Microsoft to close security updates on old Windows

By Edmund X. DeJesus, Contributor 18 Apr 2006 | SearchSecurity.com

Security Wire Daily News Digg This!     StumbleUpon     Del.icio.us

Microsoft has announced that it will be ending support -- including security updates -- for its Windows 98, Windows 98 Second Edition, and Windows Millennium Edition (Me) on July 11, 2006. However, analysts suggest that the change won't exactly send shockwaves through the security community.

According to Microsoft's bulletin, it will continue to offer a repository of information on the operating systems via its support Web site, but the time has come to foster adoption of newer operating systems.

"Microsoft is retiring support for these products because they are outdated and can expose customers to security risks," Microsoft said. "We recommend that customers who are still running Windows 98 or Windows Me upgrade to a newer, more secure Microsoft operating system, such as Windows XP, as soon as possible."

"The Windows 98-class operating system was basically not securable, lacking memory protection and other essential security features," noted Dan Kaminsky, senior security researcher and founder of Seattle-based DoxPara Research. "Anyone still using Windows 98 is not very concerned about security, so this announcement should not have great impact."

Laura DiDio, analyst with the Boston-based Yankee Group, concurred. "These operating systems were developed before today's security threats on the Internet and corporate Intranets. It's time for them to go."

DiDio credited Microsoft for supporting the operating systems for so long and for announcing its intentions well in advance. "Most companies support one or two previous versions of a product. These operating systems are almost a decade old."

The analysts also suggest that it would be unlikely that current 98 or Me users would upgrade to more modern versions, such as Windows XP or Microsoft's anticipated Vista.

"Users have had the opportunity to upgrade for a long time," Kaminsky said. "It's unlikely that they would choose to do so now as a result of this announcement."

Added DiDio, "These are largely consumer -- not corporate -- users with older hardware. They will probably hang on to the older operating systems until the hardware fails, or they obtain new hardware, which usually includes a new operating system."

Microsoft had previously extended the end-of-life date for Windows 98 from January 2004 before announcing the new date.

Edmund X. DeJesus is a freelance writer in Norwood, Mass.

Tags: IT Security Audits,  Security Industry Market Trends, Predictions and Forecasts,  Enterprise Risk Management: Metrics and Assessments,  Windows Security: Alerts, Updates and Best Practices,  VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT IT Security Audits Standards compliance does not equal sound information security risk management Tony Spinelli: Prioritize Information Security over Compliance How to prepare for a FERPA audit MasterCard increases PCI compliance requirements for some merchants How to select a set of network security audit guidelines How to write a risk methodology that blends business, security needs PCI compliance requirement 11: Testing Using IAM tools to improve compliance Forensic accounting success depends on information security support HIPAA compliance: New regulations change the game Security Industry Market Trends, Predictions and Forecasts M86 buys Web security gateway vendor Finjan Information Security Decisions 2009: Presentation downloads Bruce Schneier on outsourcing, awareness training Marcus Ranum on cyberwarfare, infosec careers McAfee survey finds faults in midmarket enterprise security Email archiving vendor sues Gartner over Magic Quadrant Information Security magazine October issue PDF Editor's Desk: Security 7 Winners Chronicle Trends That Shape The Industry Information Security magazine Security 7 Award winners Security Squad: Privacy gone awry Security Industry Market Trends, Predictions and Forecasts Research Enterprise Risk Management: Metrics and Assessments How to avoid Internet liability lawsuits Bruce Jones: Report Security and Risk Metrics in a Business-Friendly Way Bernie Rominski: Communicate Effectively with Management about Risk Best Policy and Risk Management Products Monitoring program data and internal controls for risk management Risk management strategy for an information technology solution provider Align your data protection efforts with GRC The basics of enterprise GRC project management RSA council addresses growing security risks in the cloud How to write a risk methodology that blends business, security needs Enterprise Risk Management: Metrics and Assessments Research

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary backscatter body scanning  (SearchSecurity.com) marketecture  (SearchSecurity.com) NCSA  (SearchSecurity.com) Palladium  (SearchSecurity.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary