Microsoft to close security updates on old Windows

By Edmund X. DeJesus, Contributor 18 Apr 2006 | SearchSecurity.com

Security Wire Daily News Digg This!     StumbleUpon     Del.icio.us

Microsoft has announced that it will be ending support -- including security updates -- for its Windows 98, Windows 98 Second Edition, and Windows Millennium Edition (Me) on July 11, 2006. However, analysts suggest that the change won't exactly send shockwaves through the security community.

According to Microsoft's bulletin, it will continue to offer a repository of information on the operating systems via its support Web site, but the time has come to foster adoption of newer operating systems.

"Microsoft is retiring support for these products because they are outdated and can expose customers to security risks," Microsoft said. "We recommend that customers who are still running Windows 98 or Windows Me upgrade to a newer, more secure Microsoft operating system, such as Windows XP, as soon as possible."

"The Windows 98-class operating system was basically not securable, lacking memory protection and other essential security features," noted Dan Kaminsky, senior security researcher and founder of Seattle-based DoxPara Research. "Anyone still using Windows 98 is not very concerned about security, so this announcement should not have great impact."

Laura DiDio, analyst with the Boston-based Yankee Group, concurred. "These operating systems were developed before today's security threats on the Internet and corporate Intranets. It's time for them to go."

DiDio credited Microsoft for supporting the operating systems for so long and for announcing its intentions well in advance. "Most companies support one or two previous versions of a product. These operating systems are almost a decade old."

The analysts also suggest that it would be unlikely that current 98 or Me users would upgrade to more modern versions, such as Windows XP or Microsoft's anticipated Vista.

"Users have had the opportunity to upgrade for a long time," Kaminsky said. "It's unlikely that they would choose to do so now as a result of this announcement."

Added DiDio, "These are largely consumer -- not corporate -- users with older hardware. They will probably hang on to the older operating systems until the hardware fails, or they obtain new hardware, which usually includes a new operating system."

Microsoft had previously extended the end-of-life date for Windows 98 from January 2004 before announcing the new date.

Edmund X. DeJesus is a freelance writer in Norwood, Mass.

Tags: IT Security Audits,  Security Industry Market Trends, Predictions and Forecasts,  Enterprise Risk Management: Metrics and Assessments,  Windows Security: Alerts, Updates and Best Practices,  VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT IT Security Audits MasterCard increases PCI compliance requirements for some merchants How to write a risk methodology that blends business, security needs PCI compliance requirement 11: Testing Using IAM tools to improve compliance Forensic accounting success depends on information security support HIPAA compliance: New regulations change the game PCI DSS Q&A: Answering your questions Maltego demo: Identifying a website's trust relationships PCI QSA assurance program penalizes assessors Strategies for email archiving and meeting compliance regulations Security Industry Market Trends, Predictions and Forecasts Cybersecurity czar candidate questions clout of new position Gartner sees better days ahead for security budgets Sophos CEO on Symantec, McAfee after Utimaco acquisition WH cybersecurity plan needs private sector guidance Obama announces creation of cybersecurity coordinator position Security budgets take hit in media, tech industry, survey finds Cybersecurity Act of 2009: Power grab, or necessary step? Opinion: Gartner gets NAC wrong, again Cloud computing security group releases report outlining trouble areas White House cybersecurity advisor calls for public-private cooperation Security Industry Market Trends, Predictions and Forecasts Research Enterprise Risk Management: Metrics and Assessments The basics of enterprise GRC project management RSA council addresses growing security risks in the cloud How to write a risk methodology that blends business, security needs Mature SIMs do more than log aggregation and correlation Risk management must include physical-logical security convergence New partnerships, creative thinking help security bust recession Security budgets take hit in media, tech industry, survey finds Service-focused security offers best value to organization Ease the compliance burden with automation Forensic accounting success depends on information security support Enterprise Risk Management: Metrics and Assessments Research

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary backscatter body scanning  (SearchSecurity.com) marketecture  (SearchSecurity.com) NCSA  (SearchSecurity.com) Palladium  (SearchSecurity.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary