Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

Commentary: Windows XP SP2 - a good step forward in security

Windows XP

Note - this commentary was shared in light of Microsoft's UK executive who stated that XP SP2 should hold up well to attacks by hackers.  This statement was taken out of context and even bookies were betting with 2-to-1 odds that SP2 would not stand up to the challenges by year end. 

Microsoft challenges hackers to crack service pack 2
http://www.contractoruk.com/news/001690.html

Many evaluators have debated the strength of XP SP2 security and we all hope it will hold up.  But at the kernel level, "code is code" when it comes to any OS. All it takes is for one weakness in a remotely exploitable service like we've seen for Internet worms manipulating DCOM, LSASS, and PCT vulnerabilities.
 
Unfortunately, in our era of "sound bytes" any statement can be taken out of context or over-emphasized.  I don't believe this was an invitation for an "Open Hack on XP SP2", but an encouragement for XP users to install SP2 and ramp up their security.

Personally, I like XP SP2 and think overall MS did a good job with it.  It's an incremental step forward in security and TWC (despite the "naysayers").  SP2 ain't perfect and I probably wouldn't bet on it holding up (e.g., as the article notes - bookies have already established 2 to 1 odds in favor of the hackers -lol).

Below is a great article discussing all the "feeding frenzy" by the media regarding XP SP2 (e.g., where minor issues suddenly become "crater sized security holes").

XP SP2 - Feast of Egos
http://www.securityfocus.com/columnists/265