Recommended Posts

The latest Microsoft Security Intelligence Report shows that Windows Vista and Windows 7 were more likely to be infected by malware than the constantly berated Windows XP. Not really surprised that Neowin isn't covering it though while others are

 

Microsoft Security Intelligence Report (SIR)

PDFs: SIR Key Findings SIR Volume 16 (FULL)

 

Yes, I know it's a quirk but still an interesting finding.  :woot:

  • Like 2

There's also a few articles online explaining why the numbers are as they are.  Namely it's all due to one particular piece of malware, delivery mechanism, etc.  Easily found online.  Has nothing to do with the underlying OS itself.

And Windows 95 has a lower infection rate than Windows XP. It's because malware writers are moving to the supported OSes. :p

 

Pretty much sums it up.  Every year malware has increased by a large percent and the market share is larger than ever.  Besides what can MS do when it says "Do you want to do this?" and people say yes to pretty much everything without much thought.

There's also a few articles online explaining why the numbers are as they are.  Namely it's all due to one particular piece of malware, delivery mechanism, etc.  Easily found online.  Has nothing to do with the underlying OS itself.

^I know.

I'm in no way claiming that XP is safer than NT6. Just that it's an interesting story. If it painted XP in a bad light, you can be assured that Neowin would be all over it. ;)

 

I know how things work around here. My signature was taken away because it had a cross out symbol over a Windows 7 logo. You have to tow the company line (NT6!) around here or you get in trouble.

^I know.

I'm in no way claiming that XP is safer than NT6. Just that it's an interesting story. If it painted XP in a bad light, you can be assured that Neowin would be all over it. ;)

 

I know how things work around here. My signature was taken away because it had a cross out symbol over a Windows 7 logo. You have to tow the company line (NT6!) around here or you get in trouble.

 

We only ever see what we want to see, if it painted in XP in a bad light you would have ignored it.

The reports do not change the fact that Windows Vista and onward are inherently more secure than Windows XP. Features such as User Account Control, the Windows Integrity Mechanism, Structured Exception Handler Overwrite Protection, and Address Space Layout Randomization are simply not available for the older platform, and the list goes on.

  • Like 2

^ I said that.

I'm in no way claiming that XP is safer than NT6. 

 

 

^^

We only ever see what we want to see, if it painted in XP in a bad light you would have ignored it.

You think? I pretty much read all Windows stories.

I recently complained about the lack of them or more accurately, the shift in coverage towards hand held devices.

Edited by xdot.tk

^ I said that.

Oh, the comment wasn't directed towards you, xdot.tk. The reason I made my previous post is because some people may see the article you posted and get the wrong impression about security in Windows Vista and onward.

  • Like 1

Higher usage therefore higher infections (because of active usage, not targeting by malware).

Are you really suggesting that more people are using Vista than XP? It could be the combined share of Vista/7/8 that's attracting more attacks since they all have the same security model.

 

In the end, this is good news for XP. Security in obscurity now means it's safer to stick with it than buying a new PC.

Oh, the comment wasn't directed towards you, xdot.tk. The reason I made my previous post is because some people may see the article you posted and get the wrong impression about security in Windows Vista and onward.

Yeah maybe I should change the attention grabbing thread title.  :ninja:

Then again, that's how many of the articles covering this are headlined.

Pretty much sums it up.  Every year malware has increased by a large percent and the market share is larger than ever.  Besides what can MS do when it says "Do you want to do this?" and people say yes to pretty much everything without much thought.

Yup. Sadly there's not much that can be done.

If people were better educated before using a PC, then malware wouldnt be so much of a problem.  My parents/sisters used to be really bad at getting malware. I would get calls all the time.  Finally, I sat down with them and went over a few things.  Not much of a problem since.

Are you really suggesting that more people are using Vista than XP? It could be the combined share of Vista/7/8 that's attracting more attacks since they all have the same security model.

 

In the end, this is good news for XP. Security in obscurity now means it's safer to stick with it than buying a new PC.

Obscurity is not security. The security of a system depends on its design. No amount of obscurity will lessen the damage that an infection does to a machine running Windows XP. On the other hand, there are features in Windows Vista, Windows 7, Windows 8 that can mitigate an infection or even prevent one altogether.

The reports do not change the fact that Windows Vista and onward are inherently more secure than Windows XP. Features such as User Account Control, the Windows Integrity Mechanism, Structured Exception Handler Overwrite Protection, and Address Space Layout Randomization are simply not available for the older platform, and the list goes on.

 

ASLR is mostly to protect against buffer overflow attacks, and most of those other protections are defeated by one thing you cannot design out of any OS: end user stupidity. The Vista (and onwards) codebase is more secure than the XP base but no malware protection is bulletproof.

If people were better educated before using a PC, then malware wouldnt be so much of a problem.  My parents/sisters used to be really bad at getting malware. I would get calls all the time.  Finally, I sat down with them and went over a few things.  Not much of a problem since.

I agree but something that most people wouldn't imagine possible happened to me when my mom got her first PC... I nuked the Dell crap that came with it and did a fresh install of XP. I then installed Firefox with Adblock Plus, added my trusty HOSTS file, deleted the IE shortcuts and sent her on her way. NO ANTIVIRUS or anything!

She was good for about a year until she fell for an email phishing scam saying the IRS owed her money (Just give us your details...).

I know. I should have spent more time explaining about phishing and watching who you give your email address to.  She's old and has a lot of trouble understanding the simplest things when it comes to computer literacy and I'm prone to losing patience on that subject.

Please read the report or the news stories associated with it before making uninformed claims.  :rolleyes:

Usage was taken into account.

 

Infection rates in 4Q13 were many times higher on all supported Windows client platforms than they were in 3Q13, because of the influence of Win32/Rotbrow. CCM figures are expected to return to more typical levels in 2014. See "A trio of threats makes waves in 4Q13" on page 42 for more information about Rotbrow and its effect on 4Q13 encounter rates.

 

In general, infection rates for more recently released operating systems and service packs tend to be lower than infection rates for earlier releases, for both client and server platforms. In 3Q13, this pattern is clearly visible, with Windows XP displaying an infection rate significantly higher than any other supported Windows client platform, and Windows 8 RTM?at the time the most recently released platform?displaying the lowest. In 4Q13, the typical pattern is affected by the elevated infection rates caused by Rotbrow, as Windows Vista SP2 displayed a slightly higher infection rate than Windows XP SP3.

 

So basically this is just an anomaly, not a trend. Not a big news story to get worked up over.

This topic is now closed to further replies.
  • Posts

    • RSS Guard 5.2.0 by Razvan Serea RSS Guard is a simple (yet powerful) feed reader. It is able to fetch the most known feed formats, including RSS/RDF and ATOM. It's free, it's open-source. RSS Guard currently supports Czech, Dutch, English, French, German, Italian. RSS Guard will never depend on other services - this includes online news aggregators like Feedly, The Old Reader and others. RSS Guard is developed on top of the Qt library and it supports these operating systems: Windows GNU/Linux OS/2 (eComStation) Mac OS X xBSD (possibly) Android (possibly) other platforms supported by Qt The core features of RSS Guard are: support for online feed synchronization via plugins, Tiny Tiny RSS (from RSS Guard 3.0.0). multiplatform, support for all feed formats, simplicity, import/export of feeds to/from OPML 2.0, downloader with own tab and support for up to 6 parallel downloads, message filter with regular expressions, feed metadata fetching including icons, simple Adblock functionality, customized popup notifications, Google-based auto-completion for internal web browser location bar, ability to cleanup internal message database with various options, enhanced feed auto-updating with separate time intervals, multiple data backend support, SQLite (in-memory DBs too), MySQL. is able to specify target database by its name (MySQL backend), “portable” mode support with clever auto-detection, feed categorization, drap-n-drop for feed list, automatic checking for updates, ability to discover existing feeds on websites, full support of podcasts (both RSS & ATOM), ability to backup/restore database or settings, fully-featured recycle bin, printing of messages and any web pages, can be fully controlled via keyboard, feed authentication (Digest-MD5, BASIC, NTLM-2), handles tons of messages & feeds, sweet look & feel, fully adjustable toolbars (changeable buttons and style), ability to check for updates on all platforms + self-updating on Windows, hideable main menu, toolbars and list headers, KFeanza-based default icon theme + ability to create your own icon themes, fully skinnable user interface + ability to create your own skins, “newspaper” view, plenty of skins, support for "feed://" URI scheme, ability to hide list of feeds/categories, open-source development model based on GNU GPL license, version 3, tabbed interface, integrated web browser with adjustable behavior + external browser support, internal web browser mouse gestures support, desktop integration via tray icon, localizations to some languages, Qt library is the only dependency, open-source development model and friendly author waiting for your feedback, no ads, no hidden costs. RSS Guard 5.2.0 changelog: Added: Feed auto-fetch can now also be delayed while Feral GameMode is active on Linux and startup auto-fetch is skipped when GameMode is already active. (#2265) WebEngine builds can now use RSS Guard generated proxy auto-config (PAC) rules so article/web browsing follows per-account and per-feed proxy settings more closely. (#2273) Generated PAC rules now also cover related subdomains and use Public Suffix List data, so feeds such as feeds.bbc.co.uk can also proxy resources from images.bbc.co.uk. (#2273) Standard feeds can now define extra proxy domains, useful when article images, stylesheets or other page resources are loaded from a CDN or another domain that should use the same feed proxy. (#2273) RSS Guard now asks for proxy credentials when a WebEngine page needs proxy authentication and can fill credentials from the current feed proxy when available. (#2273) Network settings again include an option to ignore all cookies, which clears stored cookies and prevents new cookies from being accepted. Standard RSS/ATOM feeds can now individually ignore cookies while downloading feed data. Stored cookies can now be deleted from the Tools menu. Custom skin colors can now override the feed list article count color separately from feed titles, including a separate highlighted color. (#2275) Settings dialog can now search across available settings and highlight matching controls. (#1754) Standard RSS/ATOM feeds can now optionally be reported as broken when they are valid but contain no articles. (#2039) Standard RSS/ATOM feeds can now override the application-wide feed connection timeout per feed. (#1023) Tray icon can now use a custom background color and unread-count text color, with an option to reuse the generated icon as the application icon. (#1973) Support for more benevolent parsing of Gemlog entries (#2295). Article list can now show when an article was received by RSS Guard. (#947) Feed deep discovery now actually scrapes all links found in the website and checks if they are feeds or not. This greatly enhances usability of the deep discovery mode and discovers many more feeds than before. (#2306) Search boxes now show a small dot when the feed or article list is hiding some items because of active filtering. (#873) Articles now have a shortcut-assignable action to open the homepage of the feed they belong to. (#2060) Fixed: Parallel feed updates no longer crash when multiple update results are processed at the same time. (64cf521) Links in WebEngine articles opened from feeds such as Kill the Newsletter now open correctly instead of being swallowed by the embedded page. (#2272) Relative article URLs resolution was kinda broken. (#2282) Clicking article URL did not work when the URL had "fragment" set. (#2293) The default proxy setting now uses Qt/system default proxy behavior instead of forcing no proxy. (e0263ad) WebEngine article loading now keeps the current feed context, so feed-specific proxy credentials remain available while the article page loads. (fdd0f00) Download: RSS Guard 5.2.0 (64-bit) | Portable | ~ 130.0 MB (Open Source) Link: RSS Guard Home Page | Other Operating Systems | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • This is gonna separate the creeps from the rest of the crowd.
    • "Claude, is our CEO a compete and utter fool by wasting money on AI in this already worthless Teams chat?"
    • Endless Wars  Endless Shrimp!!! 🦐    
  • Recent Achievements

    • Rookie
      DaviKar went up a rank
      Rookie
    • Dedicated
      HidekoYamamoto94 earned a badge
      Dedicated
    • One Month Later
      timbobit earned a badge
      One Month Later
    • One Month Later
      nates earned a badge
      One Month Later
    • Week One Done
      Almohandis earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      462
    2. 2
      +Edouard
      161
    3. 3
      PsYcHoKiLLa
      110
    4. 4
      Michael Scrip
      83
    5. 5
      Steven P.
      69
  • Tell a friend

    Love Neowin? Tell a friend!