Improved security in Windows--coming soon?

TechTalk
By Ken Doyle

In late May, at Microsoft’s TechEd 2004 conference, software developers learned that they will have to continue waiting for the next major release of the Windows operating system—Longhorn, as this release is code-named, won’t make its debut till some time in 2006.

Meanwhile, the rest of us can look forward to something more useful: a major update to Windows XP, the operating system that ships with most PCs at the moment. Windows XP Service Pack 2 (SP2) should be available by the end of summer (keep your fingers crossed). Like the second edition of Windows 98, SP2 will (we hope) provide a slew of bug fixes, but it’s clear that Microsoft’s main focus will be something that’s desperately needed: improved security.

For starters, the Windows firewall will be enabled by default, and it will also be easier to configure. Network protection will be improved to fend off attacks from worms and viruses like MSBlaster. Handling of attachments will be tightened so that malicious code attached to e-mail or instant messages will not affect other parts of the system. Web browser security will also be overhauled, offering more safeguards against downloading and executing harmful programs and scripts. And finally, Microsoft will enter the 21st century (in web-browserland, that is) by including a pop-up blocker in Internet Explorer—something that most other browsers have had for a while.

Tying all of these enhancements together is a new and improved software update module, which extends the scope of the current automatic Windows Update. The process may finally eliminate the current nightmare of downloading patches almost weekly, and should also make it easier for system administrators to deploy updates on a company-wide basis. The downside to this improvement is that those who prefer to update their software manually will likely receive more persistent reminders.

Microsoft will also include enhancements to the version of XP that is designed to work with tablet PCs, the much-hyped product revolution that was launched in late 2002, but has yet to gain a significant following.

So should you rush out and get SP2 as soon as it’s released? As with any major operating system update, it may be best to let the dust settle for a few weeks, and learn from the problems reported by early adopters. Since this will be a free download (also available on CD for a shipping charge), there should be no other reason to avoid updating.
And if you haven’t already been keeping your copy of XP current, don’t wait for the end of summer. Find a friend with a broadband connection, if you don’t have one yourself, get online, fire up Windows Update, and watch as it downloads and installs the few thousand or so patches that you may have missed.