Contrary to popular belief, I'm perfectly happy to run Windows as well as Linux (news - web sites) desktops. It's just that, well … the Linux desktops tend to run better and be more secure then their Windows cousins. And that's true both for me and for enterprise desktop users.
Take, if you will, please take it, Windows XP (news - web sites) SP2 (Service Pack 2). I've worked a lot with SP2, and I didn't expect to see great security improvements from it. I know Windows too well to think that anything short of a complete redesign will actually make it approach Linux's levels of security.
But I did expect to see some improvement. Boy, was I wrong. Yes, some things are better, but there are also a slew of new, exciting security concerns.
For example, it's possible in some situations for a worm to spoof the WSC (Windows Security Center) into making it appear that your system is fine and dandy when it's actually been turned into, say, a spam-producing zombie from heck.
Or, worse still, there's the hole that enables would-be attackers to use Internet Explorer's drag-and-drop feature to trick users into allowing various malware programs onto their PCs.
You know what really scares me, though? We're seeing all of these security problems turning up, and SP2 hasn't even been widely distributed yet. What will happen once every would-be cracker has a copy to tinker with?
I also expected to find a host of minor program incompatibilities. There, Microsoft hasn't disappointed me. Microsoft's own applications, VPNs, custom programs, and the list goes on and on.
Is it any wonder that businesses are holding off on "upgrading" to SP2? So it is that once more I have to ask you, why not Linux?
The Linux desktop is far more stable and secure than XP SP2 is today. Linux applications run without fussing, and never has a single, serious Linux virus been seen in the wild.
Don't know Linux? Well, that's where enterprise Linux distributors such as Novell/SuSE and Red Hat and full-service Linux integrators such as IBM Global Services come in. With them, you don't need to have full-time Linux gurus on staff. They can supply the IT knowledge for you.
Yes, you can use Mandrake, Mepis or some other Linux instead of paying enterprise Linux prices. But with the non-enterprise Linux distributions, you're not going to get the 24-7 support big business demands from any enterprise-level program. If you're sure your in-house people can handle the demands of forging your own way, you're welcome to do it. It's just that I know for a fact that most companies don't have the resources, or corporate will, to go it alone.
Unfortunately, the enterprise Linux players haven't been doing a good job of pushing their desktop offerings. First, as I've said before, getting a box with Linux preinstalled on it is still a pain. You pretty much work with a systems integrator or VAR to bring in pallet loads of desktops.
Next, there's a bit of confusion about enterprise-ready Linux desktops. Novell has a great Linux desktop, SuSE Linux Desktop 9.1. About half of my own Linux desktops are running it.
But Novell is working on a bigger, better Linux desktop, which isn't even in beta yet. The last thing most CIOs—or any chief financial officers—want to do is upgrade to a new operating system and then immediately upgrade again.
For a while, people were confused about whether Red Hat even had a desktop anymore. Well, it always did, and the Red Hat Desktop is a good one. For it to shine to its best advantage, though, you'll also need to commit to RHEL (Red Hat Enterprise Linux) on your servers.
Thus, all in all, for enterprise buyers, I think that making a successful Linux desktop today isn't as easy as it could be or should be. Still, with the right integrator or reseller partner, or perhaps even outsourcing your desktops with a Linux thin client approach, it is perfectly doable.
If that doesn't sound very attractive to you, well, you did read what I wrote earlier about Microsoft's latest and greatest desktop, didn't you?
Do you really want to wait for Longhorn? Whenever the heck that shows up? If you want a new, solid and safe desktop for corporate use anytime soon, your best choice is a Linux desktop.
Written by: Steven J. Vaughan-Nichols - eWEEK
Thursday, August 26, 2004
Wednesday, August 25, 2004
Microsoft Expands Windows Update Release
By ALLISON LINN, AP Business Writer
SEATTLE - Microsoft Corp. is starting to ramp up distribution of its massive security update for the Windows XP (news - web sites) operating system, but analysts say they still expect the company to move at a relatively slow pace to avoid widespread glitches.
With only a small percentage of users running the product, analysts say they aren't seeing any unexpected problems so far. But some expect confusion to mount as more people begin installing the update.
"Microsoft realized that a lot of people are going to have some level of problems, no matter how good a job they did with it," said Steve Kleynhans, a vice president with META Group, based in Stamford, Conn. "When you start tweaking with security ... you're bound to break applications. It's always been true and it always will be true."
The Redmond, Wash.-based software maker completed work on the update, called Service Pack 2, in early August. But Greg Sullivan, a Microsoft lead product manager, said that a "relatively small percentage" of users have received the update so far, mainly through an automatic download service.
Microsoft is expecting to gradually increase the rate of distribution through automatic updates, with most receiving it within two months.
Beginning Wednesday, Windows XP users also will be able to download the upgrade directly from Microsoft's support Web site, or order a free CD version. Businesses who use Windows XP Professional also will begin receiving the update through an automatic download, if they have agreed to that service.
Many big businesses are expected to take months to install the upgrade, because the changes may cause compatibility problems with customized business applications.
Consumers also may need to update favorite programs, such as security software or other Web-based applications.
Some companies, such as SBC Communications, have sent out e-mails to users who need to download updates. But Kleynhans said it's hard to count on people to actually read those e-mails and make necessary changes.
SBC said it had not heard any reports of customers having problems with Service Pack 2.
Microsoft also has posted a list of products that may experience problems with the security upgrade, prompting some companies to scramble to come up with fixes.
Yahoo Inc. (Nasdaq:YHOO - news) changed the way people download its Yahoo Messenger to prevent problems with Service Pack 2, said spokeswoman Terrell Karlsten.
Fred Felman, a vice president with security software maker Zone Labs said it was working to fix a minor problem. But Felman said the company had already fixed most other compatibility issues and it wasn't seeing an increase in support calls.
Service Pack 2 also may create confusion simply because it asks users to change their behavior. One big change is that users will now be required to give more specific permission for programs to interact with the computer, aiming to prevent unknown attackers.
So far, Sullivan said Microsoft is seeing support calls increase about as much as it had expected.
SEATTLE - Microsoft Corp. is starting to ramp up distribution of its massive security update for the Windows XP (news - web sites) operating system, but analysts say they still expect the company to move at a relatively slow pace to avoid widespread glitches.
With only a small percentage of users running the product, analysts say they aren't seeing any unexpected problems so far. But some expect confusion to mount as more people begin installing the update.
"Microsoft realized that a lot of people are going to have some level of problems, no matter how good a job they did with it," said Steve Kleynhans, a vice president with META Group, based in Stamford, Conn. "When you start tweaking with security ... you're bound to break applications. It's always been true and it always will be true."
The Redmond, Wash.-based software maker completed work on the update, called Service Pack 2, in early August. But Greg Sullivan, a Microsoft lead product manager, said that a "relatively small percentage" of users have received the update so far, mainly through an automatic download service.
Microsoft is expecting to gradually increase the rate of distribution through automatic updates, with most receiving it within two months.
Beginning Wednesday, Windows XP users also will be able to download the upgrade directly from Microsoft's support Web site, or order a free CD version. Businesses who use Windows XP Professional also will begin receiving the update through an automatic download, if they have agreed to that service.
Many big businesses are expected to take months to install the upgrade, because the changes may cause compatibility problems with customized business applications.
Consumers also may need to update favorite programs, such as security software or other Web-based applications.
Some companies, such as SBC Communications, have sent out e-mails to users who need to download updates. But Kleynhans said it's hard to count on people to actually read those e-mails and make necessary changes.
SBC said it had not heard any reports of customers having problems with Service Pack 2.
Microsoft also has posted a list of products that may experience problems with the security upgrade, prompting some companies to scramble to come up with fixes.
Yahoo Inc. (Nasdaq:YHOO - news) changed the way people download its Yahoo Messenger to prevent problems with Service Pack 2, said spokeswoman Terrell Karlsten.
Fred Felman, a vice president with security software maker Zone Labs said it was working to fix a minor problem. But Felman said the company had already fixed most other compatibility issues and it wasn't seeing an increase in support calls.
Service Pack 2 also may create confusion simply because it asks users to change their behavior. One big change is that users will now be required to give more specific permission for programs to interact with the computer, aiming to prevent unknown attackers.
So far, Sullivan said Microsoft is seeing support calls increase about as much as it had expected.
Microsoft Makes XP Service Pack 2 Available Via Update
Microsoft on Wednesday made Windows XP Service Pack 2 available via Windows Update and free CD. It also began distributing the update to its flagship operating system to Windows XP Professional customers via Automatic Updates.
The CD Request Page had been live for several weeks; however, the option to make the request was not turned on until now. The installation, which requires 1.6 Gbytes of available hard disk space, was previously only available in a 75-Mbyte download (for individual PCs; the full "Network Install" version is 266 Mbytes). This could be time-consuming for most XP users--and nearly impossible for those consumers still using dial-up connections to access the Internet.
According to the site, the CD, which is available free of charge, will take four to six weeks to reach those users who request it. As of Aug. 25, it was available in English and German; versions in 25 different languages will be available within two months.
Microsoft also has released a kit to help IT professionals spot compatibility problems between Service Pack 2 and other applications, and how to roll out fixes.
The kit, which includes several Visual Basic scripts and a Word document in excess of 100 pages, "describes the security technologies implemented by [SP2] and provides guidance for mitigating application compatibility issues that were identified by extensive testing of Microsoft and third party applications." The Word-formatted guide targets IT staff and administrators working in support, application testing, security, and network administration, said Microsoft.
"The guide does not assume a particular size or complexity of network, and covers peer-to-peer, domain and Active Directory environments. The security information is relevant even for networks that do not have Internet access," the kit says.
The guide also offers up deployment road maps that businesses can use to roll out Service Pack 2.
Tucked into the guide are some straightforward warnings to IT pros about the possible scope of compatibility issues with Service Pack 2.
"The need to secure the operating environment has become paramount," the guide says. "The security features in Windows XP Service Pack 2 can make Windows XP a more secure environment. However, applications that were not designed to meet these higher security requirements may experience some compatibility issues."
And although some developers would disagree-- and have--Microsoft's line is that it's the applications, not the operating system, that need to be tweaked. While Service Pack 2 can be configured to make incompatible applications run--essentially by dumping or downgrading some of its security provisions--such changes should be made "only to the extent necessary to ensure correct operation of the application" with the warning that "this procedure is not recommended but may be necessary in the short term."
The guide isn't the first noise Microsoft's had to make about Service Pack 2 and application compatibility. Earlier this month, it published a list of nearly 50 programs, including several of its own, such as Small Business Server 2003 and Visual Studio .Net, that don't work well with Service Pack 2. Some third-party vendors have also begun notifying users of compatibility issues.
The do-it-yourself "Application Compatibility Testing and Mitigation Guide for Windows XP Service Pack 2" can be downloaded from the Microsoft Web site.
The CD Request Page had been live for several weeks; however, the option to make the request was not turned on until now. The installation, which requires 1.6 Gbytes of available hard disk space, was previously only available in a 75-Mbyte download (for individual PCs; the full "Network Install" version is 266 Mbytes). This could be time-consuming for most XP users--and nearly impossible for those consumers still using dial-up connections to access the Internet.
According to the site, the CD, which is available free of charge, will take four to six weeks to reach those users who request it. As of Aug. 25, it was available in English and German; versions in 25 different languages will be available within two months.
Microsoft also has released a kit to help IT professionals spot compatibility problems between Service Pack 2 and other applications, and how to roll out fixes.
The kit, which includes several Visual Basic scripts and a Word document in excess of 100 pages, "describes the security technologies implemented by [SP2] and provides guidance for mitigating application compatibility issues that were identified by extensive testing of Microsoft and third party applications." The Word-formatted guide targets IT staff and administrators working in support, application testing, security, and network administration, said Microsoft.
"The guide does not assume a particular size or complexity of network, and covers peer-to-peer, domain and Active Directory environments. The security information is relevant even for networks that do not have Internet access," the kit says.
The guide also offers up deployment road maps that businesses can use to roll out Service Pack 2.
Tucked into the guide are some straightforward warnings to IT pros about the possible scope of compatibility issues with Service Pack 2.
"The need to secure the operating environment has become paramount," the guide says. "The security features in Windows XP Service Pack 2 can make Windows XP a more secure environment. However, applications that were not designed to meet these higher security requirements may experience some compatibility issues."
And although some developers would disagree-- and have--Microsoft's line is that it's the applications, not the operating system, that need to be tweaked. While Service Pack 2 can be configured to make incompatible applications run--essentially by dumping or downgrading some of its security provisions--such changes should be made "only to the extent necessary to ensure correct operation of the application" with the warning that "this procedure is not recommended but may be necessary in the short term."
The guide isn't the first noise Microsoft's had to make about Service Pack 2 and application compatibility. Earlier this month, it published a list of nearly 50 programs, including several of its own, such as Small Business Server 2003 and Visual Studio .Net, that don't work well with Service Pack 2. Some third-party vendors have also begun notifying users of compatibility issues.
The do-it-yourself "Application Compatibility Testing and Mitigation Guide for Windows XP Service Pack 2" can be downloaded from the Microsoft Web site.
Subscribe to:
Posts (Atom)
