THIS IS NOT TRUE !! please take time to read the original blog as provided by the blog.
THIS IS NOT TRUE !! please take time to read the original blog as provided by the blog.
The title and substance of this article is a lie, the author Iain Thomson has ether made a bad mistake, or is responsible for an outright untruth. This article should be apologised for, and corrected.
The title "Microsoft warns it'll hand out zero days for Windows XP" implies that Microsoft are actively giving out vulnerabilities - this is FALSE!!!
The 1st, 2nd and proceeding paragraphs only enforce the falsehood that Microsoft are actively attacking Windows XP.
Read the original blog in its entirety ..
http://blogs.technet.com/b/security/archive/2013/08/15/the-risk-of-running-windows-xp-after-support-ends.aspx
QUICK HIGH LIGHT from block ..
When Microsoft releases a security update, security researchers and criminals will often times reverse engineer the security update in short order in an effort to identify the specific section of code that contains the vulnerability addressed by the update. Once they identify this vulnerability, they attempt to develop code that will allow them to exploit it on systems that do not have the security update installed on them. They also try to identify whether the vulnerability exists in other products with the same or similar functionality. For example, if a vulnerability is addressed in one version of Windows, researchers investigate whether other versions of Windows have the same vulnerability. To ensure that our customers are not at a disadvantage to attackers who employ such practices, one long standing principle that the Microsoft Security Response Center (MSRC) uses when managing security update releases is to release security updates for all affected products simultaneously. This practice ensures customers have the advantage over such attackers, as they get security updates for all affected products before attackers have a chance to reverse engineer them.
But after April 8, 2014, organizations that continue to run Windows XP won’t have this advantage over attackers any longer. The very first month that Microsoft releases security updates for supported versions of Windows, attackers will reverse engineer those updates, find the vulnerabilities and test Windows XP to see if it shares those vulnerabilities. If it does, attackers will attempt to develop exploit code that can take advantage of those vulnerabilities on Windows XP. Since a security update will never become available for Windows XP to address these vulnerabilities, Windows XP will essentially have a “zero day” vulnerability forever. How often could this scenario occur? Between July 2012 and July 2013 Windows XP was an affected product in 45 Microsoft security bulletins, of which 30 also affected Windows 7 and Windows 8.
Biting the hand that feeds IT
