WindowsXP SP2 dissected . . .
Posted: Thu 02 Sep, 2004 13.26
I've just read a fascinating insight into how Windows XP Service Pack 2 supposedly tightens up
the security levels of the average home PC running Windows XP. It seems that XPSP2 doesn't
really do much to improve the overall security of an average install of Windows XP after all.
the security levels of the average home PC running Windows XP. It seems that XPSP2 doesn't
really do much to improve the overall security of an average install of Windows XP after all.
Go here to read the lengthy report in full at TheRegister.co.uk . . .WinXP SP2 = security placebo?
By Thomas C Greene
Published Thursday 2nd September 2004 10:48 GMT
Reg Review: We evaluated the security features of Windows XP SP2 on a test
machine, following a clean install of XP Pro with no configuration changes and
no 3rd-party software or drivers installed. We installed XP with the NTFS file
system, choosing all of the factory defaults, then patched it with each rec-
ommended security update including SP1 (required), before installing SP2.
While we found that there are indeed a few minor improvements worthy
of acknowledgment, in particular, some rather low-level improvements
that don't show to the admin or user, overall, SP2 did little to improve
our system's practical security, leaving too many services and net-
working components enabled, bungling permissions, leaving IE
and OE vulnerable to malicious scripts, and installing a packet
filter that lacks a capacity for egress filtering.