Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That's not my reason, and I've never once mentioned it. I don't care a bit about other people's security. It's an important issue, but life is short, and I've got other stuff to worry about.

My applications have to run in people's browsers...if there are a significant number of people using crappy old browsers (of which IE8 is one), it affects my life and my use of time.



Alright, well I'm in security and I want people off Windows XP. What now? Do we fight over who has the more self-serving agenda?

Please. Since when did Hacker News become about pandering to software development subfields?


"Since when did Hacker News become about pandering to software development subfields?"

Since always.

But, that's not the point. This whole conversation is about Microsoft referring people to a site that will help them upgrade their browser...the majority of people seeing the message and following those steps, will be upgrading to a browser that just isn't up to snuff.

The page it links to does not show people how to upgrade their OS. You're the one taking this conversation in an entirely unrelated direction, and bringing OS security into the discussion. I'm complaining because the whole IE countdown thing is a nuisance rather than a help.

And, again, the OS people run is not my concern. The browser with which they use my applications, however, is my concern. Getting people to upgrade their OS is Microsoft's problem, not mine. But, by recommending an old browser for their users that haven't upgraded from XP, they're making their problem into my problem. I'm tired of dealing with Microsoft's problems, and I don't think it's fair that they use their market clout to keep putting their problems on my plate.


But, that's not the point. This whole conversation is about Microsoft referring people to a site that will help them upgrade their browser...the majority of people seeing the message and following those steps, will be upgrading to a browser that just isn't up to snuff.

Expecting Microsoft to advocate people moving to a non-Microsoft product is idiotic.

I'm tired of dealing with Microsoft's problems, and I don't think it's fair that they use their market clout to keep putting their problems on my plate.

Let me get this straight -- your main complaint is that it's not fair?!


Yeah, I like it when people I work with, directly or indirectly, play fair. When they don't, I feel I have every right to criticize them for it, which is what I've been doing.

I believe Microsoft is doing the web (and me, as a developer for the web) a disservice, and I'd like them to stop damaging the web (and me).


The difference is that XP can be coerced into a reasonable semblance of security, whereas IE6 is unfixable.


XP is also unfixable. You just know more about web development than you do about permissions security.


Not true. First of all, I wouldn't use Windows at all on a machine I depended on for security. The fact is my XP box has never had a bug on it. It's fully patched, services off, behind a nat, with firefox and noscript. Acl's can be improved but I've never bothered. I admit it takes a lot of upfront prep to get XP safe to use, but it can be done if one has the knowledge.

Who said I know anything about web development? Greybeard here that learned on the Vic-20.


So then you know about things like ASLR, service hardening, and default permissions separation right?


So, are you saying that Windows 7 is significantly more secure than XP can ever be?


Yes. A number of security augmentations in Windows 7 required significant modifications to the operating system kernel and user space environment (almost to the point of a rewrite in some cases). These modifications cannot happen in Windows XP without turning Windows XP into Windows 7.


Not enabled by default making them less effective than they should be.


What are you talking about? This is prima facie untrue.



ASLR is mostly enabled, especially in 64-bit binaries. W^X protection is always enabled on 64-bit binaries. Service hardening and privilege separation are enabled by default always.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: