Microsoft aims to save users from themselves in XP update
The final Windows XP Service Pack 2 is due out by midyear
IDG News Service - Most security issues and virus outbreaks happen because people don't know how to protect themselves or don't bother to do what they know they should. In the latest update to Windows XP, Microsoft Corp. has focused on helping people become more aware of what they need to do and encouraging them to actually do it, Ryan Burkhardt, lead program manager for Service Pack 2, said today.
A new test version of SP2, called Release Candidate 1, was made available to beta testers yesterday, and the completed update will be released by midyear, Burkhardt said.
In RC1, if someone receives an e-mail with an .exe attachment or other file types that are regularly used to spread so-called malware, it will be identified and blocked or the receiver will confirm that he wants to open it, Burkhardt said at the CeBIT trade show in Hanover, Germany. The AES (Attachment Execution Services) application programming interface is a public API that lets developers add attachment security to their e-mail client and browser applications. In Outlook Express, Burkhardt said, file types known to be dangerous will be blocked and an explanation given to the user. The user will be given a choice of whether to open suspicious but less dangerous file types.
Developers of other software, such as Qualcomm Inc.'s Eudora e-mail software, may decide to block different file types or to block none but prompt users with warnings, Burkhardt said.
Outlook Express will also no longer download graphics and other external content in HTML by default because these can be used to validate e-mail addresses. "If the sender is not in the user's contact list, it will be treated as potentially unsafe" and won't be displayed, Burkhardt said.
Many of the security features now being released have been included in XP since it was first launched but were turned off by default, Burkhardt said. "The climate was different then; there were fewer attacks, and fewer people had broadband," he said.
Users often make halfhearted attempts to ensure security. For example, many users choose to automatically download security updates but not to automatically install them, he said. "And then they don't install them themselves. That's what happened with Sobig -- a lot of people had downloaded the updates but hadn't installed them," Burkhardt said.
To try to solve this, users will see a new prompt when setting up their PC that will explain the benefits of automatic downloads and installation, to encourage them to use those features, he said.
The background download service has also been adapted to help users on slower connections.The download speed will be scaled to suit what the user is doing, speeding up and using the available bandwidth when the user is doing something like reading e-mail and slowing down when they are more actively using the bandwidth, such as when they surf the Internet, Burkhardt said.
Windows Firewall will now be turned on by default, and Windows Messenger will be turned off.
In another move that will cheer Web surfers, RC1 will include a pop-up advertisement blocker, turned on by default. It was included in the first beta version of SP2 but was turned off by default, Microsoft said.
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- Taking Windows Mobile on Any Device Taking Windows applications mobile has many advantages, but the process of identifying a solution is complex. Learn how to solve this complex problem...
- Is Your Big Data Solution Production-Ready? Read "Is Your Big Data Solution Production-Ready?" now, and discover best practices and actionable steps to implementing a production-ready big data solution.
- Pay-as-you-Grow Data Protection: IBM Tivoli's Full-featured Data Protection Suite for Small to Medium Businesses IBM Tivoli Storage Manager Suite for Unified Recovery gives small and medium businesses the opportunity to start out with only the individual solutions...
- Streamline Data Protection with IBM Tivoli Storage Manager Operations Center IBM Tivoli Storage Manager (TSM) has been an industry-standard data protection solution for two decades. But, where most competitors focus exclusively on Backup...
- Webinar: Building a Big Data solution that's production-ready Big data solutions are no longer just a nice-to-have.
- Meg Whitman presents Unlocking IT with Big Data During this Web Event you will hear Meg Whitman, President and CEO, HP discuss HAVEn - the #1 Big Data platform, as well... All Windows White Papers | Webcasts