main

Microsoft Steers Firefox Users Wrong On XP SP1

Steven Parker   on 30 September 2006 - 14:49 · 23 comments & 9391 views

Advertisement (Why?)
Microsoft, which will end support of Windows XP SP1 in less than two weeks, incorrectly flags users running Mozilla's Firefox browser that they need to update when they visit the Windows Web site.

The Redmond, Wash. developer has warned users of the four-year-old Windows XP Service Pack 1 (SP1) several times that it will stop all support for the operating system Oct.10, the next regularly-scheduled patch date. It has repeatedly recommended that users update to Windows XP SP2, which can be downloaded free of charge from the company's Web site. On that Web site, however, users running Windows XP SP2 and Firefox are incorrectly told that their PCs must be upgraded. Internet Explorer users, on the other hand, are given the correct information.

"Your computer is not up to date with the latest version of Windows XP. Upgrade to Windows XP Service Pack 2 (SP2) today to help keep your computer secure," the site tells Firefox users. IE users, however, are shown a different message: "Your computer has already been upgraded to Windows XP Service Pack 2 (SP2)."

View: Full Article @ TechWeb

Post a comment · Send to friend Comments · There are 23 additional comments
(2 replies) #1 hotdog963al on 30 Sep 2006 - 15:11
Big Deal? It's not the first time I've seen a Microsoft website be incompatible with Firefox.
#1.1 DaveBG on 30 Sep 2006 - 15:30
Incompatibe? I thought that the very "nice" FF is compatible with everything so far
#1.2 em_te on 30 Sep 2006 - 16:08
Only software can be "incompatible" with websites. Websites are said to "not support" browsers.
(12 replies) #2 Julius Caro on 30 Sep 2006 - 17:13
1. Who uses Firefox to run windows update?
2. Windows XP SP1 is the most UNSAFE thing on earth. An SP1 connected to the internet without a firewall is bad!
3. I really hope mozilla or microsoft (whoever is responsible) fixes this. But apparently is not much of a problem if this has always happened...
#2.1 rm20010 on 30 Sep 2006 - 17:28
SP1 is the most UNSAFE thing on earth? What about XP Gold, or the 9X series?
#2.2 ANova on 30 Sep 2006 - 18:44
Really? Is that why I haven't recieved a single piece of malware or virus in over 8 months running XP SP1 with no firewall or anti virus programs?

SP2 is garbage and you don't need updates to keep your computer secure if you know what you're doing.
#2.3 BuzZBladE on 30 Sep 2006 - 22:21
ANova you are absolutely wrong. there are a good many worms that require no user interaction other than connecting to the internet. you dont have to click, download, or even see the virus for it to automatically download into a vulnerable port while it randomly selects IP addresses and infect your machine.
#2.4 XerXis on 30 Sep 2006 - 22:31
Quote - ANova said @ #2.2
Really? Is that why I haven't recieved a single piece of malware or virus in over 8 months running XP SP1 with no firewall or anti virus programs?

SP2 is garbage and you don't need updates to keep your computer secure if you know what you're doing.


sigh, they still exist
#2.5 ANova on 30 Sep 2006 - 23:06
Quote - XerXis said @ #2.4
sigh, they still exist


Yeah smartass, 8 months. I don't need to explain myself any further.

Buzzblade, I'm behind a hardware firewall and all my ports are blocked.
#2.6 Croquant on 30 Sep 2006 - 23:30
Quote - ANova said @ #2.5
Quote - XerXis said @ #2.4
sigh, they still exist


Yeah smartass, 8 months. I don't need to explain myself any further.

Buzzblade, I'm behind a hardware firewall and all my ports are blocked.

Really? 'casus when your first posted, you said that you WEREN'T behind a firewall.
So which is it?
#2.7 theyarecomingforyou on 30 Sep 2006 - 23:43
Quote - Croquant said @ #2.6
Really? 'casus when your first posted, you said that you WEREN'T behind a firewall.
So which is it?

Actually, they said they weren't using any firewall or anti-virus programs... "programs" being the operative word, though I can see how you might assume that "firewall" was a self-contained statement.
#2.8 Ravensworth on 01 Oct 2006 - 02:17
Quote -
you don't need updates to keep your computer secure if you know what you're doing.


My head just exploded.

Quote -
SP2 is garbage


I have not had a single problem with it. Apparently YOU don't know what you're doing.
#2.9 kaiwai on 01 Oct 2006 - 04:30
Quote - Ravensworth said @ #2.8
Quote -
you don't need updates to keep your computer secure if you know what you're doing.


My head just exploded.

Quote -
SP2 is garbage


I have not had a single problem with it. Apparently YOU don't know what you're doing.


I agree; I've been running SP2 as soon as it appeared; I'd love to know what evidence the original poster (who you replied to) has against SP2.

And the comment: "you don't need updates to keep your computer secure if you know what you're doing." - how f*cking stupid; now we know who the ones are, who are spreading virus, works and DOS attacks on the web; sparmy little smart asses who think that they're some how immune to stuff.

ps: software compatibility; thats an issue for your software vendor to address, not Microsoft; the information pertaining to the changes in SP2 have been known for well over 2 years, its their fault that they chose to ignore the 1.5mb document that was put up on the Microsoft website.
#2.10 shaneh on 01 Oct 2006 - 07:23
Quote - ANova
Really? Is that why I haven't recieved a single piece of malware or virus in over 8 months running XP SP1 with no firewall or anti virus programs?


Given that you are actually behind a firewall, despite what youve said, this means you have a secure network, not necessarally a secure OS. Put that same OS on an insecure network, or on a large college campus network, even if the network is behind a firewall, and you would get owned. Or connect it to an open Wifi access point at an airport with a laptop etc. There are many people that do this, and they need an OS which is secure. With a decent, secure, OS, theres no reason they shouldn't be able to.

Hell, a vanilla install of Win95 is "secure" when not connected to the internet, or behind a serious firewall. Thats a pretty stupid statement to make. You arent actually exposing the OS to the internet or insecure network.
#2.11 ANova on 01 Oct 2006 - 21:53
Ok neowin lugheads, here's a little lesson.

Most viruses attack through stupidity on the part of the user, visiting questionable websites, opening files they got through the email from someone whom they do not know. Most of the self downloading and installing kind do so through insecure browsers. Do not open these files and use a secure browser like Opera and your chances of getting infected go down tremendously. Sure if someone knows your ip they could try to hack your system but how often does this occur for a single home user? The answer is very rarely, you have to bring attention to yourself or challenge someone. If you block your ports they will fail at that as well; no need for soiling yourself over a new exploit found in windows or scampering to install all updates at all times and relying on Microsoft.

As far as why I don't like SP2, I have my reasons. In many cases it slows down XP and/or produces problems with programs like IE and explorer resulting in inconsistant and odd behavior. My Dell work computer has SP2 loaded on it and I can see first hand the differences between it and my personal computer with SP1. Installing XP clean with SP2 already integrated helps but installing SP2 over an installation results in a bungled mess. No thanks.
#2.12 mrbester on 02 Oct 2006 - 11:03
Quote - ANova said @ #2.11
Ok neowin lugheads, here's a little lesson.

Most viruses attack through stupidity on the part of the user, visiting questionable websites, opening files they got through the email from someone whom they do not know.

True, you can blame the user for a lot of stuff. Yet, if someone who isn't as obviously clued-up as you happens to be on a network with the same configuration as yours, they'll get owned the first time they click a link in an email, simply because they haven't got anything stopping viruses on the system.

Quote -
Most of the self downloading and installing kind do so through insecure browsers.

Which just goes to show how much you know about networking and connectivity. The <insert port number> exploits require neither user interaction or a browser. I accidentally left the external network cable attached when I rebuilt a XP (bald, not slipstreamed) machine and got Blaster before I could apply SP2 from NAS.
Quote -
Do not open these files and use a secure browser like Opera and your chances of getting infected go down tremendously.
Deleted for irrelevancy.
Quote -
Sure if someone knows your ip they could try to hack your system but how often does this occur for a single home user? The answer is very rarely, you have to bring attention to yourself or challenge someone.

Wrong, wrong, wrong. All those botnets out there know your IP address, they probably just haven't got around to it yet (in the last 12 mins). There's nothing personal about it in the first instance.
Quote -
If you block your ports they will fail at that as well; no need for soiling yourself over a new exploit found in windows or scampering to install all updates at all times and relying on Microsoft.

Fantastic advice. Don't forget to block port 80 so the HTTP vector is removed. And make sure 127.0.0.1 is denied access just to be on the safe side.
#3 cork1958 on 30 Sep 2006 - 17:21
That's what you get for trying to fool MS!!
#4 Code.Red on 30 Sep 2006 - 17:50
It happens in Opera too. IE changes its User Agent string (see http://en.wikipedia.org/wiki/User_agent#Browsers) when Service Pack 2 is installed, but Firefox and Opera don't.
(1 reply) #5 billyea on 30 Sep 2006 - 18:13
People running SP1 at this point probably deserve what they're going to get.
#5.1 theyarecomingforyou on 30 Sep 2006 - 18:54
Yes, but what has that got to do with Firefox users that already have XP SP2 being told that they need to upgrade to it? Read the article next time.
(1 reply) #6 guylaroche on 30 Sep 2006 - 23:52
If people would just run IE, this wouldn't be an issue!
#6.1 Wrezal on 01 Oct 2006 - 09:26
yeah well prehaps IE sucks balls because its slow and full of spyware and adware when browsing the net!

I hate those pop ups and ads!
#7 R002092 on 01 Oct 2006 - 11:20
This isnt really my area of expertise... but this doesnt sound so much like and XP problem... as maybe a browser issue, or a problem with MS's Internet side

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)