Microsoft readies Windows XP Service Pack 2 beta

IDG News Service - Microsoft Corp. is gearing up for the first beta test of a set of updates for Windows XP designed to bolster the operating system's security and add features such as support for Version 1.1 of Bluetooth and a new wireless LAN client.
The beta of Windows XP Service Pack 2, or SP2, will be made available via Microsoft's Developer Network to several hundred thousand testers before the end of the year, Matt Pilla, senior product manager for Windows at Microsoft, said yesterday. Targeted testers are software developers and IT professionals, he said.
"SP2 is a fundamentally different service pack," Pilla said. "Much of what we are delivering is the typical set of updates and rollups, but we are doing a lot more to make the operating system more resilient to attacks."
Microsoft has previously talked about many of the security enhancements it intends to deliver in SP2. The plans were first announced by CEO Steve Ballmer in October. A final version of SP2 is due out in the first half of 2004.
Among the security improvements are an updated version of the Internet Connection Firewall, which has been renamed Windows Firewall and will be turned on by default, as well as changes to some Windows parts that have proven attack prone.
The remote procedure call service will run with reduced privileges, and the Distributed Component Object Model gets more access control restrictions, Microsoft said. Vulnerabilities in RPC and DCOM were exploited by the Blaster worm, which wreaked havoc earlier this year.
SP2 will also turn off the Windows Messenger Service, a network administration tool that has been exploited by spammers to barrage Windows users with pop-up messages. The service, not the same as the Windows Messenger instant messaging client, also contains a serious security vulnerability for which Microsoft provided a patch in October.
In addition to reducing the attack surface of Windows XP, SP2 also provides updates to Internet Explorer and Outlook Express that are meant to make browsing the Web and receiving e-mail safer. Internet Explorer will also get a pop-up and pop-under blocker, bound to make surfing the Web more enjoyable, Microsoft said.
Internet Explorer will offer explicit download links to protect users from accidentally downloading and installing potentially malicious programs, while Outlook Express will no longer download external content by default and will be better at handling attachments, according to Microsoft.
Furthermore, as part of Microsoft's efforts to make it simpler to download and apply software fixes, SP2 will install Microsoft's Software Update Services 2.0 client. Thisshould help solve problems with the Windows Update service, which has proved unreliable. SUS also allows users to interrupt downloading software updates and resume later, Microsoft said.
Finally, new features include support for the Bluetooth 1.1 standard and a new WLAN client to simplify connecting to wireless hot spots.