Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Firstly, Windows XP isn't three generations behind, it's two. The current version of Windows is Windows 7, and if you buy a new computer today, that's what you're going to get.

Secondly, Vista doesn't count. Microsoft screwed up severely, and now they have to pay the price for it in terms of PR and market attitude. Windows 7 has been out for just over 3 years, and anyone technically literate who bought a PC 3.5 years ago probably had Windows XP installed on it (and with Microsoft's blessing).

I know XP bashers refuse to admit it, but XP was installed, legitimately and with Microsoft's support (and to their profit), well within the useful lifetime of a typical home PC that is still running today. If MS choose to end support in an attempt to push people onto newer software platforms, that's up to them, and either the market will accept it or it won't.

But calling XP antiquated is just denial. Sorry, but we don't just throw away working systems after a couple of years and climb back on the upgrade treadmill any more.



XP is antiquated in terms of its technology, in particular its security model. Vista, while not a hit with consumers, was a major step forward in security for Microsoft. In fact the massive improvements in security were part of the reason it was a flop, as it suddenly started throwing warnings on all the terrible application security practices that XP tolerated.

If you can upgrade from XP, you should.


XP is antiquated in terms of its technology, in particular its security model. Vista, while not a hit with consumers, was a major step forward in security for Microsoft.

There is a certain irony in making an argument based on the security model in recent versions of Windows while we're in the middle of a thread discussing web browsers. Both Chrome and Firefox go out of their way to circumvent that security model, despite providing arguably the most obvious attack vector on many modern computers.

And frankly, the modern Windows security model isn't that great anyway. We can solve a privileged execution problem by nuking the machine and reinstalling from back-ups. It's a hassle, but it's a controllable risk. This is the sort of thing that the UAC measures help to prevent.

But if you don't have back-ups of your personal files, you're toast if they get deleted by malware. And since you probably have write access to those files even if you're logged in as a low-privilege user, and Windows doesn't separate which applications can access what data to that extent, the likes of UAC won't help you here. Sure, everyone should keep back-ups, but we all know that many people don't.

And the really bad stuff these days isn't destructive anyway, it's about data harvesting. If someone gets in and starts uploading sensitive data, or perhaps sending out phishing e-mails to people who trust the compromised machine's owner and think that's where the messages are coming from, UAC isn't much good there either. You need firewall and antivirus tools for this sort of threat, and we had those with XP, and if you're doing it seriously you don't run them on the same computer you're trying to protect anyway.

If you can upgrade from XP, you should.

Sorry, but I don't think you're anywhere near making a case for that yet.


Most malware does not seek to just nuke user files; it seeks to set up a permanent hidden presence in the machine. Windows 7 makes this much harder to accomplish with technologies like ASLR.

Security depends on layers. Chrome is more secure than IE, but you can run Chrome on Windows 7 too. If Chrome--or one of its plugins--are compromised (it is not perfect software after all), then the security features of Windows 7 will give you better protection than XP.

Maybe you don't believe me, because I'm just some guy on the Internet. That's fair. But I would challenge you to find a computer security professional who thinks XP is as secure as Windows 7.


Most malware does not seek to just nuke user files; it seeks to set up a permanent hidden presence in the machine.

I don't know whether "most" is true, but sure, a lot of malware does that. But that's not why it's dangerous. If you manage to install something that changes my wallpaper to a cute cat picture every few days, it's probably going to be mildly irritating after a while, but I'm not going to lose any sleep over it.

Chrome is more secure than IE

Again, I feel the need to point out the irony of your example: Chrome actively circumvents the more recent Windows access control mechanisms by not installing itself properly so that it can do the silent auto-updates without any further UAC-style prompting.

But I would challenge you to find a computer security professional who thinks XP is as secure as Windows 7.

Well, now you're moving the goalposts. But as a guy who spent this afternoon working on security code that's going to be run by the likes of banks and government institutions, I prefer to make my judgements based on evidence rather than hear'say, and so do they. Incidentally, many of those clients are still running Windows 2000 and IE6, obviously along with many other security measures, and installing Chrome in some of those places would probably get you formally disciplined.


Totally agree. As an OS itself, let's just look at it objectively first. Without Internet, you can keep using your OS for a very long time if your usage of daily software doesn't change a whole lot. What could be the basic functions? Writing, printing, maintaining files. All this can be achieved without worrying too much about upgrades. So just on this account, there is no need to disregard XP.

However, we cannot divorce Internet from the OS, and consequently you need necessary updates to keep up with the changing time.

You make a good argument that XP is not really that old (it isn't as old as Win95/98/Win2K) and honestly speaking, from my experience, if you are a owner of a reasonable processor (Pentium 4 and above) and if max out on your memory slots (4 Gigs is relatively possible) than I really don't see a reason to buy a new PC if I can hold on to what I have as long as I technically can.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: