0Patch to support Windows 7 and Server 2008 R2 with security patches after official support end

[Karlston]

0Patch to support Windows 7 and Server 2008 R2 with security patches after official support end

Microsoft plans to end support for the company's operating systems Windows 7 and Windows Server 2008 R2 in January 2020. Enterprise customers may purchase extensions to extend support by up to three years and some other exceptions apply that extend official support.

 

Most businesses and all home customers won't be able to extend support officially. Security company 0Patch announced on September 21, 2019 that it will step in and "security-adopt" Windows 7 and Windows Server 2008 R2 to create and distribute security patches for these operating system versions after January 2020.

via https://blog.0patch.com/2019/09/keeping-windows-7-and-windows-server.html

The company has released so-called micropatches before to patch vulnerabilities in Windows and other products, and plans to use the system to provide security updates for Microsoft's operating systems once support ends officially.

 

Here is how the company plans on doing this:

1. Security updates that Microsoft releases for supported versions of Windows are reviewed to determine which might also apply to Windows 7 or Windows Server 2008 R2. 0Patch determines if the selected issues present a high-enough risk to warrant a security patch.
2. Company engineers inspect the updates then to determine if the vulnerability applies to Windows 7 or Windows Server 2008 R2 as well.
3. If the vulnerabilities affect these versions of Windows, 0Patch will create a proof of concept or use an existing one if it has been published by security researchers for testing.
4. The engineers will then use Microsoft's code that patches the vulnerability or code by others to port the fix to the unsupported operating system versions.

The patches are then released by the company and home and businesses administrators may install them on devices still running these versions of the Windows operating system.

 

The company is working on a centralized system similarly to WSUS for large organizations to help with the organization and management aspects of patching a large number of devices.

Firstly, in order for large organizations to be able to use 0patch efficiently, we're developing a central management service (think WSUS for 0patch, but nice and fast) which will allow admins to organize computers in groups and apply different policies to these groups. Admins will thus be able to set up "testing" groups where new micropatches will be applied immediately, and subsequently have them applied to the rest of their computers with a few clicks (and of course, without users ever noticing anything). Naturally they'll also be able to un-apply any micropatches just as easily and quickly should they choose to. There will be alerts, graphs, reports, and drill-downs, and the very next step will be an on-premises version of 0patch server which so many organizations are asking for.

Windows 7 and Server 2008 R2 are used on a huge number of systems and there is little doubt that the numbers won't go down significantly in the coming three months. All home and business systems running these operating system versions will remain unpatched after January 2020 which could be disastrous if malicious actors find vulnerabilities to exploit.

 

While it happened before that Microsoft released patches for unsupported versions of Windows, the company has done so rarely and only for high-profile security issues

Closing Words

Businesses and home owners have multiple reasons for staying on Windows 7, at least for the time being. These customers may benefit from the patches that 0Patch plans to release once support runs out officially.

 

Relying on a third-party company to patch an operating system requires a level of trust. It is going to be interesting to see how 0Patch will handle the gigantic task and how it plans to address bugs and issues that are caused by the patches that it puts out.

 

 

 

Source: 0Patch to support Windows 7 and Server 2008 R2 with security patches after official support end (gHacks - Martin Brinkmann)

[mp68terr]

Not saying how long will 0Patch provide patches after m$oft stops its support for w7/server2008r2 (?).

[Karlston]

  On 9/21/2019 at 7:39 PM, mp68terr said:

Not saying how long will 0Patch provide patches after m$oft stops its support for w7/server2008r2 (?).

Expand  

 

  Quote

0Patch will support Windows 7 and Server 2008 for at least one year, but the market will ultimately dictate how long security of abandoned operating systems will last, Kolsek told us.

Expand  

 

Source: Windows 7 and Server 2008 Get 0patch Security Fixes After EoS (BleepingComputer)

[mp68terr]

  On 9/21/2019 at 7:42 PM, Karlston said:

0Patch will support Windows 7 and Server 2008 for at least one year

Expand  

One year, expected more. Leaked patched from the 'extensions to extend support' might be more beneficial for users.

[Karlston]

  On 9/21/2019 at 7:47 PM, mp68terr said:

One year, expected more.

Expand  

 

It does say at least one year.

 

IMO it'll be popular, $25 per year is a bargain... https://www.0patch.com/pricing.html

[zigzag]

It's time to update Windows 7 to another OS.

I know Microsoft  updates tacky lately but i rather trust Microsoft than some 3rd party company.

[RecursiveRegistrations]

  On 9/21/2019 at 10:46 PM, Karlston said:

 

It does say at least one year.

 

IMO it'll be popular, $25 per year is a bargain... https://www.0patch.com/pricing.html

Expand  

I wonder if someone will develop a medicine for this? 😆 Or has that already been done?

[frankl1n]

  On 11/25/2019 at 1:39 AM, RecursiveRegistrations said:

I wonder if someone will develop a medicine for this? 😆 Or has that already been done?

Expand  

patches will leak don't worry

[cosy]

There is nothing like " patches leak, this is a way MS does it do disguise what they want to do, not to contradict themselves on certain issues

[RecursiveRegistrations]

  On 11/25/2019 at 2:01 AM, frankl1n said:

patches will leak don't worry

Expand  

I hope so. I have submitted a patch request for activating Pro client at several places but none have answered yet.

[Karlston]

@monstertruckpa  Post hidden.

 

This product is commercial in nature. Requesting illegal material ("serial crack patch") is not permitted in this forum. From the forum Guidelines...

 

  Quote

Members are reminded to respect copyrights. As such, any links or posts containing illegal content are not permitted. This includes and is not limited to cracks, keygens, serials and "licensed" software materials. Requests for illegal materials are not permitted. Any content copied from elsewhere should include a source link.

Expand