Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5
22063 posts

Uber Geek
+1 received by user: 4683

Trusted
Subscriber

  # 1706801 21-Jan-2017 08:29
2 people support this post
Send private message

If the client will not update then they lose the functionality. Not hard to understand that.

 

The internet is not a nice place. Keeping support for insecure software just makes it worse for everyone. Look at the number of places that do not impliment best practice for email doing stupid things like ignoring SPF records making joejob attacks so functional. Reasons I have been given for that was because it blocked too many emails from their clients who were misconfigured. Putting ease of use ahead of security is how most of this mess has happened and just saying "Ok, keep using the old piece of crap because you dont want to upgrade" puts more people at risk of spam and phishing attacks etc. 

 

Get rid of the old software. If peoples businesses have not budgeted for IT replacement and they cannot afford it then they do not have a real business.





Richard rich.ms

'That VDSL Cat'
10203 posts

Uber Geek
+1 received by user: 2449

Trusted
Spark
Subscriber

  # 1706871 21-Jan-2017 11:56
Send private message

Spong:

 

yitz:
Spong:

 

Under WinXP, I've found Mozilla Thunderbird works well for Xtra email, and strangely Outlook 2010 doesn't. Newer Outlook versions won't even install under WinXP. However Outlook 2010 continues to work fine under Win7 or later. 

 

Thunderbird will be using its own cryptographic library while Outlook will be using the Windows Crypto API which for the Windows XP operating system may not support the required cipher strength / type.

 

 

 

This makes sense. However, can we trust Outlook 2010 to continue to operate with Win7 and XTRA mail? I have several clients with this combo, still working well. However, hio77 suggests Outlook 2010 is out...

 

 

@yitz's explanation lines up perfectly.

 

 

 

2010 i state due to what we have been informed as one of the known clients to have issues.

 

I have a bunch of stuff todo around the house this weekend, but if i get a chance i will happily fire up some fresh VMs load up some clients and use my testing accounts against them. Well outside of my job, however if i can provide clear proven examples then that will cut out these IFs.

 

 

 

The whole situation is not ideal but hey, at some point security does need to be taken seriously. Yahoo did not do this, look at all the Data leaks, the fact that their service was consistently breaking.. Moving forward it is for the best.

 

Yahoo email outages some days literally increase workload tenfold on the floor, i personally look forward to being on the SMX network and no longer facing this. Spark can look after the customers actually having issues a lot better when they are not chasing Yahoos tail every time problems arise.

 

 

 

SMX has already been put through its paces with the business email services, so i can say that as it stands at the moment the overall experience will be far better.

 

 

 

 

 

Can always say what if the process went through smoother no matter how little or large effect a change has caused but end of the day it has happened, Moving forward it is about correctly resolving issues.

 

 





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


 
 
 
 


753 posts

Ultimate Geek
+1 received by user: 174

Trusted

  # 1706884 21-Jan-2017 12:48
Send private message

richms:

 

If the client will not update then they lose the functionality. Not hard to understand that.

 

The internet is not a nice place. Keeping support for insecure software just makes it worse for everyone. Look at the number of places that do not impliment best practice for email doing stupid things like ignoring SPF records making joejob attacks so functional. Reasons I have been given for that was because it blocked too many emails from their clients who were misconfigured. Putting ease of use ahead of security is how most of this mess has happened and just saying "Ok, keep using the old piece of crap because you dont want to upgrade" puts more people at risk of spam and phishing attacks etc. 

 

Get rid of the old software. If peoples businesses have not budgeted for IT replacement and they cannot afford it then they do not have a real business.

 

 

 

 

This is all true, and any self respecting business won't be running Windows XP/Outlook/Xtra email.

 

However, there are a lot of people, particularly over 50's who are running just this combination. To simply be thrown in the deep end with no warning, and no clear way out was absolutely disgraceful in my opinion. Sure, it gives me more work, but Spark surely could have made this clear in advance, and still should be making it very clear to their customers. It seems they are still unaware of what actually works and will continue to work. 





Tivo upgrades to operate with the new OzTivo EPG, support and service. Over 300 performed here so far. See: www.hillcrest.net.nz


'That VDSL Cat'
10203 posts

Uber Geek
+1 received by user: 2449

Trusted
Spark
Subscriber

  # 1706894 21-Jan-2017 13:08
Send private message

Spong:

 

It seems they are still unaware of what actually works and will continue to work. 

 

 

in terms of support calls for this,

 

Agent's have very clear guidelines on how to handle this situation right now. 





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


389 posts

Ultimate Geek
+1 received by user: 51


  # 1706978 21-Jan-2017 13:47
Send private message

Is the Spark PR dept. still on holiday?

22063 posts

Uber Geek
+1 received by user: 4683

Trusted
Subscriber

  # 1706982 21-Jan-2017 14:20
One person supports this post
Send private message

Spong:

 

 

 

This is all true, and any self respecting business won't be running Windows XP/Outlook/Xtra email.

 

However, there are a lot of people, particularly over 50's who are running just this combination. To simply be thrown in the deep end with no warning, and no clear way out was absolutely disgraceful in my opinion. Sure, it gives me more work, but Spark surely could have made this clear in advance, and still should be making it very clear to their customers. It seems they are still unaware of what actually works and will continue to work. 

 

 

The warning came from microsoft many years back with the release of newer operating systems and killing support off for the old ones.





Richard rich.ms

14823 posts

Uber Geek
+1 received by user: 2008


  # 1707227 21-Jan-2017 21:18
One person supports this post
Send private message

Spong:

yitz:
Spong:


Under WinXP, I've found Mozilla Thunderbird works well for Xtra email, and strangely Outlook 2010 doesn't. Newer Outlook versions won't even install under WinXP. However Outlook 2010 continues to work fine under Win7 or later. 


Thunderbird will be using its own cryptographic library while Outlook will be using the Windows Crypto API which for the Windows XP operating system may not support the required cipher strength / type.


 


This makes sense. However, can we trust Outlook 2010 to continue to operate with Win7 and XTRA mail? I have several clients with this combo, still working well. However, hio77 suggests Outlook 2010 is out...



Microsoft is still supporting outlook 2010 until 2020 which is a long way away, so isps should still be supporting it. I don't know of any other email providers who aren't, are there any examples? There will be many businesses using it. Businesses don't tend to update to the latest software versions when they are released as it is an expensive excercise which they don't want you do each time a new version is released., unless there are new features. But it is not as though outlook has had killer new features for years.

If they were droping support for an old unsupported version, such the previous example of internet explorer 6, which Microsoft stopped supporting years ago, then that could be understood. But I can't understand the reasoning for doing it for software that isn't that old and Microsoft is still providing security updates for until 2020. Or have I missed something?

'That VDSL Cat'
10203 posts

Uber Geek
+1 received by user: 2449

Trusted
Spark
Subscriber

  # 1707231 21-Jan-2017 21:26
Send private message

Outlook 2010 seems to be in a rock in a hard place, does seem to be dependnt on system support for ssl versions.

So while it may work on a newer os, xp is out the door most likely.


If a business is still running on xp they have more security concerns than just their email.

I expect it is partly bunched in there due to mac 2011 not being supported. Easier to say 2010 is not supported than add little key conditions.




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


753 posts

Ultimate Geek
+1 received by user: 174

Trusted

  # 1707242 21-Jan-2017 21:42
Send private message

hio77: Outlook 2010 seems to be in a rock in a hard place, does seem to be dependnt on system support for ssl versions.

So while it may work on a newer os, xp is out the door most likely.


If a business is still running on xp they have more security concerns than just their email.

I expect it is partly bunched in there due to mac 2011 not being supported. Easier to say 2010 is not supported than add little key conditions.

 

As I stated in an earlier email, I've also found Outlook 2010 fails to work under WinXP with XTRA mail since last week but I have many clients currently using it within Win7/8/10 without issues. Since Outlook 2010 is still supported by Microsoft and is in very wide use, I think it would be most unwise to state "It's not supported". I don't think you'll find any other ISP with this hard-nosed attitude. 





Tivo upgrades to operate with the new OzTivo EPG, support and service. Over 300 performed here so far. See: www.hillcrest.net.nz


1358 posts

Uber Geek
+1 received by user: 319


  # 1707253 21-Jan-2017 22:14
One person supports this post
Send private message

It would be a lot easier for them to simply say the Windows XP operating system is no longer supported instead of referencing mail client version.

 

 

Dropping support for RC4 128-bit encryption and effectively Windows XP should have been communicated a lot earlier on.

 

 


'That VDSL Cat'
10203 posts

Uber Geek
+1 received by user: 2449

Trusted
Spark
Subscriber

  # 1707264 21-Jan-2017 22:59
Send private message

yitz: It would be a lot easier for them to simply say the Windows XP operating system is no longer supported instead of referencing mail client version. Dropping support for RC4 128-bit encryption and effectively Windows XP should have been communicated a lot earlier on.

 

 

 

agreed, suspect it comes down to what is easier to understand however.

 

 

 

RC4 support or email client versions. the later is a heck of a lot easier to explain to the non technical.





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


65 posts

Master Geek
+1 received by user: 7


  # 1707413 22-Jan-2017 13:22
Send private message

hio77:

 

yitz: It would be a lot easier for them to simply say the Windows XP operating system is no longer supported instead of referencing mail client version. Dropping support for RC4 128-bit encryption and effectively Windows XP should have been communicated a lot earlier on.

 

 

 

agreed, suspect it comes down to what is easier to understand however.

 

 

 

RC4 support or email client versions. the later is a heck of a lot easier to explain to the non technical.

 

 

 

 

So does this also mean Windows Vista (Mail app) has the same issue?


'That VDSL Cat'
10203 posts

Uber Geek
+1 received by user: 2449

Trusted
Spark
Subscriber

  # 1707417 22-Jan-2017 13:36
Send private message

Darwall:

 

 

 

So does this also mean Windows Vista (Mail app) has the same issue?

 

 

As far as i am aware, there is no issue with that app.

 

 

 

Have you spoken to the BB helpdesk about xtra mail issues with this particular client?

 

 





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


1358 posts

Uber Geek
+1 received by user: 319


  # 1707419 22-Jan-2017 13:38
One person supports this post
Send private message

No... Windows Vista and later operating systems will include support for AES encryption.

 

 

https://sslanalyzer.comodoca.com/?url=pop3.xtra.co.nz%3A995

 

https://sslanalyzer.comodoca.com/?url=pop.gmail.com%3A995

 

 

If you compare Gmail and Xtra, you will see Gmail maintains support for non-AES based TLS_RSA_WITH_3DES_EDE_CBC_SHA which will primarily be for compatibility purposes for older systems e.g. Windows XP.

'That VDSL Cat'
10203 posts

Uber Geek
+1 received by user: 2449

Trusted
Spark
Subscriber

  # 1707421 22-Jan-2017 13:40
Send private message

yitz: No... Windows Vista and later operating systems will include support for AES encryption. https://sslanalyzer.comodoca.com/?url=pop3.xtra.co.nz%3A995 https://sslanalyzer.comodoca.com/?url=pop.gmail.com%3A995 If you compare Gmail and Xtra, you will see Gmail maintains support for non-AES based TLS_RSA_WITH_3DES_EDE_CBC_SHA which will primarily be for compatibility purposes for older systems e.g. Windows XP.

 

 

 

As suspected, That's why i asked if there has been a case looked at for this.

 

 

 

Issue is most likely unrelated if there is a fault here





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


1 | 2 | 3 | 4 | 5
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Video game market in New Zealand passes half billion dollar mark
Posted 24-May-2019 16:15


WLG-X festival to celebrate creativity and innovation
Posted 22-May-2019 17:53


HPE to acquire supercomputing leader Cray
Posted 20-May-2019 11:07


Techweek starting around NZ today
Posted 20-May-2019 09:52


Porirua City Council first to adopt new council software solution Datascape
Posted 15-May-2019 12:00


New survey provides insight into schools' technology challenges and plans
Posted 15-May-2019 09:30


Apple Music now available on Alexa devices in Australia and New Zealand
Posted 15-May-2019 09:11


Make a stand against cyberbullying this Pink Shirt Day
Posted 14-May-2019 20:23


Samsung first TV manufacturer to launch the Apple TV App and Airplay 2
Posted 14-May-2019 20:11


Vodafone New Zealand sold
Posted 14-May-2019 07:25


Kordia boosts cloud performance with locally-hosted Microsoft Azure ExpressRoute
Posted 8-May-2019 10:25


Microsoft Azure ExpressRoute in New Zealand opens up faster, more secure internet for Kiwi businesses
Posted 8-May-2019 09:39


Vocus Communications to deliver Microsoft Azure Cloud Solutions through Azure ExpressRoute
Posted 8-May-2019 09:25


Independent NZ feature film #statusPending to premiere during WLG-X
Posted 6-May-2019 22:13


The ultimate dog photoshoot with Nokia 9 PureView #ForgottenDogsofInstagram
Posted 6-May-2019 09:41



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.