Windows XP security gets tighter

dod

http://news.bbc.co.uk/2/hi/technology/3579355.stm

Windows XP security gets tighter

Microsoft is preparing an update to Windows XP that is intended to make the operating system more secure.

Dubbed Service Pack 2 (SP2) the update will close some loopholes that virus writers and malicious hackers have exploited to infect or take over PCs.

The add-on for XP will also include extras that block pop-up ads by default and give users a clearer picture of how secure their system is.

The update is due to be finished and released to users by the end of June.

Broken Windows

"The security environment has changed since the launch of XP in 2001," said Matt Pilla, senior product manager for Windows at Microsoft. "Not only have hackers become more sophisticated and exploits more sophisticated but people are more connected than ever."

This made outbreaks likely to spread fast and be hard to contain, he said.

He said SP2 was an answer to many of these changes and would make Windows XP more resilient against some of the attacks that have made headlines over the past few years.

Microsoft has been working with chip makers AMD and Intel on ways to stop so-called buffer over-runs that can help an attacker take over a target PC.

Changes have also been made to the underlying Windows technologies that the Blaster worm exploited to spread so fast.

Blocking switch

As well as these changes users of Windows XP that install SP2 will notice more visible differences.

For instance Internet Explorer has been given a blocker for pop-up ads that will be turned on by default.

Before now people irritated by pop-ups have had to resort to other browsers or applications to keep the ads at bay.

Also added to Internet Explorer are download watchers that stop "spyware" being trickled on to a PC via background downloads.

Internet Explorer, Outlook Express and Windows Messenger will also warn about attachments to messages or downloads to prevent viruses or other malicious programs being installed.

Outlook Express will no longer automatically download graphics for web-formatted messages to foil spammers trying to harvest live mail accounts.

The firewall for XP-using PCs will be turned on by default in SP2.

In addition, all programs will have to be given explicit permission to use the web. None will get default access.

Users will also be regularly reminded about Windows Update to keep their machine up to date and limit exposure to potentially damaging loopholes.

Information about the status of the firewall on a PC as well as its anti-virus software and how well updated software is will be collected in a new program called the Security Centre.

"This is a fundamentally different kind of service pack," said Mr Pilla, "it will make Windows more resilient and more manageable and the features within it more visible.

Although Mr Pilla could not say how big the finished update will be in megabytes he said that users will be able to get hold of it by several different means.

Those on broadband connections will be able to download it but it will also be possible to order it direct from Microsoft and perhaps pick it up in stores.

aidan_walsh

There are also reports that some of the "security changes" will render older programs unable to run... This doesn't just exclude DOS programs, but some Windows 95 ones as well...

ColmOT [MSFT]

Yes, security is #1 priority in XP SP2.

The Windows Firewall is turned on by default, and i smuch more enhanced that the version of ICF Firewall that's in XP RTM & XPSP1.

Additionally, we have added in support for NX technologies (if your processor supports it) where certain sections of memory cannot be used to launch executable code ( common ploy used by virii).

If you are interested in trying out the Release Candidate of XP SP2, feel free to download it from here
http://www.microsoft.com/technet/prodtechnol/winxppro/sp2preview.mspx

There is also a document outlining the changes in XPSP2 there also.

Feedback on the RC is welcome

silverside

Anyone know if they have made any changes to stop use of fake CD-keys made by brute-force-search programs?

Lots of people have used this method to install XP without paying for it. I remember when SP1 came out it forced OfficeXP reactivation - it wouldnt surprise me if SP2 included another anti-piracy measure.