Windows XP No-Support Deadline Has Arrived -- Ignore At Your Peril

[Lady Fitzgerald]

Hi there.

The several hundred thousand "Ma and Pa Kettle" types won't be on the Internet at any one time -- if you are committing Fraud on any "sensible" scale you want to do it quickly -- In and out and get away with a reasonable "profit" before anybody catches you.

A few dollars here and there might be interesting if you are say working in a Bank and can process 100,000's of transactions in a short time but it's just not worth the effort to "the average criminal".

Most businesses whether on XP or not usually have fairly restrictive Internet Access policies anyway -- you have to be fairly high up or have a reasonably responsible position before you get "Un-controlled" Internet access - and if you are one of these types you are likely to get newer gear before anybody else in the organisation.

While people like Dutch and UK Gov'ts are paying for continued XP support -- Hope the taxpayers of those countries remember that at their Next elections - why this sort of money is being spent when there was 6 YEARS WARNING !! that XP would be discontinued I still think the threat is more imagined than real - especially as a lot of the old "Ma and Pa Kettle's" will never have installed any AV software in the first place.

Surf sensibly, don't download anything unless you know EXACTLY what you are looking for-- a lot of downloads are hidden with extra green arrows for downloading anything except the software you want, uncheck any toolbars etc and NEVER EVER open any email attachments unless you know EXACTLY who it comes from -- and a few sites now masquerade as "official one's" such as UK HRMC Tax revenue service - don't click on any links on those emails either.

99.9999% of people will get de-frauded NOT because of computer Viruses but simply by falling foul to Internet activities and bad computer practices which no AV software can prevent.

(I'm in no way suggesting that you shouldn't protect your machine BTW -- that's not the point of this post !!).

Cheers
jimbo

Fraud isn't the issue. The issue is using security holes to get into people's computer's where viruses can be planted to capture login passwords and account numbers which can then be used to drain bank account balances, run up fraudulent charges, etc. As long as an unprotected machine is connected to the internet, the bad guys can get in no matter how carefully the victim surfs. Just opening up a browser—any browser—on an unprotected machine can allow a virus to be planted on the machine. In fact, it's not really necessary to even open a browser for an unprotected machine to be exposed to viruses, key loggers, etc. (for example, M$ can put updates or notifications of updates on a machine without a browser being opened; programs can check for updates and even download and install them without a browser being opened). And not all hackers are big time crooks looking for big scores. Same as you have bank robbers who go for the big hauls and small time punks who knock over convenience stores that keep no more than $50 cash on hand at any one time, there are some cyber crooks that go only after the big hauls and others that go for whatever amount they can easily get, no matter how paltry.

 

[Wenda]

My XP isn't going anywhere at all.

At worst, it will remain in V-Box along with some of my other older OSes.

The older ones are never net-enabled, although I've been online once or twice using NT4.

Yes, I know what I'm doing, and no, I'm not worried about 'threats'.


Wenda.

EDIT: Sitting here pondering the similarities between this and the Y2K furphy.

 

[Jacee]

<snip> As long as an unprotected machine is connected to the internet, the bad guys can get in no matter how carefully the victim surfs. Just opening up a browser—any browser—on an unprotected machine can allow a virus to be planted on the machine. In fact, it's not really necessary to even open a browser for an unprotected machine to be exposed to viruses, key loggers, etc.

What do you see as an "unprotected machine"? I've seen many using Windows Vista, 7, 8, and now 8.1...

 

[Lady Fitzgerald]

<snip> As long as an unprotected machine is connected to the internet, the bad guys can get in no matter how carefully the victim surfs. Just opening up a browser—any browser—on an unprotected machine can allow a virus to be planted on the machine. In fact, it's not really necessary to even open a browser for an unprotected machine to be exposed to viruses, key loggers, etc.

What do you see as an "unprotected machine"? I've seen many using Windows Vista, 7, 8, and now 8.1...

Seriously? Any machine not receiving M$ security updates and/or not running AVs, etc. is unprotected. XP will be receiving no more security updates so any machine running XP will be unprotected. While other OSes can also be unprotected, the topic of this thread is XP.

 

[derekimo]

<snip> As long as an unprotected machine is connected to the internet, the bad guys can get in no matter how carefully the victim surfs. Just opening up a browser—any browser—on an unprotected machine can allow a virus to be planted on the machine. In fact, it's not really necessary to even open a browser for an unprotected machine to be exposed to viruses, key loggers, etc.

What do you see as an "unprotected machine"? I've seen many using Windows Vista, 7, 8, and now 8.1...

Seriously? Any machine not receiving M$ security updates and/or not running AVs, etc. is unprotected. XP will be receiving no more security updates so any machine running XP will be unprotected. While other OSes can also be unprotected, the topic of this thread is XP.

Lighten up, it was a valid question from a security expert.

 

[jimbo45]

Hi there
Like all things "caveat Emptor" -- I still believe that a lot of people won't have any problem at all using XP for a while yet if they operate their devices safely and surf wisely.

The REDICULOUS thing is that some BANKING applications refuse for example to allow me to login to online banking because it doesn't recognize OPERA or KONQUEROR as valid browsers from a LINUX system -- in EVERY WAY ZILLIONS of percent more secure than XP or even Windows 8.1 - so you can see sometimes what I feel about "So called security experts". To access online Banking I have to fire up a Windows VM !!!!!! -- and perhaps Banks could push people off XP by also blocking online banking for XP systems.

The strange thing is that this SAME BANK has mobile phone apps for Android that work from PUBLIC Wi-Fi systems !!!!-- infinitely more "hackable" than a secure decent desktop Linux.

Using a public Wi-Fi system exposes your system far more than almost anything else -- especially since typical data is transmitted un-encrypted until it reaches the remote login screens - so anybody with a data scope type of device can get your passwords in plaintext. !!

Still I'm sure we all have particular feelings about the Banks after the recent debacle in most of the developed world's financial markets in recent years.

(BTW the XP in ATM's is Embedded XP -- a different OS to the desktop model).


Cheers
jimbo

 

[margrave]

What do you see as an "unprotected machine"? I've seen many using Windows Vista, 7, 8, and now 8.1...

Seriously? Any machine not receiving M$ security updates and/or not running AVs, etc. is unprotected. XP will be receiving no more security updates so any machine running XP will be unprotected. While other OSes can also be unprotected, the topic of this thread is XP.

Lighten up, it was a valid question from a security expert.

No chance. The Fitz simply has no "lighten-up" mode.

 

[andrew129260]

Sorry, But I have to agree with the Fitz on this one.

The thread is about xp, its kind of a silly question to ask what they meant about what machine they see as unprotected. They are referring to specifically how xp stops getting updates from Microsoft, no amount of security software will save you. Antiviruses cannot stop vulnerabilities in the software they are protecting. Security software cannot patch holes in the Operating system. Using those vulnerabilities malware can hide itself from the anti-malware itself and never be discovered.

You can say XP is safe to use all you want, but the reality is your xp machine can become part of a botnet and you would never know. Which I believe is going to be the main theme when these xp users still have not left. They will become one large botnet and hackers will use these PC's for spamming email and hacking other websites/etc. The most common malware no longer shows itself or lets its presence be known. This is 2014, not 2006. Malware hides itself on purpose, and tries to not slow a computer down so it will not be suspected of infection. Botnets are very tricky and use whatever means necessary to hide themselves.

It's dangerous to think that Xp can be safe once support ends, which it has. Opening a web browser can get you infected the second you open it, depending on what your homepage is. But the reality is with windows xp, just having it connected to the internet, is a risk. Even if you never use the web browser. The windows xp firewall or hardware firewall from your router is not going to save you.

If you think you are smart enough to avoid infection, think again. It's a lot different when your Operating system is no longer getting patches.

If its off the internet, then yes its relatively safe.


I think their was just some miscommunication on what was said and meant. And maybe just a little to much fired up.

 

[jimbo45]

Hi there
Yet again people haven't understood --NOT ALL MACHINES need to be connected to the Internet - so the idea of a Virus or a Botnet just doesn't apply.

Keep the machine isolated --then it's quite SAFE !!! and sometimes is more fit for purpose than modern machines riddled with crap and trial ware when they come out of the store.

As in all things -- use the appropriate tool for the job -- just ensure its used correctly and within known limits --and don't just willy nilly upgrade because some stupid security chief thinks you ought to. Upgrade when YOU want to not when Ms tells you to.

I've never yet heard of a botnet being transmitted by an ISOLATED Machine not on a network or connected to the internet.

There are some XP machines out their controlling various factory processes -- the hardware has life cycles of may be 50 years or more -- so keeping the old XP machine running specialized taks makes sense -- upgrading the hardware might cost several HUNDRED THOUSAND DOLLARS !! - if you could even find it.

A lot of this type of kit in any case isn't usually "upgradeable" -- often the original manufacturer has long since gone out of business or stopped making the relevant hardware - so no point in getting new computers which won't support the kit.

Cheers
jimbo

 

[Lady Fitzgerald]

I don't disagree with you, jimbo; what you said is absolutely correct. One very acceptable way to protect a machine from malware is to completely isolate it from the internet and make sure no nasties can piggyback in on things like USB flash drives, etc. The machines being discussed here as being at risk are ones that are being used by individuals and businesses that are NOT being isolated from the internet.

 

[lffoar]

Oh bugger it, I'm going back to windows 3.11, DOS and the good ol' reliable dial-up. Never had all these problems with security and the like then......................................
Now, where did I put that floppy with the ping pong game on it?

 

[dolittle]

I'm just wondering what people will do if there PC will run XP and not 7 or 8 because of driver issues or hardware problems?

 

[windude99]

I'm just wondering what people will do if there PC will run XP and not 7 or 8 because of driver issues or hardware problems?

They will probably just buy new PCs or switch to Linux (if they know how to switch).

 

[redblade8]

I've heard that eol for embedded windows xp is 2016. Screw mcdonalds & etc. Their support should either be ending now, or windows xp's support be extended to 2016 also. There shouldn't be any exceptions, none. But I guess microsoft doesn't want to upset the big corporations..and this shows how very little microsoft cares about its consumers actually.

 

[z3r010]

Tweet

— Twitter API (@user) View on Twitter

 

[UsernameIssues]

I'm just wondering what people will do if there PC will run XP and not 7 or 8 because of driver issues or hardware problems?

They will probably just buy new PCs or switch to Linux (if they know how to switch).

Or they will keep using XP until the hardware can no longer be repaired.

I saw hundreds of XP computers in an office yesterday. There are no plans to replace these computers until the hardware dies. This company has a department that specializes in computer forensics (for a price . So they are not clueless users.

 

[Jonguy30]

In my school where I go there are a couple XP machines (laptops) left too. And the last time I saw them they were connected to the internet and they use them fairly frequently, and I don't know if they have plans to replace them, or at least replace the OS.

 

[jadinolf]

No XP here.

Now they can start picking on Windows 7 (the greatest Operating System ever offered to the FREE world)

 

[Lady Fitzgerald]

I was thinking, mayhap, massive amounts of RAM for a Raspberry Pi?

 

[HerrKaLeun]

I've heard that eol for embedded windows xp is 2016. Screw mcdonalds & etc. Their support should either be ending now, or windows xp's support be extended to 2016 also. There shouldn't be any exceptions, none. But I guess microsoft doesn't want to upset the big corporations..and this shows how very little microsoft cares about its consumers actually.

They gave you 13 years of free support for a one time purchase of maybe $100 or less. I'm not sure what world you live in, or what your manufactures typically do. But in the real world a manufacturer sells you a product and then charges you for support. Most software requires an expensive subscription and if you buy a car, you unusually have to pay for your own maintenance for 13 years.

those big corporations you mention pay MS for the extended support. If you pay MS, they will do the same for you.

Feel free to start you own company and develop an OS and sell it for a few bucks and provide 20 years of free service.