UK Government Could Fine Companies Still Running Windows XP

Printable View

14.05.14, 14:08
ParamouR

UK Government Could Fine Companies Still Running Windows XP

http://i.imgur.com/acXO44I.jpg

Approximately 26 percent of the desktop computers worldwide are still running Windows XP right now, but the United Kingdom is really keen on cutting down its market share by forcing companies in the country to upgrade as soon as possible.

Quote:

In a notification posted on its website, the UK's privacy watchdog warned that out-of-date software is currently one of the eight most common security vulnerabilities leading to data leaks, so companies that are failing to secure their PCs due to this reason could get fines of up to 500,000 pounds ($844,000 / 613,000 euros).

“In just the past couple of months we have already seen widespread concern over the expiry of support for Microsoft XP and the uncovering of the security flaw known as Heartbleed. While these security issues may seem complex, it is important that organisations of all sizes have a basic understanding of these types of threats and know what action they need to take to make sure their computer systems are keeping customers’ information secure,” ICO’s Group Manager for Technology, Simon Rice,said

Sony Computer Entertainment Europe and British Pregnancy Advice Service have already received hefty fines for failing to keep user data secure, so the Information Commissioner's Office warns that all companies that are aren't upgrading their computers to run newer software and protect consumer details could get financial penalties as well.

~~ Lots of money coming your way thanks to the UK! :dabs:
14.05.14, 22:41
slikrapid

Quote:

Originally Posted by article

Approximately 26 percent of the desktop computers worldwide are still running Windows XP right now, but the United Kingdom is really keen on cutting down its market share by forcing companies in the country to upgrade as soon as possible.

which means UK should be keen on demanding continuous support from M$, which due to its monopoly/market share/size should have an obligation to keep the support active and find another way to draw companies to upgrade their software or at least have them pay a little extra for extended support - they could even do a compromise by demanding upgrade for larger companies only (which can easily afford it)

Quote:

Originally Posted by article

out-of-date software is currently one of the eight most common security vulnerabilities leading to data leaks, so companies that are failing to secure their PCs due to this reason could get fines of up to 500,000 pounds

they mean primarily popular software & OS's, 0day vulnerabilities, after these the question of version upgrade may play a role, after this comes the out-of-date scenario
also, the most problematic data leaks are done legally? by data mining (many companies), data exchange/selling among big companies and also between them and government intelligence agencies, after that comes organized crime
so governments aren't really concerned about the leaks, they smell a continuous problem, a source of profit via fines/inspections, plus it becomes harder to start or maintain a software company with such increasing demands (helps the big players to keep their market share intact)

Quote:

Originally Posted by OP

Lots of money coming your way thanks to the UK!

not only towards M$, but towards government budget (taxes, fines) and insurance companies as well (to name only the more visible direct beneficiaries higher up the chain)
23.05.14, 18:01
tr-cht-fx-242p

Quote:

In just the past couple of months we have already seen widespread concern over the expiry of support for Microsoft XP and the uncovering of the security flaw known as Heartbleed

I don't see any direct relationship connection with specifically Heartbleed and expiry of support for Microsoft XP. The missing bounds check in openssl has nothing to do with XP. openssl can be for almost any variation of platform Mac, Linux or Windows so I find the entire UK report just crap.

For those interested here is the patch for Heartbleed:
https://github.com/openssl/openssl/c...0187b11c44aead

And the general public is further misinformed by corporations like CBS calling Heartbleed a virus. Shit like this:
Heartbleed virus: Changing your password may not eliminate risk - Videos - CBS News