09.17.09

Gemini version available ♊︎

Windows Server 2003 — Just Like Windows XP — Gets Neglected by Microsoft

Posted in Microsoft, Security, Servers, Windows at 2:04 am by Dr. Roy Schestowitz

Done so soon or gone too soon?

Windows Server 2003

Summary: While Windows XP is not supported for security anymore, Windows Server 2003 development stops too

MICROSOFT has not only laid off many employees but it also lost many key developers [19], who were familiar with important code. That is one theory and possible explanation for the fact that XP is left vulnerable from now on; Microsoft has more or less given up on patching it.

“Those two releases, namely XP and Server 2003, come as a pair.”Servers are more sensitive than desktops to intrusion; their function makes them a more serious victim when compromised (affecting people whom they serve or served). It is therefore interesting to read about XP’s cousin, Windows Server 2003, never ever getting a third Service Pack like XP. This is surprising to some. Mary Jo Foley has some more details and implications for security may be tied to the fact that XP is left vulnerable. Those two releases, namely XP and Server 2003, come as a pair. Users/customers will be pressured to move to Vista or its sibling ‘edition’ for servers, which is terrible [1-16].

In other news, the Windows-only spyware from Sears is to be deleted along with the data it collected.

US retailer Sears has been ordered to destroy all the customer data it collected from a piece of online tracking software that consumer regulator the Federal Trade Commission (FTC) said was unfairly used.

The FTC said that while customers had been warned that, once downloaded, software would track their browsing, it had in fact tracked browsing on third party websites, secure browsing including banking and transactions and even some non-internet computer activity.

Does it run under Wine? Hopefully not.
______
[1] Microsoft Investigating LocalSystem Access Bug

Users on a given system can elevate their access privileges to LocalSystem in Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008, Sisk explained in an e-mail. It could cause havoc by giving an authenticated user inappropriate write, delete, and change privileges.   

[2] Microsoft warns of web server flaw

The company has issued an advisory on the vulnerability, which affects Windows XP Professional SP2, Windows Server 2003, Windows Vista and Windows Server 2008. 
 
[...]
 
“The web server is widely used on the internet, and is a top pick by web-hosting providers. We might see web-hosting providers targeted, and their clients’ websites breached.”  

[3] Microsoft investigates new Windows zero-day flaw

Bill Sisk, security response communications manager for Microsoft, said in an email Thursday evening that the flaw allows for privilege escalation from  authenticated user to LocalSystem in Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008.   

[4] Critical patches coming for Vista, Server 2008

This month’s Patch Tuesday fixes will include critical fixes for Microsoft’s  flagship operating systems, the company has warned. 

[5] Microsoft officially 425 years behind the times

It’s not just Excel and Exchange that ignore the Gregorian calendar. The Reg has also confirmed that SQL Server 2008, Windows Small Business Server, and Windows Mobile are ignorant as well.  

[6] The meaning of Microsoft Server 2008

Server 2008 looks like a bit of an odd duck – it doesn’t meet the promises made for “Longhorn” and “Blackcombe”, it’s probably neither more reliable nor more efficient than its 64 bit 2003/XP based predecessors, and unlike Vista (with which it shares some code) the kernel changes amount to rather more than just another point release in the NT schedule.    
 
[...]
 
And that, I think, reflects Microsoft’s other strategic concern: that MacOS X and Linux bracket Microsoft’s market and are both reaching out to the people in the middle – the managers and MCSE decision makers who now consider Apple too consumer oriented and Linux too technical.   

[7] Hyper-V isn’t the only Windows Server 2008 virtualization solution that’s lagging

But it’s not just Microsoft’s own Hyper-V that isn’t quite ready for prime-time. Several other virtualization products from Microsoft’s competitors and partners aren’t 100-percent enterprise-ready, either, at this point.   

[8] There’s no Windows Server 2008 SP1 in the works. Here’s why

Chalk that abnormality up to Microsoft’s ongoing attempt to more closely synchronize its Windows client and Windows server releases. Because Windows client and server are built from the same core and thus get patched with many of the same updates and fixes, Windows Server 2008 and Windows Vista SP1 are now “on par.”

[9] Hyper-V in Server 2008 RTM doesn’t like non-US locales

Annoying. Yes, it is mentioned in the release notes – but what if Hyper-V beta had required you to set a non-US locale at install time? Do you think Microsoft would have flagged this problem more prominently?  

[10] Microsoft cuts Windows virtualization features

The company is changing three key features of the hypervisor technology to try to stick to its schedule of releasing the technology within 180 days of completing its Windows Server “Longhorn” operating system, due to be finalized before the end of the year.

[11] Microsoft web developers branded pants

The strokers of beards and Volish nay-sayers have been claiming that reason is Windows Server 2008. They claim this on the very safe assumption that since Microsoft installed it, vole.com has been running like a condemned man  with his legs cut off on his way to his own execution.   

[12] This eWeek [on Servers]

I asked Jason about Windows Server’s newfound security: “The first time I heard about this new feature,” he said, “I thought it was clearly a response to Linux.

Windows Server 2008 isn’t quite there yet, according to Jason’s tests.

[13] Windows server URL sends you to Apple

TYPE IN windowsserver2008.com into your browser and after it thinks a bit, it takes you straight to the Apple site.

[14] What will run on Windows Server 2008 — and when

Are we in for a Windows-Vista-like experience, where even some of Microsoft’s own applications didn’t work with its new operating system for weeks, if not months?  

[...]
 
A number of Microsoft server apps that won’t support Windows Server 2008 until the latter half of 2008, when service packs providing Server 2008 compatibility are released.  

[15] Windows Server 2008 Delayed, Again

Already, Microsoft delayed SQL Server 2008 availability until later in 2008, even though the software launches with the new version of Windows Server. 

[16] It’s Official: An Unofficial Delay

Microsoft isn’t characterizing the launch announcement as a ship delay, which is possible because of the “2008″ nomenclature and the likelihood that the software will be released to manufacturing this year. My guess is that will happen around November, unless there are unforeseen development problems.   

[17] More than half of Microsoft Vista needs re-writing

Up to 60% of the code in the new consumer version of Microsoft new Vista operating system is set to be rewritten…

[18] Microsoft admits Vista screwed – report

Vista SP1 is code named “Fiji”, presumably after a pretty looking island which is paralysed by coups.

In a statement regarding the service pack Microsoft admits that Vista has “high impact” problems.

[19] MS Insider: The Office Crew Isn’t Smart Enough to Supplant Real Windows Developers

“With Alchin retiring, MarkL and MarkZ, two of the most talented architects in MS already having left, the picture gets really ugly for the Windows division,” my friend claimed, and the BV’s core team members, Ian McDonald, Jack Mayo, Todd Wanke, Clyde Rodriguez and others are starting to connect the dots.
 
[...]

He concluded ominously. “A trainwreck of biblical proportions looms. Pick a good seat on the sidelines, trainwrecks this large take awhile to complete. Vista may be the last MS OS for some time to come, especially if Cutler decides to play hardball.”

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

2 Comments

  1. Yuhong Bao said,

    September 17, 2009 at 3:11 pm

    Gravatar

    BTW, for your information, here is a link to MS’s Support Lifecycle policies as it applies to all MS products, including Windows 2000 and later:
    http://support.microsoft.com/lifecycle/

    Roy Schestowitz Reply:

    Some say Microsoft can be sued for false advertising (regarding the support duration of XP).

DecorWhat Else is New


  1. All IRC Logs Now Available as GemText Over Gemini Protocol

    Today we've completed the transition from plain text over gemini:// to GemText over gemini:// for IRC logs



  2. IRC Proceedings: Monday, December 06, 2021

    IRC logs for Monday, December 06, 2021



  3. [Meme] Rowing to the Bottom of the Ocean

    The EPO‘s Steve Rowan (VP1) is failing EPO staff and sort of “firing” workers during times of crisis (not at all a crisis to the EPO’s coffers)



  4. EPO Gradually Reduced to 'Fee Collection Agency' Which Eliminates Its Very Own Staff

    Mr. Redundancies and Mr. Cloud are outsourcing EPO jobs to Microsoft and Serco as if the EPO is an American corporation, providing no comfort to long-serving EPO staff



  5. Linux Foundation 2021 Annual Report Made on an Apple Mac Using Proprietary Software

    Yes, you’re reading this correctly. They still reject both “Linux” and “Open Source” (no dogfooding). This annual report is badly compressed; each page of the PDF is, on average, almost a megabyte in size (58.8 MB for a report of this scale is unreasonable and discriminates against people in countries with slow Internet connections); notice how they’re milking the brand in the first page (straight after the cover page, the 1991 ‘creation myth’, ignoring GNU); remember that this foundation is named after a trademark which is not even its own!



  6. Links 7/12/2021: OpenIndiana Hipster 2021.10 and AppStream 0.15

    Links for the day



  7. Microsoft “Defender” Pretender Attacks Random Software That Uses NSIS for installation; “Super Duper Secure Mode” for Edge is a Laugh

    Guest post by Ryan, reprinted with permission



  8. Links 6/12/2021: LibreOffice Maintenance Releases, Firefox 95 Finalised

    Links for the day



  9. “Wintel” “Secure” uEFI Firmware Used to Store Persistent Malware, and Security Theater Boot is Worthless

    Guest post by Ryan, reprinted with permission



  10. No Linux Foundation IRS Disclosures Since 2018

    The publicly-available records or IRS information about the Linux Foundation is suspiciously behind; compared to other organisations with a "tax-exempt" status the Linux Foundation is one year behind already



  11. Jim Zemlin Has Deleted All of His Tweets

    The Linux Foundation‘s Jim Zemlin seems to have become rather publicity-shy (screenshots above are self-explanatory; latest snapshot), but years ago he could not contain his excitement about Microsoft, which he said was "loved" by what it was attacking. Days ago it became apparent that Microsoft’s patent troll is still attacking Linux with patents and Zemlin’s decision to appoint Microsoft as the At-Large Director (in effect bossing Linus Torvalds) at the ‘Linux’ Foundation’s Board of Directors is already backfiring. She not only gets her whole salary from Microsoft but also allegedly protects sexual predators who assault women… by hiring them despite repeated warnings; if the leadership of the ‘Linux’ Foundation protects sexual predators who strangle women (even paying them a salary and giving them management positions), how can the ‘Linux’ Foundation ever claim to represent inclusion and diversity?



  12. Microsoft GitHub Exposé — Part IX — Microsoft's Chief Architect of GitHub Copilot Sought to be Arrested One Day After Techrights Article About Him

    Balabhadra (Alex) Graveley has warrant for his arrest, albeit only after a lot of harm and damage had already been done (to multiple people) and Microsoft started paying him



  13. The Committee on Patent Law (PLC) Informed About Overlooked Issues “Which Might Have a Bearing on the Validity of EPO Patents.”

    In a publication circulated or prepared last week the Central Staff Committee (CSC) of the EPO explains a situation never explored in so-called 'media' (the very little that's left of it)



  14. Links 6/12/2021: HowTos and Patents

    Links for the day



  15. IRC Proceedings: Sunday, December 05, 2021

    IRC logs for Sunday, December 05, 2021



  16. Gemini Space/Protocol: Taking IRC Logs to the Next Level

    Tonight we begin the migration to GemText for our daily IRC logs, having already made them available over gemini://



  17. Links 6/12/2021: Gnuastro 0.16 and Linux 5.16 RC4

    Links for the day



  18. Links 5/12/2021: Touchpad Gestures in XWayland

    Links for the day



  19. Society Needs to Take Back Computing, Data, and Networks

    Why GemText needs to become 'the new HTML' (but remain very simple) in order for cyberspace to be taken away from state-connected and military-funded corporations that spy on people and abuse society at large



  20. [Meme] Meanwhile in Austria...

    With lobbyists-led leadership one might be led to believe that a treaty strictly requiring ratification by the UK is somehow feasible (even if technically and legally it's moot already)



  21. The EPO's Web Site is a Parade of Endless Lies and Celebration of Gross Violations of the Law

    The EPO's noise site (formerly it had a "news" section, but it has not been honest for about a decade) is a torrent of lies, cover-up, and promotion of crimes; maybe the lies are obvious for everybody to see (at least EPO insiders), but nevertheless a rebuttal seems necessary



  22. The Letter EPO Management Does Not Want Applicants to See (or Respond to)

    A letter from the Munich Staff Committee at the EPO highlights the worrying extent of neglect of patent quality under Benoît Battistelli and António Campinos; the management of the EPO did not even bother replying to that letter (instead it was busy outsourcing the EPO to Microsoft)



  23. IRC Proceedings: Saturday, December 04, 2021

    IRC logs for Saturday, December 04, 2021



  24. EPO-Bribed IAM 'Media' Has Praised Quality, Which Even EPO Staff (Examiners) Does Not Praise

    It's easy to see something is terribly wrong when the people who do the actual work do not agree with the media's praise of their work (a praise motivated by a nefarious, alternate agenda)



  25. Tux Machines is 17.5 Years Old Today

    Tux Machines -- our 'sister site' for GNU/Linux news -- started in 2004. We're soon entering 2022.



  26. Approaching 100

    We'll soon have 100 files in Git; if that matters at all...



  27. Improving Gemini by Posting IRC Logs (and Scrollback) as GemText

    Our adoption of Gemini and of GemText increases; with nearly 100,000 page requests in the first 3 days of Decembe (over gemini://) it’s clear that the growing potential of the protocol is realised, hence the rapid growth too; Gemini is great for self-hosting, which is in turn essential when publishing suppressed and controversial information (subject to censorship through blackmail and other ‘creative’ means)



  28. Links 4/12/2021: IPFire 2.27 Core Update 162 and Genode OS Framework 21.11

    Links for the day



  29. Links 4/12/2021: Gedit Plans and More

    Links for the day



  30. Links 4/12/2021: Turnip Becomes Vulkan 1.1 Conformant

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts