Live data from Hacker News

Microsoft fixes '19-year-old' bug with emergency patch

bbc.com

21–30 of 47 posts

Re: Microsoft fixes '19-year-old' bug with emergency patch

#21

So if this really goes back that far, I would hate to be anyone using Windows XP.

XP came out before Debian 3.0. At that point, Google hardly existed, iTunes hadn't been released, and the Nokia 3310 was less than a year old - http://en.wikipedia.org/wiki/Nokia_3310

Anyone who is still running Windows XP has this coming.

Re: Microsoft fixes '19-year-old' bug with emergency patch

#22

Earlier quoted context omitted.

XP is 13 years old. When the Blaster worm hit in 2003, the Unix people laughed, because they were immune. The Morris worm was ancient history, because it had been 15 years since that hit. XP is almost ancient history. You shouldn't be running it, any more than you should've been running something vulnerable to the Morris worm in 2003. edit 'omh makes a good point below

You shouldn't be running it but a hell of a lot of people and businesses still are. And MS is to blame IMO. The continued extending support, they screwed up with Vista and after making things right with Windows 7 screwed up again (although no where nearly as badly as with Vista) with Windows 8. I also know of people running XP because it's incredibly stable now and they don't see anything in newer versions of Windows…

The pace of change in big orgs mean it takes 2-3 years to implement a change like xp->win 7. When you have 100k employees and regulatory hell and have outsourced every last bit of everything you are pretty fucked.

Re: Microsoft fixes '19-year-old' bug with emergency patch

#23

Confused BBC. https://technet.microsoft.com/library/security/MS14-066 https://technet.microsoft.com/library/security/ms14-064 Full list of updates: https://technet.microsoft.com/library/security/ms14-nov Of significant importance too are the Flash Player updates released: http://helpx.adobe.com/security/products/flash-player/apsb14...

I agree with flash player update.. seems all (flash) video players on IE8 stopped working now.

Re: Microsoft fixes '19-year-old' bug with emergency patch

#25

Earlier quoted context omitted.

You shouldn't be running it but a hell of a lot of people and businesses still are. And MS is to blame IMO. The continued extending support, they screwed up with Vista and after making things right with Windows 7 screwed up again (although no where nearly as badly as with Vista) with Windows 8. I also know of people running XP because it's incredibly stable now and they don't see anything in newer versions of Windows…

The pace of change in big orgs mean it takes 2-3 years to implement a change like xp->win 7. When you have 100k employees and regulatory hell and have outsourced every last bit of everything you are pretty fucked.

I work for a big corporation which has not fully made the windows xp to windows 7 transition. We have an extended XP support contract with MS which to my understanding includes bugfixes for this kind of major problem.

Re: Microsoft fixes '19-year-old' bug with emergency patch

#26

So if this really goes back that far, I would hate to be anyone using Windows XP.

XP is 13 years old. When the Blaster worm hit in 2003, the Unix people laughed, because they were immune. The Morris worm was ancient history, because it had been 15 years since that hit. XP is almost ancient history. You shouldn't be running it, any more than you should've been running something vulnerable to the Morris worm in 2003. edit 'omh makes a good point below

Windows XP is old, but to call it 13 years old is somewhat misleading.

XP was the newest possible version of Windows as recently as 2007, and since most people ignored Vista it was the default install for many (most?) people up until Windows 7, which was only 5 years ago. SP3 came out in 2008 and significantly improved the features and security.

Combined with some odd licenses and old PC stock in stores there were plenty of people buying new laptops in 2010 with XP installed.

Yes, it's old. But more like 5-6 years than 13.

Re: Microsoft fixes '19-year-old' bug with emergency patch

#27

Earlier quoted context omitted.

XP is 13 years old. When the Blaster worm hit in 2003, the Unix people laughed, because they were immune. The Morris worm was ancient history, because it had been 15 years since that hit. XP is almost ancient history. You shouldn't be running it, any more than you should've been running something vulnerable to the Morris worm in 2003. edit 'omh makes a good point below

You shouldn't be running it but a hell of a lot of people and businesses still are. And MS is to blame IMO. The continued extending support, they screwed up with Vista and after making things right with Windows 7 screwed up again (although no where nearly as badly as with Vista) with Windows 8. I also know of people running XP because it's incredibly stable now and they don't see anything in newer versions of Windows…

> I also know of people running XP because it's incredibly stable now and they don't see anything in newer versions of Windows they really want or need.

They don't need security updates? Aren't they connected to the internet?

Re: Microsoft fixes '19-year-old' bug with emergency patch

#28
post #8

> Specifically, it related to Microsoft Secure Channel, known as Schannel, Microsoft's software for implementing secure transfer of data. I'm confused... The article says this research relates to the SChannel vulnerability being patched this month and cites IBM Researchers[1] finding it, but the link to the blog post showing the work is towards OLE and not SChannel. Also, Microsoft has mentioned that they found[2] th…

Does IE allow VBscript execution in any html page?

Does it happen only when activeX is enable?

Re: Microsoft fixes '19-year-old' bug with emergency patch

#29
post #27

Earlier quoted context omitted.

You shouldn't be running it but a hell of a lot of people and businesses still are. And MS is to blame IMO. The continued extending support, they screwed up with Vista and after making things right with Windows 7 screwed up again (although no where nearly as badly as with Vista) with Windows 8. I also know of people running XP because it's incredibly stable now and they don't see anything in newer versions of Windows…

> I also know of people running XP because it's incredibly stable now and they don't see anything in newer versions of Windows they really want or need. They don't need security updates? Aren't they connected to the internet?

Most people can't "see" security vulnerabilities in their OS.

Re: Microsoft fixes '19-year-old' bug with emergency patch

#30

Earlier quoted context omitted.

XP is 13 years old. When the Blaster worm hit in 2003, the Unix people laughed, because they were immune. The Morris worm was ancient history, because it had been 15 years since that hit. XP is almost ancient history. You shouldn't be running it, any more than you should've been running something vulnerable to the Morris worm in 2003. edit 'omh makes a good point below

You shouldn't be running it but a hell of a lot of people and businesses still are. And MS is to blame IMO. The continued extending support, they screwed up with Vista and after making things right with Windows 7 screwed up again (although no where nearly as badly as with Vista) with Windows 8. I also know of people running XP because it's incredibly stable now and they don't see anything in newer versions of Windows…

> You shouldn't be running it but a hell of a lot of people and businesses still are.

I am currently creating an application that has "runs on Windows XP" as part of the requirements list.

Post reply on HN