How to keep Win XP updated
A bit of a hack, but this Extremetech article tells how to get 5 more years of MS support- kind of. Certainly not for everyone, but an interesting hack (and one that shows MS support ended purely t...
Forum Discussion
China may represent the biggest security threat as its estimated that 50% run unsupported WIN XP systems. So says noted security expert James Forshaw, who won Microsoft's $100,000 BlueHat bounty prize for discovering a mitigation flaw in WIN 8.1. He's also won substantial bounty prizes for hacking JAVA, finding four security flaws with IE 11, and believes that tens of millions of WIN XP systems in China could potentially be used as a massive botNet for DoS or hacker attacks, according to a Networkworld.com article.
The problem is exacerbated by what former MS CEO Steve Ballmer claims is that 90% of their product is pirated in China. So likely not updated with security patches, as MS can disable activation of bootlegged copies of their software through updates.
Take the recent Linux botNet as another example? It was subject to a previously undiscovered backdoor Trojan for over two years by a criminal network, which turned 25,000 hijacked web servers into a botNet feeding SPAM laced with Malware infected websites. Though no vulnerability in Linux was exploited. What's ironic is that an installed AV package would have very likely detected the Trojan, but rarely used in Linux servers as considered unnecessary? See ESET: Operation Windigo.
The problem is exacerbated by what former MS CEO Steve Ballmer claims is that 90% of their product is pirated in China. So likely not updated with security patches, as MS can disable activation of bootlegged copies of their software through updates.
Take the recent Linux botNet as another example? It was subject to a previously undiscovered backdoor Trojan for over two years by a criminal network, which turned 25,000 hijacked web servers into a botNet feeding SPAM laced with Malware infected websites. Though no vulnerability in Linux was exploited. What's ironic is that an installed AV package would have very likely detected the Trojan, but rarely used in Linux servers as considered unnecessary? See ESET: Operation Windigo.
