New vulnerabilities can still be discovered. And if an especially nasty one pops up they very well could run a campeign, using that new exploit, to target that OS version.
Comment on Your Windows 10 PC will soon be 'junk' - users told to resist Microsoft deadline
M0oP0o@mander.xyz 10 months agoI would say its a more mixed bag for most consumer level end users. On one hand yes, no more updates. On the other hand, no more new vulnerability and day 0 exploits. I think the risk is also mitigated a but by now using a non standard OS. Unless someone is targeting this user individually who is running anything targeting windows 8 (Most would target the biggest pool of users)?
For an organization, yeah big risk. For some person? eh, just back up often and make sure your two factor etc. is working.
Lightor@lemmy.world 10 months ago
M0oP0o@mander.xyz 10 months ago
Happen to have any examples in the last 5 years? Because I see lots of fear mongering but have not seen or heard of a non scam/phishing attack in years.
Lightor@lemmy.world 10 months ago
First off, saying that a system will never have a new vulnerability discovered is beyond naive. It’s the whole reason LTS versions of products exist. To be on a version that constantly is kept up with as new vulnerabilities are discovered.
And sure. Here’s a list I found after 10 seconds of research. www.cvedetails.com/…/Microsoft-Windows-8.html?pag…
M0oP0o@mander.xyz 10 months ago
First off, saying that a system will never have a new vulnerability discovered is beyond naive. It’s the whole reason LTS versions of products exist. To be on a version that constantly is kept up with as new vulnerabilities are discovered. Just because you don’t see them and don’t run in those circles doesn’t mean they don’t exist. So saying something like “there won’t be any new vulnerabilities” is just wrong.
I never said that.
I am asking of the vulnerability used on end users not a list of what white hats have found. (My argument is not that these old OS are safe just not the OH GOD levels of unsafe).
Dra@lemmy.zip 10 months ago
Windows 8 does not constitute a non standard OS. It was at one point in this category, and the majority of successful system compromises have been from older software. This is a big risk to an invividual.
M0oP0o@mander.xyz 10 months ago
Windows 8 is currently 0.32% of the user base according to this https://gs.statcounter.com/os-version-market-share/windows/desktop/worldwide How does that make it a non standard OS in the past but now standard?
People fear getting targeted by some hacker out of a 90’s movie but this is not the reality today. Users are mainly phished and scammed today because that is what gets the most money with the least effort. I still have yet to hear of any campaigns to use exploits for individuals because sending out millions of fake ransom emails does the job better then actually compromising a user for a fraction of the work.
The other part of this that bugs me is the assumption of safety in new software, that is just not true. People need to backup things they care about and not assume everything they do online has no risks. Your best defence for say; online banking is to simply be vigilant and talk to your bank if something looks wrong. If you have a credit card it comes with insurance for this very reason.
Dra@lemmy.zip 10 months ago
Because much malware already out there utilises existing exploits - so its market share is irrlevant.
M0oP0o@mander.xyz 10 months ago
Not market share. One singular soild example.