Software can become unsafe to use when its developers stop supporting it. But some programs are more dangerous than others. Michael Britton reveals the security risks
In many ways, a favourite PC program has much in common with your oldest, comfiest pair of slippers – quick to slip into, almost always within arm’s reach, but unfortunately, not without the odd hole.
The solution to both a hole in your slippers and in your software is pretty much the same: a patch. But what if your favourite program is no longer being patched by its programmer? And that hole is therefore getting bigger by the day?
Perhaps the highest profile example of recent times is that of Windows XP. When Microsoft ended support for the operating system in April 2014, it instantly became a prime target for hackers. It will never receive another security update, but debates still rage about whether you can use it safely.
XP may be the best-known casualty in recent times, but there are scores of other popular programs whose loss of support hasn’t received that level of publicity. So here we highlight a few of these, and reveal whether it’s safe to keep using them, and which alternatives are available if not.
Microsoft Money
Abandoned on 31 January, 2011
Launched in 1991 for Windows 3.0, Microsoft Money gave users advanced tools to help them keep on top of their finances. Its popularity rocketed four years later when Microsoft renamed it Money 95 and, for two months, made it available as a free download. Microsoft stopped selling it in June 2009, and ended support 18 months later. It was replaced by Money Plus Sunset, which brought together tools from the entire series of Money programs (read more on Microsoft’s site: www.snipca.com/19606).
Security risk: Low
The biggest danger of running Money after January 2011 would have been using it to access online services. Thankfully, Microsoft did the decent thing and removed this function, making it safe to use Money on your desktop. It even works on Windows 10, as many of our readers have told us by email.
Try this instead: GnuCash (www.gnucash.org)
It may sound like a payday loan company, but free program GnuCash has been providing very powerful accountancy tools since launching in 1998. If you find it a little complicated, try BudgetSimple (www.budgetsimple.com) instead. There’s a ‘Plus’ upgrade for $4.99 (£3.45) a month, but we recommend sticking with the free Basic version.
TrueCrypt (http://truecrypt.sourceforge.net)
Abandoned on 28 May, 2014
For 10 years after it launched in 2004 TrueCrypt let you encrypt files, partitions and entire drives. But in May 2014 the TrueCrypt Foundation unexpectedly announced TrueCrypt’s that it would stop developing the program, and would leave security flaws unfixed (see screenshot below). Its reason was that Microsoft had ended support for XP a month earlier, and that file-encryption tools were built into Windows 7 and 8. This didn’t convince some sceptics, who accused the US National Security Agency (NSA) of forcing TrueCrypt to close because terrorists were using it to encrypt files.
Security risk: High
Whatever the truth behind TrueCrypt’s closure (frankly, the conspiracy theory seems unlikely), it’s no longer safe to use. Google’s security team identified even more flaws in September 2015. It’s just not worth the risk.
Try this instead: VeraCrypt (https://veracrypt.codeplex.com)
When support ended, TrueCrypt’s developers left instructions on the program’s website for moving your files to Microsoft’s BitLocker. But we’d suggest an alternative. BitLocker is a good way to encrypt files, but it’s available only in the Professional, Enterprise and Ultimate editions of Windows. Microsoft thinks it’s a good enough product to tempt users into upgrading from the Home version.
We recommend the free VeraCrypt, which has been built from the same code as TrueCrypt. It’s not the only encryption software based on TrueCrypt, but it does receive the most security updates, with the most recent arriving on 13 February.
Winamp (www.winamp.com)
Abandoned on 20 December, 2013
For many years after its launch in 1997, and particularly after AOL bought it in 1999, Winamp was one of the best ways to play music. The program made it very easy to create playlists from MP3s. But then along came music-streaming services like Spotify, which provided the kind of convenience Winamp couldn’t compete with. In December 2013, AOL said it would close Winamp, but a month later sold it to Radionomy, a hub for internet radio. There have been no developments since. Visit Winamp’s website and all you see is a lonely llama and the promise of “more coming soon”.
Security risk: Low
Winamp is still supported, but there’s no sign of a new version. Until one appears, it’s probably best to leave it alone. There are lots of good alternatives.
Try this instead: MusicBee (http://getmusicbee.com)
A flexible, free music player with all kinds of useful options for setting up playlists and more.
Microsoft Security Essentials
Abandoned for XP on 15 July, 2015
For a few years after launching in 2009, Microsoft Security Essentials (MSE) offered protection for Windows XP, Vista and 7. But it was replaced by Windows Defender in Windows 8, and the XP version no longer receives security updates.
Security risk: High
In September 2013, Microsoft said that MSE offers only “baseline” support. That came as no surprise to us because the program had often performed poorly in the antivirus tests carried out by Dennis Technology Labs. Even before Microsoft ended support for MSE in XP we had been advising you not to use it.
Try this instead: Kaspersky Internet Security
Microsoft may want you to use Windows Defender, which works in Windows 10 (www.snipca.com/19599) as well as in 8, but you should really stick with one of the specialist antivirus companies. Kaspersky has been the best performer in our tests over the past few years, but there are good free alternatives too, such as Avast (www.avast.com).
Windows Media Centre
Abandoned on 2 May, 2015
Letting you stream videos, music, photos and even live TV from your PC to any other connected computer or TV in your home, Windows Media Centre (WMC) was great in its prime. However in 2009 Microsoft moved the WMC team on to other projects, and from that moment its days were numbered. It was officially killed off in May 2015 when Microsoft said it wouldn’t be in Windows 10. When a PC upgrades from Windows 7/8 to 10, WMC is removed during installation.
Security risk: Medium
Media centres involve opening your PC up to traffic from other PCs in order to function. While it’s unlikely that a well-protected home network could be hacked from a media server alone, we’d advise against using an unsupported one.
Try this instead: Plex (https://plex.tv)
Plex is a fantastic media centre that can stream video, music and photos from your PC to a connected smart TV or internet TV box.
LimeWire (www.freelimewiredownload.net)
Abandoned on 27 October, 2010
At its peak LimeWire was one of the world’s most popular peer-to-peer file-sharing programs. It became a victim of its own success in 2010, when US record labels took the program’s developers to court, accusing them of encouraging people to illegally share music. A US judge ordered LimeWire to disable all “searching, downloading, uploading, file-trading and/or file distribution functionality”, effectively killing the service.
Security risk: High
You can still use early versions of LimeWire, but it’s not a good idea. Unsupported programs are always risky, but file-sharing tools especially so because you run a high chance of downloading malware. If it’s still lurking on your PC forgotten, uninstall it now.
Try this instead: WeTransfer.com (https://www.wetransfer.com)
WeTransfer offers a much safer way of sharing large files - up to 2GB without even registering. Just upload a file, then email a secure link.