• PC World
• »Software
• »Operating Systems

By now you've probably installed Service Pack 2. That's good, but you still can't really let your guard down. That's why I've gathered up articles and a tip or two, to help you keep your hand on the security throttle.

But wait, you say you haven't done the deed? Folks, SP2 is the security upgrade you have to have--unless you're using Linux, in which case you're laughing your tuches off. [Editor: "tuches" is Yiddish for "posterior."] Spend a couple minutes with all my arguments for the upgrade in last week's newsletter, aptly named "SP2, The Upgrade You Need: Part 1."

Judging from the e-mail I get, many of you still haven't made the move to XP. If you're still using Windows 98, 98SE, or worse, the decidedly awful Windows Me, it's time to get with the program. Compared with any previous version, XP is more stable, uses memory more efficiently, and is simpler to use. If you're still on the fence, take my word for it and read "Thinking of Switching to Win XP? Read This."

Dig This: Watch this fascinating, and kind of chilling, 8-minute Flash "history" of the Internet through 2014.

Keeping Windows XP SP2 Updated Is Crucial

If you're up and running with SP2 and don't have XP's Automatic Updating feature active, you're taking too big a risk. Head for Control Panel, Automatic Updates, and set it the way I have mine: "Download updates for me, but let me choose when to install them." The simple reason is that updates seem to fly out of Redmond faster than my editor heading out the door whenever I ask for a raise. You don't want to miss any of them.

Quick Update Tip: When XP has an update for you to install, Automatic Updates will slam an icon in your System tray. It's a not-so-subtle way of informing you that upgrades are available to download and install. Click the icon and the dialog box that appears offers you the option of Express Install or Custom Install; I choose Express simply because it's easier and I don't have to make any decisions.

But here's the rub: On some XP updates, Windows wants you to reboot your system once the installation is complete. And like a pouty 3-year-old, it doesn't care what you're in the middle of doing. The Automatic Updates feature will keep reminding you to reboot until you're so aggravated that you throw in the towel, close all your open apps, and reboot. My recommendation? Wait till the end of the day before agreeing to take the update.

Critical Updates and Critical Articles

Stu Johnson talks about a gem of an SP2 flaw that has the potential to expose your shared files and folders to people on the Web. He also shows how to zap attacks that can arrive courtesy of JPEG files. Read "Stop Service Pack 2 From Leaking Data."

There are more details about the SP2 flaw in two other spots:

• PC World's "Microsoft Fixes 'Critical' XP Firewall Issue"
• A Microsoft page titled "Description of the critical update for Windows Firewall 'My Network (subnet) only' scoping in Windows XP Service Pack 2"

If you have Automatic Updates set to, well, automatically install upgrades (or even inform you that upgrades are available), you needn't worry. Microsoft released the fix for the shared files fiasco in December. OTOH, if you like to worry and want to make sure you're protected, grab the update on your own by heading to the Microsoft site.

There are three more SP2 update and security articles I think you ought to scan; they'll just take a few minutes and will keep you abreast of current problems and solutions:

• "Microsoft Issues Patch for SP2" deals with a patch for what's being called a "hidden app."
• "Microsoft Issues Special Patch for IE Hole" describes a problem with specific HTML tags.
• "Scammers Could Hijack Pop-Ups" tells you about a problem that all browsers face when confronted with certain types of pop-ups with phishing scams.

Had Enough?

Are you feeling a little overwhelmed with update and security hassles? Me, too. So how about my giving you a nudge towards Linux? First, read "A Walk on the Linux Side. It's an introduction to "The Linux Experiment," a story about Executive Editor Ed Albro's adventures with Linux.

Ed spent a month without Windows. While some of the Linux product version numbers may have been updated, the story's is still valid--and a page turner. (I know, both articles are a tad old. But hell, everything in computing that's been around more than a month is considered old.)

Next week? Some post-upgrade hassles people have experienced--along with solutions.

In addition to writing PC World's Home Office column, Steve Bass is the author of "PC Annoyances." Sign up to have Steve Bass's Home Office Newsletter e-mailed to you each week. Comments or questions? Send Steve e-mail.