Windows Secrets

Subscribers: Sign in

Enter your e-mail address to get a free subscription.
We guarantee your privacy
Skip to content
  • Home
  • Newsletter Archives
    • Current
    • LangaList Plus
    • Patch Watch
    • Wacky Web Week
    • Security Baseline
  • E-Books
  • Lounge
  • About us
    • Refunds
    • Privacy Policy
    • Advertise
  • Contact
  • Your Account
    • Upgrade
    • Preferences
    • Bonus Download
    • Unsubscribe
Home>How to maintain XP after Microsoft ends support

Windows Secrets Newsletter • Issue 175 • 2008-11-13 • Circulation: over 400,000


Table of contents 
  • Bonus: All readers get a free excerpt of ‘Pleasure’
  • Top Story: How to maintain XP after Microsoft ends support
  • Wacky Web Week: Keanu has encountered an error and must restart
  • LangaList Plus: Can keyloggers go undetected by security apps?
  • Windows Secrets: Wireless networks at risk from WPA breach
  • Patch Watch: Critical Windows hole patched after seven years

 
Bonus

All readers get a free excerpt of ‘Pleasure’

The reasons behind the things we like are explained in The Pleasure Instinct: Why We Crave Adventure, Chocolate, Pheromones, and Music. From the smell of cocoa to the scent of a lover, there’s much to learn about our gut reactions. This new book won’t be available in stores until mid-December, but you can get an exclusive PDF e-book excerpt from Windows Secrets now through Dec. 3, 2008. Simply visit your preferences page, update your entries, press the Save button, and a download link will appear. Thanks! —Brian Livingston, editorial director

All subscribers: Set your preferences and download your bonus
Info on the printed book: United States / Canada / Elsewhere


 
Top Story

How to maintain XP after Microsoft ends support

Stuart johnston By Stuart J. Johnston

Microsoft CEO Steve Ballmer said recently that it’s OK with him if you want to stick with Windows XP until Windows 7 is available late next year.

XP lovers may still be able to buy a new PC with that operating system installed for another year or so, but unfortunately, Microsoft plans to end most free support for the OS within months.

On that date — Apr. 14, 2009 — millions of PC users, some of whom bought their systems less than a year earlier, will be left in the lurch. These users will have to pay Microsoft for Windows XP support, although downloading critical security patches is expected to remain free of charge.

The end of support is planned despite the fact that consumers can still buy a new PC that runs XP rather than Vista, which was released nearly two years ago. It’s ironic that no less a personage than Microsoft chief Ballmer tells users that staying with XP until Windows 7 ships late next year is a viable option.

What’s a poor Windows XP user to do?

Third-party vendors pledge XP compatibility

Ballmer has said repeatedly over the past 10 to 15 years that the stiffest competition a new version of Windows confronts in the marketplace is the previous version of Windows. If the previous version is “good enough,” then a lot of people won’t buy the upgrade. XP just may prove Ballmer right.

According to a study by Gartner, there will be more than 1 billion computers in use worldwide by the end of 2008. The vast majority of them run Windows XP.

In fact, according to an analysis by Web analytics firm Net Applications, some 68 percent of the client computers in use around the world use XP. The OS’s closest challenger — Vista — represents just over 19 percent of the worldwide PC market. If these stats are accurate, there are nearly 700 million copies of XP on the planet.

While Vista has been picking up steam in recent months, it has a long way to go to catch up with its older, more mature sibling. Even if Microsoft redoubles its efforts to market Vista, it’s unlikely the newer version could pass XP in installed numbers by late 2009, which is when Microsoft officials hint that Windows 7 will be available.

Anyone who uses XP — whether on a new machine or an early-2000s model — has to wonder whether new hardware and software will continue to support the old OS.

The answer is a qualified “yes.”

XP’s huge installed base helps to ensure that hardware and software companies are continuing to support their existing XP users while also making sure their new products will work with the OS. Every one of several third-party hardware and software firms I checked with claims its new products will be compatible with both Vista and XP.

For now, anyway, losing the support of third-party vendors is far from the biggest threat facing anyone who sticks with XP. The bigger problem is Microsoft’s impending free-support cutoff date for the OS.

XP’s support has been extended once before

Microsoft’s policy is to support each version of its operating system for 10 years. For the first five years, users get “mainstream” support, which combines free help and fee-based services. This is in addition to the standard patches and hotfixes that Microsoft periodically releases.

The second five-year period constitutes “extended” support. During this time, users must pay for support, aside from critical patches that continue to be offered by the company for free.

XP will reach the end of mainstream support on Apr. 14, 2009, despite the fact that Service Pack 3 for XP was released just last spring. (XP first shipped in late 2001, so the end of its mainstream support is coming more than two years later than is typical — a testament to XP’s popularity.)

After April 2009, XP moves into the extended-support period, which is expected to last through Apr. 8, 2014.

Under extended support, if you encounter problems installing a security patch or other critical fix, tech support will help you free of charge. Any other help from Microsoft tech support, however, will be on a pay-per-incident basis. Microsoft currently charges $59 per incident for help with operating-system problems.

If you bought a new PC with XP preinstalled, it’s important to note that you must contact your PC maker for all support. Microsoft has assembled a list of phone numbers and support sites for major PC vendors.

Even though Microsoft has cut off retail sales of XP, the company will continue to allow PC vendors to sell XP Professional on new systems at least through the end of January 2009.

Today, that’s usually done by opting for the vendor’s “downgrade” license, which lets the buyer choose between Vista and XP Pro.

For example, Dell Computer says it will sell systems with XP as a downgrade option through 2009 and possibly longer.

There are plenty of XP resources out there

Of course, you aren’t stuck with Microsoft when it comes to your XP support options. If you’re looking for an XP device driver, and you’re not having much luck with the vendors’ sites, try browsing through the posts at various PC community forums.

Forums are great places to post questions and (hopefully) receive answers from other users who have experienced the same problems and found solutions. Microsoft’s XP newsgroups are a good place to start.

Other useful XP support sites include the TechArena community, BoardReader, and AllExperts.

You’ll find all types of XP support from the members of PC user groups, many of which offer live, in-person meetings where participants exchange tips and solutions. Listings for Microsoft user groups are available at the Microsoft Mindshare site.

These are by no means all the support options available to XP users, but they provide a starting point to help you keep XP alive and well until something better comes along — whether another flavor of Windows or something completely different.

Stuart Johnston is associate editor of WindowsSecrets.com. He has written about technology for InfoWorld, Computerworld, InformationWeek, and InternetNews.com.

 
Wacky Web Week

Keanu has encountered an error and must restart

Kung fu fight! By Katy Abby

Science fiction has long been popular with computer geeks: sci-fi films such as Blade Runner and The Matrix glorify the techie life. Supercomputer fantasies are all well and good, but come on! How do the movie folks get that big iron to run so darned smoothly?

What if characters Neo and Morpheus had to deal with the same technological frustrations that plague the rest of us? Take a look at a hilarious spoof exploring this very possibility. It’s all the fun of The Matrix minus Keanu Reeves! What could be better? Play the video


 
LangaList Plus

Can keyloggers go undetected by security apps?

Fred langa By Fred Langa

Keyloggers quietly keep a record of every keystroke you make on your PC — usually without being spotted by your security software.

While there are some aboveboard and totally legitimate reasons to use keyloggers, there’s also a world full of illicit and unethical reasons for doing so.


Hardware keyloggers may be sniff-proof

U.S. courts have pretty consistently ruled that employers have a right to monitor everything that’s done on their business PCs. By the same token, parents probably have a similar legal right to oversee their minor children’s activities.

That leads to a question by Alexandre Marson, who wants to deploy keyloggers but is having a problem preventing his antivirus software from repeatedly displaying warning messages:

  • “Straight to the point now: Is there a way to hide keyloggers from antivirus and security tools such as Avast and company? I’ve tried including the .exe in the whitelist for Avast, but it still detected the keylogger as an infection.”
Some keylogging software claims to be detection-proof, Alexandre, but this is like the old “Spy vs. Spy” comics: once a programmer finds a way to run his or her software below the radar of current security tools, a security-software programmer will find a way to sniff out the new threat, on and on.

Software running on a system can always be detected by one means or another. Even if a particular piece of software currently evades detection, odds are it will be discovered soon enough.

Hardware’s a different matter. There are keylogger dongles that cannot be detected by any normal security program because the dongles exist separately and independently from the PC’s other hardware and software.

This article is part of our paid content. Subscribe.

Already a paid subscriber? Click here to login.


 
Windows Secrets

Wireless networks at risk from WPA breach

Mark edwards By Mark Joseph Edwards

If you use the first version of the Wireless Protected Access (WPA) standard to protect your Wi-Fi network, your security may be imperiled.

Any Wi-Fi router that doesn’t support the more robust AES-CCMP or WPA2 standards needs to be replaced.


Researchers break old Wi-Fi encryption protocol

Your wireless network may be overdue for a security upgrade. Wi-Fi access points secured with the old WPA standard are now easy pickings for network snoops, according to researchers who’ve found a way to overcome WPA’s encryption protocol.

This isn’t the first time the security of wireless networks has come into question. When it was discovered several years ago that cracking Wi-Fi’s original Wireless Equivalent Protection (WEP) security standard was incredibly easy, vendors quickly released products that supported the stronger WPA protocol.

WPA supports both TKIP (Temporal Key Integrity Protocol) and AES-CCMP (Advanced Encryption Standard, Counter Mode/CBC MAC Protocol). TKIP is essentially a modified rendition of WEP, but AES offers much stronger protection than either WEP or TKIP.

German researchers Martin Beck and Erik Tews recently found a way to crack TKIP under certain conditions. Their methodology involves what is called a chopchop attack, which attempts to decrypt packets byte by byte.

This article is part of our paid content. Subscribe.

Already a paid subscriber? Click here to login.


 
Patch Watch

Critical Windows hole patched after seven years

Susan bradley By Susan Bradley

A vulnerability that allows remote-code execution via the Server Message Block protocol has long been known to affect all Windows PCs and servers.

This week, Microsoft finally found a way to fix the problem, first described in 2001.


MS08-068 (957097)
This fix has been a long time coming

Topping the list of November patches is MS08-068 (957097), which Microsoft labels “Important” but I consider critical. Even though it affects only Windows servers and networked Windows PCs, I recommend that all Windows systems apply this patch.

The issue has actually been around since 2001 and impacts all PCs with file and printer sharing enabled. As Christopher Budd explains in a Microsoft Security Response Center blog posting, the company didn’t think the problem with the Server Message Block (SMB) protocol could be fixed without requiring that all network applications be rewritten.

For years, security experts have used SMB relay attacks — which attempt to execute code on the affected systems remotely — to test network defenses. While you need to be an authenticated member of a network to exploit this vulnerability, a disgruntled employee who does so could cause serious damage.

Many network-security pros were surprised that this hole was finally patched after all these years. On the Patch Management (PM) listserve, Eric Schultze of PM vendor Shavlik and network engineer Edward Ziots of the Lifespan Organization call this a critical issue that you should patch against as soon as possible.

MS08-069 (955218)
XML patches released for Windows and Office

When does one security patch equal seven? When it’s an XML patch!

This article is part of our paid content. Subscribe.

Already a paid subscriber? Click here to login.


YOUR SUBSCRIPTION

The Windows Secrets Newsletter is published weekly on the 1st through 4th Thursdays of each month, plus occasional news updates. We skip an issue on the 5th Thursday of any month, the week of Thanksgiving, and the last two weeks of August and December. Windows Secrets is a continuation of four merged publications: Brian's Buzz on Windows and Woody's Windows Watch in 2004, the LangaList in 2006, and the Support Alert Newsletter in 2008.

Publisher: WindowsSecrets.com, 1218 Third Ave., Suite 1515, Seattle, WA 98101 USA. Vendors, please send no unsolicited packages to this address (readers' letters are fine).

Editor in chief: Tracey Capen. Senior editors: Fred Langa, Woody Leonhard. Copyeditor: Roberta Scholz. Program director: Tony Johnston. Contributing editors: Yardena Arar, Susan Bradley, Scott Dunn, Michael Lasky, Scott Mace, Ryan Russell, Lincoln Spector, Robert Vamosi, Becky Waring. Product manager: Andy Boyd. Advertising director: Eric Gilley.

Trademarks: Microsoft and Windows are registered trademarks of Microsoft Corporation. The Windows Secrets series of books is published by Wiley Publishing Inc. The Windows Secrets Newsletter, WindowsSecrets.com, Support Alert, LangaList, LangaList Plus, WinFind, Security Baseline, Patch Watch, Perimeter Scan, Wacky Web Week, the Logo Design (W, S or road, and Star), and the slogan Everything Microsoft Forgot to Mention all are trademarks and service marks of WindowsSecrets.com. All other marks are the trademarks or service marks of their respective owners.

HOW TO SUBSCRIBE: Anyone may subscribe to this newsletter by visiting our free signup page.

WE GUARANTEE YOUR PRIVACY:

1. We will never sell, rent, or give away your address to any outside party, ever.
2. We will never send you any unrequested e-mail, besides newsletter updates.
3. All unsubscribe requests are honored immediately, period.  Privacy policy

HOW TO UNSUBSCRIBE: To unsubscribe from the Windows Secrets Newsletter,
  • Visit our Unsubscribe page.
Copyright © 2012 by WindowsSecrets.com. All rights reserved.

Table of contents

Top-scoring articles in the past 12 months
  • Leaving long cookie trails throughout the Web 5.00
  • Windows-like security for Android devices 5.00
  • Win7′s no-reformat, nondestructive reinstall 4.53
  • The sorry tale of the (un)Secure Sockets Layer 4.42
  • RPV: Win7′s least-known data-protection system 4.33
  • Recovery: the last step in total data security 4.30
  • Time for a .NET update we can’t ignore 4.30
  • Getting the most from Windows Search — Part 1 4.25
  • Revising printing habits saves money and trees 4.25
  • Upgrades end in erratic, partial hangs 4.25
  • Pros and cons of a ‘keyfile’ password 4.21
  • Beating back Duku and a plethora of other threats 4.20
  • Office 2007 gets its final service pack 4.19
  • Putting Registry-/system-cleanup apps to the test 4.19
  • One year and 99 security bulletins later 4.18
  • 1.8TB external drive goes down hard 4.17
  • Don’t pay for software you don’t need — Part 3 4.16
  • Internet Explorer gets another round of patches 4.15
  • Is your free AV tool a ‘resource pig?’ 4.15
  • Vacation’s over; it’s a big round of patches 4.15
  • Remote access leads to remote attacks 4.15
  • Keeping you up to date: say no to .NET — again 4.14
  • Take control of Google’s privacy policy settings 4.14
  • Office File Validation patch leads to problems 4.14
  • The advanced system-recover toolkit 4.13
  • New “419″ scam involves PayPal and Western Union 4.12
  • Readers’ best personal-privacy tips 4.11
  • Getting the most from Windows Search — Part 2 4.11
  • Re-examining Dropbox and its alternatives 4.10
  • Easily edit Windows’ right-click context menus 4.09
Connect with us Follow us on Twitter Connect with us on Facebook View our RSS Feeds
  • Home|
  • Newsletter|
  • About Windows Secrets|
  • Advertise with us|
  • Unsubscribe|
  • Sitemap|
  • Affiliates|
Trademarks: Microsoft and Windows are registered trademarks of Microsoft Corporation. The Windows Secrets series of books is published by Wiley Publishing Inc. The Windows Secrets Newsletter, WindowsSecrets.com, WinFind, Windows Gizmos, Security Baseline, Patch Watch, Perimeter Scan, Wacky Web Week, the Logo Design (W, S or road, and Star), and the slogan Everything Microsoft Forgot to Mention all are trademarks and service marks of iNET Interactive. All other marks are the trademarks or service marks of their respective owners.
iNET Interactive Copyright © 2011 iNET Interactive.
All rights reserved.
Terms of Use  |  Privacy Policy
Internet Services
  • Web Hosting Talk
  • HostingCon
  • Hosting Catalog
  • Host Voice
Web Development
  • Hot Scripts
  • DB Forums
Digital Marketing
  • ABestWeb
  • Search Marketing Standard
  • PayPerClickUniverse
  • SEMCompare
Consumer Tech
  • Windows Secrets
  • Overclockers
  • Mac Forums

Learn more about
advertising opportunities across the iNET Interactive Network.

LiquidWeb