Feeds

MS and Symantec spar over ‘hoax’ Windows Y2K email

Hoax alerts users to an 'unrequired' mod that MS nevertheless 'recommends'

  • alert
  • submit to reddit

Security and trust: The backbone of doing business over the internet

When Microsoft and Peter Norton's people do not agree on a Y2K issue, whose side will you be on? Just this situation developed when anonymous chain emails recently warned of a Y2K problem right in the heart of Windows default date format. The mails claimed that the "short date format WILL NOT rollover in the year 2000. It will roll over to 00". According to the mail, this may have consequences in actual application software in millions of systems worldwide. Although the mails I've seen were not rude or faked, Microsoft calls those mails "hoax" in a page on the Microsoft site. The page is titled Windows 95, Windows 98 and Windows NT Year 2000 e-mail hoax and quotes an email similar to the ones I received, albeit slightly more anti-Microsoft. Putting forward a list of "Facts about Windows 95, Windows 98, Windows NT and Y2K," Microsoft says the two-digit format is a display-only format, has no effect on the stored data, and that changing the year setting to four-digit and curing the date format situation "are not required actions and do not have to be performed in order to obtain compliance". In another page, introducing Y2K issues, Microsoft bundles up the Y2K email with virus email, and urges home and small business users to "delete it or report to the sender's Internet Service Provider". Unfortunately, although it was supposedly widely distributed, Microsoft could not give me an example of an actual email message that contained the Y2K date format message and was maliciously infected. Giga Information, which backed Microsoft on this issue, was not able to forward an actual mail message either. I did get a couple of such mails from users, and those I checked did not include any malicious code. They were simply messages, perhaps uncomfortable to Microsoft, but not viral. It gets better. The phenomenon the mail describes, and Microsoft denies, is quite familiar to many users of Norton 2000 -- as is the procedure to fix it. Like the "hoax" email, Norton 2000 -- a Symantec Y2K diagnostic application -- warns the user against having two-digit year dates in the Windows short date format found under Regional Settings in Windows' control panel. Like the "hoax" email, Norton 2000 suggests changing this format. I asked Symantec's people for their reaction to Microsoft calling a Symantec-recommended, Norton-branded procedure a "hoax". "As is often the case, they are mincing words quite fine," said Colleen McKenna of Symantec. McKenna further noted that even at the end of its "hoax" statement Microsoft explicitly recommends adjusting the same date format, an action described on the same Microsoft page as "unrequired". Symantec's people insist the issue may have a very real effect on data export/import from databases, spreadsheets etc. "Norton 2000 recommends expanding the year in this format to four digits, and for good reasons. Namely, to avoid ambiguous dates in reports generated by Microsoft Office programs, which can be used in transferring data to other systems which will disambiguate them in an unintended way." I did a little experiment myself, exporting and re-importing data from Microsoft Excel with the clock set to a future date, and indeed some actions lead to corruption of data. The core of the matter seems to be Microsoft's definition of Y2K compliance, which is not universally shared. "Microsoft's definition of Y2K compliance seems to cheerfully accept ambiguous dates," said a Symantec spokesperson. "The raison d'etre of Norton 2000 is to make the user aware of such issues, regardless of whether or not the software in question technically complies with the vendor's definition of Y2K compliance." Microsoft's representatives in Israel insisted that the concern is unjustified, and that by "hoax" Microsoft really meant not that the email alert was wrong in itself, but that it was wrong in creating a nonchalant attitude. That kind of attitude, warned one Mr Weisfeld, in charge of Y2K readiness in Microsoft Israel, may make users wrongly assume the control panel date format is the only thing needed to be fixed in Windows, and having fixed it, that they're all set to cross Y2K. Instead, he strongly recommended using Microsoft's special CD or following procedures recommended in Microsoft's Y2K site. "Our system is already Y2K compliant", he said, "but you can improve your Y2K compliance by using the special CD, which carries out some minor fixes." (Register quote of the week? -- Ed) According to Weisfeld, those minor fixes include a problem in Wallet, an e-commerce component of Explorer which currently won't accept "valid until" credit card dates later than 1999. Oh, and another minor thing -- it fixes the control panel date format problem too. ®

New hybrid storage solutions

More from The Register

next story
Hey, Scots. Microsoft's Bing thinks you'll vote NO to independence
World's top Google-finding website calls it for the UK
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
Apple CEO Tim Cook: TV is TERRIBLE and stuck in the 1970s
The iKing thinks telly is far too fiddly and ugly – basically, iTunes
Phones 4u website DIES as wounded mobe retailer struggles to stay above water
Founder blames 'ruthless network partners' for implosion
Found inside ISIS terror chap's laptop: CELINE DION tunes
REPORT: Stash of terrorist material found in Syria Dell box
OECD lashes out at tax avoiding globocorps' location-flipping antics
You hear that, Amazon, Google, Microsoft et al?
Show us your Five-Eyes SECRETS says Privacy International
Refusal to disclose GCHQ canteen menus and prices triggers Euro Human Rights Court action
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.