Microsoft warns against Windows XP security update hack

[A Guy]

Microsoft has warned against using a hack that allows Windows XP to continue to receive important security updates after Microsoft withdrew support in April.

The hack tricks Microsoft’s update servers into applying security patches to Microsoft’s 13-year-old Windows XP. A small change within Windows XP makes it appear as other versions of Windows that are still supported until 2019.

Microsoft warned that Windows XP customers may face problems if they install the updates. “The security updates that could be installed are intended for Windows Embedded and Windows Server 2003 customers and do not fully protect Windows XP customers,” Microsoft said in a statement released to ZDnet. “Windows XP customers also run a significant risk of functionality issues with their machines if they install these updates, as they are not tested against Windows XP.”

Source

A Guy

 

[Night Hawk]

I am at no surprise at the warning not to apply anything new regarding any existing XP installs presently in use since MS is now finished with all support. Anything found now in regards to updates could easily be some form of malware!

 

[msgerbs]

I am at no surprise at the warning not to apply anything new regarding any existing XP installs presently in use since MS is now finished with all support. Anything found now in regards to updates could easily be some form of malware!

That's not how this works. It tricks Windows Updates into thinking the computer is running Windows Server 2003 or Windows Embedded, both of which are built on the same base kernel as Windows XP, but have different features and such. It's still not possible to install malware via windows updates without being previously infected.

 

[LMiller7]

Microsoft warns against Windows XP security update hack

This does not surprise me at all. By their very nature Windows updates are very OS specific. While closely related, XP Embedded and Server 2003 are not the same as XP. When an OS misrepresents itself to Windows Update you can expect that things will not work as designed. I expect that now that Microsoft knows about this hack they will modify Windows Update to prevent this from working.

 

[lehnerus2000]

I expect that now that Microsoft knows about this hack they will modify Windows Update to prevent this from working.

Of course it would enhance their reputation for being arrogant "scumbags" too.

Just like when MS discovered that people were eliminating Metro (from the W8 Previews) in favour of the traditional Start menu.
Instead of taking the hint, they went "all in" and ripped the Start menu code out.

It was a "great call" because it has lead to W8 becoming a runaway success ...

 

[andrew129260]

It was a "great call" because it has lead to W8 becoming a runaway success ...

:haha::roflmao: That's a good one

 

[jadinolf]

I can hardly control my laughter.:roflmao::roflmao::roflmao::roflmao::roflmao:

 

[Mcgluke]

These update will sneak past any firewall no matter how 'maxxed' it is. Very strange, May be the work of many, Not necessarily Microsoft themselves. Like they would admit that there servers have been hacked tho

 

[Iforgot]

I thought that M$ only acknowledges a hack us when they finally work out a plug for it....
Until then, M$ remain silent.


Or am I just being cynical in my old age.

 

[Mcgluke]

I ran this hack trying to pin what remote servers the update comes from but they are all silent updates which rings my bells as nsa or similar

 

[Layback Bear]

I really don't understand extending XP Updates. We all have had years of warnings to move to another operating system.
Surly Microsoft has given more than enough warnings.

 

[carwiz]

For many, XP is the only current means of accessing the internet and/or running some software. To upgrade the OS would mean not only the cost of the OS but also the cost of a new machine. Many of these machines can't be upgraded or it's just not worth it in hardware expenses. And who wants to buy a new machine with Windows 8 installed on it? I have two machines myself still running XP and they will continue to run it until the good smoke comes out. After that, they'll probably be replaced with pads or books running Android.

This machine will continue to run Windows 7 until I see favorable (to me) options beyond Windows 8. So the delay to implement a new OS will just continue. It will just be at a different OS release.

 

[Mcgluke]

carwiz = Greatest member of the board, Hands down!

I think they are that sick of it getting hacked and finally gave in, No doubt in my mind it was forced due to the cost of 'maintaining' security.

XP - The one thing we love about M$

 

[Pete4]

I really don't understand extending XP Updates. We all have had years of warnings to move to another operating system.
Surly Microsoft has given more than enough warnings.

Some businesses use custom written software that will not work on anything else and would cost hundreds if not millions of dollars to rewrite, upgrade, retrain staff etc. Or take me for example: I have 2 old desktop computers running XP: one setup as gaming rig - mostly flight simulation, another one as media server for playing music, videos, movies. It would cost me over $200 in win licenses alone, plus endless hours of codec and system setup, just to make them work. And for what reason would I ever wanted to go to all this trouble? Don't even get me started on that pile of manure called win 8, I struggled with it on my laptop for almost a year and finally got me so mad I smashed the computer, braking the HDD in process, which gave me opportunity to reinstall Win7. Anyhow, I don't have a problem, my XP computers have very narrow use and don't require internet access most of the time, so I don't care about security, since I have my Win 7 laptop for everything else.
As far as using win7 updates for win xp, there are many internal differences between them and doing so will break windows, just a matter of time, so this would be one of those rare occasions where I would follow MS advice.

 

[Lady Fitzgerald]

I'm flat sick and tired of the crybabies bemoaning the end of XP and stubbornly, not to mention ignorantly, refusing to upgrade from it! Any person or business that fails to plan for ahead for the eventual replacement of hardware and software deserves to fail. From the word go, it was known that XP was going to last only ten years, then M$ extended it a couple years beyond that, so there is absolutely NO excuse for not being ready for XP's End Of Life. The only possible exception might be for hardware that depends on custom software to operate and that would be only if the computer that operated the hardware/software could be kept isolated from all other machines and the internet. Choosing custom software that can't be upgraded to a newer OS or be readily replaced someday with newer software if the older software can't be upgraded is simply foolish and an unsound business practice (sadly, I've seen it happen all too often). Keeping old computers running is rarely cost effective and their inevitable replacement should be preplanned around known software and OS replacement cycles. Sure, the various flavors of Win 8 are turkeys but, so what? Win 7 isn't and everyone had more than adequate time to upgrade software and hardware to it. Win 7 will be here until 1/14/2020 so there will be plenty of time for people and businesses to prepare for what's next. Almost six years is a pretty good run for any computer; actually, more than six years since people and computers should have upgraded to Win 7 as soon as it was evident Win 8 was going to be a flop (and that was during the previews and when it was first released) and Win 7 was still readily available.

 

[HammerHead]

Sick an Tired?

I recommend rest.

 

[Mcgluke]

Lady Fitzgerald I do agree and what will be more surprising is if any business isn't using *nix by then, They are the ones that will fail.. More like be failed hehe

 

[Lady Fitzgerald]

I recommend rest.

I agree, the crybabies should give it a rest.

 

[Layback Bear]

I and most everybody understand the upgrade to Windows 7 and new hardware cost money. I believe we also understand that moving things from XP to a Windows 7 system takes time. These are givens not News. One can choose to do the move or not.
We all have been warned for years that Free Updates for XP will end; also not News.
If one doesn't heed the warnings so be it.

If my memory is correct Microsoft has offered updates for corporation for a fee.

Not a mile from me is a corporation that uses XP for their presses, cutting and grinding machines ect. programs and will for years to come. They have never been on the net and never will be. They have not been updated by Microsoft and never will be. No need to be.
They work exactly like they did when XP was installed.
The best I can tell their is no need for this huge company to change their XP running the programs that run their equipment. Yes their are still good reasons for keeping XP but keep it in the proper places.

That being said: To use XP for private corporation transactions or customer information could be a disaster. They do business all over the world dealing with hundreds of millions of dollars.

For those who want to keep and use XP by all means do so. I really don't care.
If you system doesn't go online well you don't have to worry about online security.

But I would choose not to do business with a company or corporation that uses XP for any business transaction what so ever including my personal information.
Of course at times I don't have a choice what companies I deal with and what operating system they are using.
Will it cost some companies many millions of dollars to upgrade; most certainly but they have had years of warnings this day would come. They should of been prepared for this years ago.

 

[Lady Fitzgerald]

I and most everybody understand the upgrade to Windows 7 and new hardware cost money. I believe we also understand that moving things from XP to a Windows 7 system takes time. These are givens not News. One can choose to do the move or not.
We all have been warned for years that Free Updates for XP will end; also not News.
If one doesn't heed the warnings so be it.

If my memory is correct Microsoft has offered updates for corporation for a fee.

Not a mile from me is a corporation that uses XP for their presses, cutting and grinding machines ect. programs and will for years to come. They have never been on the net and never will be. They have not been updated by Microsoft and never will be. No need to be.
They work exactly like they did when XP was installed.
The best I can tell their is no need for this huge company to change their XP running the programs that run their equipment. Yes their are still good reasons for keeping XP but keep it in the proper places.

That being said: To use XP for private corporation transactions or customer information could be a disaster. They do business all over the world dealing with hundreds of millions of dollars.

For those who want to keep and use XP by all means do so. I really don't care.
If you system doesn't go online well you don't have to worry about online security.

But I would choose not to do business with a company or corporation that uses XP for any business transaction what so ever including my personal information.
Of course at times I don't have a choice what companies I deal with and what operating system they are using.
Will it cost some companies many millions of dollars to upgrade; most certainly but they have had years of warnings this day would come. They should of been prepared for this years ago.

Thank you for "getting it"!