Quantcast The Triangle
College Media Network

XP Security Pack 2 fixes flaws, causes others

C0rk Board

Paul Corkery

Issue date: 8/20/04 Section: Sci-Tech
  • Page 1 of 1

Microsoft (MS) has, after many delays, released their much awaited second Windows XP Service Pack (SP2). While SP2 - at the time of this writing - is still not available through Windows Update, anxious technophiles, developers and enthusiasts can download the corporate version of SP2 directly from the MS site. I downloaded and installed SP2 a week ago. This article will detail the features plugged by MS, through my experiences with SP2 thus far.

Ahead of the Pack - MS is encouraging all XP users to enable Automatic Updating to ensure that they receive SP2 as soon as it is available. Although the corporate version of SP2 is available, those with slower connections should wait for a slimmed down version to hit Windows Update, as the download size will be significantly smaller - 80-90MB as opposed to the 220MB corporate/developer version on microsoft.com. Caution: XP users on company networks should delay installing SP2 until a system administrator or equivalent has announced it.

Security - SP2 arrives on the heels of MS's new security initiative. Many of the most destructive viruses released this year have exploited security holes found in Windows. MS has, in turn, promised to make security a top priority. It should come as no surprise that enhanced security is the major focal point of SP2 and will therefore account for the bulk of this article.

Security upgrades include a more robust software firewall, new and more secure versions of Outlook Express, Internet Explorer, Windows Messenger and a central Windows Security Center. Firewalls, both software and hardware based, are central to preventing computer theft and attack. While XP has featured a firewall since its initial release, those in the know have opted to go with third party solutions like ZoneAlarm or BlackIce, preferring to have more control over their security settings. XP's new fire wall is automatically enabled after SP2 installation and provides many advanced control features, while remaining relatively simple to use.

However, during the first phase of usage, it seemed like every program I launched was preceded with a Windows Fire wall warning screen, detailing the dangers of the software, and asking whether to allow it to communicate with the Internet - an annoying feature to be sure. Regardless, this will assist in ensuring that novice users are somewhat protected by a software firewall.
Updated features include more secure programs and fire walls.
Updated features include more secure programs and fire walls.

XP's included software has also received some minor attention. Outlook Express (XP's default mail reader) has been outfitted with some more sophisticated spam prevention as well as virus scanning processes to better deal with suspicious e-mail attachments. Internet Explorer (XP's default/integrated Internet browser) has finally been modified to include pop-up blocking, but still does not have tabbed browsing.

Windows Messenger has also been updated to prevent the trafficking of viruses. Because I do not use many of these applications, I can not weigh in too heavily on any of these improvements; however, those using these apps can take comfort in knowing that these concerns are being addressed.

The third and final security enhancement I will discuss is the Windows Security Center. This is the main interface through which Windows would like to manage all security concerns, from virus protection to patching to firewall management. Newbies will be elated by its simplicity; power users will be frustrated by its invasiveness and limitations. Instead of having to manage your firewall, update your anti-virus software, and check for product updates individually, the Windows Security Center allows all of these components to be centrally managed - sort of. People who never bothered with such things before still won't, but at least the fact that most of these features are enabled automatically will keep them somewhat safer than they were before. For the paranoid control freak like me, updating and scanning will still be done manually.

Windows and MS in general will continue to be the target of hackers and virus writers by virtue of its incredible market share. While extra features are a plus, I can say with relative certainly that it is only a matter of time before more holes are found and exploited. While these added security features are nice, the timely production and downloading and installing of security patches will ultimately contain virus and worm outbreaks in the future.

Basic level home users should enable Automatic Update to ensure that all security patches are received as they are released. Those who make routine of updating and scanning can forego this step. If you're like me, you like to see what is being installed on your system.

Beyond Security - Although the chief concern with this Pack was security, MS did update some other XP elements. Almost transparent are the updates to Windows Media Player 9 and Direct X, included with the package, assuming you've updated in the last year or two.

Having two wireless networks at home, and DragonFly on campus, one area of particular interest to me was Wireless Networking Support and Management, which MS promised to improve. One of the first things you'll notice is that wireless networks now have different icons in the system tray, distinguishing them from their wired counterparts. Also, the prioritizing of networks is made easier through a slightly more intuitive management interface.
Wireless networks are distinguishable from wired networks by their system icons.
Wireless networks are distinguishable from wired networks by their system icons.

However, in its effort to make such things idiot proof, MS succeeds in frustrating those connecting to various encrypted networks functioning on a variety of standards. Traveling around campus last week, it was not uncommon to have the wireless network icon and console indicate that I was disconnected from all available networks, though I was able to browse the net.

Double-clicking on a disconnected network also produced confusing results - disconnect from a disconnected network? This all occurred prior to the complete breakdown of DragonFly wireless connectivity - as far as MY laptop is concerned. I am currently unable to access anything through the DragonFly wireless network - connected or disconnected. I will be sure to comment with fix information to the web-based version of this article, when and if I re-establish DragonFly connectivity.

PDA enthusiasts and those sporting the latest in Bluetooth enabled cell phones, pagers, cars, mice, keyboards and soda cans will be happy to know that MS (the largest proponent of the Bluetooth short-range wireless standard) has finally decided to embed standard Bluetooth support into Windows. Because of frustrations afforded by other elements of the Wireless Networking Enhancement, I've decided to stick with my IBM Bluetooth suite for now.

Time to Update? - Many companies, including IBM, have warned employees not to install SP2 as it can disrupt the function of key applications. I spent the better part of last week ensuring that Automatic Update was disabled on all company deployed workstations to ensure there was no breakdown in remote connectivity due to the new fire wall. In response, MS has released a list of software titles that SP2 is known to break.

Included in that list is some of MS's own software. Most of these anomalies are being blamed on the new firewall, though only some currently have workarounds. Gamers will also run into trouble when trying to connect to multiplayer servers, as ports must be opened in the fire wall to allow such "potentially harmful" activity.

It's actually wrong to pose the SP2 update as a question. For all intents and purposes, despite its problems and flaws, SP2 should be downloaded and installed by all Windows XP users as a means of keeping on top of the latest in available security countermeasures, and unlike most things from MS - it's free.



Paul Corkery is a BS/MS student in information systems.
Page 1 of 1

Article Tools

Be the first to comment on this story

  • NOTE: Email address will not be published

Type your comment below (html not allowed)

  I understand posting spam or other comments that are unrelated to this article will cause my comment to be flagged for deletion and possibly cause my IP address to be permanently banned from this server.



Triangle Video Section: Use the arrows to select different videos.

Advertisement

Poll

Are you excited for 3D television programs?

Submit Vote

View Results

Advertisement