{"id":7692,"date":"2014-06-08T08:15:18","date_gmt":"2014-06-08T12:15:18","guid":{"rendered":"http:\/\/thundercloud.net\/infoave\/new\/?p=7692"},"modified":"2014-06-08T10:53:58","modified_gmt":"2014-06-08T14:53:58","slug":"microsoft-has-applied-patches-to-windows-8-files-but-left-windows-7-vulnerable","status":"publish","type":"post","link":"https:\/\/www.thundercloud.net\/infoave\/new\/microsoft-has-applied-patches-to-windows-8-files-but-left-windows-7-vulnerable\/","title":{"rendered":"Microsoft has applied patches to Windows 8 files but left Windows 7 vulnerable"},"content":{"rendered":"<p>Many of you who are using Windows 7 \u00a0have written to us asking if \u00a0you should upgrade to Windows 8.x in light of the recent revelations\u00a0that Microsoft has released fixes for\u00a0Windows 8 for zero-day vulnerabilities but not for Windows 7.<\/p>\n<p><a href=\"http:\/\/windows.microsoft.com\/en-us\/windows\/lifecycle\" target=\"_blank\">According to Microsoft<\/a>, Windows 7 with Service Pack One (SP1) will be supported until January 14, 2020 (extended support). This begs the question: Why is Microsoft releasing critical updates and patches for Windows 8.x but not for the still fully supported Windows 7 SP1? Some say money, some say to stimulate sales of its worst selling operating system (Windows 8.x) since Windows ME, but we don&#8217;t know. W&#8217;e&#8217;re not going to guess. I&#8217;m not a big Microsoft fan anymore but I think we should wait for them to respond to\u00a0this before we all jump to conclusions.<\/p>\n<p>Our job is to keep you informed. Most times on this site, we feature articles we feel you&#8217;ll find interesting and informative. Sometimes we throw in an article we know is controversial to stimulate discussion as well as to inform. We are not sure where this article fits in; it&#8217;s controversial, no doubt, it&#8217;s also informative. We are sure you&#8217;ll see many more articles about this in the coming days in main stream media &#8212; like CNN, \u00a0&#8220;USA Today&#8221; and FOX News. Unfortunately, sometimes what those media services report isn&#8217;t exactly free from hyperbole with a little opinion slant too.<\/p>\n<p>Let&#8217;s all give Microsoft a chance to respond before we think about filing class-action lawsuits, move to Apple, or buy Windows 8.x. We need to wait and see what Microsoft has to say about this &#8212; or until there is a wide-spread zero-day attack on Windows 7 which can be provably attributed to Microsoft&#8217;s actions or lack thereof.<\/p>\n<blockquote>\n<h1>Microsoft has applied patches to Windows 8 files but left Windows 7 vulnerable<\/h1>\n<p>Anyone running Windows 7 could be at risk of zero day attacks according to researchers. Moti Joseph together with malware analyst Marion Marschalek developed a tool which they used to compare hundreds of libraries built into Windows 8 with their Windows 7 counterparts. The pair found that a number of security functions has been updated in Windows 8, but remain untouched in Windows 7.<\/p>\n<p>Marschalek said it was &#8220;scary simple&#8221; to develop the comparison tool, and there is no reason that something similar could not be created by someone else. It would then be a very simple matter of analyzing the functions that had changed between the two operating systems to exposed vulnerabilities in Windows 7.<\/p>\n<p>Four &#8220;safe functions&#8221; were found to be missing from Microsoft&#8217;s dedicated libraries intsafe.h and strsafe.h, according to The Register. At the TROOPERS14 security conference a demonstration was given of the DiffRay tool, and you can see it in the following video:<\/p>\n<p><iframe loading=\"lazy\" title=\"TROOPERS14 - What Happens In Windows 7 Stays In Windows 7 - Marion Marschalek &amp; Joseph Moti\" width=\"665\" height=\"374\" src=\"https:\/\/www.youtube.com\/embed\/s_7Cy2w2dCw?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<p>Joseph speculated that Microsoft had not updated the files in Windows 7 in a bid to save money. &#8220;Microsoft does not want to waste development time on older operating systems [&#8230;] they want people to move to higher operating systems&#8221;.<\/p>\n<p>Support has now officially ended for Windows XP &#8212; unless you&#8217;re a government organization willing to pay &#8212; but there is still a good deal of life left in Windows 7, which make this discovery all the more surprising.<\/p>\n<p>Microsoft has yet to comment on the revelations.<\/p><\/blockquote>\n<p><span style=\"text-decoration: underline;\"><strong><a href=\"http:\/\/www.winbeta.org\/news\/microsoft-has-applied-patches-windows-8-files-left-windows-7-vulnerable\" target=\"_blank\">SOURCE: WinBeta<\/a><\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Many of you who are using Windows 7 \u00a0have written to us asking if \u00a0you should upgrade to Windows 8.x in light of the recent revelations\u00a0that Microsoft has released fixes for\u00a0Windows 8 for zero-day vulnerabilities but not for Windows 7. According to Microsoft, Windows 7 with Service Pack One (SP1) will be supported until January 14, 2020 (extended\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.thundercloud.net\/infoave\/new\/microsoft-has-applied-patches-to-windows-8-files-but-left-windows-7-vulnerable\/\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1426,1656,10],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/7692"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=7692"}],"version-history":[{"count":4,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/7692\/revisions"}],"predecessor-version":[{"id":7698,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/7692\/revisions\/7698"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=7692"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=7692"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=7692"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}