Hard Light Productions Forums

Off-Topic Discussion => General Discussion => Topic started by: TopAce on April 09, 2014, 10:19:09 am

Title: Are careful Windows XP users actually under threat?
Post by: TopAce on April 09, 2014, 10:19:09 am
Microsoft stoppoed updating Windows XP. It's been pre-advertised, so everyone knew about it beforehand.

In my case, changing the operating system would mean buying a new computer, and it's outside my financial possibilities.

Am I under threat (and to what extent) if I'm very careful in my Internet browsing and I don't open emails/files coming from unknown sources? I've had Internet for possibly more than a decade, and I've never gotten a virus and I've never been hacked anywhere.
Title: Re: Are careful Windows XP users actually under threat?
Post by: The E on April 09, 2014, 10:35:43 am
You're probably Ok, for the most part. Your browser and antimalware package should be able to fend off most attacks, the actual danger period for you starts when Browser and antimalware vendors stop supporting XP.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Phantom Hoover on April 09, 2014, 10:57:47 am
Staying on XP might not be immediately catastrophic but it's going to become more and more untenable as the system becomes ever more abandoned and exploit-ridden. If you really can't upgrade to a newer Windows, consider a lightweight Linux.
Title: Re: Are careful Windows XP users actually under threat?
Post by: StarSlayer on April 09, 2014, 11:09:37 am
You could probably spin up a virtual machine to be your internet facing buffer.  If something happens to the VM you just burn it and restore the last version.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Phantom Hoover on April 09, 2014, 11:12:01 am
If he can't upgrade on his machine he's not going to be able to run a VM.
Title: Re: Are careful Windows XP users actually under threat?
Post by: StarSlayer on April 09, 2014, 11:21:19 am
I think Virtual Box and VMware Workstation had versions that ran on XP.  Though CPU usually needs to support virtualization and execute disable bit.
Title: Re: Are careful Windows XP users actually under threat?
Post by: EvidenceOfFault on April 09, 2014, 11:34:07 am
Microsoft stoppoed updating Windows XP. It's been pre-advertised, so everyone knew about it beforehand.

In my case, changing the operating system would mean buying a new computer, and it's outside my financial possibilities.

Am I under threat (and to what extent) if I'm very careful in my Internet browsing and I don't open emails/files coming from unknown sources? I've had Internet for possibly more than a decade, and I've never gotten a virus and I've never been hacked anywhere.
That you know of. We're not in the 90's any more, when a virus would usually announce its presence to brag. We're also not in the 2000's, where it'd immediately try to mail itself to everyone in your address book.
Of course, unless you're a nuclear weapons researcher, you're probably not going to be worth a zero-day, even for XP, so anti virus and a firewall will protect you from a large percentage of threats. Do you feel secure yet?

More things to consider:
a) XP was not designed with security in mind. What little security it has is bolted on patchwork. Any new attack technique will go right through.
b) You're probably going to use Java/Flash/a browser/etc. When they stop shipping security patches for the XP version, those programs are wide open
c) You might hope XP stops being a target as its market share drops, but as long as embedded XP is in use everywhere, it will remain a lucrative target.

Really, I wouldn't recommend running XP on anything connected to the network, except as a honeypot.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Fury on April 09, 2014, 01:36:06 pm
I would strongly recommend dual-booting Linux and XP if you need to run applications that require Windows, then use XP as little as possible. If you don't have such applications, then why bother staying with XP? Just move entirely to Linux if that's the case.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Nuke on April 09, 2014, 02:44:24 pm
Staying on XP might not be immediately catastrophic but it's going to become more and more untenable as the system becomes ever more abandoned and exploit-ridden. If you really can't upgrade to a newer Windows, consider a lightweight Linux.

reactos seems to be pushing for a stable 0.4 release, at which point it will become usable by the masses, rather than just a few nerds with ancient hardware. since its pretty much going to be an open source windows xp, i think a lot of xp users will be switching to reactos as soon as that goes live. you might get some linux users out of the death of xp, but reactos seem to be poised to grab up xp's old market share.
Title: Re: Are careful Windows XP users actually under threat?
Post by: EvidenceOfFault on April 09, 2014, 03:40:41 pm
I don't think many will be switching to Reactos for security reasons. I'm not really familiar with Reactos, but since they try to supply a system compatible with pre-vista windows, I suspect the insecure architectural design is going to be a problem.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Nuke on April 09, 2014, 03:50:33 pm
it will be a case of security through obscurity, at least initially. the os is open source so it will be possible to address security holes as they show themselves, much the way its done in linux. rather than waiting days/weeks/months/years/eternity for a hotfix from ms.

i also have a feeling that the system will be different enough that it would be difficult for exploits designed for xp/vista/7/8 to work on reactos. i have a feeling they will be addressing the flaws in xp in their system design.
Title: Re: Are careful Windows XP users actually under threat?
Post by: General Battuta on April 09, 2014, 04:13:30 pm
The vast majority of people still using XP are going to be using it for reasons that make it very unlikely they will even begin to know what reactos is.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Mongoose on April 09, 2014, 04:27:03 pm
I realize I'm probably under some level of threat, but I've pretty much resigned myself to that, because upgrading isn't an option unless the Windows Fairy drops a spare 7 key in my lap.  I am vaguely interested in ReactOS if they ever get a beyond-alpha release out the door, but after the massive headache that Ubuntu gave me the sole time I attempted it, I'm not going back there (plus I have way too much Windows-only stuff).  Basically I'm going to get everything important backed up to my external, so that if I do get nailed with something nasty, I can just wipe without too much pain.

(Of course external threats may not be my biggest concern: see WHIYL.)
Title: Re: Are careful Windows XP users actually under threat?
Post by: Bobboau on April 09, 2014, 04:36:26 pm
Try Linux mint, spin up a VM and try it, you have nothing to lose but some of your time.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Nuke on April 09, 2014, 04:47:27 pm
Try Linux mint, spin up a VM and try it, you have nothing to lose but several days of your time.

fixed that for you. i cant count the times things which would have been simple tasks on windows have taken me days to get working on linux systems. linux users are all masochists (sometimes you get a wizzard, but i hate to think of what they had to do to get to that point).
Title: Re: Are careful Windows XP users actually under threat?
Post by: pecenipicek on April 09, 2014, 05:18:16 pm
Try Linux mint, spin up a VM and try it, you have nothing to lose but several days of your time.

fixed that for you. i cant count the times things which would have been simple tasks on windows have taken me days to get working on linux systems. linux users are all masochists (sometimes you get a wizzard, but i hate to think of what they had to do to get to that point).

Good luck, have fun! (http://www.gentoo.org/doc/en/handbook/handbook-amd64.xml)




Spoiler:
thats how i started learning linux stuff
Title: Re: Are careful Windows XP users actually under threat?
Post by: Mongoose on April 09, 2014, 06:17:43 pm
I think my main problem with Ubuntu was that my box has a Radeon HD4670, which because AMD is dicks is already on the "legacy driver" path.  I had a hell of a time getting the official AMD-provided Linux driver to work right, and for whatever reason I had absolutely no luck with the open-source version.  In the end I'm not even sure if I ever managed to get it acknowledged correctly, because just the basic Unity desktop was running ridiculously slowly when compared to a normal Windows install.  I was just trying it out in an attempt to get a Linux promo item in Team Fortress 2, so after I got the game to load and grabbed the item, I gave up and uninstalled.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Ghostavo on April 09, 2014, 06:43:53 pm
Try Linux mint, spin up a VM and try it, you have nothing to lose but several days of your time.

fixed that for you. i cant count the times things which would have been simple tasks on windows have taken me days to get working on linux systems. linux users are all masochists (sometimes you get a wizzard, but i hate to think of what they had to do to get to that point).

Good luck, have fun! (http://www.gentoo.org/doc/en/handbook/handbook-amd64.xml)




Spoiler:
thats how i started learning linux stuff

The stage3 install? Try the stage2 or stage1 (https://wiki.gentoo.org/wiki/FAQ#How_do_I_Install_Gentoo_Using_a_Stage1_or_Stage2_Tarball.3F) ones. :p

As an old Gentoo user, I can't think of a more terrifying command than:

emerge -e system
Title: Re: Are careful Windows XP users actually under threat?
Post by: Nuke on April 09, 2014, 08:28:37 pm
Try Linux mint, spin up a VM and try it, you have nothing to lose but several days of your time.

fixed that for you. i cant count the times things which would have been simple tasks on windows have taken me days to get working on linux systems. linux users are all masochists (sometimes you get a wizzard, but i hate to think of what they had to do to get to that point).

Good luck, have fun! (http://www.gentoo.org/doc/en/handbook/handbook-amd64.xml)




Spoiler:
thats how i started learning linux stuff

i think you may be exaggerating about the fun. every linux experience ive had has been horrible, and ive even had a few classes on linux. ive had the desire to learn linux, the need to use linux for a couple of things, but ive never enjoyed one second of it.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Polpolion on April 09, 2014, 08:39:29 pm
i think you may be exaggerating about the fun. every linux experience ive had has been horrible, and ive even had a few classes on linux. ive had the desire nay even the need to use linux, but ive never enjoyed one second of it.

weird, that's how I feel about windows.
Title: Re: Are careful Windows XP users actually under threat?
Post by: pecenipicek on April 10, 2014, 12:40:33 am
Try Linux mint, spin up a VM and try it, you have nothing to lose but several days of your time.

fixed that for you. i cant count the times things which would have been simple tasks on windows have taken me days to get working on linux systems. linux users are all masochists (sometimes you get a wizzard, but i hate to think of what they had to do to get to that point).

Good luck, have fun! (http://www.gentoo.org/doc/en/handbook/handbook-amd64.xml)




Spoiler:
thats how i started learning linux stuff

The stage3 install? Try the stage2 or stage1 (https://wiki.gentoo.org/wiki/FAQ#How_do_I_Install_Gentoo_Using_a_Stage1_or_Stage2_Tarball.3F) ones. :p

As an old Gentoo user, I can't think of a more terrifying command than:

emerge -e system
i've been through two "emerge -e world" so far... usually i do it when a new major gcc version hits and recompile the whole thing overnight... ( i'm on funtoo btw )

rereading the bit about emerge -e system thing... stage3 has been a thing for how long now? 5-6 years if memory serves? when i first touched gentoo, it was already supposedly unsupported way of installing gentoo...
i think you may be exaggerating about the fun. every linux experience ive had has been horrible, and ive even had a few classes on linux. ive had the desire nay even the need to use linux, but ive never enjoyed one second of it.

weird, that's how I feel about windows.
Quoted for the bloody truth...
Title: Re: Are careful Windows XP users actually under threat?
Post by: Fury on April 10, 2014, 07:39:22 am
Try Linux mint, spin up a VM and try it, you have nothing to lose but some of your time.
OpenSUSE is another distro worth considering.

Someone mentioned Linux is for masochists and then someone else came in to drum Gentoo. Point proven. :sigh:

But really, even if one distro doesn't seem to work for you, chances are some other will. Just try them out, nothing to lose except time.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Ghostavo on April 10, 2014, 07:43:32 am
Try Linux mint, spin up a VM and try it, you have nothing to lose but several days of your time.

fixed that for you. i cant count the times things which would have been simple tasks on windows have taken me days to get working on linux systems. linux users are all masochists (sometimes you get a wizzard, but i hate to think of what they had to do to get to that point).

Good luck, have fun! (http://www.gentoo.org/doc/en/handbook/handbook-amd64.xml)




Spoiler:
thats how i started learning linux stuff

The stage3 install? Try the stage2 or stage1 (https://wiki.gentoo.org/wiki/FAQ#How_do_I_Install_Gentoo_Using_a_Stage1_or_Stage2_Tarball.3F) ones. :p

As an old Gentoo user, I can't think of a more terrifying command than:

emerge -e system
i've been through two "emerge -e world" so far... usually i do it when a new major gcc version hits and recompile the whole thing overnight... ( i'm on funtoo btw )

rereading the bit about emerge -e system thing... stage3 has been a thing for how long now? 5-6 years if memory serves? when i first touched gentoo, it was already supposedly unsupported way of installing gentoo...

From since I can remember, about 8 years ago, the using stage3 was the only supported method and the tutorial hasn't changed much since then.

But when I see something like one of those commands I cringe at the possibility of it breaking your system. Which has happened more times than wish I remembered.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Klaustrophobia on April 10, 2014, 08:53:33 am
XP (and 2000) are deemed safe enough to be plugged into components serving nuclear reactors.  good enough for me.
Title: Re: Are careful Windows XP users actually under threat?
Post by: The E on April 10, 2014, 08:55:10 am
XP (and 2000) are deemed safe enough to be plugged into components serving nuclear reactors.  good enough for me.

That's.....not a particularly useful bit of information, as the requirements for those are only tangentially related to the requirements of a device connected to the internet.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Nuke on April 10, 2014, 12:31:54 pm
industrial rigs dont count. they are usually built with everything need and sit idle most of the time (the things they do dont really tax the system). so there is no point in upgrading them. especially if they are off the internet.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Dragon on April 10, 2014, 03:58:03 pm
Yeah. You could use DOS for all we care, as long as it's not physically connected to the web and you don't use USB sticks with it. In fact, it was still in use in at least one place a few years ago (I know, because my father, being old enough to be proficient with DOS, was called in to fix something on it. :) ) and probably still is. As long as the only way for a system to communicate with outside world is the keyboard and a display, the only security it needs is a good system password and a few screws (or a locker) to secure the case from being stolen. :)
Title: Re: Are careful Windows XP users actually under threat?
Post by: Nuke on April 10, 2014, 04:39:26 pm
im rather proficient in dos myself. i had that down when i was 9 and spent the summer with my grandparents. gramps was an electronics technician, fixed tvs and then moved over to computers in the 80s. while i was there i read the ibm dos manual, got my elite rating, also learned about porn from the 386 era.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Dragon on April 10, 2014, 06:13:14 pm
Leisure Suit Larry? :) I love old DOS games, but can't stand working with a command-line interface, whether it's in Linux or in DOS. It wasn't a bad system, a bit primitive, but works well enough, especially if you get a GUI for it (read: an early Windows version, from the times they weren't a complete OS. :) ), or don't have to manually interact with it at all (as is the case with most specialized equipment that runs it).
Title: Re: Are careful Windows XP users actually under threat?
Post by: Nuke on April 11, 2014, 02:32:45 am
dos may be a command line interface, but its a command line interface that makes sense. commands are mostly named after what they do. linux has some weird commands. though compairing dos to linux is like comparing a donkey to a 747.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Polpolion on April 11, 2014, 08:50:28 am
Speaking of shells I find it hilarious that Microsoft has made an advanced, modern CLI like PowerShell but they still can't figure out how to dynamically change shell's width with the window's width.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Fury on April 11, 2014, 11:02:40 am
PowerShell is essentially my job these days and far bigger issue than shell width is that Microsoft doesn't seem to know how to make newer versions of PowerShell backwards compatible with their existing products. I've been stuck with version 2.0 because it's simply not possible to use 3.0 or 4.0 without running into problems. It's sad really.
Title: Re: Are careful Windows XP users actually under threat?
Post by: FlamingCobra on April 12, 2014, 09:03:45 pm
Debian Live distro, man.
Title: Re: Are careful Windows XP users actually under threat?
Post by: S-99 on April 12, 2014, 09:10:55 pm
I think my main problem with Ubuntu was that my box has a Radeon HD4670, which because AMD is dicks is already on the "legacy driver" path.  I had a hell of a time getting the official AMD-provided Linux driver to work right, and for whatever reason I had absolutely no luck with the open-source version.  In the end I'm not even sure if I ever managed to get it acknowledged correctly, because just the basic Unity desktop was running ridiculously slowly when compared to a normal Windows install.  I was just trying it out in an attempt to get a Linux promo item in Team Fortress 2, so after I got the game to load and grabbed the item, I gave up and uninstalled.
Amd hasn't had the greatest linux drivers for a while. Nvidia driver support in linux is better. But, i no longer have nvidia hardware and am stuck with radeon onboard graphics. So far all is good. I hope **** doesn't turn up eventually :(
Someone mentioned Linux is for masochists and then someone else came in to drum Gentoo. Point proven. :sigh:
In reality, i believe it more safe to say that the point was proven that just gentoo is for masochists.

Back to reactos.

Reactos would be cool if a beta would finally come out for once. Perhaps reactos is too ambitious? It's basically an all in one version of windows (compatibility from xp on up), but opensource. One thing that probably did slow them down was the internal code audit (http://en.wikipedia.org/wiki/ReactOS#Internal_audit) they had a while ago. The repercussions of simply hearing about the audit weren't positive in the opensource community. Results of the audit were never released as it was all internal (the results i'd like to know for the hell of it). Reactos has strict policies for clean room reverse engineering. Of course they do, they don't want microsoft breathing down their shoulders.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Nuke on April 13, 2014, 12:04:04 am
alphas are available but they are hardly stable enough for day to day use. last time i used it (i wasnt to say back with version 0.3.12), the system was functional but there were all kinds of interface glitches. but it was clear that they were serious about making an operating system, and have periodically released several versions since ive heard about what they were doing.

the audit had to happen because microsoft wanted assurances that windows wasnt being decompiled and repackaged as open source. i dont see the audit as something that needs to be reviewed by everyone, its probibly just a bunch of hashes and diffs against various versions of windows to prove that the code is original. it was obviously good enough to keep ms from shutting them down (if anything would have been found amiss, ms could have butchered them).

right now they are running a crowd funding campaign:

https://www.indiegogo.com/projects/reactos-community-edition

seems they are trading assurances that applications and drivers that backers use will work with the 0.4.0 version of the operating system, in exchange for donations.
Title: Re: Are careful Windows XP users actually under threat?
Post by: Mr. Vega on April 13, 2014, 11:26:12 am
Dunno if it becomes more essential for an XP user, but NoScript is your friend.
Title: Re: Are careful Windows XP users actually under threat?
Post by: jr2 on April 13, 2014, 07:49:42 pm
Yeah. You could use DOS for all we care, as long as it's not physically connected to the web and you don't use USB sticks with it. In fact, it was still in use in at least one place a few years ago (I know, because my father, being old enough to be proficient with DOS, was called in to fix something on it. :) ) and probably still is. As long as the only way for a system to communicate with outside world is the keyboard and a display, the only security it needs is a good system password and a few screws (or a locker) to secure the case from being stolen. :)

*smacks you with a fish*

That's only if the system is dumb enough to use autorun...  Like Windows USED to before it was patched.