09.17.09

Gemini version available ♊︎

Windows Server 2003 — Just Like Windows XP — Gets Neglected by Microsoft

Posted in Microsoft, Security, Servers, Windows at 2:04 am by Dr. Roy Schestowitz

Done so soon or gone too soon?

Windows Server 2003

Summary: While Windows XP is not supported for security anymore, Windows Server 2003 development stops too

MICROSOFT has not only laid off many employees but it also lost many key developers [19], who were familiar with important code. That is one theory and possible explanation for the fact that XP is left vulnerable from now on; Microsoft has more or less given up on patching it.

“Those two releases, namely XP and Server 2003, come as a pair.”Servers are more sensitive than desktops to intrusion; their function makes them a more serious victim when compromised (affecting people whom they serve or served). It is therefore interesting to read about XP’s cousin, Windows Server 2003, never ever getting a third Service Pack like XP. This is surprising to some. Mary Jo Foley has some more details and implications for security may be tied to the fact that XP is left vulnerable. Those two releases, namely XP and Server 2003, come as a pair. Users/customers will be pressured to move to Vista or its sibling ‘edition’ for servers, which is terrible [1-16].

In other news, the Windows-only spyware from Sears is to be deleted along with the data it collected.

US retailer Sears has been ordered to destroy all the customer data it collected from a piece of online tracking software that consumer regulator the Federal Trade Commission (FTC) said was unfairly used.

The FTC said that while customers had been warned that, once downloaded, software would track their browsing, it had in fact tracked browsing on third party websites, secure browsing including banking and transactions and even some non-internet computer activity.

Does it run under Wine? Hopefully not.
______
[1] Microsoft Investigating LocalSystem Access Bug

Users on a given system can elevate their access privileges to LocalSystem in Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008, Sisk explained in an e-mail. It could cause havoc by giving an authenticated user inappropriate write, delete, and change privileges.   

[2] Microsoft warns of web server flaw

The company has issued an advisory on the vulnerability, which affects Windows XP Professional SP2, Windows Server 2003, Windows Vista and Windows Server 2008. 
 
[...]
 
“The web server is widely used on the internet, and is a top pick by web-hosting providers. We might see web-hosting providers targeted, and their clients’ websites breached.”  

[3] Microsoft investigates new Windows zero-day flaw

Bill Sisk, security response communications manager for Microsoft, said in an email Thursday evening that the flaw allows for privilege escalation from  authenticated user to LocalSystem in Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008.   

[4] Critical patches coming for Vista, Server 2008

This month’s Patch Tuesday fixes will include critical fixes for Microsoft’s  flagship operating systems, the company has warned. 

[5] Microsoft officially 425 years behind the times

It’s not just Excel and Exchange that ignore the Gregorian calendar. The Reg has also confirmed that SQL Server 2008, Windows Small Business Server, and Windows Mobile are ignorant as well.  

[6] The meaning of Microsoft Server 2008

Server 2008 looks like a bit of an odd duck – it doesn’t meet the promises made for “Longhorn” and “Blackcombe”, it’s probably neither more reliable nor more efficient than its 64 bit 2003/XP based predecessors, and unlike Vista (with which it shares some code) the kernel changes amount to rather more than just another point release in the NT schedule.    
 
[...]
 
And that, I think, reflects Microsoft’s other strategic concern: that MacOS X and Linux bracket Microsoft’s market and are both reaching out to the people in the middle – the managers and MCSE decision makers who now consider Apple too consumer oriented and Linux too technical.   

[7] Hyper-V isn’t the only Windows Server 2008 virtualization solution that’s lagging

But it’s not just Microsoft’s own Hyper-V that isn’t quite ready for prime-time. Several other virtualization products from Microsoft’s competitors and partners aren’t 100-percent enterprise-ready, either, at this point.   

[8] There’s no Windows Server 2008 SP1 in the works. Here’s why

Chalk that abnormality up to Microsoft’s ongoing attempt to more closely synchronize its Windows client and Windows server releases. Because Windows client and server are built from the same core and thus get patched with many of the same updates and fixes, Windows Server 2008 and Windows Vista SP1 are now “on par.”

[9] Hyper-V in Server 2008 RTM doesn’t like non-US locales

Annoying. Yes, it is mentioned in the release notes – but what if Hyper-V beta had required you to set a non-US locale at install time? Do you think Microsoft would have flagged this problem more prominently?  

[10] Microsoft cuts Windows virtualization features

The company is changing three key features of the hypervisor technology to try to stick to its schedule of releasing the technology within 180 days of completing its Windows Server “Longhorn” operating system, due to be finalized before the end of the year.

[11] Microsoft web developers branded pants

The strokers of beards and Volish nay-sayers have been claiming that reason is Windows Server 2008. They claim this on the very safe assumption that since Microsoft installed it, vole.com has been running like a condemned man  with his legs cut off on his way to his own execution.   

[12] This eWeek [on Servers]

I asked Jason about Windows Server’s newfound security: “The first time I heard about this new feature,” he said, “I thought it was clearly a response to Linux.

Windows Server 2008 isn’t quite there yet, according to Jason’s tests.

[13] Windows server URL sends you to Apple

TYPE IN windowsserver2008.com into your browser and after it thinks a bit, it takes you straight to the Apple site.

[14] What will run on Windows Server 2008 — and when

Are we in for a Windows-Vista-like experience, where even some of Microsoft’s own applications didn’t work with its new operating system for weeks, if not months?  

[...]
 
A number of Microsoft server apps that won’t support Windows Server 2008 until the latter half of 2008, when service packs providing Server 2008 compatibility are released.  

[15] Windows Server 2008 Delayed, Again

Already, Microsoft delayed SQL Server 2008 availability until later in 2008, even though the software launches with the new version of Windows Server. 

[16] It’s Official: An Unofficial Delay

Microsoft isn’t characterizing the launch announcement as a ship delay, which is possible because of the “2008″ nomenclature and the likelihood that the software will be released to manufacturing this year. My guess is that will happen around November, unless there are unforeseen development problems.   

[17] More than half of Microsoft Vista needs re-writing

Up to 60% of the code in the new consumer version of Microsoft new Vista operating system is set to be rewritten…

[18] Microsoft admits Vista screwed – report

Vista SP1 is code named “Fiji”, presumably after a pretty looking island which is paralysed by coups.

In a statement regarding the service pack Microsoft admits that Vista has “high impact” problems.

[19] MS Insider: The Office Crew Isn’t Smart Enough to Supplant Real Windows Developers

“With Alchin retiring, MarkL and MarkZ, two of the most talented architects in MS already having left, the picture gets really ugly for the Windows division,” my friend claimed, and the BV’s core team members, Ian McDonald, Jack Mayo, Todd Wanke, Clyde Rodriguez and others are starting to connect the dots.
 
[...]

He concluded ominously. “A trainwreck of biblical proportions looms. Pick a good seat on the sidelines, trainwrecks this large take awhile to complete. Vista may be the last MS OS for some time to come, especially if Cutler decides to play hardball.”

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

2 Comments

  1. Yuhong Bao said,

    September 17, 2009 at 3:11 pm

    Gravatar

    BTW, for your information, here is a link to MS’s Support Lifecycle policies as it applies to all MS products, including Windows 2000 and later:
    http://support.microsoft.com/lifecycle/

    Roy Schestowitz Reply:

    Some say Microsoft can be sued for false advertising (regarding the support duration of XP).

DecorWhat Else is New


  1. IRC Proceedings: Saturday, January 28, 2023

    IRC logs for Saturday, January 28, 2023



  2. Unmasking AI

    A guest article by Andy Farnell



  3. The ISO Delusion/Sirius Corporation: A 'Tech' Company Run by Non-Technical People

    Sirius ‘Open Source’ was hiring people who brought to the company a culture of redundant tasks and unwanted, even hostile technology; today we continue to tell the story of a company run by the CEO whose friends and acquaintances did severe damage



  4. Links 28/01/2023: Lots of Catching Up (Had Hardware Crash)

    Links for the day



  5. IRC Proceedings: Friday, January 27, 2023

    IRC logs for Friday, January 27, 2023



  6. Microsoft DuckDuckGo Falls to Lowest Share in 2 Years After Being Widely Exposed as Microsoft Proxy, Fake 'Privacy'

    DuckDuckGo, according to this latest data from Statcounter, fell from about 0.71% to just 0.58%; all the gains have been lost amid scandals, such as widespread realisation that DuckDuckGo is a Microsoft informant, curated by Microsoft and hosted by Microsoft (Bing is meanwhile laying off many people, but the media isn’t covering that or barely bothers)



  7. This is What the Microsoft-Sponsored Media Has Been Hyping Up for Weeks (Ahead of Microsoft Layoffs)

    Reprinted with permission from Ryan



  8. [Meme] António Campinos Wants to Be F***ing President Until 2028

    António Campinos insists he will be EPO President for 10 years, i.e. even longer than Benoît Battistelli (despite having appalling approval rates from staff)



  9. European Patent Office Staff Losing Hope

    The EPO’s management with its shallow campaign of obfuscation (pretending to protect children or some other nonsense) is not fooling patent examiners, who have grown tired and whose representatives say “the administration shows no intention of involving the staff representation in the drafting of the consultant’s mandate” (like in Sirius ‘Open Source’ where technical staff is ignored completely for misguided proposals to pass in the dark)



  10. IRC Proceedings: Thursday, January 26, 2023

    IRC logs for Thursday, January 26, 2023



  11. Sirius Relegated/Demoted/Destined Itself to Technical Hell by Refusing to Listen to the Technical Staff (Which Wanted to Stay With Asterisk/Free Software)

    In my final year at Sirius ‘Open Source’ communication systems had already become chaotic; there were too many dysfunctional tools, a lack of instructions, a lack of coordination and the proposed ‘solution’ (this past October) was just more complexity and red tape



  12. Geminispace Approaching Another Growth Milestone (2,300 Active Capsules)

    The expansion of Geminispace is worth noting again because another milestone is approached, flirted with, or will be surpassed this coming weekend



  13. [Meme] Cannot Get a Phone to Work... in 2022

    Sirius ‘Open Source’ wasted hours of workers’ time just testing the phone after it had moved to a defective system of Google (proprietary); instead of a rollback (back to Asterisk) the company doubled down on the faulty system and the phones still didn’t work properly, resulting in missing calls and angst (the company just blamed the workers who all along rejected this new system)



  14. [Meme] Modern Phones

    Sirius ‘Open Source’ is mistaking “modern” for better; insecurity and a lack of tech savvy typically leads to that



  15. The ISO Delusion: Sirius Corporation Demonstrates a Lack of Understanding of Security and Privacy

    Sirius ‘Open Source’, emboldened by ISO ‘paperwork’ (certification), lost sight of what it truly takes to run a business securely, mistaking worthless gadgets for “advancement” while compelling staff to sign a new contract in a hurry (prior contract-signing scandals notwithstanding)



  16. Links 26/01/2023: LibreOffice 7.4.5 and Ubuntu Pro Offers

    Links for the day



  17. Links 26/01/2023: GNU poke 3.0 and PipeWire 0.3.65

    Links for the day



  18. IRC Proceedings: Wednesday, January 25, 2023

    IRC logs for Wednesday, January 25, 2023



  19. Companies Would Collapse Upon Abandoning Their Original Goals (That Attracted All the Productive Staff)

    Staff with technical skills won't stick around in companies that reject technical arguments and moreover move to proprietary software in a company that brands itself "Open Source"



  20. [Meme] Listen to Your Workers, Avert Disaster

    Companies that refuse to take input from staff are doomed to fail



  21. The ISO Delusion: When the Employer Doesn’t Understand the Company's Value Proposition (Building Systems) and Rejects Security

    Sirius ‘Open Source’ has failed to sell what it was actually good at; instead it hired unqualified people and outsourced almost everything



  22. Links 25/01/2023: NuTyX 23.01.1 and GNU Guile 3.0.9 Released

    Links for the day



  23. Links 25/01/2023: Stratis 3.5.0 and Many Political Links

    Links for the day



  24. New Record Low: Only One 'Linux' Article in ZDNet in More Than Two Weeks

    Only a few years ago ZDNet published about 3 “Linux” stories per day (mostly FUD pieces); now it’s a ghost town, painted in ‘alien green’; considering ZDNet’s agenda (and sponsors) maybe it’s better this way



  25. Links 25/01/2023: Pale Moon 32.0 and DXVK 2.1

    Links for the day



  26. IRC Proceedings: Tuesday, January 24, 2023

    IRC logs for Tuesday, January 24, 2023



  27. ISO Certification Hardly Tackles Any of the Real Issues

    The real-world threats faced by private companies or non-profit organisations aren't covered by the ISO certification mill; today we publish the last post on this topic before proceeding to some practical examples



  28. [Meme] Medical Data Sovereignty

    What happens when your medical records/data are accessible to a company based abroad after a mysterious NDA with the Gates Foundation? The International Organization for Standardization (ISO) does not mind.



  29. The ISO Delusion: Sirius Open Wash Ltd. and Medical Data/Projects at Risk/Peril

    Sirius ‘Open Source’ was good at gloating about “ISO” as in ISO certification (see our ISO wiki to understand what ISO truly is; ISO certification needs to be more widely condemned and exposed) while signing all sorts of dodgy deals and lying to clients (some, like the Gates Foundation, were never mentioned because of a mysterious NDA); security and privacy were systematically neglected and some qualified as criminal negligence (with fines/penalties likely an applicable liability if caught/reported)



  30. Links 24/01/2023: Wine 8.0 is Ready, FSF Bolsters Copyleft

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts