused on the main, they'd likely actually retain more customers over those switching to Linux.
      That is future money they burned by doing absolutely minimum patchwork every month. Hire people, pay people for bugs, etc.
      They could have done it. But nope, gotta win by version locking people out of new stuff.
      No problems there in Linux guys, you should use Linux, every version works and is updated(ish), a hundred different kinds for whatever the weather.
      And they wonder why people switch to Linux? No fuss with new versions, no uncertainty, once setup, it Just Works. (until an update shits out a universe and the sysadmin goes in to a trance)

  19. Re:for most retired people, up-to-date Chrome (no by OhANameWhatName · · Score: 1

    Going from XP to XFCE or Mint/Cinnamon is far less of a shock than Windows8 or Unity.

    That's the benchmark. Even next to Windows 8, Unity is shocking.

  20. And somehow still no Google Drive by Anonymous Coward · · Score: 0

    Client for Linux.

  21. Re:for most retired people, up-to-date Chrome (no by Anonymous Coward · · Score: 0

    How did this bullshit get modded Insightful? An operating system is more than just the UI - it's the applications, it's always the applications.

    By starting with "if that's the use case", with "that" being web browsing. In which case the application is the browser, and assuming any relevance to the discussion, we are talking about Chrome, but he did also mention Firefox.

    So which web browsing application do you feel is missing on Linux, that you can still keep up to date on XP for the foreseeable future.

  22. Re:for most retired people, up-to-date Chrome (no by hsa · · Score: 1

    Please, don't trivialize things.

    Sure, you can only use browser to access the internet. Secure browser will not compromise your system. But it will give the hacker your IP address.

    Using the IP address the hacker can do a number of things. He can exploit vunerability on some service, that is not protected by the firewall. Or exploit a problem in the firewall software itself. These vunerabilities are not so common, but it is naive to think, that if you only use the browser, only thing that needs to be secure - is the browser.

    The whole XP OS is getting compromised, because hackers had so much time to work on it. And soon, the exploits will not be fixed. Please upgrade to an OS that gets regular security updates or disconnet yourself from the internet.

  23. Sudo Chrome-OS by Anonymous Coward · · Score: 1

    I wonder if they will try and turn XP into a form of Chrome-OS, push the brand forward with their windowed apps from Chrome as they are doing on Windows 8, then start advertising to the users about Chrome books. Then when their poor old XP machines fail, the users will already be familiar with the Chrome ecosystem, look at the cost of a Chromebook and think "why do I need a full blown desktop".

    1. Re:Sudo Chrome-OS by mrbluejello · · Score: 1

      You are the only person here who gets it. Check out my other comment for details.

    2. Re:Sudo Chrome-OS by jones_supa · · Score: 1

      I wonder if they will try and turn XP into a form of Chrome-OS, push the brand forward with their windowed apps from Chrome as they are doing on Windows 8, then start advertising to the users about Chrome books. Then when their poor old XP machines fail, the users will already be familiar with the Chrome ecosystem, look at the cost of a Chromebook and think "why do I need a full blown desktop".

      It is indeed possible that they have thought about the upgrade path which you described.

  24. Re:for most retired people, up-to-date Chrome (no by JohnnyMindcrime · · Score: 1

    Only a Linux hater would reply so stupidly also...

    Someone who is still running XP probably isn't that interested in modern games or modern leading-edge applications. Maybe they still run XP because they don't like paying for software upgrades that they consider pointless for their own use. Maybe they even run a hacked copy of Microsoft Office, for example.

    Very few people actually need the majority of features in big heavy applications like Microsoft Office or Photoshop, for most of them it's just a case of getting accustomed to a new UI, LibreOffice or The GIMP.

    I'm the tech geek for a large circle of friends and family and have moved a number of them over to Linux Mint after they came to me wanting something better than XP now that it's going out of support. I've had a few calls and done a few house visits but all of them are pleased with what it does, none of them needed to do heavy macro work in documents or heavy graphics editing.

    If you're going to hate then at least do so from a position of knowledge and experience rather than one based on FUD. I myself run XP and Windows 7, I like both of them and use them for stuff that is more difficult to do than it is Linux. Yes, I'm mostly Linux user but a computer is merely a collection of tools to get jobs done and I don't believe in "cutting my nose off to spite my face" - I just use the best tool for the job and really couldn't give a toss what OS it ultimately runs on.

    --
    Windows 10 is great - I used it to download Linux.
  25. Re:for most retired people, up-to-date Chrome (no by JohnnyMindcrime · · Score: 3, Insightful

    Sorry, you do not know what you are talking about.

    In the *MAJORITY* of home installations, people access the Internet via a NAT router that "translates" the internal *NON-ROUTABLE* IP address of the user's PC to the *ROUTABLE* IP address of the router's Internet interface, as assigned by the user's ISP. Note that the router's IP address is not usually a static one and will change as a result of DHCP on a reasonably regular basis anyway.

    A hacker will therefore only ever see the IP address of the router, not the IP address of the user's PC. Yes, the hacker *COULD* attack the router and *IF* the router has a security hole he/she could exploit then an attack is possible. However, unless the router has crappy firmware, has an administration interface with a crackable password exposed to the Internet, and/or an open incoming port that routes into the internal network, then any attack is extremely unlikely.

    If you get a piece of malware on your computer then, yes, it can have the ability to open a connection to a hacker and allow him/her to do what he/she wants. But in a home environment, that malware will exist because the user has done something stupid - either gone to a dodgy web site and dowloaded it or installed it as part of some warez the user has got hold of.

    Hackers are not particularly interested in wasting their time on "small fry" home users. They prefer to attack bigger targets like corporations and usually leave it to bots and scripts to find ways of owning user PCs that can then be used as owned machines in mass attacks on those bigger targets.

    There are millions and millions of devices on the Internet, scripts and bots have limited intelligence and therefore if you know some of the basics about Internet security (essentially not opening unnecessary ports on your router, turning off Internet-exposed router admin interfaces, not installing dodgy software, not visiting dodgy sites, not opening dodgy emails) then you are reasonably secure no matter what OS you run.

    --
    Windows 10 is great - I used it to download Linux.
  26. Re:for most retired people, up-to-date Chrome (no by jones_supa · · Score: 1

    This. My favorites are XFCE and KDE for the performance, but Unity and Compiz really are complete shit in terms of performance. It's sad that the mainstream Ubuntu desktop performs so badly. Opening and navigating in Dash is laggy, dragging shortcut icons from Dash to taskbar is very laggy. Opening the settings manager takes a second or two (not that you could configure almost anything there anyway). On low-end (Atom/Bobcat) hardware even the basic window animations are choppy and the desktop practically completely unusable.

  27. Common Practice by chrpai · · Score: 1

    They aren't supporting XP, they are supporting Chrome on XP. I don't see how this is so shocking as software companies have long done this. We develop applications that are expected to work on XP / 2003 through Windows 8.1 and it wasn't really that long ago we were still targeting Windows 2000. It constrains some of your choices and increases your testing surface but if the business thinks there is money to be made going after a customer segment, we do it.

  28. Re:for most retired people, up-to-date Chrome (no by Anonymous Coward · · Score: 0

    > An operating system is more than just the UI - it's the applications.

    It is neither.

    Ok I get what you were trying to say. You're still wrong. Even minor changes to one guy's estabilished workflow is a PITA. If I can avoid it, I do.

  29. Re:for most retired people, up-to-date Chrome (no by couchslug · · Score: 1

    Puppy Linux BTW works very well for many old machines because it's so easy to configure and install. Boot a live CD or USB key, and you can install to hard disk or make more USB keys or live CDs, or remaster with included tools. Runs fine from USB and doesn't require a hard disk. It's available in Chrome and Firefox flavors, and Slacko is based on Slackware so what's not to like?

    --
    "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
  30. All of you are missing the point... by mrbluejello · · Score: 1

    Google is doing this to build a migration path for users XP to Chrome OS.

    By 2015 Google will have a mature Chrome OS, and a huge number of XP users that have no migration path. This is a huge opportunity for Google to win these people over as users -- first as Chrome users, then as Chrome Apps start becoming plentiful through Chrome, XP users will have a way to use modern services while skipping over WIndows XP and the non-existent modern services that will be available for it.

    The next step for Google is to get Windows to boot directly into Chrome instead of WIndows XP loading the Explorer Desktop. This is a trivial configuration. Every Windows XP box can be converted into a Chrome OS box once Google gets all the right pieces in place. This is a path to wean users off of Windows and onto Chrome OS.

    Of course, when users have to purchase another machine, they will already be familiar with Chrome OS.

  31. Re:for most retired people, up-to-date Chrome (no by The123king · · Score: 1

    Internet explorer != explorer Sure, they're fairly tightly coupled, but they are still 2 very different applications

    --
    If you gave me a choice between a printer and a giraffe with explosive diarrhoea, i'll get my ladder and my raincoat
  32. does firefox still support it? by buddyglass · · Score: 1

    When there are zero browsers supporting updates on XP maybe people will finally migrate elsewhere.

  33. wasted time and money by slashmydots · · Score: 1

    Let's look at Windows 98. A study posted on slashdot found that if you connect a Windows 98 computer to the internet (with no AV and no SPI firewall on the modem) it caught a virus in 11 seconds on average. That's while sitting idle at the desktop. April 9th 2014 will be similar for XP. Nobody will have a functioning online XP machine past the 8th.

    1. Re:wasted time and money by Anonymous Coward · · Score: 0

      Can you cite your source? I'm having difficulty finding this "Study"...

  34. Re: for most retired people, up-to-date Chrome (no by Anonymous Coward · · Score: 0

    Most of those Nat routers will after opening a connection pass most things back straight to the machine when it initiates the connection, otherwise Nat wouldn't work.

    It's one of the ways Skype used to punch through nat routers, having both try to connect, so the routers let both talk, vs one side. If you are not firewalled/natted... You've got for a brief Window and a chance to connect to almost all ports on the target.

  35. Re:for most retired people, up-to-date Chrome (no by geekoid · · Score: 0

    "Why would anyone pay for Windows if this is free?"

    Because moving to Linux is not free.

    You're experience the community center has been the opposite of mine. How do you get people used to the change?

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  36. Re:for most retired people, up-to-date Chrome (no by geekoid · · Score: 1

    An OS is neither the UI nor the applications.

    The decision about what OS to use can be influenced by the Apps and interface.

    Anyways, he is talking abut a community center. So it's likely all they need to do can be done through Linux. And he also said some machines are set to dual boot.

    You need to put the caffeine down for the rest of the day and relax. He didn't say all windows can be replaced with Linux.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  37. Re:for most retired people, up-to-date Chrome (no by geekoid · · Score: 1

    The GIMP

    You don't get used to Gimp. You get beaten by it until you submit.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  38. And yet they won't even support their own OS. WTF. by ezakimak · · Score: 2

    No chrome for Android 4.0, which is still nearly 40% of the current Androids in use.

  39. Re: for most retired people, up-to-date Chrome (no by JohnnyMindcrime · · Score: 1

    Agreed. But unless you've got someone there ready to do a man-in-the-middle attack at that moment in time, it's extremely unlikely.

    Again, it comes down to how important and big a target you are for hackers - the vast majority of home user machines are owned through automated scripts and bots in drive-by attacks, not because some seasoned hacker is sat there physically waiting for you to do something that he/she can exploit.

    --
    Windows 10 is great - I used it to download Linux.
  40. XP they are same binary, still share. Win updat by raymorris · · Score: 1

    True they are no longer two views of the same binary like they used to be. Of course we're talking about XP. On XP, they are the same COM object. As Microsoft explained in US vs. Microsoft, you couldn't remove IE from the Windows system because IE WAS the system.

    More recently, there has been some separation, but go to the Windows update site in Firefox or Chrome. You won't get very far . Only IE can replace system files with stuff it downloads from a web site.

  41. Re:And yet they won't even support their own OS. W by ezakimak · · Score: 1

    No chrome for Android 4.0, which is still nearly 40% of the current Androids in use.

    That read <4.0 when I wrote it.

  42. Re:for most retired people, up-to-date Chrome (no by JohnnyMindcrime · · Score: 1

    That's your opinion and you are entitled to it.

    But I would argue that given that I personally don't do professional-level graphics editing, I cannot justify the expense of a fully licensed copy of Photoshop. Therefore I have a choice of either using a free alternative like GIMP (which is what I do in reality) or downloading a free warez-d copy of Photoshop.

    Given that warez-d copy would be extremely likely to contain malware which will, at some point, do some damage to my PC that I would inevitably have to investigate and fix, then I would argue that investing time in learning GIMP without any risk of malware is the better option of the two.

    --
    Windows 10 is great - I used it to download Linux.
  43. Re:for most retired people, up-to-date Chrome (no by number6x · · Score: 1

    How do you get people used to the change?

    This is exactly the question Microsoft is asking since they released Windows 8. The majority of computer users looking to upgrade are now faced with this dilemma (tri-lemma?).

    • Do they upgrade to Linux and learn a new interface?
    • Do they upgrade to OS/X and learn a new interface?
    • Or do they upgrade to Windows 8 and learn a new interface?

    Whatever they choose the user will bear the cost of learning a new interface. How many will choose Linux and decide to, at least, save a few dollars as well? Microsoft still has name recognition, but that isn't worth as much if you keep jerking your customer's chains. Microsoft mistakenly believes they need one uniform interface from phone through tablet to desktop. The evidence shows that this is far from true. People have been more than happy using Windows on the desktop and iOS on phones for years. Looking at reality shows us that users seem to have no problem handling multiple interfaces across devices.

    The theory that you must present one interface and only one interface is not supported by the evidence.

  44. Anti Trust by Anonymous Coward · · Score: 0

    For Microsoft to dis XP when the OS works so sufficiently is a matter of ANTI Trust with that company and me. (as in me , myself and everyone who still uses XP)

    Forcing or attempting to force us xp users to upgrade or get out doesn't bide well with us.

  45. Re:for most retired people, up-to-date Chrome (no by Monsuco · · Score: 1

    An operating system is more than just the UI - it's the applications, it's always the applications. Going from XP to Windows 8 might take some learning how the new interface works, but at least the extreme majority of your programs you know and love will continue to work just fine. Unless you're using predominantly open-source or cross-platform programs to being with, moving from one OS to another is always going to be more of a shock than going from one version of the OS line to another.

    Unless, like most people these days, you spend 95% of your time in the browser.

  46. Re:for most retired people, up-to-date Chrome (no by jedidiah · · Score: 1

    > How did this bullshit get modded Insightful?

    Why? Because the users in question aren't trying to pretend that they are graphic artists that work for some Hollywood movie studio. The requirements for these people are rather limited and quite well understood.

    That is why they are using XP to begin with.

    > moving from one OS to another is always going to be more of a shock than going from one version of the OS line to another.

    Vista and Win8 both contradict this assertion quite definitively.

    --
    A Pirate and a Puritan look the same on a balance sheet.
  47. Re:for most retired people, up-to-date Chrome (no by tibit · · Score: 1

    I don't think that there's any consumer gear, running original firmware (like they all do), older than 3 years that's not completely remotely ownable from the WAN side, via more than one exploit to boot.

    --
    A successful API design takes a mixture of software design and pedagogy.
  48. Re:for most retired people, up-to-date Chrome (no by Anonymous Coward · · Score: 0

    Yes and no. Pirating Photoshop is quite possible to do safely but it requires some knowledge of how to block domains in the hosts file, which domains to block, as well as where to obtain the keygen and use it properly. GIMP is far easier of course, but the main reason I use GIMP (apart from it being free and morally better to just pirating stuff) is because it's cross-platform. Skills and techniques and UI operations I learn in GIMP will survive moving between Windows and Linux, and so if i'm going to invest my time in learning a complicated tool, why not use one that works in far more operating systems and with less licensing hassle?

  49. What to do when XP EOLs? by Shompol · · Score: 1

    I just found out that my Windows 7 license is somehow tied to a magic number planted in my laptop hardware. This means that I will not be able to run it under VirtualBox, which is the best Windows XP emulator I have to date. What next?

  50. Re:make a transition by Anonymous Coward · · Score: 0

    Actually the retired parents won't be able to make a transition to a Microsoft operating system because there will be no upgrade path from an obsolete software installation.
    Before the XP finally dies, OP should download a linux iso, make a live cd, and help his/her retired parents make the transition. If all they do is surf the net, update fb, send and receive email, etc, they'll hardly notice

  51. But you do not want.. by niftymitch · · Score: 1

    If you are Google you do not want Chrome to be the part that
    busts open XP.

    XP with no applications but one XP might be as secure
    as Win8 and a full treasure trove of applications by who
    knows what is on them.

    MS has got to get Mom&Pop companies off it ASAP.
    Other than a disconnected system that prints reports
    for the book keeper XP is a blunder.

    --
    Truth is stranger than fiction, but it is because Fiction is obliged to stick to possibilities; Truth isn't. Mark Twain.
  52. Re:for most retired people, up-to-date Chrome (no by Blaskowicz · · Score: 1

    Someone who is still running XP probably isn't that interested in modern games or modern leading-edge applications. Maybe they still run XP because they don't like paying for software upgrades that they consider pointless for their own use. Maybe they even run a hacked copy of Microsoft Office, for example.

    It's not just about modern games, you lose all the old ones too. Linux is fine if you want to run a couple select games, Windows allows you to have a hundred arbitrary ones installed or otherwise present on disk, all working.