<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Wait a year on Vista</title>
	<atom:link href="http://www.defendingthekingdom.com/archives/wait-a-year-on-vista/feed" rel="self" type="application/rss+xml" />
	<link>http://www.defendingthekingdom.com/archives/wait-a-year-on-vista</link>
	<description>Security and Privacy in Your Digital Life</description>
	<lastBuildDate>Fri, 03 Feb 2012 21:59:21 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: Ian Saxon</title>
		<link>http://www.defendingthekingdom.com/archives/wait-a-year-on-vista/comment-page-1#comment-112</link>
		<dc:creator>Ian Saxon</dc:creator>
		<pubDate>Thu, 11 Jan 2007 13:23:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.defendingthekingdom.com/archives/wait-a-year-on-vista#comment-112</guid>
		<description>1. Discussing security outside the context of internet access is of limited use, as nearly all computers are connected somehow. Yes, other programs can provide access to a weak OS, but if you take away some of the flaws in the OS, the offending programs become less dangerous. In other words, an extremely secure OS can mitigate a lot of the damage from poor software.

2. Perhaps a fresh install of XP was miles ahead of a fresh install of Windows 98, but I would venture that a Windows 98 install that had been tweaked by a user for several years (security settings carefully chosen and extra programs installed to plug the OS&#039;s holes) would have been safer than either.

3. I&#039;m suggesting that the probability that you would need to uninstall Vista in one year is lower than it is if you install it now, when it is likely to be at its weakest. Therefore, your expected loss (loss*probability of loss) is minimized if you wait one year.

4. It&#039;s certainly up to the individual. My personal opinion is that I would prefer to use a system who&#039;s bugs I understand and know how to mitigate rather than replace it and hope that the new version is better than the previous version. Because Vista is new, it could be worse or it could be better. Why would you bet that it&#039;s better without any evidence?

Ian</description>
		<content:encoded><![CDATA[<p>1. Discussing security outside the context of internet access is of limited use, as nearly all computers are connected somehow. Yes, other programs can provide access to a weak OS, but if you take away some of the flaws in the OS, the offending programs become less dangerous. In other words, an extremely secure OS can mitigate a lot of the damage from poor software.</p>
<p>2. Perhaps a fresh install of XP was miles ahead of a fresh install of Windows 98, but I would venture that a Windows 98 install that had been tweaked by a user for several years (security settings carefully chosen and extra programs installed to plug the OS&#8217;s holes) would have been safer than either.</p>
<p>3. I&#8217;m suggesting that the probability that you would need to uninstall Vista in one year is lower than it is if you install it now, when it is likely to be at its weakest. Therefore, your expected loss (loss*probability of loss) is minimized if you wait one year.</p>
<p>4. It&#8217;s certainly up to the individual. My personal opinion is that I would prefer to use a system who&#8217;s bugs I understand and know how to mitigate rather than replace it and hope that the new version is better than the previous version. Because Vista is new, it could be worse or it could be better. Why would you bet that it&#8217;s better without any evidence?</p>
<p>Ian</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andy Herm</title>
		<link>http://www.defendingthekingdom.com/archives/wait-a-year-on-vista/comment-page-1#comment-107</link>
		<dc:creator>Andy Herm</dc:creator>
		<pubDate>Tue, 09 Jan 2007 15:48:55 +0000</pubDate>
		<guid isPermaLink="false">http://www.defendingthekingdom.com/archives/wait-a-year-on-vista#comment-107</guid>
		<description>I wanna play devil&#039;s advocate here and press you a bit more on each of your reasons.

&quot;1. Operating systems provide broader and more dangerous opportunities for security breaches than most other software.&quot;

I&#039;d venture to say that web browsers and e-mail clients have introduced a similar number of security breaches to OSes. I don&#039;t know the exact stats, but it&#039;s only when a computer is opened to internet access that it is really vulnerable. The OS, on its own, is almost completely secure unless you have physical access to the machine. If Vista is meant to be more secure than XP (and we all know XP&#039;s track record isn&#039;t good), why would you imagine that continuing with something we know isn&#039;t very good is more secure than something we know little about? Surely &quot;possibly good&quot; is better than &quot;definitely not good&quot;

&quot;2. Operating systems, in their early iterations, have a long history of being inadequate and in desperate need of a large number of patches soon after release. This is inevitable for such large, complex software packages. There is no reason to think Vista will change this trend, and you neednâ€™t be one of the early testers who suffers from the biggest mistakes.&quot;

Remember the days of upgrading from 98 or (god-forbid you got suckered in and bought it) ME to XP? Even XP RC1 was miles above 98 in just about every category. Yes, XP crashed, but less than 98 did. It did need lots of tweaks, 2 service packs, and a bazillion patches, but even without all the fixes, it was still better than the alternative. Who&#039;s to say Vista won&#039;t be the same jump ahead?

&quot;3. The purchase of a new operating system is a big expense, both monetarily and in time spent learning to use it. Uninstalling an unacceptably premature operating system is far costlier and difficult than uninstalling most other types of software (like an mp3 player or word processor).&quot;

So? You&#039;re suggesting waiting a year, not not buying it all together. If you&#039;re going to have to invest the time and money into it eventually, why&#039;s my future time worth less than my present time (especially if I&#039;m unemployed at the moment).

&quot;As for your concern that youâ€™ll never have the latest and supported version of an operating system, I think itâ€™s misplaced. After the first year of patches for a new operating system, itâ€™s probably not necessary to treat each subsequent update as cautiously as you would the first release (unless the update is so drastic that it is essentially a completely new, untested operating system).&quot;

Okay, so I&#039;ll grant that XP will continue to be patched and supported well into the future. Why do you assume that each update will be less untrustworthy than the previous? With M$ releasing a new OS or new service pack every year or two, they&#039;re bound to create new problems, but one would hope that they&#039;re also making genuine progress. I think it comes down to if you think Vista now is better than XP now, go for it. If you don&#039;t think Vista is better now, you&#039;re not likely to change your mind after a dozen patches are released and while they&#039;ve closed a few gaps, the OS itself is probably only minimally more secure than it was a year prior. In that year, you may have lost out on some of the advantages that Vista provides for fear of using the buggy system.

p.s. Just because you&#039;re in India doesn&#039;t mean you&#039;re allowed to outsource your blogging.

Andy</description>
		<content:encoded><![CDATA[<p>I wanna play devil&#8217;s advocate here and press you a bit more on each of your reasons.</p>
<p>&#8220;1. Operating systems provide broader and more dangerous opportunities for security breaches than most other software.&#8221;</p>
<p>I&#8217;d venture to say that web browsers and e-mail clients have introduced a similar number of security breaches to OSes. I don&#8217;t know the exact stats, but it&#8217;s only when a computer is opened to internet access that it is really vulnerable. The OS, on its own, is almost completely secure unless you have physical access to the machine. If Vista is meant to be more secure than XP (and we all know XP&#8217;s track record isn&#8217;t good), why would you imagine that continuing with something we know isn&#8217;t very good is more secure than something we know little about? Surely &#8220;possibly good&#8221; is better than &#8220;definitely not good&#8221;</p>
<p>&#8220;2. Operating systems, in their early iterations, have a long history of being inadequate and in desperate need of a large number of patches soon after release. This is inevitable for such large, complex software packages. There is no reason to think Vista will change this trend, and you neednâ€™t be one of the early testers who suffers from the biggest mistakes.&#8221;</p>
<p>Remember the days of upgrading from 98 or (god-forbid you got suckered in and bought it) ME to XP? Even XP RC1 was miles above 98 in just about every category. Yes, XP crashed, but less than 98 did. It did need lots of tweaks, 2 service packs, and a bazillion patches, but even without all the fixes, it was still better than the alternative. Who&#8217;s to say Vista won&#8217;t be the same jump ahead?</p>
<p>&#8220;3. The purchase of a new operating system is a big expense, both monetarily and in time spent learning to use it. Uninstalling an unacceptably premature operating system is far costlier and difficult than uninstalling most other types of software (like an mp3 player or word processor).&#8221;</p>
<p>So? You&#8217;re suggesting waiting a year, not not buying it all together. If you&#8217;re going to have to invest the time and money into it eventually, why&#8217;s my future time worth less than my present time (especially if I&#8217;m unemployed at the moment).</p>
<p>&#8220;As for your concern that youâ€™ll never have the latest and supported version of an operating system, I think itâ€™s misplaced. After the first year of patches for a new operating system, itâ€™s probably not necessary to treat each subsequent update as cautiously as you would the first release (unless the update is so drastic that it is essentially a completely new, untested operating system).&#8221;</p>
<p>Okay, so I&#8217;ll grant that XP will continue to be patched and supported well into the future. Why do you assume that each update will be less untrustworthy than the previous? With M$ releasing a new OS or new service pack every year or two, they&#8217;re bound to create new problems, but one would hope that they&#8217;re also making genuine progress. I think it comes down to if you think Vista now is better than XP now, go for it. If you don&#8217;t think Vista is better now, you&#8217;re not likely to change your mind after a dozen patches are released and while they&#8217;ve closed a few gaps, the OS itself is probably only minimally more secure than it was a year prior. In that year, you may have lost out on some of the advantages that Vista provides for fear of using the buggy system.</p>
<p>p.s. Just because you&#8217;re in India doesn&#8217;t mean you&#8217;re allowed to outsource your blogging.</p>
<p>Andy</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ian Saxon</title>
		<link>http://www.defendingthekingdom.com/archives/wait-a-year-on-vista/comment-page-1#comment-53</link>
		<dc:creator>Ian Saxon</dc:creator>
		<pubDate>Thu, 21 Dec 2006 12:42:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.defendingthekingdom.com/archives/wait-a-year-on-vista#comment-53</guid>
		<description>I don&#039;t think it&#039;s necessary to wait a year before buying all types of software. I singled out operating systems as being particularly worthy of caution for 3 reasons:

1. Operating systems provide broader and more dangerous opportunities for security breaches than most other software.

2. Operating systems, in their early iterations, have a long history of being inadequate and in desperate need of a large number of patches soon after release. This is inevitable for such large, complex software packages. There is no reason to think Vista will change this trend, and you needn&#039;t be one of the early testers who suffers from the biggest mistakes.

3. The purchase of a new operating system is a big expense, both monetarily and in time spent learning to use it. Uninstalling an unacceptably premature operating system is far costlier and difficult than uninstalling most other types of software (like an mp3 player or word processor).

As for your concern that you&#039;ll never have the latest and supported version of an operating system, I think it&#039;s misplaced. After the first year of patches for a new operating system, it&#039;s probably not necessary to treat each subsequent update as cautiously as you would the first release (unless the update is so drastic that it is essentially a completely new, untested operating system).

Also, don&#039;t fear that if you fall a year behind on the operating system treadmill you will be left with software the vendor doesn&#039;t support. After all, Windows 98 was officially supported until July 2006, long after Windows 2000 was released in February 2000 and Windows XP was released in October 2001.

Hope that helps,

Ian</description>
		<content:encoded><![CDATA[<p>I don&#8217;t think it&#8217;s necessary to wait a year before buying all types of software. I singled out operating systems as being particularly worthy of caution for 3 reasons:</p>
<p>1. Operating systems provide broader and more dangerous opportunities for security breaches than most other software.</p>
<p>2. Operating systems, in their early iterations, have a long history of being inadequate and in desperate need of a large number of patches soon after release. This is inevitable for such large, complex software packages. There is no reason to think Vista will change this trend, and you needn&#8217;t be one of the early testers who suffers from the biggest mistakes.</p>
<p>3. The purchase of a new operating system is a big expense, both monetarily and in time spent learning to use it. Uninstalling an unacceptably premature operating system is far costlier and difficult than uninstalling most other types of software (like an mp3 player or word processor).</p>
<p>As for your concern that you&#8217;ll never have the latest and supported version of an operating system, I think it&#8217;s misplaced. After the first year of patches for a new operating system, it&#8217;s probably not necessary to treat each subsequent update as cautiously as you would the first release (unless the update is so drastic that it is essentially a completely new, untested operating system).</p>
<p>Also, don&#8217;t fear that if you fall a year behind on the operating system treadmill you will be left with software the vendor doesn&#8217;t support. After all, Windows 98 was officially supported until July 2006, long after Windows 2000 was released in February 2000 and Windows XP was released in October 2001.</p>
<p>Hope that helps,</p>
<p>Ian</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Bat Man</title>
		<link>http://www.defendingthekingdom.com/archives/wait-a-year-on-vista/comment-page-1#comment-52</link>
		<dc:creator>Bat Man</dc:creator>
		<pubDate>Wed, 20 Dec 2006 13:36:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.defendingthekingdom.com/archives/wait-a-year-on-vista#comment-52</guid>
		<description>So does this apply to all new software? If there&#039;s a new version every year or two of most major releases, then I&#039;ll never have the latest version and more importantly, I&#039;ll never have the supported version.</description>
		<content:encoded><![CDATA[<p>So does this apply to all new software? If there&#8217;s a new version every year or two of most major releases, then I&#8217;ll never have the latest version and more importantly, I&#8217;ll never have the supported version.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

