Exponential Algorithm In Windows Update Slowing XP Machines 413
jones_supa writes "An interesting bug regarding update dependency calculation has been found in Windows XP. By design, machines using Windows Update retrieve patch information from Microsoft's update servers (or possibly WSUS in a company setting). That patch information contains information about each patch: what software it applies to and, critically, what historic patch or patches the current patch supersedes. Unfortunately, the Windows Update client components used an algorithm with exponential scaling when processing these lists. Each additional superseded patch would double the time taken to process the list. With the operating system now very old, those lists have grown long, sometimes to 40 or more items. On a new machine, that processing appeared to be almost instantaneous. It is now very slow. After starting the system, svchost.exe is chewing up the entire processor, sometimes for an hour or more at a time. Wait long enough after booting and the machine will eventually return to normalcy. Microsoft thought that it had this problem fixed in November's Patch Tuesday update after it culled the supersedence lists. That update didn't appear to fix the problem. The company thought that its December update would also provide a solution, with even more aggressive culling. That didn't seem to help either. For one reason or another, Microsoft's test scenarios for the patches didn't reflect the experience of real Windows XP machines."
Remove, replace with apt (Score:5, Funny)
This is clearly the right time for Microsoft to completely rewamp the update system in XP; and what could possibly be better than to just remove the whole thing and import an already working package system from Debian?
Re:Remove, replace with apt (Score:5, Insightful)
Yeah, four months before the final end of support date I'm sure they have a copious budget for massive rewrites on their three-major-versions-old legacy product.
But good news: after next April, just kill off the update checker entirely, because there will never be an update again! Problem solved. You're welcome.
Re: (Score:2)
Re:Remove, replace with apt (Score:5, Interesting)
The dependency system in dpkg has been shown to be powerful enough to express sudoku puzzles which then APT has to solve to resolve conflicts. Technically still potentially exponential with improper use (I trust Microsoft would find some such non-working model reliably).
Re: (Score:3, Funny)
Re:Remove, replace with apt (Score:4, Informative)
The current way it works now, is the client downloads wsusscn2.cab, which in turn contains package.cab (among many others), which contains package.xml. Package.xml contains the updates in such a way that is flexible in that it can address more than one OS/platform/application/etc per patch, or more than one patch per update, or more than one file per patch, and so on. The Update nodes only point to categories/patches/files/locations/prerequisites/revision/etc via ids which have to be looked up deep in the file. Right now, that xml file is over 65MB. It would have made this easy if it were stored in a relation database, instead of an xml file, but it isn't and like I said, the API was built around the source of the information being an xml file, among other things.
Re: (Score:2)
I'm not sure why any intelligent person would think this is funny. THREE operating systems have come out after XP-- it's not like this 12 year old OS is the latest from Microsoft. You're making Linux zealots look even dumber than they are.
That's exactly why it's funny, you crusty old bastard. (At least, judging by your UID, anyway....)
Besides, I'm guessing in a few years we'll start seeing the same problem on Vista and 7, too.
Re: (Score:3)
Only good for 90 days but you can relaunch virtual disk and get another 90..
All versions including and since XP
www.modern.ie/en-us/virtualization-tools#downloads
Hope it helps
Best way to force an upgrade (Score:5, Insightful)
That's the best way to force users to upgrade that I can think of. They're already planning to end-of-life it. After EOL, they can simply start adding empty patches to the update system until it drives left-over XP users to upgrade. ;-)
Re: (Score:2)
Isn't EOL planned for April, anyways?
If there's no more updates, what's the point of fixing the update mechanism?
Re: (Score:2)
probably all depends on how much pressure China and similar factions have on Microsoft to persuade them to expend the XP support,..
Re:Best way to force an upgrade (Score:5, Interesting)
Re:Best way to force an upgrade (Score:4, Interesting)
Why? People paid good money for working supported product. Just because Microsoft wants to bait and switch doesn't make it right. I hope some deep pockets corporation sues the bejesus out of them to force this issue.
I don't see a bait and switch. People knew(or could find out if they wanted) the EOL dates before they purchased it with their "good money", and MS has been extending them since many many years even though they didn't have to. That sounds exactly like the opposite of a bait and switch.
Want to check the EOL for Windows 8 before purchasing? Here it is http://windows.microsoft.com/en-us/windows/lifecycle [microsoft.com]
Re:Best way to force an upgrade (Score:5, Funny)
Mainstream support ended on April 14, 2009. They've been pumping the dead horse full of adrenaline ever since to keep it from falling over.
Re: (Score:3)
Isn't EOL planned for April, anyways?
If there's no more updates, what's the point of fixing the update mechanism?
There will be more updates. It just means that they won't be free after April. My company has already begun discussions with MS as to how much they will have to pay for those updates as the sheer number of computers and lack of staff means that the upgrade to Win7 will not be done by that time. Figure in all the various departments that have apps that won't run in Win 7 or can't be upgraded till capital budget has the money for the upgrades and that could take years still. I'm sure many other large corps ar
Re: (Score:2)
What's the point of running the update service after EOL?
Re: (Score:2)
Re:Best way to force an upgrade (Score:5, Insightful)
It killed my Web browsing virtual machine until I used an offline update utility and fixed it manually.
Yes, XP needs to die, because it is made to deal with threats from 2000-2001, with added security patches strapped on as the need arose. Windows 7 and newer help address this issue.
However, I know plenty of places where XP is used that can't be fixed by a upgrade or platform change. Embedded stuff for example. Another are dedicated machinery that interfaces with a PC, does have newer drivers, and likely will not get newer drivers. A friend's $3000 sewing machine is one example.
Another person's CNC wood mill is another item. So, those machines are stuck with XP pretty much for good, because who is going to throw out a perfectly functioning mill just because it requires a legacy OS? Even some CD/DVD duplicators only will interface with XP, and moving to Vista or newer will be an exercise in futility.
So, XP in a lot of cases is here to stay, for better or worse.
Re: (Score:3)
A friend's $3000 sewing machine is one example.
Another person's CNC wood mill is another item. So, those machines are stuck with XP pretty much for good, because who is going to throw out a perfectly functioning mill just because it requires a legacy OS?
There are still options. You'd be surprised how much old oddball hardware *someone out there* has written Linux drivers for.
Failing that, there's Wine. Or XP emulation mode in Win 7.
Or pay a homeless developer some cash & Red Bull to write you some new software. CAM has been around forever and it's not complicated.
Re: (Score:3, Insightful)
Help address this issue..except not really. :/ Windows 7 was made to deal with threats from 2009-2010, with added security patches strapped on as the need arose. Windows 8 was made to deal with threats from 2012-2013, with added security patches strapped on as the need arose. You see a trend? The biggest things that consisten
Re:Best way to force an upgrade (Score:4, Informative)
No, not really. Windows 7's - and for that matter Linux's - security model is centered around users rather than applications. It's designed for multi-user central computers of old, not modern single-user desktops that run random code downloaded from the Internet. It protects the system from user-level code, but your personal files are screwed, should any of it be malicious. And not even the system is really safe: a program asks for administrative privileges, and you have no option to give it "fake" permissions in its own little sandbox or even any way of knowing what it has done, even after the fact.
Android comes closer, but still has the problem of not allowing you to fake permissions. I doubt that will change, it ultimately being a glorified data mining and ad delivery platform for Google.
As for a better security model, I'd really like to see a "tree" of virtual machines, with every program running in its own leaf it can mess to its digital heart's contents and any changes being merged into upper-level machine only at the approval of said upper level. That way you could do away entirely with the concept of administrator - since every program is the master of its own virtual machine - and try out new programs safely, since no matter what devastation they cause it's limited to their own playpen.
Re: (Score:2)
I've seen a similar pattern. A complaint about MS-Access not being able to handle a situation that most would consider "expected" or "normal", had the following reply from Microsoft (paraphrased):
"MS-Access is not designed for high-end loads or processing. We instead recommend you upgrade to MS-Sql Server, which is a more powerful tool. Thank You, -MS"
Re: (Score:2)
However, that statement has been made about Access since version 1.0.
Re: (Score:2)
Warning: Rant Ahead
After MS effectively killed off the desktop-database competition, MS-Access mostly stagnated. I've seen silly bugs last for almost a decade.
They mostly just shuffled the menus around (driving existing users nuts), and added an HMTL-like forms/report editor about 5 years ago. I prefer the older WYSIWYG editor for most tasks, which is only half supported now. WYSIWYG is more natural for fine control where managers want to squish as much as possible on a single page. (Whether that's a good h
Upgrade? Win7 and 8 have their own update issues (Score:2)
Upgrading to Windows 7 or Windows 8 certainly fixes one issue, but it creates a whole new set of problems.
1.) There is guarantee that this won't be a problem in Win7 or Win8. This only showed up when there were *Lots* of updates to IE. In three or four years, Win7 could have a similar problem, or at least a problem with similar symptoms.
2.) Win7 did redesign the update process. (Actually Vista first showed up with it, but many people are skipping Vista altogether.) But in their great (for very, very small
Re:Upgrade? Win7 and 8 have their own update issue (Score:4, Informative)
When I saw this, I didn't know what it was (Score:3, Informative)
I saw this during video playback, checked to see why the video was barfing and saw the svchost.exe chewing up 100% just like they say. It didn't happen on boot. I think it can happen whenever Windows Update scans for updates.
However, when I killed the svchost just to watch my video, I lost sound which made me think it had to be Media Player.
Well, maybe it was; but eventually I found out about this bug and realized I had to just sit through it.
The questions for me are "WTF does it do?", "Why does it have to walk this tree, and what is so bloody CPU intensive about it?" followed by, "Why does an update have to care what patches are superseded? As long as you're up to the latest patch level, it should be all good".
I think the whole thing is fundamentally broken. You have your current version of $Thing, it depends on N other things which must be of a given version. When you upgrade $Thing you just check to make sure the things it depends on are there and if they aren't, then you get them. The old stuff? You just check to see what depends on it, and if there is no longer anything depending on it you can quarantine it. If anything tries to access a quarantined dependancy, then your dependencies are broken and you need to patch the app that tried to do that.
I know I'm glossing over some things, and package management is not trivial; but there's no excuse I can see for exponentially growing scan algorithms.
Re:When I saw this, I didn't know what it was (Score:5, Informative)
to isolate windows update so you can kill it safely, do
sc config wuauserv type= own
next time service manager starts wuauserv, it will get its own private instance of svchost.exe, which you can kill with impunity :)
Re:When I saw this, I didn't know what it was (Score:5, Informative)
Re: (Score:3)
Why not just do:
net stop wuauserv
That way you're not killing processes, and possibly corrupting the update database, which causes its own set of problems.
In fact, I've got a desktop icon that does exactly that on one of my XP machines, so I can kill it quickly when I need the machine to be responsive in less than 10 minutes...
Re: (Score:3)
Re: (Score:2)
Wow. 4 hours for your VM to check for updates? What the heck processor are you running this thing on? I've got a bare-metal 1GHz PIII with 256MB RAM (all it will hold, unfortunately) and it only takes 10 minutes or so to finish the update check process.
Also an issue for 2003 (Score:3)
Re: (Score:2)
This is probably an issue with every Windows operating system using the update services, it's only visible with XP as it's the oldest supported operating system, so it has many, many more patches.
Jason
Re: (Score:2)
On purpose? (Score:5, Interesting)
Re:On purpose? (Score:5, Funny)
I'm really - I mean really, uncomfortable with the thought of Microsoft planning this kind of thing 12 years in advance...
Re: (Score:2)
Never attribute to malice that which is adequately explained by stupidity.
Bubblesort is a very easy algorithm to implement... and works well for a few entries.
Re: (Score:2)
Ah that explains it (Score:4, Informative)
I just put XP on an old laptop to run some specialized automotive software. This svchost bug has been bothering me ever since. If you kill the process it also takes out other services (like wifi).
Re: (Score:3)
Re:Ah that explains it (Score:5, Interesting)
one thing you can do to fix this is the following
sc config wuauserv type= own
(the space between "type=" and "own" is important)
this tells the service manager to put windows update service (WUAUserv) into its own hosting process, e.g. a new/separate instance of svchost.exe
Another service that can be implicated in updates is the "BITS" service. You can use the same command to isolate it also.
Anytime I see a svchost.exe instance misbehaving I start isolating the services inside it and then seeing which individual service is being problematic.
Re: (Score:3)
Re:Ah that explains it (Score:5, Interesting)
Absolutely.
However, one difference between how I work now vs. how I worked 20 years ago, is that now I am invariably working on somebody else's machine.
Once upon a time, I used to spend lots of time changing my settings, making customizations to the environment, installing all kinds of tools that made my life easier.
However, a large portion of my time is spent investigating situations that aren't on my own workstations. Either lab machines or other people's environments.
I don't want to be paralyzed when I need to work out of my environment. And so I tend not to invest in or assume the presence of tools that aren't strictly necessary to do a particular task.
This is especially true when there are workable tools included in the default software distribution. So, in the case of isolating bad services, using sc.exe is perfectly sufficient. I know it's going to be there and it's going to work.
About the only basic productivity tools I frequently install any more on a windows machine are gvim and fiddler, and if the IE F12 tools were just a little bit better, I might be able to stop depending on Fiddler....
Radical Idea (Score:2)
Here's a radical idea: why don't they fix the stupid exponential algorithm rather than papering it over by trimming the lists?
Microsoft Stops Supporting Win98 Early (2006) (Score:2)
Re: (Score:2)
Because the product is obsolete and will be out of support in 4 months?
That's like replacing the air conditioner In a car that's about to be sold or scrapped.
Now, if you're talking about WIndows Vista or 7, then yes, it's a good idea to fix it. But for something already out of date and will be EOL'd, there's less justification.
Standard MS Joke (Score:5, Funny)
We used to call it Cruft (Score:2)
Of course Windows performance degrades over time.
How else would they ever get anyone to upgrade? Remove the Start button?
Windiz Update solved that problem. (Score:2)
Running a computer store, this is driving me crazy (Score:2)
Re: (Score:2)
To fix this problem just run the latest Cumulative Security Update for Internet Explorer - for December this is KB2898785. Once you've run the update, reboot and then the updates will work.
I've had to do this for October, November and December.
This article has some more info about it - read the comments.
http://www.infoworld.com/t/microsoft-windows/windows-xp-update-locks-machines-svchost-redlined-100-fix-it-kb-2879017-230733#disqus_thread/ [infoworld.com]
.NET Updates Clobber My System (Score:5, Interesting)
No. In my case, it's trying to apply the .NET updates that completely murders my system. Apparently MS wants a gigabyte or so of free disk space on C:\ (and nowhere else) or the update will fail miserably. As it happens, my system partition has about 200MB free space, so the update disappears down a rabbit hole and never completes.
I used to think it was because it needed a bunch of temporary disk space, so last night I changed the TMP and TEMP environment variables to point to a volume with tons of free space, rebooted (because, you know, it's Windows), set just one of the several .NET updates running, then went off to see The Hobbit. When I returned some three hours later, the update had hung, the disk was idle, C:\ had zero bytes free, and the system log was corrupted.
Honestly, I don't know why anyone continues to be surprised by Redmond's rank incompetence...
Schwab
On and off for more than a year.... (Score:3)
This has been happening on and off for more than a year. I found the last couple of times that it was helped if I manually fetched and installed the latest "Cumulative Security Update for Internet Explorer" for version 8 (http://technet.microsoft.com/en-us/security/bulletin/ms13-088 at time of writing). Never understood why; perhaps it allows a serious chunk of the search tree to be pruned quickly avoiding the exponential stupidity.
If you need to stop the 100% CPU while you fetch this then Start -> Run, "Services.msc", locate and stop "Automatic Updates".
Re: (Score:2)
I've also found that this resolves the problem. The key thing is to make sure it's the latest Cumulative Security Update for IE. For December this is MS13-097 (KB2898785).
http://support.microsoft.com/kb/2898785/ [microsoft.com]
I've seen lots of people say this doesn't work but it's because they are trying the October or November update.
Why I'm still on XP in places. (Score:2)
I buy used Dell's from Weird Stuff Warehouse in Sunnyvale.
http://www.weirdstuff.com/ [weirdstuff.com]
I have a few projects that require a windows OS and can't run under wine. By buying a Dell from weird stuff, the OS is licensed to the machine. So it's little more than a convenience thing for me.
Re:No Sympathy (Score:5, Informative)
They should have been off Windows XP long ago.
Indeed. But it will stay for very very long I'm afraid. Lot's of systems still runs on XP with no available migration path. They just recently upgraded the security system where I work to XP. I don't want to think about what it ran before that.
Re:No Sympathy (Score:5, Insightful)
So someone thought it was a good idea to upgrade a security system with software that will have no security support in 4 months time?
Re:No Sympathy (Score:5, Funny)
Re:No Sympathy (Score:5, Funny)
Be sure to use bullets. Using a laser will just make the blast doors close.
Re: (Score:2)
It's not just a (physical, building) security system, it's ANY system. Why on earth would you choose to base your product (something that presumably companies will use for many, many years) on something that will have no security support in just 4 months? It's really quite idiotic; there's lots of freely-available OSes (including an RTOS) out there that you can use instead which don't have this problem.
Re:No Sympathy (Score:4, Insightful)
Many reasons.
1. It's light enough.
2. It's air gapped.
3. It's secured via elimination of infection vectors.
4. It's needed for legacy reasons.
5. Etc.
Re: (Score:2)
1. It's light enough.
There are lots options here any current *BSD or Linux Kernel with basic gnu tools and a purpose built interface would still be lighter than XP. No X and Gnome 3 or KDE 5 won't be but there are plenty of things that would. That's before you even look into the other choices like QNX and friends out there as well.
2. It's air gapped.
That's bullshit son and you know it. Nothing air-gapped ever stays air-gapped. Anyone who has worked in a manufacturing environment and delt with plant engineers knows "it won't be on the network,
Re: (Score:3)
We are talking about XP. Not other OSs. It's exceptionally obvious that it's light enough stands for "it's light enough to run wintel software on older machines".
I genuinely don't understand why there are so many people here on slashdot talking about windows security and not understanding it. It's entirely possible to secure a completely vanilla XP machine (zero updates, just basic boxed copy from release) to use on a fixed, open to internet static IP. I have done so myself, after my first XP machine borked
Re:More details please (Score:4, Interesting)
Proper software firewall, hand built firewall security policy i.e. all ports stealthed nothing goes in our out without asking (important as it enables you to see if you do get hit regardless of everything else). Essentially machine is autistic to the internet unless there's software running on it that is asking for connection. This weeds out most of the problems.
I followed up by going through process list and weeding out everything I didn't need. The windows notification process to (dysfunctional) WAU and so on. If it's not needed, disable it, as it's a potential vector.
Use a decent block list. I used peerguardian's malware/known botnet blocklist. It severely cuts down on number on potential infection sources and again, it lets you spot a potential threat that has gotten through as such software would likely start hitting known botnet addresses for control information.
Sane antivirus. Specifically one that isn't too sensitive, but isn't too aggressive. Check everything with it.
Reasonably updated internet facing software. That's browser, mail software and so on. It may also help to sandbox these with something like sandboxie (I didn't bother because I kept them up to date and felt that was enough, now that I no longer do so on this machine I sandbox the browser and email software).
Effectively a mix of sane security policy, locked down machine and common sense. What most people appear to not understand on /. is that windows being vulnerable isn't the end of the world, nor is it a guarantee of infection. You still need an infection vector and infection source in addition to vulnerability to get infected, and locking those down is often enough, as long as you're not someone like Valve who is going to get hit by specifically tailored directed attack, you're going to be fine. Or at least much better off than someone who's all updated but doesn't secure infection vectors or infection sources.
Re: (Score:3, Insightful)
Re: (Score:2)
They explain why it doesn't have to.
The drive to update for sake of updating is an expensive one.
Re:No Sympathy (Score:5, Interesting)
Re: (Score:3)
Re: (Score:3)
#4 does... Namely legacy reasons.
I have a perfectly fine multipage scanner here that doesn't have drivers for Windows 7 and the manufacturer is out of business. You do know that Windows 7 implemented driver signing right? So even if you do find a legacy driver it probably won't start because it won't be signed. And don't give me this "Linux is your route" because no driver exists for it there either. So my choices are toss a perfectly working, expensive at the time and in demand scanner just to update from a working OS to one that doesn't or stick with what is working.... Hmmmm Hard choice that one.
It would have helped if you mentioned brand and model. Perhaps people could have helped you out...
Re: (Score:2)
The fact that you think that #2 and #3 are the same thing shows a massive level of ignorance of IT, to the point where I have a hard time seeing how we could have any kind of argument on topic of IT security without you taking at least a few basic courses on IT security.
Planned obsolescence (Score:4, Interesting)
"Tried" several times to patch an error but "couldn't". "Coincidence" that it is planning to retire the platform. Smells a lot like planned obsolescence. Helps sell more junk products that become useless faster. Buy a new one!
Re:No Sympathy (Score:5, Interesting)
No, but you can bet there are people sitting on exploits waiting for the security updates to stop.
Once that happens, their exploits will never be fixed and they've got free reign.
Re: (Score:3)
version 6? That's Vista.
XP was 5.1 and 5.2
Re: (Score:2)
Yeah, let's throw away that perfectly good piece of kit because you don't like it.
Re: (Score:2)
As mentioned above win XP is nearing its end of life where it will not get anymore security updates. Software updates can be done without throwing away hardware. That's a good reason to change the software on the machine to something else: win 7, RHEL, SUSE, something.
Re: (Score:2)
Re: (Score:2)
In any case, something needs to be done to the boxes. If the software cannot be updated for what ever reason, they should be replaced. Leaving unpatchable xp boxes is not a good solution. I don't think you can call such boxes "perfectly fine" if they can't be updated to a secure solution. Unless, you have a strange set up with an unbreachable air gap that doesn't allow any networked connections, or physical media. If that were the case, they wouldn't care how long windows updates take as it would be impossi
Re: (Score:3)
Yeah, let's throw away that perfectly good piece of kit because you don't like it.
If it were perfectly good, there wouldn't need to be any updates.
Re:No Sympathy (Score:5, Funny)
Re: (Score:2)
Any car built in the last 50 years is capable of highway speeds. I assume that you are still driving the first car that you ever bought?
Re: (Score:2)
Any car built in the last 50 years is capable of highway speeds. I assume that you are still driving the first car that you ever bought?
Most people replace their cars every 5 years, the average life expectancy of a car especially in places where salt is an issue is 10-15 years. In places with high grades, which can put a heavy toll on the engine and drivetrain it's 8-12 years.
Re: (Score:2)
Re: (Score:2)
Re:another paid microsoft employee (Score:4, Insightful)
Is everybody stupid. XP is fast. Faster than all the current consumer grade PC OSes
I think that is what this patch... Sorry... BUG is supposed to fix.
Re: O(2â) should be avoided (Score:5, Funny)
And how exactly does Slashdot not have full Unicode support?
Past abuses of Unicode (5:erocS) (Score:4, Informative)
And how exactly does Slashdot not have full Unicode support?
Slashdot used to have at least some level of Unicode support. Then vandals discovered directionality override characters [slashdot.org] and used them to break the layout and spoof moderation. The admins responded by instituting a strict code point whitelist to prevent the use of directionality overrides and the use of characters that are more useful for Unicode art (the successor to ASCII art) than for English text.
Re: (Score:2)
Re: (Score:3)
Re: (Score:2)
They don't seem so bad when the first 10 iterations take a few ms.
Re: (Score:2)
How exactly does someone think a O(2â) algorithm is OK to check in?
It's magic. Repeat these magic words after me:
"It's just a temporary fix. We will replace it with something better after we meet the next deadline."
Keep saying that until you are reassigned to a different team or "decide to pursue interests outside of the company", and then it changes from a temporary fix to a permanent and immutable bit of legacy code.
Re: (Score:2)
It's OK to check in as long as you meet your deadline and it seems to work. Performance (esp. years down the road) isn't important. Do you think people buying computers at Best Buy are going to avoid your product because it's going to become ridiculously slow many years later? Of course not. So just throw in a crappy algorithm, it doesn't matter. It's not like this is a free/open-source OS where someone will fix it just out of academic interest. With commercial code, if there isn't a compelling busine
Re: (Score:2)
Slipstream (Score:2)
Where can I find a complete set of all the updates they have [...] without having to connect to microsofts update servers?
If you don't want to connect to Microsoft servers, why did you choose to use a Microsoft operating system? But if you insist, start your research with the words slipstreamed updates.
Re: (Score:2)
wsusofflineupdate ( www.wsusoffline.net )works well; use one machine to download everything, generate an ISO or USB key with the updates, and update offline.
Re: (Score:3)
This is built into their display list widget. How shameful past the early 1980s.
What are you talking about? Do you not realize that far superior sorting algorithms were invented as long ago as the 40s? Quicksort was invented in 1960, and mergesort was invented in 1945, for example. Being the early 1980s is no excuse for using crappy sort algorithms.
Re: (Score:2)
Re: (Score:2)
Why the F*** wasn't IE8 considered a critical update for XP?
Because too many organizations had web sites and ActiveX controls that depended on Internet Explorer 6 "features" removed in Internet Explorer 8.
Re: (Score:2)
That's what you get for buying Intel.... :P
Re: (Score:3)
Well, if they did it right they would be on SP5 or SP6 by now, since they should be releasing a new SP annually to roll up all the existing patches.
I seem to recall there being a demand for an SP4 at least two years ago due to the volume of updates post-SP3. I think the motivation wasn't necessarily SVCHOST but just the sheer download & install time for even new installs with SP3 slipstreamed in.
You would think this would also somewhat lighten the support burden and maybe even the burden on update serv