Microsoft has already reminded users of Internet Explorer (IE) 8, 9 and 10 that support for the browser ends today but it is thought that the affected versions still account for nearly 20 percent of the world’s web browsers. From today, Microsoft will no longer publish security updates and zero-day vulnerability patches for these old browsers, giving hackers an easy route to hijacking millions of computers worldwide.
The end-of-support deadline has been known for months, leading some cybersecurity experts to worry that hackers may have built up stockpiles of exploits and malware to use against the aging browsers from tomorrow. Craig Young, a researcher at security firm Tripwire, told the BBC: “It is safe to assume that cybercriminals have been stockpiling IE vulnerability information ahead of the support cut-off.”
Microsoft will continue to support the newest version of Internet Explorer, IE11, but this is only available on Windows 8.1 and 10. Data published last week by analytics firm Net Applications suggests that only 57 percent of Internet Explorer users are currently running IE11 with 339.2 million PCs worldwide reportedly using IE8, 9 or 10.
Security firm and antivirus software provider ESET warned of an impending “hot potato” security breach as a consequence of the end of support. ESET researcher Mark James said to the BBC: “No updates, no patches, no fixes, no new versions and no support options if things go wrong. This basically means it’s a hot potato and you need to drop it as fast as you can.”
It isn’t just old Internet Explorer versions that Microsoft is discontinuing today. Windows 8, released in October 2012, is also reaching official end-of-life status. Users of the old operating system version are being advised to take the free upgrade offer to Windows 8.1 as soon as possible, a newer version of Windows 8 that remains supported. Once Windows 8.1 is installed, computers will also be eligible for a further free upgrade to Windows 10, the newest version of Windows, but this is not compulsory.
Microsoft sees Windows 8.1 as a kind of traditional “Service Pack” release of updates for Windows 8. In line with Microsoft’s policy on Service Pack updates, users now have to upgrade to remain on a supported operating system as ignoring Service Packs is only allowed for two years.
Another old operating system biting the dust today is the embedded version of Windows XP, intended for use in industrial scenarios and devices with specific purposes such as cashpoint ATMs or self-service checkouts in shops.
Support for the mainstream editions of Windows XP ended back in April 2014 but Microsoft has given manufacturers more time to upgrade these vital devices to newer operating systems. From today, anything still using XP Embedded will also be at risk of hijacking and hacking though.
The changes are likely to be most hard-hitting in the enterprise environments where old versions of Windows and Internet Explorer continue to operate together. Companies often have software written specifically for them that may only work correctly on certain combinations of OS and browser, making any upgrade a serious technical challenge.
Despite the inconvenience to users, the death of these old browsers will actually end up being positive for the Internet in the long-term. Web developers frequently have to jump through hoops to get modern features running on older browsers, a chore that takes valuable development time but is currently still required due to the large number of people who keep using IE8, 9 and 10.
With the browsers no longer officially supported, developers won’t be so pressured to support them either though. Over time, more and more people will upgrade to the largely standards-compliant IE 11, Microsoft Edge or existing third-party alternative, giving coders more time to concentrate on adding new features without having to worry whether a particular animation or video player will work correctly in 2009’s Internet Explorer 8.
