@CrankTh3musicUP :)
XP Service Pack 3 contains about 1,073 patches/hotfixes. Of the 1,073 included updates, 114 are for security-related issues. The remainder are updates to performance & reliability, bugfixes, improvements to kernel-mode driver modules, and many BSOD fixes.
Windows XP SP3 adds the following:1) New Activation Scheme (30 day usage without product license key without activation)
2) New Network Access Protection Module (NAP) for "enforcing compliance with system health requirements"
3) Black Hole Router Detection Algorithm
4) Microsoft Kernel Mode Cryptographics Module
Additional Notes:1) XP SP3 will also support FIPS 140-1 Level 1 cryptography implemented as a DLL at kernel level, opening up new algorithms to developers via the Kernel Mode Cryptographic Module.
2) Network Access Protection module, which allows network administrators to establish policies that ensure each attached XP machine has a high enough health level. Health levels can be based on any combination of antivirus signatures, firewall and port settings, and the current update status of the PC according to Windows Update. When an XP machine attempts to contact the network, it must pass a health test. If the system fails, the network can prevent or restrict access.
3) When installing it replaces and backs up 2,848 files (456 MB) to C:\WINDOWS\$NtServicePackUninstall$
As before it also archives the SP3 itself in C:\WINDOWS\ServicePackFiles\i386 2,921 Files (552 MB).
For a list of fixes that are included in Windows XP Service Pack 3 go here:
www.support.microsoft.com/kb/946480/Comments:Windows XP with SP3 (except for Volume License Editions) will be tracking your hardware configuration in much the same way that Vista does, which could lead to your computer being disabled in the event that you change out fundamental components such as your motherboard or processor.
The hardware tracking in Vista and that's now going to be in XP SP3, is a real drag for people like me who use VMWare. Sometimes moving a VMWare image from one machine to another (One of the big benefits of VMWare), causes Windows to cry out for reactivation.
NAP is a policy compliance feature coming from Windows Server 2008. Basically, NAP use three different "enforcement" mechanisms. One is DHCP based. The client simply does not get a proper lease. One is IPsec based - the client does not get the proper material to negotiate IPsec security associations. And the third is 802.1x-based - the switch won't open the port to the correct network until the client is considered good.
As you can probably tell, the DHCP based "enforcement" is extremely weak. The user on the client, or some piece of malware, can simply configure a valid IP address and go to town on the network. 802.1x can be easily defeated by installing a hub in front of the switch, letting a legitimate client open the switch port, and then stealing the port by setting your MAC address on a rogue host on the same hub to the same address as the legitimate client. The IPsec enforcement is considerably more difficult to circumvent, but you can still do it by making the NAP client lie.
NAP still relies on the client to tell the Network Policy Server (NPS) what its state is.
If the client lies, the NPS server has no way to know the difference, and will trust it. NAP does NOT provide "Secure Access Control" to the network and NAP cannot prevent malicious clients from getting on the network. NAP also cannot prevent a malicious client from communicating with any other computer on the network. I'll leave you to decided what you think about NAP... Anxiom, "asking the drunk if they are drunk".
WARNING:1) Before installing the XP SP3 service pack on AMD CPU PC systems go to a command prompt and run:
sc config intelppm start= disabled2) There's also a compatibility issue between Microsoft Dynamics Retail Management System (RMS) and Windows XP SP3 as of June 03, 2008.
3) Adobe has confirmed that Version 9.0.115.0, included with XP SP3, is vulnerable to the ongoing attacks. Just update Adobe's Flash Player released April 8 to v9.0.124.0
Recommendations:1) Before installing SP3, always backup your data (Acronis True Image Echo Workstation)!
2) There is also ISO-9660 CD image (different languages) for users who wish to create an update CD for Windows XP Service Pack 3, for example for offline installation by administrators here:
www.microsoft.com/downloads/details.aspx?FamilyID=2fcde6ce-b5fb-4488-8c50-fe22559d164e&DisplayLang=en3) It's a good idea in this situation to disable any security software before installing SP3. If you do not, it is possible that you will get various kinds of corruption during the installation.
4) Also you'll need to reset the
simultaneous incomplete outbound TCP connection attempts. As SP3 makes the default only 10 connections. It needs to be around 100 for bit torrent to work faster.
Message Edited by Fulong on
06-03-2008 05:54 PM