end of XP updates

I have XP on my old laptop. It is too old to put Window 7 on it. So I am wondering what to do. Is it really a big problem to not be getting these updates?

I occasionally need to reinstall XP. Will MS still make the existing updates available for future use for reinstalls of XP?

Thanks for the advise.

Try the forum search function as there have been a couple of topics relating to end of Microsoft XP support.

You can also Read More Information about XP Here: http://www.msfn.org/board/ :slight_smile:

Good question.

Thanks for the help.

It’s a pretty big problem if you’re browsing the web using Internet Explorer under an Administrator account, and/or if you don’t have a hardware firewall in place (i.e. a simple NAT router)… But let me put it this way – I’m still using XP and I ain’t scared :wink: (The ONLY thing I use IE for is Windows update website).

I can’t remember exactly, but I believe Windows 2000 users could still get updates (after a reinstall situation) long after support had ended.

These guys at least will give you life-time support on XP, read: http://www.reuters.com/article/2014/03/24/ca-malwarebytes-idUSnBw245335a+100+BSW20140324
Also install their Malwarebytes Anti-Exploit tool.
Do not forget about these XP hardening steps: http://infosecawareness.in/sysadmin/windows-xp-hardening
Also use EMET: http://searchsecurity.techtarget.com/answer/With-EMET-Microsoft-ranges-beyond-mitigation-security-technology

polonus

You neglected to mention Avast’s commitment to the remaining XP users:
https://blog.avast.com/2014/03/12/avast-will-continue-to-support-windows-xp-for-home-and-business-users/

Hi bob3160,

Knew about that.
The avast commitment is known.
Too many users in India still out on XP for avast! and others to leave them alone.
So it is a good thing we did not forget about our XP users out there in the dark :slight_smile:

Now please, do not forget that XP is 12 years old now and should be left by the general user - period.
All supporting software also “hangs together with rubber bands” now (notwithstanding the continued avast! support).
And for those that do not have the money to leave that OS, they could switch to Linux.

polonus

I despise the age argument. Aren’t you older than 12 years too? :stuck_out_tongue:

XP is very mature. If not for the lack of security updates going forward, age would have nothing to do with it.

Hi soulstace,

If that particular argument does not appeal to you, these are the arguments MS gives according to Wikipedia (quote from there)

As the end of extended support approached, Microsoft began to warn users and organizations of the risks of remaining on XP and not migrating to newer versions such as Windows 7 or 8, suggesting that attackers could reverse engineer security patches for newer versions of Windows and use them to target XP vulnerabilities, considering them to be “permanent zero-day exploits”.[119] In January 2014, it was estimated that more than 95% of the 3 million automated teller machines in the world were still running Windows XP. Plans were being made by several ATM vendors and their customers to migrate to Windows 7-based systems over the course of 2014.[120]
As you see there is a reason for security updates not going forward, because of existing fear the OS will be vulnerable to reverse engineered M$ later OS updates.

polonus

I have no choice but to get older or die.
I’m however smart enough to realize that XP has quite a few security shortcomings.
Which is why I abandoned it when something more secure became available. :slight_smile:

Question the programs that polonus mentioned above: Will MBAE and EMET work fine together or will they conflict?

EMET is known to create problems with particular applications and in browsers.
Skype is such a particular example.
Dropbox won’t run either with EMET installed.
Please forget to include Adobe in EMET, guaranteed to give trouble.
EMET and MBAM are compatible and additional, read here: https://forums.malwarebytes.org/index.php?showtopic=143156

If there are problems you can remove that particular program from the EMET protection.
This is not a good solution, I am aware of that, but one could have the additional protection of free Malware Anti Exploit:
https://www.malwarebytes.org/antiexploit/

This can be used against zero days.
Also a good advice is to use a fully updated and fully patched supported browser on XP - firefox, Google Chrome.

Here is a guide for what to protect with EMET: http://www.rationallyparanoid.com/articles/microsoft-emet-3.html
link article authors from rationallyPARANOID dot com

polonus

EMET has always brought a lot of issues in my computer… Too complicated and aggressive…
Go for a HIPS is better imho. There are free ones of you-know-whom.

Well I dont use any of those programs so I might not have any problem with EMET then.

Maybe you should forget about EMET and start using some of those other products. :slight_smile:

Well, it seems to stay a hot topic for the time being,
these are the 5 particular threats MS foresees for XP with XPocalypse arriving:
http://blogs.technet.com/b/security/archive/2014/03/24/cyber-threats-to-windows-xp-and-guidance-for-small-businesses-and-individual-consumers.aspx
link article author MS Tim Rains.

So an alternative browser won’t help you, new zero day in Word won’t help.
In short “doom and gloom” waiting for those that won’t upgrade.

“When the levee breaks, you have to move” according to the Led Zeppelin lyrics

Where is that unofficial fourth security pack?
Win98 had it, specially developed by a Turkish developer.
Haven’t seen it this time around 8)

polonus

Well Pol, I’ll be forwardmost. Let’s see what happens, I’ll report back.

Right now, I’ve booted from a USB directly into Zorin Linux and am using the Chrome browser.
Think I’m safe ???