Slashdot Mirror
XP Systems Getting Emergency IE Zero Day Patch
msm1267 (2804139) writes "Microsoft announced it will release an out-of-band security update today to patch a zero-day vulnerability in Internet Explorer, and that the patch will also be made available for Windows XP machines through Automatic Update. At the same time, researchers said they are now seeing attacks specifically targeting XP users.
Microsoft no longer supports XP as of April 8, and that includes the development and availability of security updates. But the about-face today speaks to the seriousness of the vulnerability, which is being exploited in limited targeted attacks, Microsoft said. Researchers at FireEye, meanwhile, said multiple attackers are now using the exploit against XP machines, prompting the inclusion of XP systems in the patch."
Microsoft no longer supports XP as of April 8, and that includes the development and availability of security updates. But the about-face today speaks to the seriousness of the vulnerability, which is being exploited in limited targeted attacks, Microsoft said. Researchers at FireEye, meanwhile, said multiple attackers are now using the exploit against XP machines, prompting the inclusion of XP systems in the patch."
Cool, When will they patch Windows 3.1?
Oh yeah, I forgot, it's down to userbase isn't it?
Seriously? Like you need to encourage these people. Just let them get hacked and get rid of their internet-connected XP machines already. They're 7+ years old! If they're using them for web surfing AND using IE8 to do it, you should not be assisting people that stupid.
It's not secret that if you pay MS money, they'll keep patching XP and if you don't, they'll pretend like they're not patching it but I STILL think they shouldn't do anything to help people who are that dumb.
for Microsoft.
Patching a dead OS just confuses users. No, really, this OS is dead except sometimes.
1) Stockpile exploits for Windows XP until after Microsoft no longer releases updates for it.
2) Hack XP users.
3) Profit!
We don't have a state-run media we have a media-run state.
is like pimping a 2 dollar whore.
"XP support is over" my ass.
So it not really that big of a deal to also update the desktop xp as well
They are not to support users. They are not to protect the internet. They are to protect commercial closed software. Richard Stallman was right about this, with closed source you are at the mercy of the company providing it. If more flaws come up, Microsoft will still patch them because otherwise users will flee to alternatives rather than newer Windows versions. Not all of them, but little by little is how you erode monopolies.
Ballmer gave his word that there would be no more updates. You can’t believe a damn thing that asshole says. This further proves that Microsoft is run by Republicans. They don’t give a fuck about their customers or the truth. Again they have proven themselves to be the most dishonest large corporation in the world.
Make sure you have a backup before you turn on "Automatic Update".
And remember, when your updated system crashes, you won't get any support from MS.
Good Luck
XP updates are initiated via IE.
Either Microsoft continues to accept responsibility for its obsolete systems, or it shall forfeit all copyrights and patents to those systems.
“He’s not deformed, he’s just drunk!”
I tried using Internet explorer 6 on my old Windows XP computer out of curiosity but the browser kept crashing. I guess modern websites use HTML code that MSIE 6 doesn't understand properly.
even when I was able to visit some online stores, the stores told me to upgrade my web browser because MSIE 6 is no longer supported. lol
Because they choose to buy from MS. If they wanted not to be driven by MS business model, they shouldn't have bought Windows XP in first place. They made their choices, now will suffer the consequences.
thanks
At least switch to a non-Microsoft browser and email client - something that'll continue to get updated like Firefox, Chrome, Thunderbird, etc.
#DeleteChrome
Where's my patch?? My hardware doesn't have drivers for anything later and MSIE7 won't install onto 95.
Well, they aren't being "hacked".
A researcher is merely trying to ascertain the security level of the systems.
After finding any vulnerabilities, they will down load whatever valuable data they find and post it as an example of how insecure the system was. It's all done with the best of intentions.
When support is dropped, it should be put into the public domain so others can provide support.
Why should they continue to spend money to support an ancient OS that no one is buying any more? They're not receiving any new revenue for it, so why should they continue to support it?
They are absolutely receiving revenue for it, just not directly. These users are part of the Windows total addressable market. Developers choosing to write applications and looking at which platform to choose look at this number. 30% of the Windows userbase comes from XP. If Microsoft upsets these users by letting rampant malware trash their systems, a chunk of these people may switch to e.g. Apple. Oops! Now we have more cross platform or Apple-native apps being developed because there are more users there. Microsoft does not want this to happen.
Their XP end of life article read like an advertisement for their silly security software. I refuse to read their articles anymore, and so should you. I can't believe their little two-bit operation even made it into Slashdot headlines.
I thought Slashdot was supposed to be a geek site. It's an "out-of-cycle" patch, not an "out-of-band" one, although I assume it could be delivered out-of-band if you really wanted to (USB stick, CD, whatever.) Most users will certainly be receiving the patch in-band.
Submitters are allowed to be ignorant and make stupid mistakes; it's the job of the editors to correct those mistakes before posting a story.
They've had 12+ years to secure it. If they had done that there would be no need for emergency security updates. Everyone would be happy. MS wouldn't have to create security updates and customers would be able to use it as long as they want without having to live in fear of being compromised.
Support is not over, I believe I read that the UK government is paying in excess of 55million or more for XP support and then the Dutch government is doing the same. If Microsoft is being paid by multiple government entities to continue to provide patches and updates for XP why not give the general public the benefit of those patches as well? I realize that the most likely answer to that is why should they when what they want is everyone still using XP to go out and buy a shiny new Windows 8/8.1 PC. But at the very least, a case could be made that the citizens of those governments paying for extended support should be able to download and install those patches since their tax dollars are paying for them. I also doubt very much that the patch Microsoft is releasing was made solely for the benefit of all users, they probably already had it done for the UK and Dutch governments (who as I said paid for it) and just decided to release it to the general public.
The exploit has been known -- to SOMEONE -- for a while. So why did it come out of inventory all the sudden right now? Afraid that too many valuable targets would switch off XP or install new protection? Hardly likely that XP users will really switch this year. And where did it come from anyway? Transmitted from secret MS operatives to the bad guys? NSA wants to scare people into switching? Stupid bad guys just decided to use it while it was still fresh? There are many conspiracy theory variants on this episode.
Microsoft had to issue the patch for XP, otherwise the timing might look too suspicious (whether they were involved in promulgating the exploit, or not). Regardless, MS has mitigated the impact and can now say with a straight face, "See! We told you this could happen!" Next time, regardless of who may or may not be behind the exploit du jour, they really really won't be patching XP. Microsoft is now in the position they wanted. They have tried to help as much as possible, everyone has had not only a warning but a credible scare, and needs to upgrade to a new version of WIndows.
(People who are running XP or DOS on embedded systems that can't be upgraded have worse problems; that's a whole other discussion.)
I guess people would object less to giving up Windows XP if the plain old simple GUI was still an option. Not just "Classic" UI in Windows 7 : that one is crippled with the colour themes removed, it is absent from Windows 8.x, the task bar has to be tweaked and feels maybe not 100% the same (I want "show desktop" on the left, not the right). Most of all, if you go that way you have that ugly ass file manager. It's ugly and wastes space.
I used a 3rd party file manager, but it was not integrated (start menu, desktop icons or win+r will still open Windows's file manager)
If you're on XP and need internet access, you might put your browser into a Linux VM.
http://www.sirrix.com/content/pages/BitBox_en.htm
Microsoft no longer supports XP
Why do people keep saying this? It's simply untrue.
Microsoft do still support XP. The real change that has happened is that Microsoft have gone from providing free support to charging a lot of money for the same support. That's all.
For me this is like giving candy to a diabetic because they want it. Knowing full well its not good for them. Its not like Microsoft has not given ample opportunity and notice for XP users and their is alternative browsers that would be much more secure on XP the IE. In the end Microsoft can be titled a enabler and has as much problem moving from XP as some of its users. Yea, its more of a PR thing then anything else.