Microsoft; XP; Support; Marketing, Smart and Otherwise

"Microsoft's Not-So-Secret Plan to Cripple Windows XP"
PCWorld (August 4, 2010)

"Microsoft isn't particularly pleased about the continuing success of Windows XP, which has more than twice the installed base of Windows Vista and 7 put together. So it's trying its hardest to kill the operating system that won't die, including refusing to issue security patches for XP SP2, putting many XP users at risk. Is that the right way to get people to upgrade?

"A report out yesterday from Net Applications shows that Windows XP has more than twice the market share of Windows 7 and Windows Vista combined -- 61.87% for XP in July, compared to 14.46% for Windows 7, and 14.34% for Windows Vista.

"Gregg Keizer of Computerworld reports that XP market share is dropping very slowly, and that its current rate of decline, it won't drop under 50% until January 2010. And even then, it will far outpace Windows Vista and Windows 7, and likely have more market share than both combined...."

I'm one of the folks who's using Windows XP, although I'll almost certainly use a more contemporary operating system when I have to get a new computer. I'm satisfied with XP. And my priorities are to have a reliable system, rather than be able to tell someone that I've got the latest bugware.

I'm also not one of the 'hate Microsoft' crowd.

Just the same, I'm inclined to agree with the last two paragraphs of this article:

"...So there's both a carrot and a stick involved in the plan. The carrot: If you upgrade to Windows 7, you get to run IE9 and other software. The stick: If you don't upgrade, you'll be vulnerable to malware.

"There's a better way to get people to upgrade: Design an operating system so good that XP users will happily give up XP. I'm hoping that's what the next version of Windows will be."

On the other hand, I'm not sure that there was any agreement that XP would be supported indefinitely. I think it's a good idea to do so, considering how many folks still use that product - and the impression that cutting support will leave. But my guess is that Microsoft is free to chose what it'll do about spending money to maintain XP support.

I'd like to think that a large corporation's leadership would be sharp enough to realize that you don't retain customer loyalty by providing inferior service.

On the other hand, I'd like to think that America's automotive industry leaders didn't have to go on welfare: and look at what happened to the Big 3. (December 12, 2008)

What will Microsoft decide to do? What's PCWorld's interest? Will the Cubs win the pennant?

I haven't a clue.

Kneber AKA Zeus: How to Deal With It (Hint: Don't be Stupid)

"Protect Your Business from Kneber-Style Botnets"
Tony Bradley, PC World (February 18, 2010)

"A report from security research firm NetWitness about a malicious botnet dubbed Kneber has been the focus of a fair amount of media attention, but mostly sensationalism that misses the real point.

"Yes, the Kneber botnet consists of nearly 75,000 computers. Yes, systems at roughly 2,500 different companies around the world have been infiltrated. Yes, government agencies have had data compromised. Sadly, that is just 'a day in the life'. There is nothing spectacular about those figures...."

"...[Symantec Security Response's senior director Elias] Levy also took issue with the media categorization of Kneber as a new threat in his e-mail. 'Kneber, in reality, is not a new threat at all, but is simply a pseudonym for the infamous and well-known Zeus Trojan. The name Kneber simply refers to a particular group, or herd, of zombie computers, a.k.a. bots, being controlled by one owner. The actual Trojan itself is the same Trojan.Zbot, which also goes by the name Zeus, which has been being observed, analyzed and protected against for some time now.'..."

"...Symantec's Levy explains 'Though it is true that this Kneber string of the overall Zeus botnet is fairly large, it does not involve any new malicious threats. Thus, computer users with up-to -date security software should already be protected from this threat.'

"[McAfee security specialist Joris] Evers echoed that basic sentiment, pointing out 'Additionally, users should keep the standard rules of PC security in mind--keep your software and operating system up to date, run a complete and up-to-date suite of security software, including a firewall and antimalware detection and don't click on suspicious links in e-mail, instant messages or those that arrive via social media.'..."

Let me recap what people who know what they're talking about said, about not getting infected:

• Keep your operating system updated
• Keep your software updated
• "Run a complete and up-to-date suite of security software, including"
  • A firewall
  • Antimalware detection
• Don't click on suspicious links in
  • Email
  • Instant messages
  • Those arriving via social media

I think I can summarize that good advice on a single point:

• DON'T BE STUPID

In a corporate setting, that's not always possible, of course. The department head may be getting a bonus for saving money - by not renewing the antimalware software's license.

I think the article's author was spot-on with these two paragraphs:

"...The news part of this story isn't really the expanse of the Kneber botnet, or even the sensitive information it appears to have compromised. Sadly, the real story is how or why 2,500 organizations around the world, including government agencies, have such weak security that they allowed 75,000 PC's to be compromised by a relatively archaic threat for which detection and protection have existed for over a year...."

"...Kneber is nothing. It is barely worth mentioning. What is worth mentioning again, and again, and again, is the importance of applying patches and updates in a timely manner, employing anti-malware security software and keeping it up to date to detect current threats, and continuing to educate users to not click on links or open attachments in messages...."

First Google Gmail Hack, now Windows Hole Announced

"Windows hole discovered after 17 years - Update "
The H Security (January 20, 2010)

"Microsoft isn't having an easy time of it these days. In addition to the unpatched hole in Internet Explorer, a now published hole in Windows allows users with restricted access to escalate their privileges to system level – and this is believed to be possible on all 32-bit versions of Windows from Windows NT 3.1 up to, and including Windows 7. While the vulnerability is likely to affect home users in only a minor way, the administrators of corporate networks will probably have their hands full this week.

"The problem is caused by flaws in the Virtual DOS Machine (VDM) introduced in 1993 to support 16-bit applications (real mode applications for 8086)...."

There's a fairly large - or at least loud - number of people who are convinced that everything Microsoft does is wrong. I can understand preferring one operating system over another: but the intensity and commitment I was running into had a 'religious' feel to it. The sort of 'religion' that gives campus atheists something to talk about.

This article doesn't seem to be like that.

It does give a fair amount of background on the security issue - and how to deal with it.

Related posts:

• "Google Gmail Hack: a Followup"
  (January 19, 2010)
• "Google Gmail Accounts Vulnerable, China Hack Went Public"
  (January 18, 2010)

---

A tip of the hat to Twitter_Tips, on Twitter, for the heads-up on this article.

Key to Faster Bootups: Don't Test the System (it really does make sense)

"Computer Makers Aim to Banish Boot-Up Blues"
Gadget Lab (October 2, 2009)

"In the time it takes your computer to boot up, you can probably make some toast or a cup of tea before the thing is ready to use. In the near future, you might only have enough time to take a sip of that tea or check your watch.

Mindful of how frustrating the wait is, makers of PCs' basic input/output systems (BIOS) are working on bringing instant-on computing closer to reality with promises of significantly faster boot time.

" 'People want PCs to be like their toaster. Push a button and it is ready,' says Steve Jones, vice-president and chief scientist of core systems at Phoenix Technologies, one of the biggest BIOS makers.

"The BIOS is the first piece of code that a computer runs when it is powered on. Before Windows or Linux can start, the BIOS identifies, tests and gets system devices such as the video display card, the hard disk and other hardware up and running. But running the tests every time the machine powers on can be time consuming...."

Some operating systems, like Windows, have been running tests of the system too - which means duplicated effort. Not particularly efficient.

It's not that the tests will be eliminated - just that they'll be run more efficiently and intelligently.

"...That's why PC makers are pinning their hopes on a new standard called Unified Extensible Firmware Interface. UEFI hopes to improve the intelligence of the BIOS so it doesn't have to perform all checks every time the computer is powered on. Ultimately, the idea is to run fewer initializations as the computer boots...."

Okay: that seems to make sense.

I haven't been all that bothered with how long it takes my computer to boot - but then, I leave it on all day, and have a routine of doing something else while the computer's system sorts itself out.

All in all, this looks like a good idea.

I just hope it gets thoroughly tested before it's released.

Windows 7: "Groovy" - but Looks Good Anyway

"First Look: Windows 7 Shapes Up as Microsoft's Best OS Yet"
Gadget Lab, Wired (August 14, 2009)

"Good news, everyone! If you've been stuck in a time loop using Windows XP, which is nearing eight years old, or Windows Vista, which is just annoying, you can finally break free: Windows 7 is almost here. Microsoft delivers a slickly designed, vastly improved OS that will warp you to the world of today. This upgrade is big, and it's hugely recommended for Microsoft users.

"When we say big, we mean really BIG — so we're not going to bombard you with an epic overview covering every single aspect. Rather, today we’ll guide you through an early look at some major new features and enhancements we tested in the almost-final version released last week. And in the weeks leading up to the Oct. 22 launch of Windows 7, we’ll continue posting our impressions, testing more features of the OS on various types of hardware.

"We'll start with interface, move on to performance and usability, and then we'll conclude with the 'funner' stuff. Let's begin exploring, shall we?..."

To the credit of the writer, this article stops short of saying that Windows 7 is the best thing since sliced bread. On the other hand, you'll find words and phrases like "groovy" and "kind of lame" in the article. Apart from that, though, it's the bee's knees and the cat's meow.

I don't think I'm a purist, but I prefer that phrases from another era 23-skidoo from a final draft: unless there's a reason for using 'period' phrases. Like, you know, calling software 'far out, man.'

Back to the Article

The article's headings are "Revamped Interface With Improved Presentation", "Performance and Usability" " 'Funner' Stuff" and "More to Come".

The Wired article is fairly brief, and is the first of a series.

Judging from this sample, it'll be worth following the rest of this review of Windows 7. Provided that you plan to use it, or are thinking of doing so. My son has pre-ordered Windows 7 - getting it at half-price - and has been quite impressed with it. He's been working with the beta version.

The improved performance impressed me. What I don't know is whether I'd need a more powerful computer than the one I've got to take advantage of Windows 7. My experience from computers of decades gone by is that putting a 'new and improved' operating system in an existing machine can result in unexpected consequences.

Still, Windows 7 sounds "groovy".

BrowserShots: Test Browser/OS Appearance, Free

"browsershots.org Test your web design in different browsers" is a free online service that I wish I'd known about before developing my last website.

Not that there's anything wrong with it.

Back to BrowserShots.

It's simple: copy and paste, or key in, your URL, check off the browsers/operating system combinations you want checked, click "submit," and wait to see what your page looks like in that system.

One thing: I'd suggest not selecting too many combinations at once. It takes the site a while to get the display ready. Quite a while.

I didn't discover this myself. BrowserShots was recommended in a BlogCatalog discussion thread, "Do you preview your site in different browsers?"