[E] Re: BIND 9 windows XP builds

[david.erickson at verizon.com]

One could argue the problem is Microsoft in general.  Problem is people don't take security seriously cause they don't think they could ever get compromised or hacked.  And then most of the ones who have already been compromised just ignore the symptoms thinking their old end of life system is just slow :)  But the Microsoft platform in general is the problem not just one single end of life platform :)  Unfortunately we definitely can't drop support for all of Microsoft lol


David Erickson
david.erickson at verizon.com

    

-----Original Message-----
From: bind-users [mailto:bind-users-bounces at lists.isc.org] On Behalf Of G.W. Haywood
Sent: Tuesday, April 18, 2017 10:28 AM
To: bind-users at lists.isc.org
Subject: [E] Re: BIND 9 windows XP builds

Hi there,

On Tue, 18 Apr 2017, Evan Hunt wrote:

> ... I wanted to find out whether there's a reason for so many people 
> to still be doing this -- even if it wasn't a very good reason -- 
> before I cut them off.

Personally I'm more than a bit surprised, and even a little offended that ISC still provides an XP build.  Running an XP machine connected to the Internet is like driving around town in an uninsured vehicle with no roadworthiness certificate.  It's irresponsible.  Those of us who manage mailservers and who take any kind of interest in the threat landscape will attest to the number of XP botnets still plying their obnoxious trade, especially (sorted by greatest volume in my mailserver logs first) from China, Vietnam, India and the USA.

Cut them off.  If, by being one more provider which drops support for a sociopathic menace, you tend to reduce the threat from it, then you will at least have the warm appreciation of hard-pressed and generally ill-appreciated mail administrators the world over.

If you don't already run 'p0f', then you might want to consider it to give you an idea of what's connecting to your servers.  I'd guess it will be more informative than any feedback you get from real users.
It wouldn't surprise me if most of the downloaders of XP builds that you're seeing are themselves bots.

-- 

73,
Ged.
_______________________________________________
Please visit https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mailman_listinfo_bind-2Dusers&d=DwICAg&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=CCYhX-wesopPi4FsQciZ3xyflA9MGaPBB1U-wtYiyPk&m=6RHxZm-CgsoYLk0mMG9jcccPTQI43o4UIXKbfV1bRa4&s=LSxm0JG1nBP9RUPnZQpZtTDCxs9Gl8JVGma1-C2v9a0&e=  to unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mailman_listinfo_bind-2Dusers&d=DwICAg&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=CCYhX-wesopPi4FsQciZ3xyflA9MGaPBB1U-wtYiyPk&m=6RHxZm-CgsoYLk0mMG9jcccPTQI43o4UIXKbfV1bRa4&s=LSxm0JG1nBP9RUPnZQpZtTDCxs9Gl8JVGma1-C2v9a0&e=