Friday, February 10, 2006

Microsoft: No security updates for 98, ME after July 2006!

Several interesting news items related to this.

Quote:
Microsoft Clarifies Support for Windows 98, Windows Millennium

Microsoft announced a clarification in extended security update support for Windows 98, Windows 98 Second Edition, and Windows Millennium (Me) Editions for critical security issues. Windows 98 and Windows 98 Second Edition support was scheduled to end on January 16, 2004. The continual evaluation of the Support Lifecycle policy revealed, however, that customers in smaller and emerging markets needed additional time to upgrade their product. Therefore, critical security updates for Windows 98, Windows 98 Second Edition, and Windows Me will be provided on the Windows Update site through June 30, 2006.

Key Dates:
• Paid incident support for Windows 98, Windows 98 Second Edition, and Windows Millennium Edition (Me) is available through June 30, 2006.
• Critical security updates will be provided on the Windows Update site through June 30, 2006.
• Customers may request non-critical security fixes for Windows 98, Windows 98 Second Edition, Windows Me, and the most current version of their components until June 30, 2006 through typical assisted-support channels.
• Windows 98, Windows 98 Second Edition, and Windows Me downloads for existing security issues will continue to be available through regular assisted-support channels at no charge until June 30, 2006.
• No-charge incident support and extended hotfix support for Windows 98 and Windows 98 Second Edition ended on June 30, 2003.
• No-charge incident support and extended hotfix support for Windows Me ended on December 31, 2003
.



Microsoft is already leaving these customers high and dry for the WMF security flaw, according to cnet.

Quote:
Windows 98, ME users left vulnerable to WMF bug?
January 5, 2006 5:17 PM PST


Microsoft on Thursday rushed out an update to address a serious security flaw in Windows. Patches are available for Windows 2000, Windows XP, and Windows Server 2003, but Microsoft left out Windows 98 and Windows Millennium Edition.

The flaw lies in the way the OS software handles Windows Meta File images. Microsoft deems the issue "critical" only for Windows 2000, Windows XP and Windows Server 2003, the problem is not as big for Windows 98 and Windows ME because it is harder to exploit on those OSes, the company said in its MS06-001 security bulletin..

Experts from iDefense, F-Secure and SANS agree that no attacks that target the older Windows versions have surfaced. Yet that might only be a matter of time, said Mike Murray, director of vulnerability and exposure research at nCircle, a vulnerability management company in San Francisco.

Releasing a patch for Windows 98 and Windows ME would be the right thing to do, according to Murray. "Even Microsoft acknowledges that the vulnerability exists in those OSes, someone will figure out how to exploit it," he said. .......


Here is someone in the reply section.

Quote:
MS is wrong not to support 98
Reader post by: Bill Dautrive
Posted on: January 8, 2006, 2:51 PM PST
Story: Windows 98, ME users left vulnerable to WMF bug?

Why?

Simple. Around 50% of the windows world is using something other then XP. So why would that mean that MS should still support it?

The intenet is an extremely dangerous place and MS is the primary reason for it. With so many older MS OS's out there unprotected, it causes serious problems for everyone.

No one should have to pay to have problems that MS neglected fixed. We are not talking features here, but security problems that are the fault of Microsoft. All these people using the lame car anology are missing the point and clearly lack understanding of the issues. Even if a 1950 whatever is found to be defective, how many are on the road, how many has 100% original parts? That anology does not even come close to fitting this situtation, stop being ignorant.

Bottom line: These are serious security issues that came about through incompetance and negligence on Microsofts part. Asking anyone but Microsoft to pay for this is beyond ignorant.


Korea is responding by trying to go linux.

Quote:

The nation's six ministries including the Ministry of Information and Communication (MIC) convened of late to discuss ways of reducing dependence on Microsoft, the world's biggest software maker.

``We agreed to cut down on our heavy reliance on Windows while promoting open-source programs such as Linux as an alternative,'' an MIC official said.

As action plans, the six ministries agreed to make Internet banking services and programs dealing with public grievance operable on a Linux-empowered system. Up until now, the programs could be run only through Windows.

``To secure broad-based adoption of non-Windows programs, the government will evaluate ministries regarding how much they brace for open-source programs,'' the official said.




But, is the linux community offering an alternative to these former customers of Microsoft? Afterall, while there may be distros designed to work on older legacy computers, none of them are designed to be as easy to use as windows 98. Problems include, having to mount the disk drive from the command line, no control panels for easier customization on many of their light windows managers, like fluxbox and icewm, and the greater difficulty encountered when installing a linux program. I can untar tarballs, but I can never configure one. make and "make install" never work. Also the more feature rich Guis like KDE and Gnome are often to resource intensive to work quickly with anything under Pentium 3 or AMD K6-3. They both need at least 256 mb of memory to operate at a good clip. The typical windows 98 system, was Pentium I-MMX or Pentium II with 64-128 mb of memory.

According the same article more asinine members of the linux community are probably gearing up to infect these people with viruses in July.

Quote:
`Windows 98 is still widely used. Some people would replace their programs with advanced systems like Windows 2000 and XP. But some will continue to bank on Windows 98 even after this July,'' Seung Jae-mo, the researcher at the Korea Information Security Agency, said.

He expected hacking and virus attacks would rage in the latter half of this year as global crackers would launch full-throttle attacks on Windows 98-outfitted computers that will not be updated regularly.



I personally feel the efforts of all those code vigilantes would be better spent creating an "easy to use" distro for older computers, but what do I know?

According to Wikipedia, small business customers of Microsoft who can't pay for an upgrade to xp are being offered a thin client but the program is getting no advertising from Microsoft, and it is not being offered to home users of of Win 98 and ME. There is a something like a thin client being offered developing countries called "Windows XP Starter Edition," but Microsoft is not offering this to home users in the developed countries and we may not be able to afford the latest thing either.

Yes, I am biased because I am a "Win 98" user. I switched to feather as a dual boot, but I don't find it easy to use, and I started out with a DOS system, so I am not ignorant of command lines like most 98 people. The heavier distros just run way slow. I have tried "Debian Woody" with KDE and and "Red Hat 7.3" with Gnome. Neither Gnome nor Kde were much easier to use than Feather's Fluxbox despite the more familiar appearance. They still made it difficult to install programs, and there plug n play wasn't nearly as good as Feathers. They also didn't have easy to use control panels though the control panels existed.

"Windows 3.1" and 95 users were left in the cold in 2002.

This didn't harm 3.1 users as much since the hackers focused on 32 bit Windows after 95 was invented, but most any virus that involved NT/Xp will harm 95, 98, and ME.

Sober Virus harmed 95 users badly. I remember having to work on a number of friends computers as a result of it.

Anyhoo, if you want to keep your computer safe after this time. Here are your alternatives.

Install an antivirus program, and keep it updated. If you have one of those thirty day trials and you let it expire, you should purchase it. If you can’t afford it, use a free alternative like AVG.

Get, a spyware program and keep it updated. Many are offered free. I personally like the spyware checker on my cousins’ yahoo toolbar. My personal favorite is “Spyware Search and Destroy.”

Only use “Internet Explorer” if you have to. It will save you tons of headaches. Otherwise, use Firefox or Opera, Netscape, or some other browser completely unrelated to IE. Opera is now completely free. Firefox now has a user agent switcher extension, which makes Internet Explorer only websites(bill paying and online banking mostly) think you are using Internet Explorer. Opera has this feature built in. If you must use IE, out of necessity or bad habit, please tweak the security setting to ask for prompts before downloading unsigned active x controls. I personally set Firefox and Opera to erase cookies when I close my browser. I make exceptions for frequently visited sites like my.yahoo. I believe you can do this with Internet Explorer as well.

Don’t use “Outlook Express.” It is the “kick me” sign of the internet. It automatically executes attachments when you open an email. The majority of viruses are made to take advantage of this feature. “Sober Virus” took advantage of this then it raided the address book of Outlook. I personally use Thunderbird. It is just much safer then OE, and it has a really good spam filter, which learns over time and becomes better the more you use it. There are many other good free email programs out there that you can try. The M2 client on Opera is really cool. It threads your email just like google mail does. Pegasus is my old standby. Using webmail, like yahoo, google, mail.com, is also very safe. If you must use Outlook Express, turn off the setting that automatically opens attachments. This may or may not help. Some viruses turn them on, even when they are off. It is the most popular email program so hackers make most of their viruses for it. Not using it is the best and most inexpensive way to protect yourself.

Like it or not, you probably need a firewall these days. I personally use a freeware program called “Tiny Personal Firewall,” but it involves a lot of good guessing as far as what to let through and what to refuse. Basically I let traffic through if I have just opened a new program, and it is obviously related to that program. I have heard "Zone Alarm" is easier to use, but whenever I tried it, I found it too resource intensive.

Radical alternatives: Get rid of Windows 98/Me. This means installing a light distro of Linux. hat means many new things to learn, and some greater difficulty in certain areas.

Light distro to look at.

“Feather Linux”: This is my old favorite thus far. It is quick. It does plug and play very well for a Linux distro, and set up my dsl modem really easily. It installs in less than 10 minutes generally. You update it with a program called apt-get. You will need to install “Open Office” if you want a word processor with a dictionary. The dictionary in Abiword doesn’t work. The nicest feature of Feather is that it automatically mounts floppy drives. This distro has to be burned. The only drawback is its use of a desktop "windows manager" called Fluxbox. It is very quick, and light, but it is not easy to use if you are used to Windows. Instead of having a "Start Menu" you access all your programs from the right click of your mouse. It has no control panel for easy customization. You have to use configuration scripts.

Damn Small Linux a.k.a. DSL. It is similar to feather, but I haven’t tried it much. This distro can be purchased as well as burned. It uses the Icewm windows manager. Icewm is like Windows 9x, only it doesn’t have a control panel for customization. Like Feather and Luit, DSL uses Tiny X server instead of xorg or xfree86. This means it can be used on very old computers, including 386 DX so long as they have at least 24 Mb of memory. These specs don’t apply to the programs in the package necessarily. Firefox will always require at least 64 mg of memory and at least Pentium MMX or greater. The same goes for Open Office. Fortunately nearly all Win98/ME computers should do just fine with these specifications, but if you have lessor specs there are alternatives, which can be searched for at debian.org. Siag, and Ted or good WP suites for low resources systems, and link2, with the graphics switch links2 -g, is an amazing little browser. DSL has hacked version of Dillo, which runs on very low system resources. They modified it to handle frames and Javascript.

Luit Linux.” Basically "Damn Small" with XFCE. XFCE is very easy to use for a light desktop. It has a control panel and is generally easy to customize, and figure out, relative to Icewm and Fluxbox.

BTW, Feather, DSL and Luit are all live CDs. This means they will run from the cd rom. This is great because, you can try them out, set them up, and experiment with them, before you install them on your hardrive. This is a great advantage, from a configuration standpoint.

Xubuntu: Ubuntu with XFCE desktop. This is what I am currently using. XFCE is a very light desktop, with some very easy-to-use features. It is not offered as a separate distro. You have to order the Ubuntu CDs, then you need to do a server install of Ubuntu, then you install the xubuntu-desktop with apt-get from the command line. There are instructions for this at the Ubuntu website. If you have dial-up, downloading the Xubuntu desktop may take as much as ten hours. If you have highspeed, it will take two or less. The next distro will be out sometime in June and by then they may offer Xubuntu as a separate distro. Let’s cross our fingers, because this will really benefit dial-up users. I like XFCE a lot. It is very light and feature rich with an easy to understand control panel. Xubuntu doesn’t use tiny x though. Tiny X makes it possible for Feather, DSL and Luit to go on computers as old a 386DX with 24 Mb of memory. Xubuntu probably won’t go that far, but it works just fine on the MMX/Pentium II era machines. The biggest advantage of this distro is the Ubuntu community, which is extensive and helpful. It also helps that you can get the installation disks for free and without a cd burner, or shipping fees. If you go their website, you will likely get sent several installation disks rather than just one. I think Ubuntu developers want you to share this distro with your friends.

All four of these distros are based on Debian.
The default desktop of Ubuntu is Gnome. It will operate pretty slowly, on most Pentium I and II computers. It can be tweaked some by using hdparm, but I don’t like it very much. I upgraded my hardrive from 4 Gb to 30Gb three years ago, so I installed a dual boot of 98 and “Debian Linux.” A dual boot configuration is a good thing if you are scared of getting rid of 98 completely. Admittedly I couldn’t get the winmodem dial up working on my first install of Debian Linux, so keeping 98 was handy. Buying a larger disk drive to accommodate both is fairly inexpensive. You can probably buy a 30 Gb hardrive for less than 20 dollars on Ebay nowadays. That is more than enough to accomodate Windows 98 and Linux, yet it is cheap because today it is considered a dinky diskdrive.

Do your research before you install Linux.
You should get a manual for your distro online, or from the library or bookstore. The Ubuntu community has a lot online. This is why I have started to using Ubuntu. Pay particular attention to the problem of Windows specific dial up modems. When I first installed Debian, I had to get an external modem, because I just couldn’t get my winmodem to work. If you have an internal modem, it is probably a winmodem. Cable and DSL modems that are connected to a USB hub, rather than an ethernet adapters are also a drag. They aren’t well identified by Linux at all. I have no experience with wifi. Ubuntu has a quick start guide that should help if you are new to Linux.

There are some promising new distros on the horizon that could benefit 98/ME users. I am currently paying close attention to "STX Linux," a Slackware-based distro, that employs the “Equinox Desktop.” This desktop looks and feels very much like “Windows 98". It even has a really good control panel. They just came out with their first full release a month ago. They claim that it runs on a 486DX with 32 megabytes of memory. I’ll be paying close attention to the buzz on this one, but I currently don’t know any users.

Mepis
has a very good reputation among former Windows users. They have been beta testing a light version for a while now. Unfortunately, it appears they are using KDE which in my experience runs slower than Gnome on my AMD K6 II.

Some people are also making a distro called Ubuntu lite, but it is in beta testing now. It will employ Equinox or Icewm.

Anyway, there's a run down of your alternatives, as I see them. I will be following this story in the future.

Wednesday, February 08, 2006

Guardian Unlimited | Special reports | Danish paper pursues Holocaust cartoons

Now Flemming Rose, thats Flem for short,(cough, cough) is coordinating with the Iranian paper that is publishing the inflammatory protocols cartoons.

Guardian Unlimited | Special reports | Danish paper pursues Holocaust cartoons: "Danish paper pursues Holocaust cartoons

John Plunkett
Wednesday February 8, 2006

The Danish paper responsible for the original caricatures of the prophet Muhammad is set to stoke the row further by running cartoons satirising the Holocaust.

Flemming Rose, the culture editor of Danish daily Jyllands-Posten, said today he was trying to get in touch with the Iranian paper, Hamshari, which plans to run an international competition seeking cartoons about the Holocaust.

'My newspaper is trying to establish a contact with the Iranian newspaper, and we would run the cartoons the same day as they publish them,' Mr Rose told CNN.

Article continues
The Danish editor was also defiantly unapologetic about the original publication of 12 cartoons - one of which featured the prophet wearing a turban shaped as a bomb - in his paper five months ago."


Flem is an old cold warrior like Rummy and Cheney.

Flemming Rose - Wikipedia, the free encyclopedia

Flemming Rose - Wikipedia, the free encyclopedia: "Flemming Rose" the man who published those cartoons depicting Mohammed as a suicide bomber, has some disturbing ties to campus watch, and seems to be obsessed with the "clash of civilizations".

According to the Wiki article

There is some controversy over whether political ideology informed Flemming Rose’s decision to publish the offending cartoons. Allegations of ties to neo-conservative thought abound, but so far have not been lucidly substantiated. In 2004, he travelled to the USA to visit the Neoconservative Daniel Pipes and subsequently wrote and published a generally positive account of Daniel Pipes, which has been held up as apologetic by certain critics. Rose does not comment on Pipes’s ideology in the profile.


He was certainly providing an echo to Daniel Pipes, when he made this statement.

"About the question of integration and how compatible is the religion of Islam with a modern secular society – how much does an immigrant have to give up and how much does the receiving culture have to compromise."


The paper that published this appears to have refused a similar cartoon about Jesus.

Jyllands-Posten, the Danish newspaper that first published the cartoons of the prophet Muhammad that have caused a storm of protest throughout the Islamic world, refused to run drawings lampooning Jesus Christ, it has emerged today.

The Danish daily turned down the cartoons of Christ three years ago, on the grounds that they could be offensive to readers and were not funny.

In April 2003, Danish illustrator Christoffer Zieler submitted a series of unsolicited cartoons dealing with the resurrection of Christ to Jyllands-Posten.

Zieler received an email back from the paper's Sunday editor, Jens Kaiser, which said: "I don't think Jyllands-Posten's readers will enjoy the drawings. As a matter of fact, I think that they will provoke an outcry. Therefore, I will not use them.

Tuesday, February 07, 2006

New Orleans seeks foreign aid!

IOL: Nagin looks for helping hands from overseas: "Nagin looks for helping hands from overseas

February 07 2006 at 01:07AM

By Michael Depp

New Orleans - Shortcomings in aid from the United States government are making New Orleans mayor Ray Nagin look to other nations for help in rebuilding his hurricane-damaged city.

Nagin, who has hosted a steady stream of foreign dignitaries since Hurricane Katrina hit in late August, says he may seek international assistance because US aid has not been sufficient to get the city back on its feet.

'I know we had a little disappointment earlier with some signals we're getting from Washington but the international community may be able to fill the gap,' Nagin said when a delegation of French government and business officials passed through on Friday to explore potential business partnerships.

Jordan's King Abdullah also visited New Orleans on Friday
and Nagin said he would encourage foreign interests to help redevelop some of the areas hardest hit by the storm."


Uhg! It is like living in developing country!

Guardian Unlimited | Special reports | Brothers in arms - Israel's secret pact with Pretoria

Second part of the two part series on Israel and Apartheid.

Guardian Unlimited | Special reports | Brothers in arms - Israel's secret pact with Pretoria: "srael's critics say that as the threats to the Jewish state receded it came more and more to resemble the apartheid model - particularly in its use of land and residency laws - until the similarities outweighed the differences. Liel says that was never the intent.

'The existential problems of Israel were real,' he says. 'Of the injustice we did, we're always ashamed. We always tried to behave democratically. Of course, on the private level there was a lot of discrimination - a lot, a lot. By the government also. But it was not a philosophy that was built on racism. A lot of it was security-oriented.'

Goldreich disagrees. 'It's a gross distortion. I'm surprised at Liel. In 1967, in the six day war, in this climate of euphoria - by intent, not by will of God or accident - the Israeli government occupied the territories of the West Bank and Gaza with a captive Palestinian population obviously in order to extend the area of Israel and to push the borders more distant from where they were,' he says.

'I and others like me, active after the six day war on public platforms, tried desperately to convince audiences throughout this country that peace agreements between Israel and Palestine [offer] greater security than occupation of territory and settlements. But the government wanted territory more than it wanted security."

Guardian Unlimited | The Guardian | Worlds apart

Excellent two part article from the guardian about whether Israel's treatment of the Palestinians can be compared to Apartheid.

Guardian Unlimited | The Guardian | Worlds apart: "As far back as 1961, Hendrik Verwoerd, the South African prime minister and architect of the 'grand apartheid' vision of the bantustans, saw a parallel. 'The Jews took Israel from the Arabs after the Arabs had lived there for a thousand years. Israel, like South Africa, is an apartheid state,' he said. It is a view that horrifies and infuriates many Israelis.

A prominent Israeli political scientist, Gerald Steinberg, responded to an invitation to appear on a panel at a Jerusalem cultural centre to debate 'Is Israel the new apartheid?' by denouncing the organiser, a South African-born Jew, for even posing the question.

'As you are undoubtedly aware, the pro-Palestinian and anti-semitic campaign to demonise Israel focuses on the entirely false and abusive analogy with South Africa. Using the term 'apartheid' to apply to Israel's legitimate responses to terror and the threat of annihilation both demeans the South African experience, and is the most immoral of charges against the right of the Jewish people to self-determination,' he replied.

Many Israelis recoil at the suggestion of a parallel because it stabs at the heart of how they see themselves and their country, founded after centuries of hatred, pogroms and ultimately genocide. If anything, many of Israel's Jews view themselves as having more in common with South Africa's black population than with its oppressors. Some staunch defenders of Israel's policies past and present say that even to discuss Israel in the context of apartheid is one step short of comparing the Jewish state to Nazi Germany, not least because of the Afrikaner leadership's fascist sympathies in the 1940s and the disturbing echoes of Hitler's Nuremberg laws in South Africa's racist legislation.

Yet the taboo is increasingly challenged. As Israel's justice minister, Tommy Lapid, said, Israel's defiance of international law in constructing the West Bank barrier could result in it being treated as a pariah like South Africa. Malaysia's prime minister, Abdullah Ahmad Badawi, has called for a campaign against Israel of the kind used to pressure South Africa."

Sunday, February 05, 2006

CALIFORNIA / Bush gets bill slashing foster care aid / State, 8 others in West affected by federal cutback

Republicans screw abused children to pay for tax cuts on the wealthy.

CALIFORNIA / Bush gets bill slashing foster care aid / State, 8 others in West affected by federal cutback: "A bill awaiting President Bush's signature includes provisions to cut off federal foster care benefits for hundreds of California children living with low-income relatives after being removed from the homes of abusive or neglectful parents.

If the cutback survives an expected court challenge, the reduction in aid will be substantial. In the Bay Area and other high-cost regions, for example, a woman providing foster care for grandchildren ages 7 and 10, who now gets $1,315 a month, would receive $723, the amount of a conventional welfare grant.

The higher aid total was ordered by the Ninth U.S. Circuit Court of Appeals in San Francisco in a March 2003 ruling that was binding in California and eight other Western states. The ruling said children who are placed with grandparents or other family members can receive federal aid based on their new foster parents' low incomes.

The government had argued that the aid should be based on the incomes of the parents from whose homes the children were removed.

Tucked into the federal Deficit Reduction Act, which won final passage Wednesday on a largely party-line vote of 216-214 in the House, is language declaring that the appeals court ruling was wrong and that long-standing federal law bases eligibility solely on the parents' incomes."