Microsoft to close security updates on old Windows

By Edmund X. DeJesus, Contributor 18 Apr 2006 | SearchSecurity.com

Security Wire Daily News Digg This!     StumbleUpon     Del.icio.us

Microsoft has announced that it will be ending support -- including security updates -- for its Windows 98, Windows 98 Second Edition, and Windows Millennium Edition (Me) on July 11, 2006. However, analysts suggest that the change won't exactly send shockwaves through the security community.

According to Microsoft's bulletin, it will continue to offer a repository of information on the operating systems via its support Web site, but the time has come to foster adoption of newer operating systems.

"Microsoft is retiring support for these products because they are outdated and can expose customers to security risks," Microsoft said. "We recommend that customers who are still running Windows 98 or Windows Me upgrade to a newer, more secure Microsoft operating system, such as Windows XP, as soon as possible."

"The Windows 98-class operating system was basically not securable, lacking memory protection and other essential security features," noted Dan Kaminsky, senior security researcher and founder of Seattle-based DoxPara Research. "Anyone still using Windows 98 is not very concerned about security, so this announcement should not have great impact."

Laura DiDio, analyst with the Boston-based Yankee Group, concurred. "These operating systems were developed before today's security threats on the Internet and corporate Intranets. It's time for them to go."

DiDio credited Microsoft for supporting the operating systems for so long and for announcing its intentions well in advance. "Most companies support one or two previous versions of a product. These operating systems are almost a decade old."

The analysts also suggest that it would be unlikely that current 98 or Me users would upgrade to more modern versions, such as Windows XP or Microsoft's anticipated Vista.

"Users have had the opportunity to upgrade for a long time," Kaminsky said. "It's unlikely that they would choose to do so now as a result of this announcement."

Added DiDio, "These are largely consumer -- not corporate -- users with older hardware. They will probably hang on to the older operating systems until the hardware fails, or they obtain new hardware, which usually includes a new operating system."

Microsoft had previously extended the end-of-life date for Windows 98 from January 2004 before announcing the new date.

Edmund X. DeJesus is a freelance writer in Norwood, Mass.

Tags: IT Security Audits,  Security Industry Market Trends, Predictions and Forecasts,  Enterprise Risk Management: Metrics and Assessments,  Windows Security: Alerts, Updates and Best Practices,  VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT IT Security Audits Compliance strategy: How to become an internal IT auditor A guide to internal and external network security auditing Standards compliance does not equal sound information security risk management Tony Spinelli: Prioritize Information Security over Compliance How to prepare for a FERPA audit MasterCard increases PCI compliance requirements for some merchants How to select a set of network security audit guidelines How to write a risk methodology that blends business, security needs PCI compliance requirement 11: Testing Using IAM tools to improve compliance Security Industry Market Trends, Predictions and Forecasts Trustwave seeks SIEM technology upgrade with Intellitactics deal Three security themes to watch for at the 2010 RSA Conference Interest in data leakage protection, event log management rises Google attacks and infrastructure insecurities SCADA system, critical infrastructure security lacking, survey finds Security architects fear savvy botnet attacks, IPv6 security issues Security compliance predictions for 2010: New regulations, new technology IAM trends: Rebuilding security with provisioning technologies Gartner acquires Burton Group, bolsters presence Securosis adds Security Incite, Rothman to its roster Security Industry Market Trends, Predictions and Forecasts Research Enterprise Risk Management: Metrics and Assessments Medical identity fraudsters target health care info, experts say Creating meaningful information security metrics PCI compliance requirements affect IT risk assessments Perspectives: Pet information security risks Cloud computing in 2010: Be ready for risk management challenges Security risk factors: Business partner security and pandemic planning GRC customers point to better efficiency, convergence and consistency Schneier-Ranum face-off part 5: Security metrics How to detect and respond to money laundering How to justify information security spending on cloud computing Enterprise Risk Management: Metrics and Assessments Research

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary backscatter body scanning  (SearchSecurity.com) marketecture  (SearchSecurity.com) NCSA  (SearchSecurity.com) Palladium  (SearchSecurity.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary