Microsoft has ended up encouraging users to stop using windows XP for very
long.
Microsoft's choice to remove its support team in the sand has sowed uncertainty and will likely encourage bad manners by several clients, analysts said at present.
"If next month someone finds another zero-day like this one, Microsoft might just shift the line once more," said John Pescatore, director of emerging security trends at the SANS Institute, a security training company.
"In a method, this encourages awful manners. There's a risk that people will look at it that way," said Michael Silver, an analyst with Gartner, referring to those who will now question Microsoft's determination to end XP maintain, and thus slow or even suspend their resettlement to newer editions of Windows.
The specialist were discussion about Microsoft's shift on May 1 to problem fixes for a serious susceptibility in Internet Explorer (IE) that had been disclosed the week before and used by cyber criminals for an anonymous span of time before that to take control Windows PCs. Patching the bug was not strange; what was out of the normal was Microsoft's choice to push the join to Windows XP equipment.
At First, Microsoft had set the finish of support for Windows XP as April 8, a date it had broadcast for years. When Microsoft software reaches its support departure time, it's our business policy to stop public patching.
Just days after the limit, Microsoft fundamentally said, "Never mind," and patched the IE helplessness on Windows XP. What had been sure -- the support line in the sand -- became irresolute?
Microsoft stand-by the decision, proverb it had bent to what it called "overblown" media exposure and explanation that it did so only because XP had only newly been retired.
"I don't think the coverage was overblown," said Pescatore.
Wes Miller, an analyst with commands on Microsoft, decided. "It was a extremely bad weakness," he keen out.
Even so, the analysts were surprised at the let go of a fix for XP, not only because of the line Microsoft had so firmly drawn but because of the ramifications of erasing that line.
The precedent was what worried the experts. "totally, the standard matters to Microsoft," said Miller. "It's not a question of if, but when, this issue will come up yet again. Until key organizations are off of XP, every major vulnerability becomes a important chance for exploitation."
Some consumers still having Windows XP may view Microsoft's patching decision as a pass to carry on organization the 13-year-old operating system which, as Microsoft has repeatedly hammered home, lacks many of the higher security and anti-exploit features and technologies in newer editions, including Windows 7 and Windows 8.1.
Even further in the future, customers running Windows 7 may recall this XP patch and conclude that Microsoft is not serious about retiring that OS when its January 2020 support deadline nears.
"There is now a difference between what Microsoft thinks they mean and what [customers] think they mean," said Miller. "Everyone is playing chicken. Which means [years from now] people may say, 'I can keep running Windows 7.'"
Microsoft was in a "lose-lose" situation with XP, according to Silver, because of the operating system's large user base. At the end of April, XP powered about 26% of the world's personal computers, analytics company Net Applications revealed last week.
Although Microsoft didn't talk about XP's stubborn confrontation to retirement, and the huge numbers of PCs that still run the OS, the decision was clearly based on its continued prominence. Which makes one wonder, analysts said, what Microsoft may do in the weeks and months to come.
"May be Microsoft thought hard about this one. But if the same thing happened in a year, you wouldn't see it. So that [patch last week] may have been the real line," contended Silver.
"6 months from now, an XP vulnerability may get the same [media] coverage," said Pescatore. "But then Microsoft has a much stronger legend. They might say, 'XP's dropped in half since April, so we're sticking to the plan.'"
Microsoft's choice to remove its support team in the sand has sowed uncertainty and will likely encourage bad manners by several clients, analysts said at present.
"If next month someone finds another zero-day like this one, Microsoft might just shift the line once more," said John Pescatore, director of emerging security trends at the SANS Institute, a security training company.
"In a method, this encourages awful manners. There's a risk that people will look at it that way," said Michael Silver, an analyst with Gartner, referring to those who will now question Microsoft's determination to end XP maintain, and thus slow or even suspend their resettlement to newer editions of Windows.
The specialist were discussion about Microsoft's shift on May 1 to problem fixes for a serious susceptibility in Internet Explorer (IE) that had been disclosed the week before and used by cyber criminals for an anonymous span of time before that to take control Windows PCs. Patching the bug was not strange; what was out of the normal was Microsoft's choice to push the join to Windows XP equipment.
At First, Microsoft had set the finish of support for Windows XP as April 8, a date it had broadcast for years. When Microsoft software reaches its support departure time, it's our business policy to stop public patching.
Just days after the limit, Microsoft fundamentally said, "Never mind," and patched the IE helplessness on Windows XP. What had been sure -- the support line in the sand -- became irresolute?
Microsoft stand-by the decision, proverb it had bent to what it called "overblown" media exposure and explanation that it did so only because XP had only newly been retired.
"I don't think the coverage was overblown," said Pescatore.
Wes Miller, an analyst with commands on Microsoft, decided. "It was a extremely bad weakness," he keen out.
Even so, the analysts were surprised at the let go of a fix for XP, not only because of the line Microsoft had so firmly drawn but because of the ramifications of erasing that line.
The precedent was what worried the experts. "totally, the standard matters to Microsoft," said Miller. "It's not a question of if, but when, this issue will come up yet again. Until key organizations are off of XP, every major vulnerability becomes a important chance for exploitation."
Some consumers still having Windows XP may view Microsoft's patching decision as a pass to carry on organization the 13-year-old operating system which, as Microsoft has repeatedly hammered home, lacks many of the higher security and anti-exploit features and technologies in newer editions, including Windows 7 and Windows 8.1.
Even further in the future, customers running Windows 7 may recall this XP patch and conclude that Microsoft is not serious about retiring that OS when its January 2020 support deadline nears.
"There is now a difference between what Microsoft thinks they mean and what [customers] think they mean," said Miller. "Everyone is playing chicken. Which means [years from now] people may say, 'I can keep running Windows 7.'"
Microsoft was in a "lose-lose" situation with XP, according to Silver, because of the operating system's large user base. At the end of April, XP powered about 26% of the world's personal computers, analytics company Net Applications revealed last week.
Although Microsoft didn't talk about XP's stubborn confrontation to retirement, and the huge numbers of PCs that still run the OS, the decision was clearly based on its continued prominence. Which makes one wonder, analysts said, what Microsoft may do in the weeks and months to come.
"May be Microsoft thought hard about this one. But if the same thing happened in a year, you wouldn't see it. So that [patch last week] may have been the real line," contended Silver.
"6 months from now, an XP vulnerability may get the same [media] coverage," said Pescatore. "But then Microsoft has a much stronger legend. They might say, 'XP's dropped in half since April, so we're sticking to the plan.'"
No comments:
Post a Comment