Slashdot Mirror


Broadband Access Leading to Internet Breakdown?

TwistedSpring asks: "As bandwidth costs become cheaper and more people adopt cable or DSL over standard dial-up connections, the time it takes to distribute worms and other unwanted or malicious material (read: spam) across the Internet decreases. After noting the current surge in Internet worms and the so-called Darwinist evolution of these things into more and more powerful incarnations, I wonder: will the proliferation of broadband Internet access deal a serious blow to current freedoms on the Internet?"

"Spam, adware, worms and viruses are now able to propagate much faster than ever before. Worms are also growing bigger, more advanced, as it's possible to transfer more viral code in less time. It's as if slow dial-up lines acted as a kind of immune system that prevented effective propagation of worms and made DDoS attacks so much less significant.

I'm not only worried about viruses and spam levels. Part of the reason the MPAA and RIAA are taking such an interest in Internet activity is that file sharing has become so much easier with the availability of broadband, and as usual there are murmerings of regulation. Before the broadband revolution, the involvement of the MPAA and RIAA in Internet affairs was small, and their argument was less convincing.

As broadband grows, will regulation become necessary not just to prevent illegal distribution of copyrighted material but more likely to protect Internet users from themselves (we're already seeing ISPs adding spam e-mail filtering to their default services, for example)? Will the Internet fall in popularity as it becomes more and more frustrating and dangerous to use, or will we simply see a massive improvement in coding practices and more secure software?"

505 comments

  1. Broadband by Anonymous Coward · · Score: 0, Funny

    Broadband. What's it all about? Is it good, or is it whack?

  2. the time to distribute patches and fixes... by extra+the+woos · · Score: 5, Insightful

    Obviously, the time to distribute fixed and patches goes down as well. As does the ability to spread the word about things going around... I see the "always on" thing as more of a security risk than the higher speed, definately.

    --
    replacing it with NEW Folger's Crystals! (lets see if they notice the difference)
    1. Re:the time to distribute patches and fixes... by BigDuke · · Score: 4, Funny

      And remember don't use Outbreak ... oops I mean Outlook. Its not a virus its just a carrier!!

    2. Re:the time to distribute patches and fixes... by Anonymous Coward · · Score: 1, Interesting

      True that the time to distribute fixed and patches goes down, however the time to create these fixes/patches at best stay constant, at worse take longer to make due to the complexity of the worms/trojans/etc... This is because of the human factor can not be speed up, unlike the data transfer.

    3. Re:the time to distribute patches and fixes... by Ronny+Cook · · Score: 5, Funny

      Our company uses Outlook and it's perfectly sa%&^S#^M^?NO CARRIER

    4. Re:the time to distribute patches and fixes... by Anonymous Coward · · Score: 0

      I always called it Lookout....

    5. Re:the time to distribute patches and fixes... by Canberra+Bob · · Score: 4, Insightful
      And remember don't use Outbreak ... oops I mean Outlook. Its not a virus its just a carrier!!


      The scary part is that we find this comment funny because of the truth in it. M$ has been responsible for a disproportionate number of the worms going around through Windows INsecurity, and yet sadly they will be the first company approached for any legislation relating to this.

    6. Re:the time to distribute patches and fixes... by Cow007 · · Score: 2, Informative

      patches and fixes are useless beacause they come around after something happens after its already to late to prevent it. Im willing to bet that a large portion of the code in M$ Windoze is thoes patches and fixes. No number of patches fixes or anything can fix Windows.

      --
      411 Y0UR 8453 4R3 8310NG 70 U5!! -NSA
    7. Re:the time to distribute patches and fixes... by Draknor · · Score: 1

      Of course they will! Why fix security problems when you can legislate them away? It works for spam, it works for airlines (see the CAPPS II story on the front page right now), and it'll work for email viruses, too! :-)

    8. Re:the time to distribute patches and fixes... by Anonymous Coward · · Score: 0

      Your joke sucks...you must be gay...

    9. Re:the time to distribute patches and fixes... by Pfhreakaz0id · · Score: 1

      I have an exchange server at home and use outlook and have never had a virus/worm/trojan that infected anyone else or lost me any data. Am I THAT good or THAT lucky? All I do is run windows update, a firewall, and a free anti-virus program (AVG) that checks all email.

    10. Re:the time to distribute patches and fixes... by EvilAlien · · Score: 3, Insightful
      Disproportionate? Simple statistical analysis of threats, impact, etc, cannot do reality justice. If the MS monoculture represents a very dominant 90% of the desktop market, and monoculture factors into things as suggested, then you would expect the impact due to proliferation of threats targetted at the dominant population to be "disproportionate", regardless of relative insecurity. Why bother writing a virus targetting some obscure platform like MacOS? The "disproportion" of Linux servers detailed in recent reviews is easy to write off by the same sort of reasoning, so if we are going to even pretend to be rational while espousing the virtues of Open Source, then we must make clear arguments which are as devoid of bias as possible.

      The fact which most knee-jerk anti-Microsoft ranters try to avoid is that the patches and technology exists to very adequately secure a Windows desktop. The problem is users who refuse to do so.

      You want to see all hell break loose? Put Linux, which requires more clue to operate than Windows, on the desktops of 90% of the users. They'll all be autologging in as root, randomly running rootkits that look like useful apps, leaving restarded services on like portmap, telnet, and wu-ftpd.

      PEBCAK.

      'nuff said.

      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
    11. Re:the time to distribute patches and fixes... by Fuzzy+Bo · · Score: 1

      Outlook? I usually call it LookOut!

    12. Re:the time to distribute patches and fixes... by phoenix_rizzen · · Score: 1

      I think what he means is that Outlook (an MS product) is responsible for spreading more virii/worms/trojans than all the other e-mail clients combined. Hell, you group together MS Office products, and you'll probably find that they are the cause for the vast marjority of all security problems on Windows. That's the disproportionate part.

      You don't see a "Eudora patch of the week" or "Another exploit found in Pegasus Mail" or "Wordperfect users are forced to upgrade, yet again, to fix a basic security flaw" headlines.

    13. Re:the time to distribute patches and fixes... by HoneyBunchesOfGoats · · Score: 1

      If we want to see Linux on the desktop for less technically clued-in users, why not make the *BSD/OS X (Solaris too maybe) move of having a priveledged administrator account, and leaving root disabled by default?

    14. Re:the time to distribute patches and fixes... by div_2n · · Score: 3, Insightful

      "The fact which most knee-jerk anti-Microsoft ranters try to avoid is that the patches and technology exists to very adequately secure a Windows desktop."

      What, like shut down almost all retarded services that come preinstalled and turned on like IIS?

      "You want to see all hell break loose? Put Linux, which requires more clue to operate than Windows, on the desktops of 90% of the users."

      As opposed to auto logging in as adminsitrator by default as almost all Windows XP machines come loaded from OEM's?

      At least that lesson has been learned and Redhat et al should know better and make it extra difficult to set root to autologin and make root password requirements very strict while not so strict on the users so as to encourage them to use their non-root accounts.

    15. Re:the time to distribute patches and fixes... by antic · · Score: 1

      Compare the feature sets of Eudora and friends with what the Microsoft applications attempt. Maybe it's changed since I switched away from Eudora, but it didn't have read-responses, calendar/task sending and all the integration with Office that Microsoft's huge corporate clients want.

      --
      'Thats they exact same thing a banana wrench monkey.'
    16. Re:the time to distribute patches and fixes... by Pig+Hogger · · Score: 3, Funny
      Our company uses Outlook and it's perfectly sa%&^S#^M^?NO CARRIER
      Odd, he didn't SEEM to have broadband...
    17. Re:the time to distribute patches and fixes... by Kaboom13 · · Score: 3, Insightful

      IIS does not come turned on, and at least in XP pro it is not part of the default install. Furthermore, OEM XP installs normally don't have any user passwords period. If OEM's shipped Linux you can bet they'd set it up to run as root anyway, just to avoid the hassle of tech support when people can't figure out why the password box comes up when they want to install Bonzi Buddy. Add to that even if they did have a seperate root account, they'd have to set some sort of default password and most people would never bother to change it. You don't score points with the clueless by adding in more steps and hassle for security reasons they don't understand. That said, I run Windows at home, and with only the most basic precautions (and yeah I run as Administrator cause I'm lazy, and use Outlook cause it sinks with my PocketPC) I've never gotten so much as a virus or piece of spyware. Windows or Linux, it comes down to the users anyway.

    18. Re:the time to distribute patches and fixes... by james_in_denver · · Score: 1

      If this is all about virus and OS darwinism then bring it on. Let's see how Micro$oft does versus Linux. Do any of these windows users understand the seperation of OS space, and user space?.... I googled for an anti virus program for my RedHat box, and can't seem to find one at any cost. I wonder why that is?

    19. Re:the time to distribute patches and fixes... by Penguin+Follower · · Score: 1
      IS does not come turned on, and at least in XP pro it is not part of the default install.

      No, IIS has never been default on the non-server versions of Windows. However, prior to Windows Server 2003 (i.e. Windows 2000 Server, et. al.) IIS was installed by default. That is what the parent was refering to.

    20. Re:the time to distribute patches and fixes... by steeviant · · Score: 3, Insightful

      Strangely, Outlook Express is the most prolific propagator of email viruses, yet it has significantly less features than Eudora.

      It's not Outlook's PIM features that make it a handy target for virus makers, it comes down to a few 'features' of both Outlook and Outlook Express that virus makers use to their advantage.

      Microsoft do seem to be slowly catching on, and making modifcations to their applications, but it doesn't stop people using old versions.

      Handy features of Outlook & Outlook Express for virus makers:

      * Storing every email address in a handy database
      without any way to disable the feature

      * Not properly protecting the email address cache
      with encryption or any other method

      * Providing the ability to view rich HTML content
      including scripts and ActiveX inside the email
      program

      * Conveniently truncating file extensions from
      incoming attachments

      I'm aware that things have been done recently to prevent these kinds of attacks, but some of the misfeatures mentioned above are still in the latest versions of Outlook & Outlook Express.

      The reason that people pick on OE and Outlook is that they are the sort of mistakes that wouldn't have been made if security had been a priority when the applications were created.

      Simply put, in my experience Outlook and Outlook Express have demonstrated their lack of security by having features useful to virus makers, and by propagating email viruses with the help of clueless users. Many of the email viruses I have seen wouldn't have been spread if one or more of the features I mentioned was not present in the email clients used.

      Hope that helps to clear things up.

    21. Re:the time to distribute patches and fixes... by citdude · · Score: 1

      One word: monoculture. Having a monoculture is bad. Assume for a moment that only 50% of computers ran Windoze and that maybe 30% ran Mac OS X and the remaining 20% ran *nix/BSD. At worst, a virus could infect only half of the computers.

      In response to your second question: "Why would someone bother writing a virus targeting some obscure platform like MacOS?" One reason might be to prove that MacOSX is just as vulerable as Windoze. Same reason could be said for linux. In fact, I would like to see a virus for either platform just to see if it can wreck a tenth s much havoc as MSBlaster or sobig.F or welchia or any of the other recent viruses.

      Why do users wait to apply patches? Because they have a history of breaking things. If Microsoft made sure that they didn't break things, maybe people would upgrade sooner.

      From my standpoint, I can either use Windoze and need to deal with all the shit associated with it (BSOD*, viruses, difficulty using*, poor online support, etc.) or I can run Mac OS X and not deal with any of those problems (the computer has crashed on me 4 or 5 times in over 1 year and that was with the beta version of 10.3).

      Finally, if PEBKAC then how come problems don't exist between mac keyboards and chairs?

      -Scott

      *I borrowed a friend's laptop (XP! for those of you who claim that it's perfect) and tried to get it to mirror the display and I got a random BSOD followed quickly by a reboot when I didn't do anything that should have crashed the machine. Rebooted to try to figure out what was wrong; no luck it just BSOD on me when I tried doing anything in the control panel. I have never had a Mac running OS X do this to me. I look online and find no help. Maybe I don't know where to look, but it sure wasn't on MS's support forums. Eventually I found someone who figured out how to fix it, but let me tell you that I had more trouble trying to do 1 thing in XP for 6 hours than I have had with OS X for over a year. The difficulty using comes from the fact that I can do most things in OS X in few clicks as opposed to windows, that takes more even for someone who knows where they are going.

    22. Re:the time to distribute patches and fixes... by Anonymous Coward · · Score: 0

      Either because you're dumb, or because you're only finding free ones. Both would fit your definition of not finding them at any cost. They do exist. And some do cost money.

    23. Re:the time to distribute patches and fixes... by one4nine4two · · Score: 1

      Aren't most viruses propagated via files attached to emails which ignorant people download because they don't know any better? So we are to assume that just because people upgrade to broadband they are to read their email faster, or more often? I highly doubt the latter, and the former, while probably true, is a negligible difference, since we're merely downloading text (for the actual email anyway). So how exactly does broadband increase the proliferation of virii?

    24. Re:the time to distribute patches and fixes... by Welsh+Dwarf · · Score: 1

      If OEM's shipped Linux you can bet they'd set it up to run as root anyway, just to avoid the hassle of tech support when people can't figure out why the password box comes up when they want to install Bonzi Buddy.

      No they wouldn't, they'd just put the root password on a certificate in the box, like that the little manual can explain that 'to install applications, you need the password on the certificate'. Problem solved, users don't even need to know that root exists.

      Add to that even if they did have a separate root account, they'd have to set some sort of default password and most people would never bother to change it.

      Exactly how is this a problem, since a desktop machine doesn't come with ssh running by default?

      --
      Ask 8 slackers a question, get 10 awnsers (a citation, but I can't remember from who)
    25. Re:the time to distribute patches and fixes... by TwistedSquare · · Score: 2, Funny
      Outlook cause it sinks with my PocketPC

      Aha! Two Microsoft products sunk with one fell swoop?

    26. Re:the time to distribute patches and fixes... by pilsner.urquell · · Score: 1

      Windows IS a virus and should be removed immediately!!!

    27. Re:the time to distribute patches and fixes... by Anonymous Coward · · Score: 0

      Mod Parent Troll

    28. Re:the time to distribute patches and fixes... by LordBodak · · Score: 1

      The problem with the proliferation of broadband is no one will understand this tired old joke anymore :)

      --
      LordBodak's journal.
    29. Re:the time to distribute patches and fixes... by Junks+Jerzey · · Score: 1

      As opposed to auto logging in as adminsitrator by default as almost all Windows XP machines come loaded from OEM's?

      I'm going to go out on a limb here and justify this. With XP Home, there are only two real differences between normal and aministrator access. The former prevents write access to the "Windows" and "Program Files" directories, plus the root of C:\, and you cannot install or uninstall software.

      Let's say you have a new program you want to install. You switch to an admin account and install it. Then you go back to your normal account. Then you run it and all is fine, so you think. You spend twenty minutes setting the preferences to how you'd like them, and quit. The next day you fire up the program and none of your preferences are there? Why? Most people are going to have no clue. What happened is that the program was trying to write preferences to its directory, and not to "Documents and Settings\usename\Application Data." But you have no way of knowing which programs do this and which ones don't, until you install them and experiment. Once you find a problem, you have to uninstall, then reinstall to a folder that doesn't start with the string "Program Files," like "c:\Unsafe Programs." This is all a huge pain. I've been there, I've done this.

      Additionally, most settings are not shared between user and admin accounts, so you essentially need to configure things twice. Overall, it's another layer that just adds even more confusion to the complexity of owning a PC. Microsoft really screwed things up by semi-copying the UNIX-style here. It would have been better to have a simple "enter a password to install or remove software" layer, then only allow installers and uninstallers to touch c:\windows. Protect it the rest of the time. And it should be perfectly fine for an application to write into its *own* directory (but not other directories).

      So far, this has all been about usability, but really all you're protecting against is a program writing to c:\windows, as with most virii. If you're running a firewall, avoid Outlook, and run an up-to-date anti-virus package, then you're fine. You're always vulnerable to a trojan that simply deletes parts of c:\windows, but that's the case with an admin account to, because you switch to admin to install software anyway!

      The bottom line is that I think this adds more confusion than real protection. Some protection is obviously needed, but multiple accounts is not the way to go for home use.

    30. Re:the time to distribute patches and fixes... by randyyates · · Score: 1

      Get your head into the sunshine, dude. Outlook
      and Word alone have been major vehicles for
      viri and there is and will be no fix for this.

      The fundamental problem is that these
      applications allow a foreign user to take
      control of the local user's system, and as long
      as you use Outlook and Word, that's not likely
      to change in the near future.

      --
      --Randy
    31. Re:the time to distribute patches and fixes... by gnugrep · · Score: 1

      I remember a few years ago when MSFT was touting their latest "features" in Outlook. Adding html and vbscripting etc. There were quite a few researchers who were saying what a big mistake this is. It would just lead to an explosion in viruses and worms. Now that the obvious has happened, why isn't MSFT held accountable for something that was predicted at the time these "features" were released?

    32. Re:the time to distribute patches and fixes... by james_in_denver · · Score: 1

      The only anti virus tools I have seen for Linux are for detecting and disinfecting M$-Windows based clients either files on SMB shares, or for checking email attachments being forwarded to M$-Windows clients.

    33. Re:the time to distribute patches and fixes... by Anonymous Coward · · Score: 0

      A worm can be transmitted via any service which is vulnerable. No email necessary. If it has a port, it can be exploited if it is vulnerable.

      Email is another method, vbscript in a browser another (from a malicious website)

      Almost all ms products have these (either discovered or not yet discovered). Since the source isn't open, no one will ever close most of them until some kid in Europe finds one, builds an exploit, publishes it, then some script kiddie starts spreading it. Currently that's how most MS bugs are discovered.

      If the source was at least partially open, (to legitimate security people)security experts would be examining the code and telling MS what to fix before an exploit is published and damage done.

      This is the real reason for the "knee-jerk" anti
      ms sentiment you see. Those who know, understand that microsoft is creating more problems for the internet than all other vendors combined with their unreasonable closed mentality. So far about 98% of bandwidth swallowing, email server destroying worm problems are all the result of microsoft unwilling to cooperate with others to clean their code properly.

      They really need to hire a crack team of real security experts to clean their components one at a time. Pay the money, get it done.

      Most people just say "MS SUCKS!" and may or may not know why.

      l8,
      AC

    34. Re:the time to distribute patches and fixes... by BigDuke · · Score: 1

      In all fairness, the users are more to blame than the software producers.

      You wouldn't stick your finger into a electrical outlet if you didn't want to get shocked, right?
      Just don't use Outlook it if you care about security. Or disable the features that are risks. Here is a perfect chance for someone else to write that killer mail app which actually has security as a primary objective.

    35. Re:the time to distribute patches and fixes... by Anonymous Coward · · Score: 0

      I have an exchange server at home and use outlook and have never had a [NO CARRIER]

    36. Re:the time to distribute patches and fixes... by Anonymous Coward · · Score: 0

      Which one of your open source buddies told you that?

      Anti-Microsoft open source fanatics...

      I can't wait for Outbreak to be ported to Fedora...Then we can write cross platform virii and Anti-Virus companies will rule the world.

    37. Re:the time to distribute patches and fixes... by EvilAlien · · Score: 1
      I think you fail to comprehend the significance of a widely distributed target, i.e., the concept of monoculture contributing to widespread security issues.

      There is no fix for Outlook and Word being major propagation vectors in the past, however there are fixes for this in the future. The same is true for holes in any Open Source project. Unless the patch is applied, a vulnerablilty remains a vulnerability. The PEBCAK issue comes into play when users fail to be diligent about patching. If a Linux admin fails to patch, then we'd all call them a dumbass. When a Windows admin fails to patch, then we all call Microsoft a bunch of dumbasses for having released a patch that the admin didn't apply.

      Get the point now, or are you still blinded by looking into the sun?

      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
    38. Re:the time to distribute patches and fixes... by tc9 · · Score: 1

      Yeah, like your dad would be able to find the certificate in the box one year later. . .

    39. Re:the time to distribute patches and fixes... by Too+Much+Noise · · Score: 1

      Add to that even if they did have a seperate root account, they'd have to set some sort of default password and most people would never bother to change it.

      Here's a clue: set the root password to expire in 7 days and put a big note on top of everything in the box saying "You need to change the root password and set up a user for yourself, or you won't be able to log into your machine after 7 days. Please refer to section x.x in the user manual" - then have the manual walk them through the procedure of changing the password and the expire setting. Then, using cracklib+pam helps imposing good passwords and so on.

      the user is supposed to set up his/her machine before using - at the very least cabling it up. All this Windows laziness is only giving a dumbed-down picture of users as computer monkeys who can only click on pretty icons.

  3. Oh, god by Anonymous Coward · · Score: 0

    Here come the broadband jokes

    1. Re:Oh, god by Anonymous Coward · · Score: 0

      Here's some

  4. We are all here, aren't we? by ObviousGuy · · Score: 5, Interesting

    The web is in danger of nothing. More importantly, the Internet is more important to commerce than ever before.

    Unless a large, physical attack on the wires carrying all this data occurs, everything is pretty much A-OK.

    --
    I have been pwned because my /. password was too easy to guess.
    1. Re:We are all here, aren't we? by z0ink · · Score: 4, Interesting

      Actually, a few smaller attacks could be more damaging. Imagine if the location of NOC's across the US were exposed and attacks were carried out on them. Goodbye internet, hello 404 (if you're lucky enough to have a dns to attempt resolving domains).

      --
      Steal This Sig
    2. Re:We are all here, aren't we? by Epistax · · Score: 4, Funny

      It would have worked too if it weren't for you meddling kids!

    3. Re:We are all here, aren't we? by andynz · · Score: 5, Funny
      Correction. Goodbye US internet. The rest of us would be fine and dandy.

      We would be without Slashdot though. Good god, productivity could skyrocket!

    4. Re:We are all here, aren't we? by Anonymous Coward · · Score: 0

      The web is in danger of nothing. More importantly, the Internet is more important to commerce than ever before.

      Unless a large, physical attack on the wires carrying all this data occurs, everything is pretty much A-OK.


      That's your argument?

      Hiroshima was there on August 5th, 1945. That doesn't mean that it wasn't in danger

      We've already seen what happens when 9 root nameservers go down. How hard would it really be to take down all 13?

      Also, would someone please teach the SlashDot moderators what "evidence" is?

    5. Re:We are all here, aren't we? by DNS-and-BIND · · Score: 2, Interesting
      The Internet isn't a military, disruption-resistant network any more, and hasn't been for some time now. Most of the links go through the USA. Tracerouteing from Japan to the UK goes through America, etc.

      Good job with the knee-jerk anti-Americanism though. Always good for a few quick mod points.

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
    6. Re:We are all here, aren't we? by Anonymous Coward · · Score: 0

      Scoooooby-dooby-doooooooo!

    7. Re:We are all here, aren't we? by he-sk · · Score: 1

      Just because the routes from Japan to UK go through America right now (probably for performance reasons), doesn't mean that different routes do not exist. There are backup links all over the place (including the backbones), albeit not as speedy.

      --
      Free Manning, jail Obama.
    8. Re:We are all here, aren't we? by nicklott · · Score: 3, Funny

      Flights from Japan to the UK also go through the US... it's in the way.

    9. Re:We are all here, aren't we? by lucas+teh+geek · · Score: 0

      Who told you that? I know for certian that when i flew direct from nikita (tokyo) to heathrowe (london) it flew west, and i highly doubt that british airways would take the long way

      --
      TIAEAE!
    10. Re:We are all here, aren't we? by Anonymous Coward · · Score: 2, Funny

      don't laugh. A recent study has shown that reading slashdot at work was directly responsible for the tech slump.

    11. Re:We are all here, aren't we? by cpeikert · · Score: 1

      No they don't, and no it isn't.

      They go over the north pole or Canada, which *is* in the way.

    12. Re:We are all here, aren't we? by Anonymous Coward · · Score: 0
    13. Re:We are all here, aren't we? by eofpi · · Score: 1

      Actually, if you really want to be pedantic, it'd be Russia or the scandinavian countries.

      --
      Y'know, you blow up one sun and suddenly everyone expects you to walk on water.
  5. Depends on your definitions by dartmouth05 · · Score: 5, Interesting

    I suppose it depends on how you define the current freedom. I don't believe that it is going to lead to increased censorship. I don't believe it is going to lead to increased tracking or monitoring (although certainly other things, like the recent FBI/DOJ request for increased wiretapping ability may do just that).

    I think that it will lead to increased filtering on the ISP side of things. More ISPs will be using Spam Assasin and similar programs behind the scenes. Undoubtedly, some legitimate e-mails will be caught by these SPAM traps, and the end-user might not have access to them.

    Personally, since Dartmouth College starting running virus scanners and SPAM filters and the like, I constantly get e-mails where the "suspicious" file was automatically removed, and although most of those removals were viruses, I also lose legitimate files that are sent to me. As an end-user, I don't have access to change the settings or tell the system that a file is, in fact, OK. Instead, I have to e-mail the person back and ask them to resend the file to my AOL account.

    I suspect that as more people use cable and DSL and the malware increases, this behind-the-scene tinkering will increase.

    A serious blow to current freedoms on the Internet? I'm not sure. A pain in the ass? Absolutely.

    1. Re:Depends on your definitions by wampus · · Score: 1

      If you allow people to get those files, you get the problem where people are *sure* the file that someone sent them is important, because it said so in the email. So they allow it in and voila, worms.

    2. Re:Depends on your definitions by MagicDude · · Score: 4, Interesting

      Slightly offtopic, but I always wondered if it wouldn't be a better idea for virus checkers not necessarily to delete all viruses. Certainly, there are known viruses out there it could delete, but there are also files that the virus software has to make a judgement call on some file it has never seen before. Thus sometimes it ends up deleting useful files. Couldn't the software merely add a large red "WARNING - WE THINK THIS FILE IS A VIRUS. DON'T OPEN IT UNLESS YOU KNOW ARE EXPECTING THIS FILE AND KNOW WHAT IT IS" at the beginning of the E-Mail text so you know that something out there wants to make sure that you're being careful about this file?

    3. Re:Depends on your definitions by CajunArson · · Score: 4, Insightful

      The problem with this is that so many warnings will show up that users will ignore them anyway and get infected. My Linux email client always warns me before opening up attachments and I just click OK. Since there are not Linux email viruses out now, not a big problem. However, if there was one, the popup box would not help me since I instinctively click through it. This is not even considering an entire class of people (I like to call them Darls) that will intentionally try to open dangerous attachments. It really doesn't take a large number of Darls to screw up the fun for everybody.

      --
      AntiFA: An abbreviation for Anti First Amendment.
    4. Re:Depends on your definitions by iminplaya · · Score: 3, Insightful

      I believe it's already been proven that it doesn't work.

      ...will we simply see a massive improvement in coding practices and more secure software?

      This seems to be the only real workable and fair solution.

      --
      What?
    5. Re:Depends on your definitions by Trick · · Score: 1

      This isn't a function of the virus scanner. I'm not aware of *any* virus-scanning software that will delete a file for *seeming* like a virus. Either it matches a definition in a signature database, or it doesn't.

      If you're getting attachments stripped, it's more likely because your mail server admins have decided certain attachment types are viruses more often than not, and should be blocked outright whether they are viruses or not.

      The reason attachment type blocking is done, in most cases, is because you've got a group of users who's been told a million times "Don't open any attachment unless you are expecting a file and know what it is," but they do it anyway.

    6. Re:Depends on your definitions by s20451 · · Score: 5, Funny

      Warning - We think this file is a virus. Don't open it unless you are expecting this file and know what it is.

      [checkbox] Don't show me this message again

      --
      Toronto-area transit rider? Rate your ride.
    7. Re:Depends on your definitions by Epistax · · Score: 1

      At RIT the same system is used. Any email that has a .eml (I beleive, an outlook email file), .vba/s, .exe, .com, .scr and a few others are automatically turned into a text file saying it was replaced. Unfortunately the original message is also often turned into a text file saying it was replaced. I don't have too much of a problem with this system as most people know not to email executables. A simple rarring/zipping solves this security system, for better and for worse. I'd prefer the red flag method myself, except in cases when it is known to be a virus.

    8. Re:Depends on your definitions by thebigmacd · · Score: 1

      Um...heuristics anyone?

    9. Re:Depends on your definitions by JPriest · · Score: 1
      We use the same system, unfortunately I can't recall a single occasion where I needed to receive a .vba, .com, or .scr file. We send most files over Trillian but if we need to send it out via email we just zip it.

      PS. You might want to stop blocking .eml files.

      --
      Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
    10. Re:Depends on your definitions by hitmark · · Score: 1

      i leave that off for two reasons, to many false positivs and to heavy on the cpu...

      --
      comment first, facts later. http://chem.tufts.edu/AnswersInScience/RelativityofWrong.htm
    11. Re:Depends on your definitions by cynicalmoose · · Score: 1
      Your point about Spam Assasin removing legitimate emails is interesting. Let me give you an analogy.

      I'm involved in a Model United Nations. We get along about 200 delegates to represent different countries, put them in committees together, and watch the result. For no apparent reason, they are allowed to pass notes to each other, delivered by a team of willing helpers.
      Passing notes is free - the only cost is in writing the note. You can quite easily send as many notes as you need. There's no penalty for that.
      This is where it begins to look like e-mail, except without the ability to send bulk messages for the same cost as normal ones.
      The problem is that messaging is disruptive - people are coming in and out of committee rooms all the time. People lose concentration. For the people carrying the messages, the load can sometimes get quite extreme.

      So we have to look how to reduce that load. We've tried

      reducing the frequency of delivery

      telling people to stop

      every other method that doesn't reduce reliability

      Ultimately, none of these has worked. In the end, if you can't put economic costs on a service that works well, you have to cut its reliability so that fewer messages are sent. At the MUN, that means every so often, deleting messages in bulk from the system. On the internet, that means using things like SpamAssasin. That's really unfortunate, but there we are.

      --
      Exercise your right not to vote. thinkoutside.org
    12. Re:Depends on your definitions by FireFury03 · · Score: 1

      You are underestimating the stupidity of users... It would be interesting to release a email virus that comes in an email saying "I am a virus - do not open the attachment" in the body, attached under the name "virus.exe" and just see how far it spreads - it'd put money on it spreading fairly widely and rapidly.

    13. Re:Depends on your definitions by Welsh+Dwarf · · Score: 1

      the popup box would not help me since I instinctively click through it.

      Except that Linux e-mail clients never set the execute bit (at least none that I've heard of). This stops the system running that .jpg that just happens to have as it's first line #!/bin/bash
      --
      Ask 8 slackers a question, get 10 awnsers (a citation, but I can't remember from who)
    14. Re:Depends on your definitions by Oligonicella · · Score: 1

      Wrong, chum.

      A *model* UN is a trivial thing. Real, money-depending e-mails are not. DO NOT, DO NOT, DO NOT, delete *MY* e-mails. They are not your property to do so with. Would you do the same with the USPD? M'thinks not.

      By the way, my ISP used SpamAssissin. It doesn't work worth a crap. Flagged only half the spam, and flagged about 1/4 the non-spam. This forced me to have to *read* the e-mail anyway. Net gain? Irritation at SpamAssassin.

    15. Re:Depends on your definitions by ThosLives · · Score: 2, Insightful
      I can typically send myself executables, zips, and whatever else by making a copy, changing the extension to '.txt', then sending the renamed file . At the destination, just change the extension and run with it. I have always been amazed that Windows uses the extension to determine the content type.

      If your provider filters even '.txt' files, just pick something like '.let-me-pass', and I bet that would get through. 'Course, this works because you *know* you have to change the extension and such. I've had to resort to this to get around my work's filters.

      --
      "There are a dozen opinions on a matter until you know the truth. Then there is only one." - CS Lewis (paraprhase)
  6. Freedom? its a paradox by jeffmeden · · Score: 3, Interesting

    99% of the people you ask would say not having broadband would be the biggest blow to their freedom on the internet... unfortunately we have to take the good with the bad, or start kicking people off the net...

    1. Re:Freedom? its a paradox by Pikhq · · Score: 3, Funny

      Kicking people off the net? Sounds great! Let's kick the person who thought the CD drive was a drink holder off first!

      --
      echo "rm -rf ~/* ; echo "echo "Exit" ; exit" > ~/.bashrc ; exit" > ~user/.bashrc
    2. Re:Freedom? its a paradox by Neil+Blender · · Score: 2, Funny

      99% of the people you ask would say

      Ah, Slashdot: Home of the made up sweeping statement.

    3. Re:Freedom? its a paradox by mattkinabrewmindspri · · Score: 2, Insightful

      I hate to tell you this, but there are more than one person who think that's a cup holder. I talked to three during just 6 months as a tech support.

    4. Re:Freedom? its a paradox by JPriest · · Score: 1

      Dude, I think we should just get rid of IP and start routing only slashdot UID's. Think of the Linux market share!

      --
      Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
    5. Re:Freedom? its a paradox by FCKGW · · Score: 1

      You do know that 83% of statistics are made up on the spot, right?

      --
      It's an operating system, not a religion.
    6. Re:Freedom? its a paradox by Anonymous Coward · · Score: 0

      Gah, 93% of all people know that.

  7. Err Darwin? by taniwha · · Score: 4, Insightful

    Come on - the virus and worm anaology is a great one to make lots of ... but they aren't evolving under Darwinian survival of then fitest .... if anything it's more of a creationist sort of thing with rival gods throwing their latest creations into the world to battle it out with nature (ie the rest of us who provide the medium for them to live in) and each other

    1. Re:Err Darwin? by Anonymous Coward · · Score: 0

      . . . creationist sort of thing with rival gods throwing their latest creations into the world

      See Parents giving birth to a child

      . . . to battle it out with nature . . and each other

      Sounds pretty darwinisitic to me

    2. Re:Err Darwin? by taniwha · · Score: 1
      yeah but they can't/don't evolve. instead their creater sees what mistakes they've made, makes a new verion and releases it. Being created to be adaptable to different circumstances is not the same as evolving.

      Just wait untill someone genuinely codes some genetic algorithms into viruses - then we may really be in trouble ....

    3. Re:Err Darwin? by Anonymous Coward · · Score: 0

      No, Darwin is not the right choice of phrase, but his theory tends to get confused with the word evolution, as it is kind of a grey area. For instance, does the Linux kernel evolve with each release?

      It probably could be said to do so, as each release has been the result of several strains of ideas, with the best ones picked. Does it portray Darwinistic tendancies?

      Well maybe, it would probably be more Darwinistic if there were forks, and the best one picked through market tendencies.

    4. Re:Err Darwin? by Tablizer · · Score: 1

      Come on - the virus and worm anaology is a great one to make lots of ... but they aren't evolving under Darwinian survival of then fitest

      That would be cool, and scary, if such actually happened: a virus that purposely mutated and cross-bread such that more powerful versions would evolve and spread. X-Files, here we come....

      If you are going to go to jail over a virus, at least do something original :-)

    5. Re:Err Darwin? by Atmchicago · · Score: 4, Insightful

      Yes, until a worm can "mutate" randomly into different strains, and if some of these mutations prove to be beneficial, then we have Darwinian evolution. However, having it randomly change "if" statements to "while" statements, or other such changes, wouldn't work too well, and changing or adding other things most likely wouldn't get anything useful.

      --

      You can lead a horse to water, but you can't make it dissolve.

    6. Re:Err Darwin? by SillyNickName4me · · Score: 1

      And that is not entirely impossible to make actually. There is enough malicious code around that is modular in nature and when such programs use the same internal abi for their modules they could exchange modules and thus add entirely new functionality to existing worms. So far they only went as far as pulling new modules from the web or irc or such (on command often)

    7. Re:Err Darwin? by ball-lightning · · Score: 1

      Just wait untill someone genuinely codes some genetic algorithms into viruses - then we may really be in trouble ....

      I did research (albeit very simple) on GA's for my senior project, and while they are useful for many things, using them as part of a virus might not be as beneficial as you'd think. The virus would either have to have built in programming to interpret it's "genome", or; modify its own programming. For viruses that rely on buffer overruns and the like, it is unlikely GA's would be useful, since these types of attacks rely on specific bugs, and any change would probably hinder the virus. E-mail viruses would probably have the most to gain from GA's, instead of having a couple of form letters, (how many times have I seen e-mails with the subject "Details" or "Your details") viruses could "mutate" the e-mails they are sending out, as well as taking "genetic code" from e-mails in the user's mailbox.

    8. Re:Err Darwin? by JPriest · · Score: 1

      Are you trying to tell me that a virus will be the first true AI? Not likely.

      --
      Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
    9. Re:Err Darwin? by Shakrai · · Score: 1
      Are you trying to tell me that a virus will be the first true AI? Not likely.

      Didn't you see Terminator 3? Gessh.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    10. Re:Err Darwin? by TwistedSpring · · Score: 1

      I didnt mean quite like that, plus it wasn't me who originally drew this comparison, I just paraphrased it from various media sources. What I was getting at is that the worms are evolving because Crappy But Popular Worm gets released, someone takes that code and improves it or modifies it, releases their own worm based on the old one, and then someone else gets that worm and modifies it, improves it, etc. and the process snowballs. Evolution. Not survival of the fittest but propagation of the sneakiest.

    11. Re:Err Darwin? by Just+Some+Guy · · Score: 1
      Yes, until a worm can "mutate" randomly into different strains, and if some of these mutations prove to be beneficial, then we have Darwinian evolution.

      Since you put it like that, what's the major difference between random mutation and virus development?

      • Ultraviolet light causes random mutations - some h4xx04 makes random edits.
      • Some mutations are fatal and cause the organism to die - some code won't compile and gets replaced.
      • Weakening mutations inhibit propagation - weakening mutations inhibit propagation.
      • Strengthening mutations increase propagation - strengthening mutations increase propagation.

      The main difference is that random radiation from a nearby star is replaced by the soft glow of a CRT in some kids' bedroom. Other than that, they look pretty similar to me.

      --
      Dewey, what part of this looks like authorities should be involved?
    12. Re:Err Darwin? by Anonymous Coward · · Score: 0

      > However, having it randomly change "if" statements to "while" statements, or other such changes, wouldn't work too well, and changing or adding other things most likely wouldn't get anything useful.

      That's exactly analogous to what happens in biology, and why most mutations kill their hosts - the mutation's not viable. Only a very small percentage enable the host to do better in the current environment; the rest do nothing useful or are harmful.

  8. More mod abuse by Anonymous Coward · · Score: 0, Offtopic

    I need to verify this, but it appears that users with a very low uid can move their post above other posts. Mods then go through and mod comments below this upgraded comment that say something similar as Redundant. This causes this low uid person to appear as if they thought of the idea and get the visibility and mod points for it, but in fact THEY STOLE THE COMMENT! Has anyone else found this to be the case?

    There is also a group of idiot mods running over the threads modding anything they dont understand as Troll. There have been some very intelligent comments recently that have been modded as Troll, purely because the mods either didnt get the joke, or the post does not follow the slashbot groupthink.

    How many others have been experiencing the above mod abuses recently?

    1. Re:More mod abuse by Anonymous Coward · · Score: 3, Funny

      You must be new here.

    2. Re:More mod abuse by Anonymous Coward · · Score: 3, Funny
      I fear it is worse than that.

      I need to verify this, but it appears there is an epidemic of of conceited self-victimizing individuals who tragically suffer from grand, paranoid delusions about their posts being intelligent yet relocated.

    3. Re:More mod abuse by Anonymous Coward · · Score: 0

      Isn't.. that.. the cornerstone of slashdot?

      I mean, in the few years I've been around nothing's changed..

    4. Re:More mod abuse by Anonymous Coward · · Score: 0

      Did you know that Microsoft was responsible for the Black Plague that killed millions in medieval Europe? It was originally known as the "Black Screen of Death" plague.

  9. Film at 11... by douglips · · Score: 3, Interesting
    1. Re:Film at 11... by Anonymous Coward · · Score: 0

      That thread was classic.

  10. Is the problem the "how" or the "with what" by MrChuck · · Score: 4, Interesting
    As I see it, it's that the users are using Windows, not that they are coming in high speed.

    While unix boxes went through 25 years (since ARPA contracted UCBerkeley to make this "TCP" thingy) of evolution on networks that were, in retrospect, pretty safe.

    The Morris Worm in '88 woke a lot of us up, but we've known for decades about "doors" and "locks" and such.

    Windows is/was/and will be a consumer operating systems whose main impetus is features to push sales. Security hasn't appeared to be on their radar screen except as a check box ("did you think about security?" Um, yeah. "Good enough for us. Ship it").

    I'm getting hammered by spam and worms and EVERYTIME I nmap back to the sender (okay 0.001% of senders, randomly chosen as I get pissed off), it's a windows box.

    I love broadband.

    I love VOIP to mom and video and streaming stuff to relatives (all legal)

    I hate the bad neighbors running windows. The metaphorical slaughterhouse next door.

    1. Re:Is the problem the "how" or the "with what" by furiousgeorge · · Score: 5, Insightful

      >>As I see it, it's that the users are using
      >>Windows, not that they are coming in high speed.

      Ahh..... bullshit.

      Most of the worms and trojans and crap that are going around lately are all user spawned. They haven't crawled in through a remote exploit. They've been emailed to/downloaded by some genius who will execute any damn thing. I swear, these people would probably pick up a used syringe off the ground and jab it into their own arm to see what would happen.

      Do you think it would be any different if the world was all running Linux? Or Solaris? Or MacOS. Please - stupid people will be stupid no matter what OS you put in front of them. It isn't going to change anytime soon.

      >>I'm getting hammered by spam and worms and
      >>EVERYTIME I nmap back to the sender (okay
      >>0.001% of senders, randomly chosen as I get
      >>pissed off), it's a windows box.

      Geee --- and what percentage of computers out there are windows boxes? What a shocking correlation.

    2. Re:Is the problem the "how" or the "with what" by Anonymous Coward · · Score: 0

      Once again, one is forced to play the 'what if' card.

      You're blaming the current state of the internet on the number of compromised windows boxes out there, If Linux was the majority operating system out there do you think things would be much better? Granted, security through obscurity is never as large a part of the argument as people make it out to be, but linux isn't bulletproof either, and when a security hole IS discovered and there's a patch to be downloaded, I'd sure as fuck rather the internet had a big shiny 'Linux update' icon to click on other than relying on them to go looking for a support from a vendor that might not even exist anymore, or having to download a diff to patch their kernel with.

      To put it simply, if it were up to me, I'd rather use the windows update framework and perhaps have to wait a few weeks (if ever) for patches than have to relie on users to re-compile their kernels every time someone finds a 'sploit that affects the entire 2.4 tree.

    3. Re:Is the problem the "how" or the "with what" by 10101001+10101001 · · Score: 2, Insightful

      I agree with your point that it's not high broadband. Most worms are small enough to only take 8 seconds are less to send. Even being always on is hardly anything, since most dial-up users stay on for hours at a time. I don't think that the morris worm really woke up people as much as you say it did. Neither has Windows worms.

      The major difference is until recently, there weren't that many machines online relatively and in the interim *nix in all its forms (though not really Linux, specifically) had the chance to fix most bugs. *BSD have too because they got to hear the same problems. Because Linux includes *BSD tools and GNU tools (based in idea off of Unix tools), it's at about the same level of security checks as *nixes.

      Now, that that's covered, you should realize that spam receiving isn't something that only Windows users suffer. And most spam relays spoof their address.

      Windows machines are ideal candidates more because their admin is less likely to properly admin (aka, security patch) things which are inately on. More of the core system hasn't been tested, while on *nix security flaws tend to be in auxillary programs (apache has become more core and hasn't had the same level of testing as say finger...and the Linux kernel is also relatively new) where less testing has occurred.

      Overall, this means more Windows systems (by percentage, not by populace) are infected and that coupled with populace and broadband means more spam, not more worms. After all, you can get/send 1,000 spam messages a day, but worms tend to be incompatible with each other meaning stable systems tend to only stay infected with two or three worms. More broadband just makes you a better spam relay, which means more clogging of the internet. I don't think it'll cause any more of a collapse than P2P has. At the same time, I wonder if at some point ISPs will start trying to regulate e-mail more to save costs from all the junk being sent through them. The most ironic part to me is not only how little people seem to care about their machines, but that there's been no citizen outcry trying to sue for violating of their machines.

      --
      Eurohacker European paranoia, gun rights, and h
    4. Re:Is the problem the "how" or the "with what" by timmarhy · · Score: 1

      your reasonign is flawed. most of the internet is on non-ms boxes, yet a much high % of home user boxes are owned by viruses/hacks then any other group of system eg. apache web servers

      --
      If you mod me down, I will become more powerful than you can imagine....
    5. Re:Is the problem the "how" or the "with what" by MrChuck · · Score: 4, Insightful
      Do you think it would be any different if the world was all running Linux? Or Solaris? Or MacOS.

      Yeah. Yeah I do. Because those OSs don't have (1) a dirty syringe attractor and (2) a dialog box that pops up and says "Would you like to jam this into your arm?".

      The underlying windows platform is flawed. There are WEEKLY buffer overflows and it's clear that aside from the VAST amount of unsecure old code in it, that new code is rife with holes too.

      How many times was outlook fixed to stop running code in preview mode (hint, it's >1).

      In bending over backwards to make it easy for users to run things on windows, they leave themselves open. Anyone recall when the "good times virus" that promised a worm from opening an attachment was ridiculous because no program would treat data as executable code!? I miss that now.

      Re: nmapping back?
      When I scan 200 machines and ALL of them are running windows and ALL of them are sending me mydoom, that's not just bad luck of the draw.

      I was blocking 140 mydoom.a messages a minute the day AFTER it started.

      Most of the worms and trojans and crap that are going around lately are all user spawned

      By "lately" you just mean that 12 or so since new years. I guess when you have so many, it's hard to recall back to last summer and the previous 30 security holes.

      When a client groused about the cost of an antivirus program for scanning mail at their college, I pointed out that the WHOLE cost should be borne by the Windows support group. The 10-20% of the school taht wasn't using windows had no (zero, none, nil, nada) need for filtering out viruses that autoexecute in their environment.

      At another (very very large wall st) client, I was delighted to see security and a manager show up and FIRE someone for using outlook. 3 warnings about it and AGAIN, he brought a virus in. They'd figured the cost of each incident and banned it. Bravo!

      So YES, driving a line of cars through town filled with explosives is bad, even if you tell them not so smoke.
      Letting a former addict go hang out with crackheads and spend lots of time with them is BAD.

      Letting ignorant Windows users have machiens that can be reached for the net is BAD. That windows machine is just jonesing for a virus fix.

    6. Re:Is the problem the "how" or the "with what" by Anonymous Coward · · Score: 0

      Your facts are flawed. Most of the internt DOES run on ms-boxes, as far as this topic is concerned.

    7. Re:Is the problem the "how" or the "with what" by Anonymous Coward · · Score: 1, Funny
      I swear, these people would probably pick up a used syringe off the ground and jab it into their own arm to see what would happen.

      Hmm, you may have inadvertently solved the problem. *grabs a box of Terumo syringes from stores and heads down to the local dell reseller*

    8. Re:Is the problem the "how" or the "with what" by Cow007 · · Score: 1

      I said essentially the same thing in my comment but you did a better job putting it into words. But yeah its good to know that there are people out there who understand.

      --
      411 Y0UR 8453 4R3 8310NG 70 U5!! -NSA
    9. Re:Is the problem the "how" or the "with what" by Cow007 · · Score: 1

      My friend you are a fool who oviously uses Windoze. What you fail to realize is that all of these viruses only affect Windoze and macines running it can be altered without the user's concent thus allowing them to become senders of virii/spam themselves. Next time you think about making a comment on here make sure its something legitimate and not you just trying to make yourself feel better. Y0U H4V3 JU57 B33N 0WN3D F00!!

      --
      411 Y0UR 8453 4R3 8310NG 70 U5!! -NSA
    10. Re:Is the problem the "how" or the "with what" by Anonymous Coward · · Score: 1, Insightful

      The underlying windows platform is flawed. There are WEEKLY buffer overflows and it's clear that aside from the VAST amount of unsecure old code in it, that new code is rife with holes too.

      How many buffer overflows has Linux and the programs that typically run on it had in the past 6 months? Hint: more than Windows. Does it matter? Not really.

      Outlook and Internet Explorer both display strong warnings before allowing a user to download an executable. The media has run reports on virus outbreaks and generally give tips on how to avoid it. Their system administrators tell them not to open attachments they aren't expecting. Microsoft even has a 3-step method to securing a Windows PC on the Windows update site.

      Yet they still do it. Despite the warnings the IE and Outlook give, despite the warnings that their system administrators give, and despite the warnings that the media give, users will STILL open attachments containing viruses, again, and again, and again.

      You can patch a buffer overflow. You can't patch a stupid user.

    11. Re:Is the problem the "how" or the "with what" by asdfghjklqwertyuiop · · Score: 1


      At another (very very large wall st) client, I was delighted to see security and a manager show up and FIRE someone for using outlook. 3 warnings about it and AGAIN, he brought a virus in. They'd figured the cost of each incident and banned it. Bravo!


      Who is this legendary wall st client of yours that fires people for using outlook?

      And how can I get a job in their IT dept...

    12. Re:Is the problem the "how" or the "with what" by MrChuck · · Score: 1
      And how can I get a job in their IT dept

      Practice!

      no, that's Carnegie Hall.

      Their policies and name are withheld cause they made me sign a frightenly large pile of papers.

    13. Re:Is the problem the "how" or the "with what" by Anonymous Coward · · Score: 0

      Then how about posting a link to your resume? Feel free to remove all personal information like name, address, etc. :)

    14. Re:Is the problem the "how" or the "with what" by iwadasn · · Score: 2, Interesting

      OK, time for more insanity. All I want is a box that only runs java. Simple as that. Give it a microkernel and a JVM, push everything possible into the VM, and have it only run java, with all the policies set appropriately.

      Then there are not buffer overflows, no root exploits, and when you double click something in an email it will run without disk access or net access, or basically anything else that could hurt you. Virii would immediately crash, anything else would work fine.

      The real problem is not the executables, it's that they get so many damn permissions for no good reason. EVERY single executable should the first time it asks for disk access pop up one of those boxes saying what it is trying to do and do you want it to..
      [allow once] [allow always] [allow always for this file] [disallow] ....

      Then the problem would be over. Your normal apps would get all they need (and nothing more) the first time they run, and spyware and malware would be almost impossible to slip through.

      Much better to start everything out in a small sandbox and ask the user each time the boundaries need to be increased than to just let it do what it needs to and hope it isn't a virus.

      Basically, if you could get everything you needed in java (web browser, email client, office suite [the most difficult task], jboss, mail server, databse [hsql], etc...) and you could netboot it then the people at work would have extremely safe and secure boxes where they could just do work, rather than always worrying about attack.

      It'd also let you run without protected or virtual memory, and thus the 30% performance boost would just about wipe out the cost of doing everything in java. Most client machines shouldn't be swapping these days anyway.

    15. Re:Is the problem the "how" or the "with what" by EvilTwinSkippy · · Score: 1
      There is stuff you can pick up just by viewing a web page in IE. Since outlook/oe use explorer to display html encoded email, and turns preview on by default all you have to do is view a message.

      What do you think all of those security updates to Internet Explorer are about? Thanx for knitting the browser into the OS Microsoft.

      And then there are the worms that crawl in through RPC bugs. I had a brand new installation of XP become infected the first time it connected to the net. Over dialup, no less.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
    16. Re:Is the problem the "how" or the "with what" by Welsh+Dwarf · · Score: 2, Insightful

      You can't patch a stupid user, but you can set the attachment -x so that the .scr.jpg doesn't get run.

      Also, may I remind you that a standard desktop Linux install has 0 open ports, so good luck with your buffer overflow.

      --
      Ask 8 slackers a question, get 10 awnsers (a citation, but I can't remember from who)
    17. Re:Is the problem the "how" or the "with what" by parksie · · Score: 1

      Sounds like the sort of thing systrace does on the *BSDs, I believe there is a Linux port as well.

      Anyone familiar with SElinux and whether it does things like this?

      I would also expect any ACL-based system to act similarly.

    18. Re:Is the problem the "how" or the "with what" by Havokmon · · Score: 1
      >>As I see it, it's that the users are using >>Windows, not that they are coming in high speed.

      Ahh..... bullshit.

      I call your bullshit. Your number is low enough that you may remember an Internet without Windows users. When Win95 came out, everyone could FEEL the "Internet IQ" dropping drastically.

      Windows users seem to think they actually know what they're doing. Where Unix users actually do, and Mac users are smart enough to know they don't know.

      So yes, it's Windows. And yes, it's users.

      --
      "I can't give you a brain, so I'll give you a diploma" - The Great Oz (blatently stolen sig)
    19. Re:Is the problem the "how" or the "with what" by Anonymous Coward · · Score: 0

      You're the one talking BS...

      I installed Win2K on a PC, ran the dialup modem, and attempted to download Zonealarm, and then the Win2K security updates.

      Of course by the time I had ZA down, my system had already been compromised by a worm. Fresh install, now my PC's trying to infect everyone on the subnet. Was online for a matter of an hour. I didn't execute anything except the ZA download, and then later, the windowsupdate.

      Worms do propogate very well on dialup! After all, its not megabytes of code here people! Its just that broadband targets are more valued by zombie controllers, which is another kettle of fish.

      I should have known this would happen anyway, with the number of hack attempts coming into my broadband firewall numbering at least one per minute (BigPond) I get so many 135, 139, and 445 port hack attempts I should have known better.

      But, out of the box, Win2k offers no capability to be able to get the patches you need, without exposing yourself to an intrusion.

      So this time, I reinstalled, and ran ZA *before* connecting to the dialup....

  11. fix mail by lophophore · · Score: 4, Insightful

    Email is one of the biggest threat vectors.

    When email gets fixed (through authenticated access), the worms and virii will need to find a new way to spread.

    This is in addition to the more obivous effect of cutting down the overall flow of spam.

    --
    there are 3 kinds of people:
    * those who can count
    * those who can't
    1. Re:fix mail by MrChuck · · Score: 5, Interesting
      Except for all the other threats.

      More of consequence in my mind are the MILLIONS of machines acting as bots for a DDOS attack. It's less spam (spam is bad, m'kay?) than the ENOURMOUS connection points that are running and spreading viruses that can harm me.

      My house has been Windows-free since it was on the Internet (1983 or so). When I helped remove a rootkit from a brother of a friends linux box (again, a nat box woulda done wonders), he looked at my rack with ~9 working machines (the others are elsewhere) and asked which windows *I* ran. I looked at the SGI, Sun, NeXTs, Alpha and couple Intel boxes and said, "none. But I have a linux box to play games on."

      My systems are generally fine until 5000 windows boxes running worms wake up and decide to visit and visit and visit until my bandwidth is used up.

      Spam annoying as hell.
      Viruses dangerous to everyone around.

    2. Re:fix mail by Anonymous Coward · · Score: 0, Funny

      psst, let me tell you a secret.

      your cock is not measured by how much hardware you have.

      I really do hope you are making some money off running those things.

    3. Re:fix mail by cgreuter · · Score: 2, Insightful

      When email gets fixed (through authenticated access), the worms and virii will need to find a new way to spread.

      Feh! All you need to do to fix email is to, at the ISP level, go through every incoming message and strip out every executable attachment, be it a .EXE file, HTML with scripting or a Word document with embedded scripts. That would do it then and there with almost no loss of functionality.

      But you know it won't happen, because Uncle Joe will get annoyed when he can't click-and-run the self-extracting e-card someone sent him and then he'll switch to some ISP that doesn't offer this particular service, never knowing what he's opening himself up to.

      I once told a friend to stop using Outlook Express because it's a virus-launching platform. He wouldn't because he couldn't find another free mailer that was as nice as it. Security is one of those invisible things that nobody notices. It's really hard to get ordinary people to take it seriously.

    4. Re:fix mail by CoolToddHunter · · Score: 1
      Spam annoying as hell.
      Viruses dangerous to everyone around.


      I think the grandparent is trying to point out that email is a threat vector because viruses are spread largely through email.

      My house has been Windows-free since it was on the Internet (1983 or so). When I helped remove a rootkit from a brother of a friends linux box


      And I think that you might want to correct this date. :)
    5. Re:fix mail by masternerd · · Score: 1

      I am not sure why email is threat. You would get junk email on hotmail or yahoo because they want it. But on corporate email or home email, I dont get junk email.

    6. Re:fix mail by MrChuck · · Score: 1
      My house has been Windows-free since it was on the Internet (1983 or so). When I helped remove a rootkit from a brother of a friends linux box

      My house/life have been Windows and MS-DOS free since I was on the Internet (1983 or so). I *did* inherit a zenith 8086 laptop (battery is now dead), but as a friend I visited at MS looked through and saw "DR-DOS... is that a DOS clone?"
      Yeah, 1976 copyright. Its the clone.
      "TurboC... WordPerfect... [other stuff]. Is there anything from Microsoft on this?"
      I suppose mouse drivers. But I have a trackball for the laptop.

      ... LAST FALL, when I helped remove a rootkit from a friend's brother's Linux box [which came with a billion services on, including the dreadfully unsecure rpcbind)...

      The intel boxes run a variety of OSs. I've got the legal source for all of them.

      I've used IPFilter to help harden my Irix, SunOS, Solaris and BSD boxes... The Apples (Mac IIci and Classic 2 running BSD and a laptop running OS X) are behind a self built firewall/WiFI/IPSec endpoint/boot from readonly CF box for extra security.

      The housenet ran Kerberos for a while,because it's often a testbed for my work. You run Kerberos at your homes for authentication, right? Everything in the house uses IPv6 except for a printer. Stupid printer. Oh, and the terminal server. Anyone have IPv6 firmware for a microAnnex? They are on a subnet of the firewall (an IPv4 DMZ).

      So no "soft chewy center" to that network.

      Now try as I might, I can't get these viruses and worms to run on my machines. Perhaps I can use an emulator. But I'd likely have to buy a virus runtime environment from MS.

    7. Re:fix mail by TwistedSpring · · Score: 1
      When email gets fixed (through authenticated access), the worms and virii will need to find a new way to spread
      Or, indeed, an old way to spread. Before this newfangled e-mail nonsense virii had to spread through exploits and infect files. I hate to say this but that appending code to the end of executables and inserting jumps to the new viral code and back was clever in comparison to what we have now. Virii are interesting beasts, worms are just boring crud made by 14 year olds who learned Visual Basic at school. The time things started to give was about the time that the people who feel inclined to make virii suddenly realised that they didnt need to be clever and that people are so dumb that they'll pretty much run anything that comes into their inbox. "It can't do any damage, it's only a screensaver!" etc. So all the file-infecting virii have gone now, overtaken by the worms and the trojans.

      I'd like to point out (in no relation to the post I replied to) that there seems to be a big "Windows is crappy!!" response to this story. Windows isn't crappy, it's users are crappy. And its users are crappy because most people are crappy, and windows is used by most people because it's easy to use (unlike Unix) and doesnt require you to spend over $2,000 in computer equipment (unlike Mac OS). It is, if you like, a compromise between those two great operating systems, taking the flexibility of one and the ease of use of the other and mishmashing them together at a low price tag. Everyone uses it because everyone can. Software's available and it works on everyone's computer. This is why everyone uses Windows, and while that's not necessarilly a good thing, it does mean that windows is the primary target for worms, just because so many people use Windows.

      If you used Linux/Unix, that doesnt even HAVE file extensions for most things, so executables are not instantly recognisable as such. Running them by accident is so much easier. Shell scripts are even easier to run, Perl is a piece of cake to run. Just type ./thefile and away it goes, or even double click it. Dangerous bad shit, that. At least with Windows you have some slight warning that the file might be bad stuff before you attempt to open it.
    8. Re:fix mail by poot_rootbeer · · Score: 1

      My house has been Windows-free since it was on the Internet (1983 or so).

      Yeah, my computers were Windows-free in 1983 as well.

    9. Re:fix mail by MrChuck · · Score: 1
      and all your computers have remained so continuously?

      Or were you playing in your crib in 1983 and now are running Windows "because you have to"?

      (or is this just another 1-2 line shout you feel compelled to make?)

    10. Re:fix mail by theCoder · · Score: 1

      When email gets fixed (through authenticated access)...

      Email has been fixed for quite some time -- people just refuse to use the solution. I'm speaking of course of PGP email signatures (and also encryption). If everyone signed their emails, then worms like this could simply not propogate through email (unless people were negligent with their private keys). And spam would be easily authentacable (and then dropped to /dev/null), or (worst case) filterable (if it wasn't signed). Plus the signing of email will slow down the spammers, much like things like hashcash do. But no, people won't accept that. Instead they complain that SMTP needs to be replaced, or some other silliness. Instead of doing something themselves to improve the situation, they demand others change to fit them.

      *sigh* sorry for the rant... I don't mean to single out you in particular. Just whenever someone says something like that, I feel obliged to point out that fixing the problem is up to you and not everyone else.

      --
      "Save the whales, feed the hungry, free the mallocs" -- author unknown
    11. Re:fix mail by lophophore · · Score: 1

      it's already fixed? My mail client does not know how to verify a message is signed by a signer I want to trust. I'd like to know about any solution that is not going to triple the amount of time I spend working on email.

      --
      there are 3 kinds of people:
      * those who can count
      * those who can't
    12. Re:fix mail by theCoder · · Score: 1

      I use Enigmail on Mozilla Thunderbird. Enigmail uses GNU Privacy Gaurd (GPG) to do the actual PGP related stuff (which means that other applications that also use GPG have access to the same keyring and trust rules). GPG is a little hard to use, but I don't typically interact with it except when I need to setup something. Enigmail takes care of all the signing, verifying, encrypting, and decrypting for me. When it needs my passphrase, it asks me. When it can't find a key to verify, it prompts to download it from the keyserver. The only thing it doesn't do is help manage trust relationships.

      It takes a little to setup and understand, but once it's working, it is just as efficient as regular email, and certainly doesn't triple the amount of time I spend working on email. I'm sure there are other solutions for other mail clients, and if not then you should lean on the vendor to provide them.

      I don't know why people are so averse to using security technologies when it comes to email. They don't have any problem accepting SSL to secure HTTP or using ssh over telnet (well, most people don't). But all I can say is that the solution begins with you. Only you can prevent spam, lophophore. Hmm... maybe that would make a good public service announcement :)

      --
      "Save the whales, feed the hungry, free the mallocs" -- author unknown
  12. ISPs by Joe+U · · Score: 5, Insightful

    Wasn't IPv6, combined with proper filtering supposed to curb these problems?

    Alot of the blame falls on the ISP, they helped turn the Internet into a always-on appliance, now they have to make it robust.

    Why does my ISP allow packets off my network that obviously don't originate from it? Is it considered a feature to allow DoS attacks? Why is port 25 open by default? Why isn't NetBIOS closed by default? Where is the IPv6 testbed that my ISP was supposed to have had 3 years ago?

    Granted, the average Joe User can be an idiot, but part of the ISP's job is to make the Internet more idiot-proof.

    1. Re:ISPs by Anonymous Coward · · Score: 1, Insightful

      Filtering source addresses is a good thing.

      Filtering ports is a BAD thing. Why? Because they provide connectivity, not filtering services. Maybe I want to have port 25 open so I can run a mail server. Point is that I want to decide what is open and closed. Otherwise, ISPs will just start filtering everying, requiring proxies, breaking everying in their path.

    2. Re:ISPs by joe90 · · Score: 5, Insightful
      Granted, the average Joe User can be an idiot, but part of the ISP's job is to make the Internet more idiot-proof.


      The Internet is not AOL. The "idiots" computer is part of the Internet when it's connected. The ISP's job is to provide network connectivity to the rest of the network - NOT to make the Internet more idiot proof.

      --

      Fast, cheap & reliable. Pick two.
    3. Re:ISPs by timmarhy · · Score: 5, Insightful

      no no NO. i can't believ this is +5 insightful. the job of the internet SERVICE provider is just that, to provide the internet service. heaven forbid a world where isp's start to apply upstream filters and controls on my account. besides the obvious costs with these kinds of things there are the applications this might break, and no one will know it's breaks them till it happens. isp's you provide me with internet access, and it'll decide what i do with it from there thank you.

      --
      If you mod me down, I will become more powerful than you can imagine....
    4. Re:ISPs by Anonymous Coward · · Score: 0

      get two t1s and have your own rules dork. You pay 50 a month and want to dictate to an ISP its policies? I personally work for/know two owners. They would laugh at your silly notions.

      How simplistic this internet thing must be to you.

      fuck off wanker
      I really do hope your isp blocks every port except 80 for u.

      spamassassin if you have not noticed already has been defeated by spammers. well the smart ones.

      > Alot of the blame falls on the ISP, they helped turn the Internet into a always-on appliance

      5 insightful? what shit are u moderators smoking. u fuck off to. seriously.

    5. Re:ISPs by NacMacFeegle · · Score: 1

      True, ISPs should help make the Net idiot-proof, but some ISPs also see their main job to make more $$$.

      Therefore, with the increased number of users with more bandwith than brains, the Net will get bogged down and ISPs will start thinking "What to do? What to do?". Sure, they might want to help average-Joe, but they also want to make a profit.

      Consequently, it is my solemn prediction that we will see a lot more QoS stuff going on. I.e. ISPs will try to make more money be offering "dedicated" services or "garanteed" bandwith to those with more money than brains (or to those who actually need to use the web for good things). In the end, they will want to implement QoS in IPv6 and charge people accordingly.

      So, after they've helped put guns in the hands of children (read:bandwith in the hands of average-Joe), the ISPs will turn around and profit from the plight of their victims. Bastards!

    6. Re:ISPs by Fulcrum+of+Evil · · Score: 1

      the job of the internet SERVICE provider is just that, to provide the internet service. heaven forbid a world where isp's start to apply upstream filters and controls on my account.

      What makes you think it's ok to spoof packets and propagate worms? ISPs have to serve more than just you.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    7. Re:ISPs by Anonymous Coward · · Score: 0

      > What makes you think it's ok to spoof packets and propagate worms?

      what makes you think it is your right to say who connects where and how?

      ISPs are here to give a connection. that is fucking it dork. Maybe a mail server with no filters. I am so sick of spamassassin and people who have had their email account for 10 years.

    8. Re:ISPs by Anonymous Coward · · Score: 2, Insightful

      (Posted anonymously because I prefer to give no way to connect my online personality and my job. Yes, I work for an ISP.)

      Let me tell you something. The ISP can do one of two things. They can give you a connection to the Internet, or they can shut that connection down. That's about it.

      You can get fancy and do things based on looking at the IP header, usually blocking ports or such, but that's it.

      Do you have any idea how much data streams through an ISP, even a relatively small one? Do you have any idea how hard it is just to work at all, let alone work well? Are you willing to pay the extra money every month for the machines that would be necessary to do whatever it is you think ISPs should do for your protection?

      That's the fundamental problem, you see. The business is freakishly competitive and the margins are slim. If the net was being filtered for your protection, you wouldn't buy it, because you'd want the cheaper service available from the next guy.

      Remember, we're not talking you personally, we're talking about all the people who really need the mythical "protection" you vaguely allude to.

      You probably think that it would be cheap or effectively free to "protect" users from themselves, and you couldn't be more wrong. Even basic email spam filtering/marking and virus checking can be a couple of bucks per month, per user. (And that's only workable because people actually will pay for it. They aren't going to pay for us selectively blocking their internet activities for what seems to them to be random reasons.)

      You're not paying enough for your internet connection for your ISP to hold your hand. (And by extension, anybody elses... maybe you personally don't need it, I'm talking customers in general.)

    9. Re:ISPs by Geoffreyerffoeg · · Score: 2, Insightful

      If you close off ports, allow knowledgeable users to open them if they agree to suffer the consequences.

      Having an e-mail server would be a great boon for me. Having a web server not on port 8080 would be nice. Being able to use Windows Networking to get to my files across the Internet would be really nice.

      When I want these, I go to my router, log on, open the ports on my hardware firewall, do what I need, then close off the ports. Speaking of which, I need to close my DMZ off....

    10. Re:ISPs by Fulcrum+of+Evil · · Score: 1

      what makes you think it is your right to say who connects where and how?

      If I'm the ISP, then it's my right because I say so.

      I am so sick of spamassassin and people who have had their email account for 10 years.

      Yeah, I totally understand - they were sending email when you were learning multiplication.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    11. Re:ISPs by Anonymous Coward · · Score: 0

      God, you're pathetic. You're aware that your OS sucks, and can't be bothered to learn enough to make it suck less, and yet you won't switch to a better OS because you're afraid to lack games. A lot of good all those games will do you when your system is hosed by the latest worm or virus. Between a Mac and a PS2, you can get most any game released in a timely manner (often simultaneously with that other platform), and the performance is great on a G5. Aside from not always having every game right away, the Mac would be perfect for you, as it would let you focus on your games, porn and web surfing without having to worry about all the problems with Windows. Effeminate retard (learn how to spell) flamebait aside, it's really not a platform to be overlooked, as it's got most of the conveniences of consumer software and commercial support, without all the vulnerabilities and poor design choices of Windows. When you grow tired of fighting with your computer, know that it is a very viable alternative, and would probably spare you a lot of grey hairs and heart palpitations. It costs a bit more than your typical beige box, but quality isn't free, and you'll find they have much longer viable lifetimes, as well as incredible resale values. It's not uncommon to have 3-4 year-old Powermacs go for about $1k used, a very significant discount on your next Mac or PC. They also have standard PC parts, so you can upgrade them as easily as PCs (except for Sound, Video and CPU, which are platform-specific, but still upgradeable). Right now, UT2K4 is coming out simultaneously for MacOS and Windows, and the same will happen with Doom3, due out soon. Most games have been ported to the Mac, and you can join games with PC users, just as you can with Windows. You'll need to have a ceremonial sacrifice to the gaming gods of the one-button mouse that comes with it, but I'm sure you'll derive some sick pleasure out of it, when you replace it with your USB mouse of choice.

    12. Re:ISPs by Joe+U · · Score: 1

      If you close off ports, allow knowledgeable users to open them if they agree to suffer the consequences.

      You are absolutely right!

      I wasn't saying block ports and don't allow people to open them. I'm saying block ports by default. Give instructions on how to unblock.

      A good example is TimeWarner. They sell cable modems and high speed connections, then they make a firewall an optional add-on. Force the firewall, problem solved. Give the users an instruction sheet on how to edit it, 90% will never go near it anyway.

      ISPs need to be responsible on many levels. The same way the phone company doesn't let you run rampant on their network, ISPs shouldn't just dump you on the Internet.

    13. Re:ISPs by SillyNickName4me · · Score: 1

      > If I'm the ISP, then it's my right because I say so.

      Which in turn also makes you liable for damages incured by those who get their copyright infringed and similar stuff, you obviously see it within your task to police what customers can communicate.

      I am sorry but that is not a very smart attitude if you want a carrier status really.

    14. Re:ISPs by SillyNickName4me · · Score: 1

      No he is not pathetic, he just tries to make the point that many people (possibly including him (or her?)) simply don't care enough, and are not bothered by that. Saw any complains in the parent post?

      Live with it, there are many people who simply dont have a passion for learning technical things and will only do it when it is somehow needed to get something done that does have a priority for them.

      When you sell computers to the average user, those computers and whatever software runs on them better takes that into account.

    15. Re:ISPs by Anonymous Coward · · Score: 0

      Which in turn also makes you liable for damages incured by those who get their copyright infringed and similar stuff, you obviously see it within your task to police what customers can communicate.

      This is not implied at all. If your ISP offers you a particular TOS which includes restrictions on access (e.g. no running mail servers) and you accept it, then all they're doing is enforcing a contract, not policing their users.

      Incidentally, that's exactly why so many ISPs have "no server" clauses in their contracts. :)

    16. Re:ISPs by Skapare · · Score: 1

      It is perfectly valid for an ISP to restrict outbound packets to have only source addresses that are appropriate. I started doing this back in 1997 to make sure my users could never forge someone else's IP address (prevent smurfing and such). For a small ISP, this is easy; just add an access list on the outbound path of the upstream interface at the border router(s). For a large ISP, this gets to be a problem because more than one netblock would have to be added, and such a list would chew up the router big time. But if the router manufacturers would add an extra route lookup step, applied to the source address, and see if the return route matches where the packet came from, this kind of filtering might become feasible.

      --
      now we need to go OSS in diesel cars
    17. Re:ISPs by SillyNickName4me · · Score: 1

      I'm fine with a contract tho an optional service is imho better.. anyway, that is entirely different from an isp blocking ports to their liking.

      Ah well, its a good thing many isps overhere (the Netherlands) seem to be rather cluefull and actually provide transparant connectivity with optional spam and virus filtering etc.

    18. Re:ISPs by timmarhy · · Score: 1

      ha, see there's your problem. checking the source address takes time/resources.

      --
      If you mod me down, I will become more powerful than you can imagine....
    19. Re:ISPs by arcade · · Score: 1

      You are an idiot.

      Yes, it would be a good idea to filter packets which doesn't originate from your network.

      It is a horrible idea to filter any ports. Port 25 should be open by default, Netbios should be open by default, and so forth. It's NOT part of the ISP's job to make the Internet more idiot-proof. It's the users responsibility to secure his own computer.

      --
      "Rune Kristian Viken" - http://www.nwo.no - arca
    20. Re:ISPs by Anonymous Coward · · Score: 0

      You are an idiot.

      Yeah, and you're an asshole troll who has nothing better to do with their sorry excuse for a life. Whats your point?

      Do you normally attack the other person directly when you don't agree with them?

      I would say go fuck yourself, but I'm guessing it's something you do on a regular basis, in public.

    21. Re:ISPs by Joe+U · · Score: 1

      I don't usually reply to my own messages, but there were too many of the same message replied over and over.

      I said the ISP should block some ports by default.

      "BY DEFAULT" are the key words here.

      I didn't say close and keep closed, which is what many of you read.

      I said the average Joe should have a choice and default to more locked down connection.

    22. Re:ISPs by mjm1231 · · Score: 1

      Can we idiot proof the ISP's first? Mine (Cablevision) appears to be forwarding DHCPACK broadcasts from their private network (10.0.16.x, occassionally other 10.0.x.x) to the customer network. I first became aware of these when they showed up in my (crappy) Belkin router logs as DoS attacks.

      --
      Ideology: A tool used primarily to avoid the bother of thinking.
    23. Re:ISPs by Sentry21 · · Score: 1

      I agree that ISPs can't be responsible for keeping idiots from being idiots, but the poster has a good point that I've been shouting from the rooftops for years.

      Why on earth do ISPs allow packets out from their network that claim to come from outside the network? Why can packet kiddies with ip 24.55.66.77 send packets that come from 10.0.0.1 ? There is literally no reason to allow this, since they are completely bogus packets, and 99.99% of the time they happen, it's either a TOS violation (packeting someone) or an infected machine (packeting someone). This one filter would help prevent a lot of DOS attacks, or at the very least, make it easier to figure out which machines were infected (by IP address).

      ISPs may not have a responsibility to coddle idiots, but I think they DO have a responsibility to the rest of the internet to make sure their customers aren't fucking it up for everyone. If that means shutting down spammers (which no one but spammers think is a bad idea), then fine, but if that means firewalling machines that are packeting, or trying to spread viruses or worms, then I think they should do that too.

      I'm getting sick and tired of idiots ruining things for everyone, and the internet is no exception.

      --Dan

    24. Re:ISPs by Skapare · · Score: 1

      However, given the correct design, such checking can be made as efficient as checking the destination address. And given that the overall loss of resource due to abuse far exceeds the cost of checking the source address even with the way routers do it now, if everyone did it (check packets for proper source address), the total loss of resources would go down.

      The real problem is that the decisions to do this checking are not made globally, but individually. When examined individually, one will not see a benefit (less incoming abuse) that corresponds to the cost (filter all the packets). So everyone individually will make a "business decision" to let the abuse continue, even though if it were done collectively, it would result in savings (cost reductions) for everyone.

      --
      now we need to go OSS in diesel cars
    25. Re:ISPs by poot_rootbeer · · Score: 1

      The "idiots" computer is part of the Internet when it's connected.

      No, the idiot's computer is part of the ISP's network. The ISP's network is then connected to the Internet.

      The ISP has a duty to make sure the machines within its network play nice. If you don't like it, you can bypass the ISP and buy a T1 from whomever the ISP buys their bandwidth from.

      Internet Service Providers and Network Access Providers are not the same thing.

  13. It's all been predicted by heironymouscoward · · Score: 1

    By NostrabertusCoward:

    Plague...

    --
    Ceci n'est pas une signature
  14. Nonsense... by bobbyque · · Score: 3, Interesting

    How could you make a case to go back to dial-up? How about ditching your phone and just using snail mail? I have difficulty seeing how faster communication is ever bad. Not perfect, certainly, and the flaws need work, but the the advantages far outweigh the disadvantages.

  15. I work for an ISP... by grioghar · · Score: 5, Interesting

    ...And every little old lady that comes in and purchases a DSL circuit for email makes me cringe.

    All I can think is that she's just another virus infection waiting to happen on my network.

    For some, it's senseless and stupid to have a broadband connection. I mean, my bread and butter requires that people DO have a DSL circuit, but there's no sense of responsibility with their internet connection.

    People bitch all the time about spam, and how to get rid of it. That same person comes in and has a SMTP relay cleaned off their system a month later. They can complain about it, but they don't realize they're part of the problem as well.

    Then there are those that come in and tell me to my face "Bah, I don't care if I have a virus, it just makes things a little slower." Those people piss me off the most. Those same people get pissed when I shut their connections off because they're sending out 20 messages/second, drowing their outbound pipe.

    I swear. Sometimes I think owning a computer should require a license.

    --
    Can you ping me now? Gooood! | Manhappenin.Net - Things to do
    1. Re:I work for an ISP... by Anonymous Coward · · Score: 0

      . . . my bread and butter requires that people DO have a DSL circuit

      When they first said that everything these days contained some form of chip, I didn't believe.

      But now . . .

    2. Re:I work for an ISP... by mmurphy000 · · Score: 4, Interesting
      For some, it's senseless and stupid to have a broadband connection. I mean, my bread and butter requires that people DO have a DSL circuit, but there's no sense of responsibility with their internet connection. People bitch all the time about spam, and how to get rid of it. That same person comes in and has a SMTP relay cleaned off their system a month later. They can complain about it, but they don't realize they're part of the problem as well.

      I've been amazed that more ISPs don't bundle some sort of hardware firewall, like a SOHO router/NAT box, with their service. It would appear to be in their own interests to promote the use of those things, as they'd help slow the propogation of worms a fair bit. Larger ISPs should be able to get them for dirt cheap, as there isn't much more to one of those routers than there is in a cable or DSL modem.

      Now, I know, NAT isn't perfect and causes problems -- I run into a fair amount of "d'oh" moments myself when I want to do something, like BitTorrent, and my port isn't open. But, for "little old ladies" and the like, you'd think it'd be a net benefit to the ISP to distribute the firewalls.

      Any ideas, besides hardware cost and "how do I set this up" support costs, why ISPs don't do this more?

    3. Re:I work for an ISP... by grioghar · · Score: 2, Insightful

      I push routers to everyone I can. We don't give them away for free, but we do price them competitively so that we can be their one-stop shop.

      We don't support them though. It's the mindset that we're not a free service to take advantage of; we're here to make money. If you have a problem that is addressable, we'll take care of it. What we're not here to do is teach you how to use your computer for free.

      Want tutorials? Sure, we'll come in and show you how to use your machine all day long.

      $75/hour onsite, $65/hr in-shop.

      That's what people also don't get. Your ignorance isn't my problem. What *is* my problem is when your ignorance causes my network problems. Then I flip the switch, and your connection drops.

      People have to get burned once or twice before they realize the flame is hot.

      --
      Can you ping me now? Gooood! | Manhappenin.Net - Things to do
    4. Re:I work for an ISP... by Anonymous Coward · · Score: 0

      Yeah, these people are too stupid/lazy to use a Microsoft operating system. Don't they know how much time and skill it takes to keep up with the latest security fixes. Honestly, people like these should be forced to use Linux instead.

    5. Re:I work for an ISP... by Anonymous Coward · · Score: 0
      > ...And every little old lady that comes in and purchases a DSL circuit for email makes me cringe.

      Why don't you just get rid of the customers/users if they are causing you an inconvenience? And I thought the Bastard Operator from Hell was fiction.

      Get a clue. No doubt your comments had a facetious aspect to them, but if that's your attitude, your customers must be getting a raw deal. You're getting paid to serve old ladies with ADSL connections so do it.

      Apologies for the harshness of my comments. I seem to be in a pissed off mood today.

    6. Re:I work for an ISP... by SmackCrackandPot · · Score: 2, Insightful

      ...And every little old lady that comes in and purchases a DSL circuit for email makes me cringe.

      My retired neighbors are all getting DSL, so they can videophone their children, organise community web pages and brush up on their card games. So there are practical reasons why they want DSL.

      But it completely amazes me that home computers come configured with so many open TCP/IP ports. Rather than having the various services disabled as default, the recommended solution is to require even more software (firewalls, virus scanners, adfilters, ... ).

    7. Re:I work for an ISP... by phoenix_rizzen · · Score: 1

      The local ISP here does just that with their point-to-point wireless packages. You get 1.5 Mbit/s (cheapest) up to 6 Mbit/s (business) bi-directional connectivity. And they give you a Pentium 166 MHz system with 2 bootable Linux floppies preconfigured to do NAT and packet filtering. Worked like a charm for the year I used their service. They're doing great with their service, even with the non-techies. And they keep backup imags of the floppies in case the ones they give you die. It's not a perfect setup, but it works.

    8. Re:I work for an ISP... by TheRevenant · · Score: 1

      Okay, so you cringe. And think. Do you do anything else?

      Do you explain to the old lady, the risks of broadband and how to deal with them? Maybe even give her a pamphlet?

      You're right that the problem is that she has no clue.

      So given that YOU do have a clue, AND you know that her lack of knowledge is potentially dangerous, do you do anything about it?

    9. Re:I work for an ISP... by grioghar · · Score: 1

      Unfortunately, regardless of pamphlet or not, people still do not read and understand.

      Worse yet, they refuse to understand, letting the mysticism and magic of their computer whisk away any common sense to be had in logical thinking.

      Before I was in a position of admining just boxes, I worked in as tech in an on-site service and repair. The people whom I worked with generally heeded any warnings I gave them with a dull blankness on their faces. They heard the words, but they did not register. One in twenty might listen harder than a "Uh huh..." and "...but I'm good for now?".

      A pamphlet would just be a waste of paper and ink. Shutting their connections off once or twice drives the point home harder that wasted words.

      I say that bitterly, but it makes sense to me, as it's the nature of people. Lots of people don't have time to worry about stuff like that. They have their jobs and their people to be annoyed at. Only when it affects their productivity or their leisure do they really stop to care. At that point, they do something about it and see to it that it doesn't happen again.

      --
      Can you ping me now? Gooood! | Manhappenin.Net - Things to do
  16. My Take... by ItMustBeEsoteric · · Score: 5, Interesting

    I work at a local mom and pop computer store, and it seems like somewhere around half of all PCs brought in with problems stem from broadband used improperly.

    We had one guy come in, who had always-on Comcast cable, the same provider I use myself. He had bought a PC from us roughly 2 weeks before, and was hell bent that the "piece of shit" we sold him was to blame. Of course, no antivirus, no firewall, AOL for broadband added...so much spyware. That AdAware count was, I kid you not, 3,250 or so.

    As a person who has to deal with people like this quite often, it's not hard for me to see the side of an ISP who would LIKE to impose restrictions. There is also part of me who wouldn't be against it. As much as I would like unfettered access, I know most people (those on /. aside) can't deal with it. They destroy the usuability of their PCs with it.

    So I have mixed feelings on all this. What would I like to see? You have no fetters, at first. Then, you start acting as a spam relay or something, you get restrictions (I know, this happens, and I applaud for it). You act as a waypoint to spread viri and trojans, cut back another notch. And so on. This should all be spelled out in the license agreement, but I think it's nearing necessary.

    Internet usage is not a RIGHT. It's a PRIVILEDGE. And it's one you should have to be responsible to keep.

    1. Re:My Take... by Neil+Blender · · Score: 1

      Internet usage is not a RIGHT. It's a PRIVILEDGE.

      Except for the stealing music and movies. If Slashdot has taught me anything, that part is a RIGHT. I believe it's actually in the US Constitution. At least, that's what 1337_linux_haX0r (7830482) said in one of his posts.

    2. Re:My Take... by Anonymous Coward · · Score: 0

      So what happened to the guy who though you'd sold him a POS? Did you point out the error of his ways, purge his PC, armor it against threats, and tell him not to come back, or did he get a refund?

    3. Re:My Take... by grioghar · · Score: 5, Interesting

      Internet usage is not a RIGHT. It's a PRIVILEDGE. And it's one you should have to be responsible to keep.

      Word, brother. I love it when people come in and bitch about how slow their new computer is that they just bought from us a month ago.

      I smile, nod, and ask them to bring it in, usually to scoffs. They get the machine here, I fire it up, and there's Gator, WeatherBug, DateManager, Kazaa, iMesh, etc.

      I smile, nod, and tell them it's going to be $65 (our hourly in-shop rate) for me to clean it up because their problem is a software one. Either that, or I can restore their machine back to the way it was when they bought it for free.

      As much of a BOFH that makes me sound, I get pleasure out of the looks on their face when torn between their ignorance and their wallet.

      Worse part is, they could do the same thing I'm gonna do for free at home if they had a clue.

      Like they say, you get paid for what you know, and pay for what you don't know...

      --
      Can you ping me now? Gooood! | Manhappenin.Net - Things to do
    4. Re:My Take... by Anonymous Coward · · Score: 0

      privilege

    5. Re:My Take... by Anonymous+Crowhead · · Score: 1

      So what happened to the guy who though you'd sold him a POS? Did you point out the error of his ways, purge his PC, armor it against threats, and tell him not to come back, or did he get a refund?

      He was probably all like, "OMG RTFM, luser. LOL" and then the guy probably kicked his ass.

    6. Re:My Take... by dolfin · · Score: 1

      Yeah, but people keep birthing lamer script kiddies.

    7. Re:My Take... by Fortress · · Score: 5, Insightful

      It's easy to look down on uninformed people who want to learn how to use the Internet, and complain that they are the ones ruining it for all of us. You could instead take the opportunity to teach these newbies how to protect themselves online. Why did you sell him a PC with no firewall or antivirus? There are free versions of each available, so I see it as partly your responsibility for selling a machine that was so wide open to attack. As to Internet usage being a priviledge rather than a right, I couldn't disagree more. It is this sort of elitist rhetoric that gives all of us geeks a bad name. The Internet is for all of us, not just the few that you or anyone else determines is worthy of it.

    8. Re:My Take... by ItMustBeEsoteric · · Score: 1

      We do bundle machines with AV software, in fact we usually give Norton Systemworks. You would not believe how often they are removed from start up because the pop ups (i.e. from the firewall) are annoying.

      For those who don't want to pay the $20 we charge to have this included with a PC, we ask if they would like free trials or something of the like.

      A surprising number don't. In a perfect world, I would have Norton AV with auto updates and Black Ice on every PC out the door. But some people will in a heartbeat turn of that firewall COMPLETELY never to turn it on again when it ONCE is even suspect for not letting them do something, such as send over IM or the like.

      Same goes when they download that file on Kazaa the viri scanner won't let them update.

      You can't teach people who don't want to learn. you just hope that they listen to you and take your advice.

    9. Re:My Take... by ItMustBeEsoteric · · Score: 1

      We told him what the problem was, walked him through using AdAware and Spybot, showed him how to update his AV and add a trusted site or app to Zonealarm. We're small enough that we can do that at times.

      We even offered to "check up on it" again for free in another month. The problem is, people HATE being told their problems are their fault (myself included).

    10. Re:My Take... by anantherous+coward · · Score: 1
      Internet usage is not a RIGHT. It's a PRIVILEDGE. And it's one you should have to be responsible to keep.

      I appreciate your perspective, but I disagree. Intenet usage ought to be a RIGHT. Why? Because the guarantee of free speech in our constitution is meaningless if it does not entail an access to the communications media. Free speech was coupled in its time with freedom of assembly, freedom of association and freedom of the press. The freedom of the press is essentially a freedom to access and use the predominant media of the time. In the future (its already happening), the internet will be the dominant communications media.

      The problem is not your ignorant user. Your ignorant user is a victim of abuse and theft. Viruses, adware and spyware are all theft of computer resources by the perpetuators. Even SPAM is theft and an abuse of free speech rights -- the level of spam is destroying email and literally drowning out speech. Your ignorant use ought to be able to get on the internet, communicate with others, and put up websites, etc. without being subject to all this illegal activity.

      The ultimate fix will involve both technological solutions and law enforcement, both of which are woefully deficient. It is the duty of government to fix these problems. If done right, it does not require any curtailment of freedoms we have under the constitution. In fact, if the goverment makes the defense of liberty and rule of law as its guiding principle (as opposed to another principle like maximizing corporate shareholder value), it will more likely than not do the right thing. But, whether or not it will is a real concern. Real freedoms may be curtailed if we do not all work to defend out rights and to help society come up with good solutions to these problems.

    11. Re:My Take... by Mike+Hawk · · Score: 1

      I work at a local mom and pop computer store, and it seems like somewhere around half of all PCs brought in with problems stem from broadband used improperly.

      Ah yes, the terminal disconnect of the geek from the skill of marketing. If you truly work in a independent shop that sells PCs, and you see this is a recurring problem, turn the problem into profit. Why not upsell them that anti-virus? The firewall? An anti-spyware solution? The non-AOL ISP? And you don't even have to be evil about it. Just tell them the truth. The internet is a wacky place and you need the following tools to keep you safe-ish. It sells itself. Man, maybe people who sell PC's are the ones who need to be licensed.

    12. Re:My Take... by ItMustBeEsoteric · · Score: 2, Interesting

      AOL isn't the biggest problem. After all, dial up cuts down on these things ;).

      We *try* to either sell, if that's not working, point to free AV or firewall utilities, like I said earlier.

      AdAware is on every PC out our door. Got service done? You now have AdAware, instructions on how to use it on your receipt. We also pop AV and Firewalls when we can.

      Bear in mind though, I'm not the salesperson who deals with customers. I'm the tech who're in the back or on-site 98% of the time. And there's only so much I can do in that positition if the sales guys don't follow through.

    13. Re:My Take... by Minna+Kirai · · Score: 1

      The ultimate fix will involve both technological solutions and law enforcement, both of which are woefully deficient. It is the duty of government to fix these problems.

      Ironically, the government is perpetuating these problems. Only curtailing their existing actions can they quickly cut down on virus/worm propagation.

      Computer security is something that should be privatized. It sounds radical, but think it through: what would happen if the criminal penalty for hacking / virus-writing was 30 days instead of 3 years? The FBI would hardly bother to hunt the perpetrators, and consumers would no longer buy from Microsoft unless the products' security shot up radically.

    14. Re:My Take... by Cow007 · · Score: 1

      Ok if using the net is a privelidge then people with windows should be banned from using it beacause windows makes all this crap possible. PC USE IS IRRESPONSIBLE IN THE FIRST PLACE!

      --
      411 Y0UR 8453 4R3 8310NG 70 U5!! -NSA
    15. Re:My Take... by Some+Dumbass... · · Score: 2, Funny

      It's easy to look down on uninformed people who want to learn how to use the Internet, and complain that they are the ones ruining it for all of us. You could instead take the opportunity to teach these newbies how to protect themselves online.

      Considering that there seem to be hundreds or even thousands of uninformed people or every one informed one, perhaps some sort of mass-mailing would be in order?

      Just send everyone an e-mail or two with a subject line like "Latest Microsoft Security Patches". Attach the latest Microsoft patches and include instructions to install them. That'll straighten everyone out!

      Oh, and tell your everyone to send those e-mails to their friends, just in case.

    16. Re:My Take... by innerlimit · · Score: 1

      same here!

      That's why I like the Ghost/DriveImage software so much, if they don't want to pay the $65 It will only take me like 10 minutes to restore the p*s machine.

      I can understand that my mother who can read only a bit of english, clicks on things to get them going. But when you can read all the stuff an installer spits at you, you'll know when somethings kosher or not.

      Funnily enough, mom's pc still hasn't had a single problem :)

    17. Re:My Take... by Anonymous Coward · · Score: 0
      I appreciate your perspective, but I disagree. Intenet usage ought to be a RIGHT.

      Driving a car isn't a RIGHT, just because the government made a road for the public to use. The government can cetainly cancel your driving license for rash and negligent driving.

      Because the guarantee of free speech in our constitution is meaningless if it does not entail an access to the communications media.

      Not necessarily. First of all, spreading viuses and spam isn't a "right". Secondly, it is well within your rights to rant whatever you wish, but most governments do not permit you to broadcast on police frequencies for example in an unauthorized manner. Try it if you wish. You will be packed off straight to jail.

      Assuming even if you wished to *pay* for access to publically available media, first of all the newspaper can certainly refuse you if your "free speech" was say obscene,illegal or against their policies(i.e. try paying a newspaper to carry out a rascist advt by you).

      Perhaps it would be a good idea to penalize such users i.e. "Still sending out viruses/spam despite our third repeated warning this month? pay 10 dollars extra per 100 infected e-mails you sent through our gateway"). *Make* it the user's problem and watch the viruses disappear.

      It would get even better, if those idiotic senators/government would finally just agree that all unwanted spam is illegal and ban it all.

    18. Re:My Take... by crabpeople · · Score: 1
      fuck you bitch. if you have a car and drive it drunk, is it my fault if you hit me? FUCK NO


      if your a stupid fuck who didnt learn how to conduct yourself properly in your environment, whoes fault is that?. I have explained to people 4 or 5 times (or more) how to do various things. its not ignorance, its pure and simple - lazy noncaring ellitism by the majority. they figure that they acomplish sooo damn much with their lives that a small thing like learning how to use a tool is beneath them... computer people are the most patient non confrontational people i have ever met. the problem is the (l)users that just complain and bitch and want their hand held all the way thru everything. i am mostly speaking about over 30 users here, which hopefully will obsolete themselves as the internet generation becomes dominant.

      people want this like magic box that does everything imagineable (how do i download movies off the internet for free!!! my friend does it!!!... what do you mean i have to download a codec???? this is too complicated.. my gawd, i thought you said this was easy.)


      hello STUPID FUCK everything takes some amount of effort. if your not willing to learn then suck my balls.

      pardon my french but i just got home from a really annoying service call.

      --
      I'll just use my special getting high powers one more time...
    19. Re:My Take... by redmoss · · Score: 2, Insightful

      I would say the "privilege" vs "right" argument is not framed correctly. Instead it is more of a "private" vs "public" rights argument. I wouldn't care about people's machines getting infected, etc if they were not continuously acting as spam-bots, zombies, etc. Once the user who owns the machine allows it to start generating "internet pollution" like this, I think a little bit of personal responsibility is in order.

      Thus, instead of looking at it as "LARTing clewless n00bs", we should look at it as "policing internet pollution". I imagine most people would support fines and/or restrictions for people who drive damaged and dangerous cars on the highway, putting everyone else at risk. IMHO, this situation is analagous to restricting internet access for those people who ignore repeated warnings about securing their online machines.

    20. Re:My Take... by goodydot · · Score: 1

      I agree that the computer should have gone out with some basic free (or subscription at buyer's cost) anti-virus and anti-spyware software, but it would only be a matter of time. After one month of NOT updating either bit of software, they would be almost as bad off as not having it, and after a year of no patches, and failure to renew subscriptions to updates, they may as well have not had the software on their in the first place. Keeping a computer safe from viruses takes regular maintenance, so I say the guy at the shop has a good point. Plus, you know these types of users couldn't be bothered to learn how to keep their PCs up to date. They just want to point and click. BAH!

  17. Darwin = change by tomstdenis · · Score: 4, Insightful

    Those who change will survive. E.g. learn to patch your system, avoid insecure behaviour and tighten up your network [e.g. firewall, NAT, etc...].

    Those who don't will find their computer experience horrible and "die off" as far as the market is concerned.

    Tom

    --
    Someday, I'll have a real sig.
    1. Re:Darwin = change by tomstdenis · · Score: 0

      Tom Log: August 28th, 1997.

      You fail it.

      Humans create virii. Stupid users let it run endlessly on their P4 3Ghz 1GB Ram broadband enabled PCs.

      Skynet is not active. All is calm.

      Tom

      [And if I messed up the judgement day date fuck you, it's a movie, it's a joke, fuck you!]

      --
      Someday, I'll have a real sig.
    2. Re:Darwin = change by gregmckone · · Score: 1

      Die off???

      No. As long as there are dollars to be made selling people computers that exceed their needs, broadband that exceeds their needs, and software that exceeds their needs... corporations will continue to pump millions into advertising and convincing everyone to get online, just the same way the entire 'civilized?' world has now believed the lie that they can't live without cell phone coverage.

      No there is an army of clueless people thinking they are now computer savvy because they just laid down $1500 at the local computer mart. They think technology is a product. Behind them are the countless masses volunteering, lining up to join in as soon as they have the $$$.

      I like the idea of making people pass a test / get a license to opperate a computer ;-) But seriously. Understanding that we share the net with 75% "casual users" is critical in forming any response to the threats the net (or civilized usage of the net) is facing. We keep jumping to solutions rather than asking ourself what the problem is. Force this, outlaw that, control this, mitigate that.... The problem is human nature. People out there are doing bad things, anonymously, when we do identify them, there is no consequence for their actions. (sure they give up their free email account from yahoo or whatever).

      It is a moral problem and will never be solved by technological means (although they sure make enduring this moral dillema a lot easier :-) )

      What happened to community? The free exchange of information? contributing rather than taking? Why is it that the large corporations selling (excessive) hardware are getting to people before the true GEEKS who understand that the Internet paid for by advertising revenues. (I'm talking to you too SLASHDOT!) We are here for ideas, for putting our heads together, for sharing our hearts, for being part of one large community. We're all in this together.

      I keep hearing the same old rants over and over. Pick a target and blamestorm... SO much easier than correctly identifying what is wrong and fixing it... Blame idiots, blame Microsoft, blame Microsoft some more...

      I'm not jumping to solutions here, I'm poking the fire in the hope that somewhere a spark will get out and start a useful chain of thought... off the top of my head.

      Geeks like you and me could:
      1. Adopt a newbie. Be patient, explain stuff, coach them through difficulties. (Let them pay a professional for tech support so you don't get too bitter)
      2. Talk to your neighbours (not online) make sure they are virus protected.
      3. Set up a huge informative newby friendly (no RTFM'ing allowed) site / forum / mailinglist / non-profit society dedicated to raising the level of intelligence when it comes to using the net in a virus free way.
      4. Make Linux newbie install friendly IT SUCKS IN THAT DEPARTMENT though I'm thorougly convinced taht the underlying structure is more robust and elegant than the alternatives.
      4b. No I did not say Linux sucks, I said it was unfriendly to newbies.
      5. Think public service announcements and events. Make Mondays "update your virus definitions" day. Educate not castigate.

      There that is my $0.02

      So did I poke your fire? Cmon lets hear some really inspired ideas based on community and addressing the moral issue rather than throwing technology at everything and pretending that we're living on Star Trek.

      Greg.

      --
      "Sometimes you've got to kick at the darkness till it bleeds daylight" Bruce C0ckburn
    3. Re:Darwin = change by Anonymous Coward · · Score: 0

      Darwin and his bullshit theory mean nothing. Strongest survive?? That's why George W. Bush is in office, then, because he is sooooo strong?? LOL
      No only the rich power-mongers survive, until we arm ourselves and kill them.

      Yep Darwin, that's why Windows has "survived". Yup.

  18. Depends (Bad Guys Restrict My Freedom, Too) by reallocate · · Score: 2, Interesting

    Like most things, it depends.

    If worms, virii, spam, etc. don't become more damaging than they are now, the status qou will be maintained.

    If, on the other hand, bad guy capabilities increase until someone does something that takes lives and/or billions of dollars, then I think we'll see legislation to deal with it seriously.

    Don't forget, too, that if the internet becomes too damn annoying or risky to use, people will stop using it. Seems to me that's a more likely way that my internet freedom will be restricted.

    --
    -- Slashdot: When Public Access TV Says "No"
  19. No by faust2097 · · Score: 1

    No, it'll only wreck it for people who use Windows [for now at least]. I am glad to see that ISPs are starting to just cut off people who are displaying obvious signs of virus/trojan behavior.

    I just hope the media is smart enough to look at this as the symptoms of bad software instead of a problem on its own.

  20. I, for one.. by Orgazmus · · Score: 5, Insightful

    am going to write that lame joke you thought I would.

    Instead i would like to say that the Internet is not a medium that should be regulated or cencored.
    If the dumb users are getting hurt by its wildness, that same darwinism should do its work.

    And if we will see more secure software? Dont hold your breath.

    --
    The system had the verbosity of HTML combined with all the readability of compiled assembly viewed as bitmap images
  21. Connection? by ADRA · · Score: 4, Interesting

    I don't know about you all, but if you have an open node in the net you WILL be owned on 56K or broadband. The virus might -spread- faster, but it won't destabilize the long term growth of the net.

    You'll be surprised at how fast ISP's implement manditory transparent virus/worm filering if the problem ever reaches the levels that you're implying. 2/4 ISP's that I've dealt with filtered back orifice without notifying customers.

    Question:
    Would anyone mind spending $2/month extra for an ISP to implement manditory WORM/Virus filters? If you want to play with them, use your LAN! This would solve all the worlds hunger problems!!!

    --
    Bye!
    1. Re:Connection? by orthogonal · · Score: 1

      Question:
      Would anyone mind spending $2/month extra for an ISP to implement manditory (sic) WORM/Virus filters? If you want to play with them, use your LAN! This would solve all the worlds hunger problems!!!


      Well, yes, I would.

      I run Windows 2000 and, of all things, Outlook for an email client (as soon as Thunderbird gets a decent editor, I'll switch).

      However, I've gotten a virus precisely once, when I foolishly ran some Perl source before reading it.

      I have a software firewall (free as in beer), I have virus checker (free as in beer), I have Proxomitron (free as in beer) to filter HTML, and Outlook is allowed only to connect to my mailserver, not to anywhere else.

      I also keep up with Microsoft's patches.

      Sure, I get plenty of viruses sent to me via email -- but I don't run those various .pifs, .scrs, .exes. The viruses just end up as more fodder for SpamBayes.

      Why should I pay an extra $2 for someone else's stupidity? Especially when an ISP filter is bound to turn into either a potential threat to privacy -- by examining my downloads and doing traffic analysis on my activities -- or disruptive port blocking that prevents me from adding to my security by using stuff like VPN or ssh.

      Clean out your own stable, lock your own barn door, and don't ask me to pay extra for you to do it.

  22. Simple Solution #1 by Anonymous Coward · · Score: 2, Funny

    Just load Windows XP and Office onto a Pentium 2 with 64mb of RAM - that'll slow those dang worms to a halt if not the PC itself.

    Potentially the most useful Windows box ever built.

  23. I wound't say that broadband is the problem by adamshelley · · Score: 2, Insightful

    You are missing the point.

    Look at what is causing all of these outbreaks. Windows/Windows users.

    If there were no windows users, none of the current virus epidemics would be a problem.

    You think that virus's on another mainstream OS would take over? Doubtful.

    Consider the distribution of OS's left (-windows): you get a melange of flavors. Virus writers would have to be far more sophisticated to hijack that number of dissimilar systems with one set of code.

    1. Re:I wound't say that broadband is the problem by Anonymous Coward · · Score: 0

      If there were no windows users, none of the current virus epidemics would be a problem.

      You think that virus's on another mainstream OS would take over? Doubtful.


      Insightful? JESUS FUCKING CHRIST: Parent is not even a troll. It's just idiotic. -1 dumbass!

    2. Re:I wound't say that broadband is the problem by anantherous+coward · · Score: 1

      I partly with you about the earlier post. Software will have bugs, and the dominant OS will always be a target. The First internet worm was unleashed in 1988 and attacked UNIX systems. The earlier poster has not explained why he blames "windows users" and may just be trying to troll. I wouldn't have modded it up certainly.

      But -- the earlier poster could have made this point -- that Microsoft OS's are insecure by design. They create systems full of unneeded security issues for nothing more than commercial advantage. This subject was covered here a few months back.

      They could not have avoided the problems we have today, but they did make them much worse. And, yes, it was foreseeable -- witness the security measures in UNIX, present long before Win 95. So, they are morally culpable.

    3. Re:I wound't say that broadband is the problem by Robmonster · · Score: 1

      Its not Windows/Windowsa users causing the problem.

      Its Stupid Windows users causing the problem.

      People who do not patch or blindly open any attachment in their emails.

      If another OS was a widespread as Windows it would still be stupid users causing the problems.

      --
      I have no sig yet I must scream.
  24. A pair of sci-fi books that touch on this... by Anonymous Coward · · Score: 2, Informative

    Starfish by Peter Watts, ISBN: 0812575857
    and its sequel
    Maelstrom by Peter Watts, ISBN: 0812566793

    The second book focuses more on the viral evolution but they are both good books overall

  25. I swear it's late .... by taniwha · · Score: 0, Redundant
    I can't type ..... sorry, I ment to say:

    Come on - the virus and worm analogy is a great one to make lots of points ... but they aren't evolving under Darwinian survival of then fittest .... if anything it's more of a creationist sort of thing with rival gods throwing their latest creations into the world to battle it out with nature (ie the rest of us who provide the medium for them to live in) and each other

  26. For crying out loud, INSTALL A FIREWALL, already! by mbessey · · Score: 4, Insightful

    I still find it mystifying that any ISP would allow/encourage users to directly connect completely unprotected machines to a high-speed internet connection.

    Sure, Windows could be better in terms of security, but that wouldn't even be a problem if all those insecure services were behind (even a minimal) firewall.

    -Mark
    (My DSL account came with a "free" firewall-enabled router)

  27. Hmm... by Anonymous Coward · · Score: 0

    I've used broadband for almost two years now, and I've loved it. I've never had a virus ever since I used it, and I hope it stays that way.


    Hmm, maybe I forgot to mention I'm using Linux...

  28. Bill Gates in a meat grinder by dolfin · · Score: 2, Insightful

    Well, as long as his coding slaves continue to release patches for unexploited exploits, I think those of us that work in the wierd world of windows server support will continue to have jobs. Irregardless of how big the worms get. Broadband is happening, metropolitan wireless networks are becoming a reality, and society almost completely shuts down if the internet stops responding. We're already driving down the road and I don't see too many off-ramps to save us from complete immersion.

  29. Perhaps IPv6 could actually help here.... by Bombcar · · Score: 2, Interesting

    One virus vector is plain old portscanning......

    But you can't portscan 340282366920938463463374607431768211456 possible addresses very fast.

    But IPv6 is a ways off, yet.

    What we will see is an emergence of firewalls, etc, that make things more difficult for spam and viruses.

    And my guess is that the backbones will also grow, as there is a lot of dark fibre left over from the internet boom. And for the RIAA, I think the genie is out of the bottle. Even mailing disks around would perpetuate it.

    1. Re:Perhaps IPv6 could actually help here.... by Mal-2 · · Score: 1

      Valid point. Maybe we aren't using a station wagon full of backup tapes any more, but a spindle of DVD-Rs sent through the mail accomplishes much the same thing. It's definitely my means of choice for exchanging entire hard drives' worth of data with people. I generally won't attempt to transfer anything over a gigabyte over the 'net, in either direction. FTP just really isn't robust enough for that, and it still seems to be the standard of choice.

      Mal-2

      --
      How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
  30. Broadband doesn't change much... by Anonymous Coward · · Score: 1, Informative

    ...when your evil worm is 12k in size... Not like it takes that much longer for it to transfer on dial-up...

    The only possible diffrence is the permanence of the connection but that is becoming rather inevitable anyways.

  31. Not breakdown, probably divide by fembots · · Score: 5, Insightful

    A digital divide is probably more likely, as most people on broadband are accessing fuller multi-media experiences while poor souls have to avoid big-combo sites.

    I think from the history of technology advancement, things always get bigger, better, faster, strong etc, and they usually don't break themselves down in the process.

    Take our transportation for example, when the gravel roads got too crowded, we paved them, then widened them, then built highway motorway causeway, then we moved to train, light-rail, bullettrain.

    At first we only tried to travel a short distance if you had to do it by foot, when we have cars, we want to travel further and eventually it is too far for cars, and we move to flights etc etc.

    The cycle just keeps going.

    1. Re:Not breakdown, probably divide by Anonymous Coward · · Score: 0

      Skilled people paved them. Trained people calculated the amount of widening needed, and designed the new highways.

      The infrastructure is developed by people with the skill to do so.

      Everyone learns to walk. You have to LEARN to drive - but most people achive an artibary level of ability. How many people can fly planes?

      Apply that to your analogy!

  32. This is not the looming threat. by Sheetrock · · Score: 5, Insightful
    The general consensus is that bandwidth is infinitely expandable.

    The problem is the transformation of most nodes of the Internet from peers to clients. That's what's going on with broadband; they lure you to the service with speed and reliability then after you're in they let you know you can't run any services and they're putting a mandatory (and poorly-run) spam filter on your incoming mail.

    You're no longer part of the network. You're only a consumer and spectator. Spam is bad but RBLs like SPEWS and the admins that force them on their users can be worse. There used to be a time when you could hook into the Internet and go pretty much anywhere you wanted to go; today everybody wants to lock you down and force you to pay for things you once enjoyed for nothing or move to a different server because of some political battle over spam. When people like John Gilmore get screwed for running a mailserver, or a website like Something Awful has its business operations hampered, I can see the writing on the wall.

    We need to get back to the days of having Internet access being a utility, much like electricity or water, where one could hook in and use it any way one will. The looming threat is control, lockdown, and homogenization that promises to render this medium as stale as commercial radio.

    --

    Try not. Do or do not, there is no try.
    -- Dr. Spock, stardate 2822-3.




    1. Re:This is not the looming threat. by pavon · · Score: 4, Insightful

      You're no longer part of the network. You're only a consumer and spectator.

      No you are not. You can contribute to the content on the internet in a million ways. You can add content to forums and Wikis. You can chat with friends in IRC and IM. You can write email to anyone. You can have your own site at places who will give you space for free. Or you can pay for space on a multitude of hosts, at a wide range of pricing options. You can contribute to the internet as much as anyone on an unfettered T1.

      The only thing you can't do is be a system administrator. And that is a good thing. These connections need to be administered - improperly administrated computers are what make virus and spam possible. 99% of people on broadband are not qualified to administer network security, and it is absolutely rediculus for slashdotters to get angry at them for failing to live up to that expectation. The ISP's are the IT department for the home user, and they need to start acting like it.

      If you wan't to be your own system administrator, there are accounts for that. You will be much happier if you just get one, and everyone will be happier when the stability of the internet is not dependant on average users being network security experts.

    2. Re:This is not the looming threat. by twigles · · Score: 0

      This is a pipe dream. Big money is dug into the internet like a tick; there is no going back. And as much as I'd like to blame AOL and their ilk, I have to admit enjoying the ability to buy a video, book and a jacket without leaving my chair (bought that online too). If you have bought anything online then you have contributed to what the internet is today.

    3. Re:This is not the looming threat. by Mad_Rain · · Score: 1
      The only thing you can't do is be a system administrator. And that is a good thing. These connections need to be administered - improperly administrated computers are what make virus and spam possible. 99% of people on broadband are not qualified to administer network security, and it is absolutely rediculus for slashdotters to get angry at them for failing to live up to that expectation.

      First, I agree with you, that the majority of people should not be admins, but I guess my question is where/how do you draw the line between someone who is and isn't qualified? Who enforces the standards? Who makes those decisions?

      I'm thinking that as more people get involved in making those decisions, the more the previous poster is right, and that we'd move away from being able to contribute in a variety of ways...
      --
      "What do you think?" "I think 'What, do you think?!'"
    4. Re:This is not the looming threat. by CAIMLAS · · Score: 1

      I smell bullshit. I think it's your writeup.

      You're basically saying that having restricted broadband doesn't diable you from contributing as much as someone with a full T1. I disagree, and here is why.

      Someone with even a dialup connection can still run services (http, ftp, whatever) from their systems via, say, dyndns.org type url direction. It's slower, but it is still serving content.

      There are a lot of things you can't do with a fettered connection. Can't run a web server? You just lost your ability to serve whatever content you wanted. No photo galleries, no creative works you want to retain ownership of, nothing like that.

      Online services will put umpteen restrictions on everything you do through their service, more times than not. The only exception I can think of are services such as livejournal and turtle creek, which rely completely on donations from their users and other people that think their material is worthwhile. Not everyone can use such services.

      Sure, your average joe might be able to get by using what little available services there are online. But your average geek? No way. Do a google search time and tell me how many sites by "average joes" pop up, and how many are by geeks. How much of the actual content couldn't be provided without that person having at least some degree of administration priviledges?

      Where are these "accounts" that are "for [system administration]"? I've never seen people giving away root accounts; maybe you're using a different Internet than I?

      What kind of daft individual would moderate this ass-byproduct as insightful?

      --
      ~/ssh slashdot.org ssh: connect to host slashdot.org port 22: too many beers
    5. Re:This is not the looming threat. by pavon · · Score: 1

      How about you decide if you are competent. If you want to administrate your own server, you get a "business connection" with fat upload and no firewall. Everyone else will just go with the normal connection that has "virus blocking built-in". It's not perfect, but much better than what we have now.

    6. Re:This is not the looming threat. by Stray7Xi · · Score: 2

      No everyone isn't qualified to be a system administrator. But I certainly rather be on an internet that anyone can be a system adminstrator then one where the only qualification needed to be one is money.

    7. Re:This is not the looming threat. by Alzheimers · · Score: 1

      Unregulated Broadband will cause the Internet to finally be shoehorned into a Push-Only design. You can see it now already with many of the major "Service Providers" (AOL, Earthlink, Comcast). Allowing only basic interactive functionality (email, search engines) the rest of the net will narrow itself to a small number of content producers and a high number of content readers. Online gaming? Most will run fine at 5-10k/s, so a capped upstream will not hinder EQ or FFXI, as long as the service is regulated. Oh yeah--just to make sure that the content producers aren't clueless, businesses that want an internet presence will need a lot of up-front capital and will be regulated by the FCC and every other government agency that can attach a claim on your "content". P2P? Filesharing? Blogging? Every *IAA agency in the world's greatest dreams come true every time another virus propigates through the net, causing more ISP services to restrict access thanks to it's clueless users.

    8. Re:This is not the looming threat. by Lost+Race · · Score: 1

      John Gilmore was not "screwed for running a mail server". His IP address was listed as being a wide open SMTP relay. I for one do not accept mail from wide open relays, due to the vast potential for spam and other abuse. If that "screws" John Gilmore, too bad for him, but he brought it upon himself. There is no good reason to run a wide open SMTP relay on the Internet today.

  33. TOS reflect interesting trends by RLiegh · · Score: 3, Interesting

    I have mediacom cable internet. Quite fast but if DSL was here, I'd consider taking it. Why? because mediacom does not allow servers.

    Reading through thier various offers is interesting. Not only do they not want home users to run servers, but they even want to limit servers to certain business users, too.

    In my opinion, this is going to lead to less people offering content on the web, as the bandwidth becomes more restrictive, and your choices decrease down to a few broadband options.This is in direct contrast to the mid-90's promise of the net where it was seen that anyone would be able to put up any thing.

    I feel very sad, myself: I pay boupcoup bucks for a good connection (at least, compared to dialup) but I can't do jack shit with it (at least I can't do 2/3rds of what any healthy geek would want). Barely seems worth it.

    1. Re:TOS reflect interesting trends by koan · · Score: 0

      How are they going to know? comcast says I can't run servers or VPN or several other items yet I do every single day for the last 2 years.
      Guess what...they don't know or care or have the time to police it.

      --
      "If any question why we died, Tell them because our fathers lied."
    2. Re:TOS reflect interesting trends by RLiegh · · Score: 1

      No one's going to know (I assume) if you run an instance of ftpd or apache on your own server. However, if you decide to go publicHulver did on his DSL line...sooner or later someone would be bound to wonder why the traffic is suddenly spiking...

      Running an instance of apache is great for practice, I guess...but what's the point of having a server if no-one can legally (TOS legal, I mean) connect to it?

    3. Re:TOS reflect interesting trends by NoMoreNicksLeft · · Score: 1

      If you feel so sad, why not join me on my network? Invisible to your ISP, and unrestricted. We need people like yourself.

    4. Re:TOS reflect interesting trends by RLiegh · · Score: 1

      If you feel so sad, why not join me on my network? Invisible to your ISP, and unrestricted.
      Because I'm a friendless USian. :-/

  34. personal responsibility by koan · · Score: 0, Insightful

    I just drove up and playing on the radio in my car was an NPR commentary on "spyware" and the people trying to get legislation against it, well, whatever happened to personal responsibility? It isn't broadband that's the problem nor is it virus creators or spyware schleps it's the end user and the enormous ignorance of said user.
    The Inet and your computer are not as simple as TV but that appears to be what the common user thinks it should be.
    Until you address the actual problem (the user) the only thing we will get from legislation and laws is bigger, more intrusive government.
    I would rather see people forced to get a "computer license" than create any more laws around the Inet and computer because we may just lose the last sanctuary of free speech.

    --
    "If any question why we died, Tell them because our fathers lied."
    1. Re:personal responsibility by YouHaveSnail · · Score: 1

      I heard the same story. Isn't it already illegal to break into someone else's computer and take control of it?

      The same laws that are supposed to prevent hackers from breaking into corporate and government systems should apply to companies that use adware and spyware. And IMO, companies that use adware to sell anti-adware products should also be charged with extortion.

  35. so....? by netfall · · Score: 1

    Yes. We should all go back to 300 baud modems.
    You should be able to download this whole /. thread by tomorrow.

    1. Re:so....? by Anonymous Coward · · Score: 0

      More like 2 cans and a string, and to send data we will shout binary through them.

  36. The party will soon be over. by DigiShaman · · Score: 1

    The problems that face the Internet are as follows. Illegal music, movies, software, and books. Also, the US gov wants to dip into the online sales revenue through taxation. MS, wants to charge e-mail with a small fee...which will quickly add-up for corporate America.

    Solutions? None. I hate to sound cynical, but just look to our past. Once the freedom of anarchy directly affects our economy in a negative way, regulation WILL soon follow. The only debate at this point is how soon and how hard will the Internet be regulated.

    --
    Life is not for the lazy.
    1. Re:The party will soon be over. by TruthSeeker · · Score: 1

      Once the freedom of anarchy directly affects our economy in a negative way [...]

      Sorry about this one, but...

      Economy is an artifact, a mere consequence of a way of organizing ourselves.

      As for "negative ways", evolution works by trying, and failing more often than succeeding.

      --
      I sense much beer in you. Beer leads to intoxication, intoxication leads to hangover. Hangover leads to sobering.
    2. Re:The party will soon be over. by DigiShaman · · Score: 1

      Dictionary.com on Economy
      "Careful, thrifty management of resources, such as money, materials, or labor"

      Our economy in the US is not an artifact. Our economy IS planed with an onjective goal in mind. That is, you trade labor, services, or good in exchange for the same of different value.

      If what you say were true, then by all intent, thievery would be acceptable as a natural form of economic evolution.

      --
      Life is not for the lazy.
  37. A good reason to use encryption by MacDork · · Score: 3, Interesting

    If your messages are encrypted, then you don't have to worry about automated programs kicking them for their content or attachments. That will be up to the decrypting party. I pity the ISP that starts blocking messages because they are encrypted.

    Learn how to cryptographically sign your mail on Mac OS X 10.3

    1. Re:A good reason to use encryption by iminplaya · · Score: 1

      I pity the ISP that starts blocking messages because they are encrypted.

      If they do it on their own, don't. I would hope that they're not that dumb. However, this is something the gov't could demand (gotta stop those waskiwy tewowists).

      --
      What?
    2. Re:A good reason to use encryption by homer_ca · · Score: 5, Informative

      Yeah, and not just humans either. The worms are starting to use encryption too. Some versions of Bagle are spreading themselves in password encrypted Zip files, with the password in the message body. The pace of the arms race is incredible. Antivirus vendors then updated their scanners to scan the message body for the Zip file password and decrypt the attachment. The virus writers then started sending the password in a bitmap attachment to foil the virus scanners.

      Of course that story was from 2 weeks ago so it's old news. This week the latest variant has no attachment at all. It's just HTML that exploits an IE bug that downloads the worm from the infected computer that sent the message.

    3. Re:A good reason to use encryption by frdmfghtr · · Score: 2, Interesting

      The virus writers then started sending the password in a bitmap attachment to foil the virus scanners.

      Seems to me that this is a natural virus filter. People who are dumb enough to open virus-laced e-mails will be too lazy or won't be smart enough to go through the hoops to open the virus payload, and those smart enough to go through the hassle will also be smart enough to recognize the trap they're facing and just delete the darned thing.

      Although, as has been said before, "never underestimate the power of the stupid."

      --
      Government's idea of a balanced budget: take money from the right pocket to balance...oh who am I kidding?
    4. Re:A good reason to use encryption by (startx) · · Score: 1

      Learn how to cryptographically sign your mail on Mac OS X 10.3

      Or you could simply download/install GPGMail and not worry about all that silly cert stuff.

      You DO have a GPG key allready, right?

    5. Re:A good reason to use encryption by s0m3body · · Score: 1

      if you want to send your data encrypted, you don't use zip, winzip, or whatever you call it; you can use some real encryption for the stuff

      spam ? what is it ? my email addresses are publicly available and my email client is getting a lot of spam messages
      i don't get almost any of this shit
      i see 3-4 of them a day
      3-4 spam messages a day are not going to affect my productivity, they are more like 'funny examples' of what has got through the bayesian filter

      of course, there are people who do not have corporate filter and not even a personal one -> it's their problem

      you don't jump out of a plane without a parachute, and you don't plug in to internet without having a protection

      it is like sex

      if you really do, it is your problem, not internet problem

      if you don't like something (spam) -> it is up to you to make something about it
      there is no anti-spam angel, so wake up and stop complaining !

    6. Re:A good reason to use encryption by dnoyeb · · Score: 1

      a well encrypted message is hard to tell is encrypted anyway. There is a message in a message. We saw this a couple years ago with the messages hidden in the pictures.

      So first you need to know its even encrypted at which point you have probably cracked the encryption anyway.

      That is for well encrypted message.

    7. Re:A good reason to use encryption by toast0 · · Score: 1

      while strong(er) encyrption is coming to zip files, the existing widely supported password protection is trivially weak. They've been making zip password crackers that work for a damn long time. The truly caring email virus scanner would spend the time to crack the zip file and check it for viruses.

      AFAIK, Microsoft does not include support for sending or recieving strongly encrypted files through email in Outlook; you have to get 3rd party tools, and that's outside the scope of a lot of people's desire to care.

    8. Re:A good reason to use encryption by iminplaya · · Score: 1

      Even steganography has its weaknesses. The good thing though, is that you have to be looking for it. However, if you've been "tagged" they're going to check everything coming out of your machine, and where it's going. If we can remove the ISP, it can bring us one step closer to absolute privacy. Until ALL communication is open, I'm going to close mine as tight as I can when I need to.

      --
      What?
    9. Re:A good reason to use encryption by etrnl · · Score: 1

      And "truly caring" email sysadmins will disable that feature due to the CPU cycles it uses to crack ZIP encryption.

      Personally, I just changed my server to block passworded archives. Problem solved, and I've yet to hear a user complaint.

      --etrnl--

    10. Re:A good reason to use encryption by ergo98 · · Score: 1

      if you want to send your data encrypted, you don't use zip, winzip, or whatever you call it; you can use some real encryption for the stuff


      His point wasn't about the relative strengths of encryption algorithms (everyone knows that the legacy zip encryption format is a joke, though AES is in WinZip 9), but rather that there is an escalation between the virus writers. I get my email through a virus checking server, so I was surprized when I saw the obvious virus make it through, and then saw that the were resorting to "encryption" to beat standard binary virus checks. They could just as easily be using ROT-13, but it's probably easier for the average virus target that'll double click the attachment and just punch the numbers into WinZip.

      3-4 spam messages a day are not going to affect my productivity, they are more like 'funny examples' of what has got through the bayesian filter

      You're like the anti-immunization whackos that talk up about how unnecessary vaccines are -- I mean they aren't coming down with polio! The reason, of course, is that the general population is protecting them. In your case the general population makes limited use of filters, so thus far the spammers have only moderately upped the ante. However Outlook 2003, for instance, has vastly improved spam detection (indeed it's quite impressive), so you can fully expect the spammers to start going full throttle to overcome spam filters. Would it be difficult? Of course it wouldn't? Hell, the easiest thing would be contextual spam masking: Remember the context that each email address was harvested from, and embed the message with information from that source (for example Linux related things for Slashdot harvested emails).

    11. Re:A good reason to use encryption by skiflyer · · Score: 1

      of course, there are people who do not have corporate filter and not even a personal one -> it's their problem

      This is great for the individual user. But for the small business individual it's not an option. For every false positive I could be losing a potential sale, so what, too bad for me? So, I should consider Bayesian filtering good enough, even though it lets a few through, and catches a few it shouldn't? Spam's a problem, some of us deal with it daily, some of us once and awhile, and some of us never.... but so many messages like yours, I have no problem with it, therefore you're all a bunch of whiny noobies. Ignorant, elitist, incorrect approach.

      And if all of that means nothing to you, what about the enormous amounts of bandwidth being sucked down by spam? Realize it or not, but there's a chance it's affecting you.

      Bah, I feel trolled, good night.

    12. Re:A good reason to use encryption by HD+Webdev · · Score: 1

      AFAIK, Microsoft does not include support for sending or recieving strongly encrypted files through email in Outlook; you have to get 3rd party tools, and that's outside the scope of a lot of people's desire to care.

      They can't include the support.

      MS wouldn't be able to distribute Office in countries that have laws against (public) strong encryption.

      --
      This is not a dream, not a dream...we are transmitting from the year 1-9-9-9.
    13. Re:A good reason to use encryption by EvilTwinSkippy · · Score: 1
      I have users who have fallen for the sulfenwhatever.exe hoax not once, but twice. I also had users "free up space" by deleting chunks of the win32 directory.

      NEVER underestimate the power of the stupid.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
    14. Re:A good reason to use encryption by toast0 · · Score: 1

      Well that makes sense. It still limits what virus writers will be able to use to get past virus scanners. I have enough faith in people not to install legitimate encryption/decryption software, just so they can get a virus, at least for the next 3 months or so.

    15. Re:A good reason to use encryption by s0m3body · · Score: 1

      > You're like the anti-immunization whackos that
      > talk up about how unnecessary vaccines are

      i simply don't consider 'global spam' as a solution
      if there is a filter at ISP and has a false positive, i have no chance of finding it out

      if it is my filter giving false positive, and i'm expecting an email, i can search through spam filter, etc ...

      i can also train my filter to work well for me, while ISP would have to use 'generic' filter

      i had already a problem with filter at ISP; i have won one auction on ebay, the person was using AOL and AOL was reufsing my emails (i don't know why, my smtp server was definitely not a spam relay, never !)
      they refusal message told me that i should call somewhere, etc ...
      i have really no interest to that

      once there would be an open standard of a kind, which should help finding (or tracking at least) spam; i will implement it on my side, no problem

      but having an ISP with a spam filter is imho worse then 100 spam messages dail

    16. Re:A good reason to use encryption by s0m3body · · Score: 1

      wait please !

      i haven't said that i'm against fighting the spam
      i just don't like the idea of having spam filter at ISP which can have several false positives a day !

      if there are some open standards for fighting/tracking spam on a global level, great, i will implement it on my side, no probs !

      but until then, i will rather do filtering on my side, where i can define whitelist, where i can check for false positives, etc ...

    17. Re:A good reason to use encryption by adam+mcmaster · · Score: 1

      I've also seen worms/viruses sent Base64 encoded...the mail client auto-decodes and displays the message, but the filtering software (at least then) didn't.

    18. Re:A good reason to use encryption by Tassach · · Score: 1

      And if you do every manage to build an idiot proof system, nature will respond by building a better idiot

      --
      Why is it that the proponents of "one nation under God" are so eager to get rid of "liberty and justice for all"?
  38. Death Of the Internet Predicted: Film @ 11.... by Anonymous Coward · · Score: 0

    It is time for the yearly "The Internet is Doomed! Doooooooomed!" postings and kook theories.

  39. Neither by John+Hasler · · Score: 1

    > Will the Internet fall in popularity as it becomes
    > more and more frustrating and dangerous to use, or
    > will we simply see a massive improvement in coding
    > practices and more secure software?"

    It will become more frustrating for us, but less dangerous to those to whom it's just a type of television. This will come about not through a massive improvement in coding practices and more secure software but through a massive increase in regulation and control. The cable companies will control what you see on the Net the way they control what you see on cable tv.

    --
    Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  40. Troll? Truthfull regardless... by Eric_Cartman_South_P · · Score: 3, Funny
    "...will the proliferation of broadband Internet access deal a serious blow to current freedoms on the Internet?"

    No, because with a cable modem connection I can order a Powerbook faster than ever.

  41. Re:It's not the broadband by torokun · · Score: 1

    Uhhh. Aolers would still make the same mistakes if they were all on unix systems...

  42. Broadband is not the cause by Morgahastu · · Score: 1

    If we were all running on dial up the viruses would still spread nearly as fast.

    What has doomed the internet is the monopoly over software that makes one vulnerability in the dominant software to take down almost everyone on the internet.

    If the population was using an even mix of different email clients, browsers, and operating systems we would all be much safer.

    What I think really accelerates virus distribution are MS Exchange workgroup email servers. Those viruses go through contact lists that can contains hundreds of thousands of emails in seconds! That's where viruses really multiply.

    I don't understand why no one puts anti virus software on their email servers. I have several email addresses and the only one that I DON'T pay for (a family run server) is the only one that has server side anti-virus and it works great. Why can't ISPs and large corporations do the same? Have they not seen how viruses can cripple networks?

    At the college I attend (and work at) they push down a script on the domain that makes everyone computer in the school run this annoying virus specific clean up tool from Norton everytime a new virus makes its run around the internet. This is run before the logon screen so it can make the computer take 5-10 minutes longer to boot up! That's simply ridiculous.

  43. How about this by SquierStrat · · Score: 0

    Maybe it isn't the greater use of broadband, but the great use of products and actions that promote the spread of virii and worms.

    --
    Derek Greene
  44. The downfall of the Internet is not likely by Gary+Destruction · · Score: 1

    The downfall of the Internet will occur only in an apocolyptic scenerio such as a nuclear holocaust or an asteroid striking Earth. And groups like the RIAA and MPAA are like the government. They refuse to admit one thing: They are ultimately powerless to stop what goes over the wires. Abolition of anything can easily create a counteracting effect. As far as viruses, worms and spam are concerned, IPv4 leaves the door open to header forging and email address spoofing. IPv6 is supposed to stop that. But last the I checked, its code wasn't thoroughly tested and it could take years to implement. High speed connections do make you more vulnerable to infections IF you don't secure your system. Simply hooking into the Internet without protection obviously can lead to disaster. But Windows XP's firewalling is a sign of things to come. Firewalls and virus scanners will be so common that for anyone not to have them would be a shock.

  45. [OT] Emergence anyone ?... by TruthSeeker · · Score: 1

    Well ... Maybe the tera-horde of worms rampaging the internet will lead to emergence and evolution ; worms could evolve due to communications errors.

    It could lead to something interresting, even if it's damn boring and, well, quite ugly in a "read-your-snort-logs" sense...

    --
    I sense much beer in you. Beer leads to intoxication, intoxication leads to hangover. Hangover leads to sobering.
  46. Why? by Anonymous Coward · · Score: 0

    Say a little more.

  47. Network Biology by StuWho · · Score: 4, Insightful
    As networks become ever more complex, they become increasingly like ecosystems.

    The best defense against viruses is a healthy immune system, and an organism gains a healthy immune system through exposure to germs and viruses.

    The current "epidemic" of viruses serves only to strengthen the immune systems various groups are developing to regulate the wider ecosystem - the net.

    There will always be change, and one of the drivers of change is chaos.

    --
    "If you think nobody cares if you're alive, try missing a couple of car payments." Earl Wilson
    1. Re:Network Biology by mcrbids · · Score: 1

      The best defense against viruses is a healthy immune system, and an organism gains a healthy immune system through exposure to germs and viruses.

      So, at what point does the Internet become self-aware and Sky-Net is launched?

      --
      I have no problem with your religion until you decide it's reason to deprive others of the truth.
    2. Re:Network Biology by StuWho · · Score: 1
      "So, at what point does the Internet become self-aware."

      An interesting question. I don't have an answer, but I do think that it's a matter of when rather than if.

      --
      "If you think nobody cares if you're alive, try missing a couple of car payments." Earl Wilson
  48. So, will you eat your comments if you're wrong by sulli · · Score: 2, Funny

    like Bob Metcalfe did when he predicted "gigalapses" of the internet?

    --

    sulli
    RTFJ.
  49. Broadband or Human Nature? by The-Dalai-LLama · · Score: 5, Insightful

    I think the proliferation of broadband has helped the internet become a more valuable tool for the average 2.5-kids-having-explorer-driving-all-American-fami ly, which has caused it to be a greater part of all our lives. As such, it is now on the radar for the type of people who are threatened by anything beyond their control.

    The more we become dependent on the internet, the more interest there will be in regulating it. The level of freedom, possibility, and power that the internet affords to the average person is simply unprecedented. Freedom of the press belongs to those who own a press. With the advent of the internet, the average soccer-mom now has a press that can publish to the entire world for pennies.

    Attempts to regulate and lock-down the net are inevitable. It is the nature of those who seek power for themselves to deny and control the power afforded to others.

    The possibility of always-on connections spewing a constant stream of malware and sludge is just an excuse. The proliferation of broadband is dangerous because it put the issue on the map and a very high level of power in the hands of the people.

    The Dalai Llama
    Citizen of a nation where freedom of speech, bought with the blood of heroes, is used to spread pr0n and reality TV shows.

  50. Re:It's not the broadband by Anonymous Coward · · Score: 1, Insightful

    "No, but the proliferation of crappy Microsoft software will. In fact it has already."

    Only at slashdot would something like this get modded as insightful. A random statement against Microsoft that is untrue and backed up by no facts or information. The majority of Windows users use Windows as there choice, they don't want to use a Mac, and are not interested in Linux. Furthermore, if you feel that you can write better software go do it and you will make a lot of money. This poster is just another angry Slashdot reader that is looking for something to insult MS about. I don't use Microsoft, I use Linux, but some of these anti-MS posts are ridiculous. Just another user mad at MS who does not have the skill or the know how to make anything better.

  51. whats Darwin got to do with it by paragmas · · Score: 1

    > 'After noting the current surge in Internet worms and the so-called Darwinist evolution of these things into more and more powerful incarnations, '
    Evolution of life forms according to Darwinistic theories implies selection of stronger lifeforms via random mutation. There is nothing random about the scum who write this malware. They use proactive intelligence (the obvious reason that Evolution can't work when c.f. complexity of biological life (eg. ireducible complexity))
    The internet is really a true market economy. If the rewards outweigh the penalties, it will continue to be used. If it costs spammers more to send email than they make out of it, most of them will stop. The internet offers so much in the way of information, growth will never stop, rather we will use our proactive intelligence to stop the problems now happening.

    1. Re:whats Darwin got to do with it by bee-yotch · · Score: 1

      Although the mutations may be random, the mutations that survive are certainly not. The idea is that the best mutations survive and the rest perish. Thus only more and more powerful viruses and spamming techniques will succeed.

      However, by that same reasoning the internet will evolve too. And because of how much more important the internet is then viruses/spam (to most people) it will likely evolve to be far stronger.

      Of course there'll probably always be viruses and spam, but the protocols will change to prevent the easy proliferation of these.

    2. Re:whats Darwin got to do with it by paragmas · · Score: 1

      You make it sound so easy. I bet if you randomly changed an opcode in your nice virus it would take billions of iterations for an improvement to be seen. How long would it take for billions of iterations to occur if the file copy process only breaks once in a million copies. The trouble with evolution, is when you examine the probabilities, it is highly^100 improbable.

  52. ISPs can deal with this... by Tony+Hoyle · · Score: 2, Interesting

    Just put a clause in the contract. If a PC is put onto the network without antivirus and firewall and it gets infected (thus becoming a threat to the ISP), the account is immediately terminated without right of appeal.... in theory ISPs could already do this (as infected machines are often spam vectors and spamming already has such penalties) but an explicit contract stops them saying they didn't know.

    Publicise it... make sure that the ordinary users are given every chance to comply (a CD that automatically installs Norton should do it), and that's 90% of the problem solved.

    1. Re:ISPs can deal with this... by geekoid · · Score: 1

      well that won't do.
      Besides suddenly become the support center to what ever disks you distribute, you are expecting too much from the users.
      Plus, as soon as one ISP does that, another will appear that isn't so demanding, and take all your users.

      This is only a temporary problem. Microsoft will be making anit-virus part of the core OS.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    2. Re:ISPs can deal with this... by Tony+Hoyle · · Score: 1

      Some ISPs in the UK have already gone a little way down this road.

      Yes, the customers were mad, but I have no sympathy.

      Computers are *not* toasters. You have to learn how to use them, just like you learn how to drive. If I'm in a car and drive like a madman I'm (rightly) likely to be banned from driving. Same for computers.

      You're already the support center for everything from the machine not booting to the bad weather last thursday... nothing really changes. 90% of ISPs already have bootable CDs with drivers etc. so adding firewall and AV isn't much.

      XP SP2 won't solve the problem - joe sixpack is still using 9x/Me anyway, and guess what? If a virus wants to open a listening port you get a nice friendly dialog, which the clueless will just hit 'yes' to out of reflex... rendering the firewall useless.

      You have to introduce real consequences, otherwise people won't wise up and this mess will continue to get work.

  53. Thank God for noisy fans by StuWho · · Score: 2, Funny

    If it wasn't for cheap and noisy PC's which can't be left on because the racket they emit is disturbing to their owners, this could become an epidemic.

    --
    "If you think nobody cares if you're alive, try missing a couple of car payments." Earl Wilson
    1. Re:Thank God for noisy fans by majestyk2000 · · Score: 1

      You know, I work for a company that does new computer builds, and the current group of hardware we use is spookily silent. We build 3ghz P4s with Serial ATA drives and 400W power supplies, so they aren't underpowered. The video cards are high-end GeForces with their own fans, but I swear I can fire up one of those machines with the case off and no blocking plates in the back and I have to put my hand on it to see if it is actually running. When everything is buttoned up, it is dead silent. I guess we're contributing to the decline of the Internet, eh?

  54. Re:It's not the broadband by Anonymous Coward · · Score: 0

    "No, but the proliferation of crappy Microsoft software will. In fact it has already."

    How is this in anyway insightful? Another random comment against MS that is backed up by no proof. Should be marked -1 Troll.

  55. We Must Stop Skynet by BEI01 · · Score: 0, Offtopic

    Pull the plug now! We can't let Skynet take over.

  56. Re:It's not the broadband by vigilology · · Score: 2, Insightful

    Often on talk radio I hear them discussing 'controversial' issues like how the internet is bad because of all the "porn sites popping up out of nowhere" and how it - the internet - needs to be heavily regulated. FFS. The problem is not the road; the problem is that shitty car that you're driving!

  57. Can't...resist...bad...pun... by MonkeyGone2Heaven · · Score: 1


    We have worm sign the likes of which not even God has seen!

  58. pet peeve by geekoid · · Score: 2, Insightful

    Irregardless is not a word.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    1. Re:pet peeve by dolfin · · Score: 1

      http://dictionary.reference.com/search?q=irregardl ess Eat me. :)

    2. Re:pet peeve by dolfin · · Score: 1
    3. Re:pet peeve by Anonymous Coward · · Score: 0

      Shut up or i'll haxor all your boxen with my 1337 virii.

    4. Re:pet peeve by Anonymous Coward · · Score: 0

      Actually you should read that page, and then eat him :)

    5. Re:pet peeve by Anonymous Coward · · Score: 0

      to regard: to consider, to weigh, to size up
      regarding: considering, weighing, sizing up
      regardless: to not consider, to not weigh, to not size up

      smart people: "regardless of the facts, I believe otherwise"

      smart people: "disregarding the facts, I believe otherwise"

      dumbasses: "irregardless of the facts, I believe otherwise"

      the morph of the usage came about because of the usage of "irregarding", which is fine. e.g. "irregarding the facts, I still protest"

      but "irregarding" should not be morphed into "irregardless"...it's simply "regardless"

      irregardless: eventually webster caved because too many ignorant morons were using to what amounts to "a double negative", and added it to the dictionary.

      irregardless = the usage of is a sure fire way to spot psuedo intellectuals, and generally those who consider themselves "mental giants".

      used to impress because of it's length. if you end up in a conversation with a person who uses "irregardless", you now know what you are dealing with.

      cock size is too small.

      so person has to over compensate.

  59. Thats what you get... by Anonymous Coward · · Score: 0

    for letting short sighted profit centric corporations organize the broadband rollout. This is the perfect example of why an unrestricted free market is not a good thing. Now we will be wasting valuable time and resources to fixing a fuck up that should not have happened in the first place. Support a national effort to use our tax money (give less to private corporations and more to improving everyones life), to lay a 100MB backbone to every house.

    1. Re:Thats what you get... by Anonymous Coward · · Score: 0

      sure thing comrade. hold up while i finish off this infidel.

  60. No by Anonymous Coward · · Score: 0

    I wonder: will the proliferation of broadband Internet access deal a serious blow to current freedoms on the Internet?

    Governments will.

  61. The United States of Whatever by Anonymous Coward · · Score: 0

    And I was like "Whatever"

  62. What about a test to be allowed to use the net? by i8a4re · · Score: 3, Funny

    Make a standard, fairly simple test that you must pass before you are allowed onto the internet. This test only needs about 3 questions. First, can you turn on the computer by yourself. Secondly, can you setup and or access e-mail by yourself. Thirdly, when you set up your e-mail, you should immediately e-mail the licensing agency. They should respond with an e-mail that completely looks like a virus. If you open the program attached, you fail. This program should promptly erase your hard drive so you will pose less of a threat.

    --

    If I drive fast enough at the red light, it'll appear green.
  63. Umm... You Should've Read This by pix3lphr3ak · · Score: 1

    http://slashdot.org/article.pl?sid=04/03/18/182525 2&mode=thread&tid=103&tid=126&tid=95&tid=9 9 Not to make you feel like an IDIOT and whomever made this go on the main page... MAYBE ITS THAT MORE PEOPLE THAN EVER ARE USING THE FARKING INTENRET!

  64. Not just Malware and SPAM - Infrastructure by Embedded+Geek · · Score: 1
    I'm not just concerned about the issues above, but also the impact of intended traffic on the Net's entire infrastructure. When most people have dialup and only a few have fast connections, they're more likely to pick and choose content rather than do downloads en masse. With everybody having broadband at their home, you will see more bottlenecks exposed all the time. For years, college dorm networks have had more trouble with the bandwidth challenges caused by Napster and Kazaa than the legal issues.

    With more broadband use, you will see ISP costs go up and service reliability go down as backbones require upgrading. You will see site hosting costs increase as they face more demand, too. I also can't help but wonder how many coffee shop WAPs will be next to worthless in a few years if the owners aren't diligent about upgrading regularly.

    Eventually, of course, the free market and Darwin will take care if these issues. Technical improvements will drop the cost of bandwidth and the bottlenecks will be upgraded one at a time. Those that fail to will find themselves going under (or, for our coffee shop owner, simply getting out of the WAP business). I figure everything will eventually work itself out, but it is going to be a very bumpy road getting there.

    --

    "Prepare for the worst - hope for the best."

  65. pet peeve: assholes like you by Anonymous Coward · · Score: 0

    who cares?

  66. The internet started to suck by Anonymous Coward · · Score: 0

    about the time AOL came to be letting loose a flood of morons.

    I blame AOL.

  67. Re:It's not the broadband by Disevidence · · Score: 2, Funny

    didn't read article.... didn't understand story.... don't grasp implications... I"LL BASH MICROSOFT INSTEAD!!

    --
    Think nothing is impossible? Try slamming a revolving door.
  68. No bandwidth... Users of it by Joe5678 · · Score: 2, Insightful

    Look at all the big worms we've had so far this year. They haven't been exploits of security holes, they've all been worms that people receive in their e-mail and then double click on.

    Sure with broadband their double clicking takes action faster, but I don't really think that's the problem. The problem is that there are so many more people online now than there was two years ago, and a large chunk of them do not have the knowledge to deal with viruses in their email. Double click now, worry later.

    People do NOT pay attention to what they are opening, I do IT for a small business, and we haven't had any machines infected yet. All of the viruses are caught at the mail server and replaced with a text attachment stating "THERE WAS A VIRUS ATTACHED BUT IT HAS BEEN REMOVED BY THE VIRUS SCANNER.TXT" and the same people day after day will forward me the message or call me on the phone and ask if the message is a virus.

  69. To fix the problem by fdiskne1 · · Score: 4, Insightful

    Yeah, I know. Everyone has their own fix for the problem, but I really think these steps would take care of most of it.


    1. Free firewall software from an ISP for all Windows boxes. I really don't think ZoneLabs would charge too much for an ISP to distribute the free version of ZoneAlarm. Ditto that for AdAware or Spybot S&D.

    2. Free virus-scanning of all email. Don't scan for spam and forward through all virus-stripped email just in case it contains important information. I know, most viruses are ONLY viruses, but you never know what may come later.

    3. Have ISPs monitor port 25. If traffic is seen, test it for an open relay. This could be part of the contract the customer would sign. If it's an open relay, block it and tell the customer to clean up the machine if they want it open.

    4. Once a new major virus such as MSBlast hits, monitor for it's traffic and block appropriately or take them offline until it's fixed. Of course the virtual network with cleaning tools is a good idea, also.

    If this doesn't happen (and I don't expect it to) people with computers HAVE to learn that running a computer hooked up to the Internet is a responsibility. If they can't learn how to manage it properly, they should hire someone to do it. You have to maintain your car and people don't complain too much about it. If they do, people may feel sorry for them, but that's as much slack as they get. Don't fix it? Don't drive.

    --
    But why is the rum gone?
    1. Re:To fix the problem by LordLucless · · Score: 1

      3. Have ISPs monitor port 25. If traffic is seen, test it for an open relay. This could be part of the contract the customer would sign. If it's an open relay, block it and tell the customer to clean up the machine if they want it open.

      All that monitoring and callback seems a pain in the butt. How about this. Block port 25 by default. Include a simple mechanism for customers to unblock their port - my ISP has a web interface for changing plans, updating billing details, etc. It would be easy to incorporate something like that there.

      The best option would be to block *all* ports, and provide a web interface like that found on many SOHO routers, essentially turning the ISP into a customizable firewall - but I've got no idea how much that would cost to implement correctly without slowing the system down.

      Most bugs recently are either spread by user stupidity (running evil attachments) or by flaws in the software listening on incoming ports. These are more nefarious of the two, as people really haven't done anything wrong to get them. Firewalling connections at the ISP level (while maintaining the opportunity for competent users to unblock them - incompetent users probably wouldn't bother figuring out how) would totally eliminate this second type of virus.

      --
      Just because you're paranoid doesn't mean there isn't an invisible demon about to eat your face
  70. Darwinist? by erroneus · · Score: 1

    I really cannot get behind this particular view.

    Of course I have to agree that many factors are leading to ever-increasing severity of the situation. I blame the following problems:

    * A growing monoculture of peers on the internet
    * A growing increase of broadband availability
    * A growing commercial interest in the success of spam
    * A growing ease of use in implementing malware solutions (see monoculture and availability matters)

    I feel that there is a combination of problems that prevent an effective solution. First, law enforcement is still largely uneducated about how to handle these problems. The experts in the field are capable but there are too few so they are only able to go after the big fish.

    Another, excusing the lack of manpower, is the lack of criminal law in place. Lawmakers are reluctant to write much of these offenses up as criminal because being exact in interpretation is probably perceived as difficult. Further, they run risk of offending commercial entities because many of the successful businesses deploy techniques that are on questionable moral ground and it would be difficult to word-in exemptions to criminal code based on "established commercial interests."

    So just as anti-spam law was written "weak" in order to avoid harming larger commercial interests, I feel that cyber-crime laws that would address trojan and viral malware authors are similarly "protected" to prevent harming commercial software interests who write backdoors, allow vulnerabilities or otherwise violate privacy and "call home" with information about the user without their consent.

    Awareness will have to grow before progress can be made. People will have to understand that they are using a "crescent wrench" that does more than tighten nuts, screws and bolts... they also do things they don't want to happen as well and are blissfully unaware.

    In my opinion, disclosure of such features should be made available to all of the public whether or not the public chooses to learn about it and it should be free. In much the same way that automotive and other product recalls are out there, the same should be available for software.

    Software is not a magic box that no one understands -- people wrote it... (for now) and so there are no accidents or "natural phenomena" that occur with it.

    The problem is there is too much incentive to continue as things are regardless of the larger effects... which is the destruction of the internet.

  71. Simplest means by leviramsey · · Score: 1

    ...is to simply make the broadband user liable for actions taken using their connection, whether they had knowledge or not.

    If Joe Lusers who signed up for cable internet and don't bother to patch their systems or run firewalls become spam relays and DDoS zombies they should be held liable. It's Mr. Luser's responsibility to figure out who was using his connection for nefarious purposes.

    Get some news coverage about families that got judgements against them for $10,000 for spamming and you'll see progress in this area because then people will give a shit about this. From their perspective, it doesn't hurt them to be a spam or DDoS zombie, so they've no incentive whatsoever to not be a spam/DDoS zombie.

    Now, what will the consequence of this be? When faced with risk, there are a few options:

    • Risk acceptance. Basically, this amounts to praying that the risked event does not occur.
    • Risk avoidance. This is completely avoiding the risk. In this case, it would mean terminating your broadband.
    • Risk reduction. This is researching the risks and taking prudent action to reduce the chances of the risked event occuring. This would be the broadband user who realizes that he's potentially liable for enough to make him bankrupt who then researches network security and educates himself.
    • Risk transference. This is passing the risk onto a voluntary other party. This would likely be an insurance company. If there's a definable, quantifiable risk, an insurance company will offer insurance against losses incurred from this risk. With liability defined, insurers will set rates for "broadband insurance". You would apply for coverage, list how many computers are on your network, what software you run, how regularly you patch, and maybe even take an exam to find out how security-aware you are. Based on these factors, you would then pay a premium to the insurance company, in return for which, if you're ever sued and found liable, the insurance company will pay the claim.

    As far as I'm concerned, all four of those options are equally good and effective.

  72. Oh, don't be silly by Jonboy+X · · Score: 2, Insightful

    Please, more powerful tools, in the hands of people who know how to use them, lead to greater productivity, not pandemonium. Did the evolution of muzzle-loader muskets into M-16's spark a global surge in violence? D'oh, bad example...okay, the growth of axes into chainsaws helped mankind...deforest our planet at an astonishing rate. There must be a good example here somewhere. Single-prop airplanes into 737's...lead to air and noise pollution. Well, you see where I'm going with this. More powerful tech is only bad if someone uses it in a bad way...which someone always does.

    --

    "In a 32-bit world, you're a 2-bit user. You've got your own newsgroup, alt.total.loser." -Weird Al
  73. Preventing the Internet Meltdown by randomwalker · · Score: 1

    There is conference related to this subject, checkout : http://www.pfir.org/meltdown People For Internet Responsibility (PFIR) is pleased to preliminarily announce an "emergency" conference aimed at preventing the "meltdown" of the Internet -- the risks of imminent disruption, degradation, unfair manipulation, and other negative impacts on critical Internet services and systems in ways that will have a profound impact on the Net and its users around the world.

  74. The real problems are these by Animats · · Score: 1
    The real problems:
    • Microsoft Outlook, the world's leading virus distribution engine.
    • The Bush Administration's "soft on spamcrime" stance. The CAN-SPAM act legalized spam. Without it, Pfizer would be defending suits on Viagra spam every day, under California's "blame the beneficiary" spam law. ("And you shipped how many truckloads of Viagra to an Internet pharmacy in Coral Gables, Florida? After you'd been informed they were spamming?")

    Solve those two problems, and trouble will decline to a manageable level.

    As a temporary measure, I suggest that a command be added to the POP protocol to say "I want to receive MIME e-mail." The default is "off". ISPs should be required to implement this on pain of being considered grossly negligent. Clients that ask for MIME e-mail must be virus-resistant, on pain of being considered grossly negligent. All old systems thus revert to text E-mail during the transition.

    1. Re:The real problems are these by Anonymous Coward · · Score: 0

      Absolutely right. However, without being overly cynical, I'm sure these root problems will not be addresses -- they'll find a way to "deal with" the problems another way, which, incidentally, makes someone a lot of money.

  75. Humanity does not scale... by twigles · · Score: 1, Insightful

    Communes work, communist countries don't. Private restrooms are cleaner than public ones, even the private restrooms of the people who mess up the public ones are cleaner. The honor system works in small communities and villages, but big cities overflow with crime regardless of penalties.

    Whenever you open something to the public you ruin it. More specifically a couple people out of 100 ruin it. The internet magnifies this by allowing the assholes to script themselves, like a mirror image spell in Baldur's Gate.

  76. NO! by MikeD227 · · Score: 1

    as long as there are no follow up questions... no.

    *ducks*

  77. Is bandwidth really getting cheaper? by CatGrep · · Score: 2, Interesting

    "As bandwidth costs become cheaper and more people adopt cable or DSL over standard dial-up connections,"

    Where is this happening? Cable connection runs in the $40-$50/month range right now. A couple of years ago you could get them for about $35 in my area.

    There really doesn't seem to be any price pressures on broadband access yet. Most places have either DSL or Cable. Some places have both. Neither the telcos (who do DSL) nor the Cable cos seem inclined to compete on price yet. Maybe when wireless broadband or broadband over powerlines become more common you'll start to see some competition.

    After noting the current surge in Internet worms and the so-called Darwinist evolution of these things into more and more powerful incarnations,

    It's not exactly Darwinian evolution. These things don't mutate on their own, people change them.

  78. Re:It's not the broadband by Anonymous Coward · · Score: 0

    And yet you are so bold in your opinion that you feel the need to post as an AC.

  79. Revisiting Gurley on Moore's Law and Napster by bslug · · Score: 1

    Bill Gurley made a case 4 years ago that still reads well today. regarding. He predicts the effects of not only broadbandization but other Moore's Law consequences on music sharing.

    http://news.com.com/2102-1071_3-281302.html?tag=st .util.print

  80. They've already tried. by Chazman · · Score: 3, Insightful
    However, this is something the gov't could demand (gotta stop those waskiwy tewowists).

    Can you say "Clipper chip"?

    Unfortunately, governments (and especially ours) aren't exactly known for learning their lesson the first time around. This is likely a battle we'll have to fight again, and soon.

    --
    -----Chaz
  81. Bandwidth is very good it kills faster by gelfling · · Score: 2, Funny

    More bandwidth is good because then bad germs will kill more weak hosts faster.

    1. Re:Bandwidth is very good it kills faster by bishiraver · · Score: 1

      This was moderated as funny, but I think it has quite some truth to it.

      Instead of the darwinism of virii killing the internet, I think it will merely keep stupid users off of it.

  82. ISP Irresponsibility by Big+Jojo · · Score: 4, Insightful

    ISPs that can't be bothered to filter out the viruses are the primary cause of all this damage.

    Today, almost all viruses are weapons to attack home PCs, installing spambots. If the ISPs had even been marginally responsible as these epidemics started, rather than fostering the spread of ever-more-dangerous virii, today's problems would be several orders of magnitude less than they are.

    That has nothing to do with broadband per se. It has to do with trying to make a buck by externalizing all costs ... changing the Internet from a place where organizations were responsible, to one where irresponsibility became the norm.

    There are lots of real-world examples of people being held responsible for their actions. You can't just go screwing people to give them AIDS, for example. Or firing guns into crowds. And there are plenty of places where littering gives reasonable fines (hundreds of dollars).

    ... oh yeah, ISPs are corporations, and corporations are lately expected to be irresponsible. Thats F*CKED, end of story.

    1. Re:ISP Irresponsibility by Anonymous Coward · · Score: 0

      stupid is still free
      free as in freedom or free as in beer?

  83. Re:It's not the broadband by timmarhy · · Score: 1

    I always laugh at this talk of porn sites popping out of no where bullshit. i would argue 99.9% of people claiming this have either been looking for porn and got busted or are searching warez sites. the other .01% have made an unfortunate typo in their URL.

    --
    If you mod me down, I will become more powerful than you can imagine....
  84. Fixing that shitty car by Chazman · · Score: 1

    And have you ever called into one of those programs to suggest that the people doing the complaining try installing Mozilla and turn on popup blocking? If you were really clever, you could even give a quick rundown of how to do this on the air. Think how far that one phone call could go in solving this problem.

    --
    -----Chaz
    1. Re:Fixing that shitty car by vigilology · · Score: 1

      If I wasn't trying to fall asleep, or driving, I would :-/ (I like the bg noise of the radio to drop off to.)

  85. Newcomers versus Old Timers by __aadhrk6380 · · Score: 3, Insightful

    Isn't that what this is all about? The noobs don't know how to swim, but they are hell bent on jumping into the deep end.

    I have moderated some large message boards, by way of an analogy. They always start off with a small group of people that get comfortable with the tone of voice, the technology involved, and they then set the trend for that one site. If the tone is right (i.e., inviting) tons of people start showing up. If you build it, they will come and all that. You'd think that would be a good thing, but it invariably leads to becoming "a victim of your own success".

    You get people that have no idea what have gone on before, but show up and start demanding to be heard. Major soap box time. And God help 'em if they don't get taken seriously, or get criticized because they are reinventing the wheel or any of a number of other things.

    This dovetails nicely with the /. article asking questions for Mike Godwin about legal issues on the web. Let's face it, and check me here, but stupid is still free as best I know. Sadly, it is the best some can afford.

    Is there a crackdown on surfing habits in the future? Maybe. On the whole, it probably wouldn't be a bad thing since most issues would be related to security type items (antivirus requirements, firewalling, OS patches, etc) as has been noted. Would things like this impact the "old timers"? Probably not, and the noobs wouldn't even know the difference anyway.

    Remember, the question wasn't about freedom of speech, copyright issues, IP, etc., but the propagation of crap.

    Broadband connection, analog connection, it doesn't matter. The abuses are the same (read "deranged indifference" as abuses). It's like the Austin Powers movie where the guy gets run over by a steam roller. The end result is the same, it just takes a lot longer than getting hit by a Porsche. The outcome is inevitable, in my mind. It is just a matter of how quickly we get there.

  86. Re:It's not the broadband by gtrubetskoy · · Score: 1, Interesting
    will the proliferation of broadband Internet access deal a serious blow to current freedoms on the Internet

    No, but the proliferation of crappy Microsoft software will. In fact it has already.

    I find amuzing that I actually got moded down and got a whole slew of passionate responses about bashing Microsoft. Perhaps M$ has reached such a point where people are already tired of being dissatisfied and would prefer to just "let it be".

    My statement is still true - the vast majority of all the problems we are having are due to problems with primarily Microsoft Outlook, as well as other Microsoft software.

    There used to be days when virus writers used assembly. Now, anyone semi-profficient in visual basic can write a very destructive virus. And Microsoft is to blame for that. Nothing personal against them, but it is their fault, and that's a fact, sorry.

  87. ahh.... No. by devhen · · Score: 1

    the Internet with a modem is NOT the same Internet as it is with high speed. many more things are happening for broadband users. relative to security and privacy spam and viruses top the list of importance and concern but this is one of a thousand lists of things a faster internet connection can do. the Internet roars on... stampedes, maybe?

  88. Nope by Anonymous Coward · · Score: 0

    "I wonder: will the proliferation of broadband Internet access deal a serious blow to current freedoms on the Internet?"

    Nope. But it'll highlight the stupidity of the average user well enough....

  89. Saving people from themselves... by OneFix+at+Work · · Score: 5, Informative

    I've found that most folks like to be told how to make their computers more secure and decrease their chances of infection/spyware...

    I have made it standard practice to install 3 applications on all Windoze machines that I fix anything on...

    1) Install Avast! Home Edition and set it to do automatic updates of both the Core Program and Virus Database. Because most people don't pay for Anti-Virus upgrades after their free trial version runs out...not to mention the fact that Avast! is better than Norton and most for-pay AV apps anyhow...

    2) Install Spybot Search & Destroy and make sure that the primary user(s) see what the result of the initial scan is (shock value) with instructions on how to use the app...

    3) Install FireFox (no link needed) with the follofing userContent.css...

    If they still insist on using IE I will install Google Toolbar and enable popup blocking...

    I then proceed to replace any spyware apps with free non-spyware apps (WeatherBug -> Weather Pulse, etc)

    As for a firewall, I talked most into buying a wireless router (generally a cheap 802.11b router) to use as a firewall and future network upgrades. I don't think any windoze software firewalls are very good...IPTables is about the ONLY software firewall that I trust...

    After doing this, I find that these systems stay fairly clean and have much fewer problems. Not to mention the owners of said machines tend to be much happier afterward.

    1. Re:Saving people from themselves... by jumpingfred · · Score: 1

      What is wrong with say Zone alarm or Black Ice?

    2. Re:Saving people from themselves... by RedFive · · Score: 1

      I've been using ZoneAlarm on my Windows PC at home for about 2 years. My PC is always on with broadband and I've never had any probelms.

      --
      RedFive jedi_knight111@hotmail.com
    3. Re:Saving people from themselves... by OneFix · · Score: 2, Insightful

      ZoneAlarm is more software to be exploited...with a hardware firewall/router, there is no way for an outside system to access a system directly without some sort of user intervention (forwarding a port or putting an IP in a DMZ)...

    4. Re:Saving people from themselves... by Anonymous Coward · · Score: 0

      Nothing is wrong with it but you have to realise there are some pretty naive internet users and they don't want to have to understand what is going on with a firewall.

      More often than not if they think the firewall is blocking something (this includes adware), they will disable it because the computer doesn't appear to be functioning correctly (in their minds anyway).

      I have used Outpost firewall for quite a while. It can be a little too sensitive but the options and features out-weigh any problems I have had. Plus it doesn't feel so bloated. Not that I don't know how to use netstat but having a real-time table of network activity with the ability to break connections and block processes instantly makes a difference on a M$ windows system.

      Unless you know what you are doing then a firewall has to be transparent to, as the topic of this thread suggests, protect lusers from themselves.

      Us 31337 can take care of ourselves with any means selected :) ... including ipfw on freebsd ;)

    5. Re:Saving people from themselves... by mpeg4codec · · Score: 1

      IPTables is actually just the userland interface to the kernel-level Netfilters subsystem. Ever tried OpenBSD's pf?

    6. Re:Saving people from themselves... by Anonymous Coward · · Score: 0

      This is what is wrong w/ *any* personal firewall.

    7. Re:Saving people from themselves... by OneFix · · Score: 1

      Umh, yes...I own a Sparcstation LX that runs NetBSD and yes, I trust it as well...the point was I don't really trust Windoze-based firewalls :)

    8. Re:Saving people from themselves... by bcrowell · · Score: 2
      OK, this is going to sound like the typical Slashdot Linux-fanboy sarcasm or whatever, but seriously I'm really just curious...

      I have never run Windows, and I have never needed any of this stuff. Do you really get your Windows box owned just because Windows is insecure out of the box? Or are these people clicking on e-mail attachments, or downloading all kinds of closed-source freeware (Kazaa,...) and then acting surprised that it does bad stuff?

      My mother bought a new Windows machine, and instantly got it owned. I mean like, bought the box on Friday, and noticed it was acting funny while she was eating her cheerios on Saturday morning. My Mom is not stupid. She has a PhD. I laughed and said, "Mom, don't you know better than to click on e-mail attachments?" She swore up and down that she hadn't. Really, I'm not just trying to flame Windows, but is Windows really so bad that getting your machine taken over is this kind of instantaneous process? Or are we really talking about people who swear they haven't done anything stupid, but really Dad's been porn-surfing, or the kids have been file-sharing MP3s?

      It just seems crazy to me that anyone would buy a proprietary OS, and then pay for proprietary apps whose sole purpose it to fix security holes in their proprietary OS.

    9. Re:Saving people from themselves... by poot_rootbeer · · Score: 1

      3) Install FireFox (no link needed) with the follofing userContent.css...

      Is it really necessary to block ALL ads from the browser? Does this improve security in any way, or just remove a small annoyance?

      For a lot of sites, advertising is an important revenue stream. The less revenue, the less quality content they can provide. Shouldn't you reward sites that use non-intrusive ads like vanilla banners and tiles, rather than taking their free lunch and potentially forcing them to have to the irritating popup/shoshkele/interstitial ad types to stay afloat?

    10. Re:Saving people from themselves... by mbessey · · Score: 1

      "Do you really get your Windows box owned just because Windows is insecure out of the box?"

      Yes. It's actually possible to install Windows XP on a system connected to the Internet and have it be infected by a virus before you can connect to Windows Update and download the appropriate critical fixes.

      It happened to me on a LAN at work. Any network configuration where there's more than just your machine on your subnet is vulnerable to this.

      -Mark

  90. Art imitates life? by randomErr · · Score: 1
    Art imitates life? This reminds me of the premace of the dotHack //sign video. The internet is attacked by an uber virus destroying must of the know universe. The shards of humanity have to recreate an newer, faster internet with fairly strict usage regulations. Ok, I'm embellishing the series a little but you get the gist.

    IMHO we will evolve into one of two directions before that happens:
    1. Government sponsored RFID tracking everything we do through a world wide ID.
    2. A challenge based network were each individual says who can and can't access their information or send them information.
    I personally opt for the later and have. I use regular email but it goes through a filter(si20.com). I can set the level to block only the worst offenders or block everyone but who is on my list.

    I hope people wake up before something really bad happens and the government is forced to do something. We all know what happens when the government interferes.
    --
    You say things that offend me and I can deal with it. Can you?
  91. The modern consumer Internet by MrChuck · · Score: 2, Interesting
    Earthlink filters port25. And I'm grateful for it. That said, I have a box elsewhere that also listens with AUTH only on 587 (mail submission port). Living the high life am I.

    I also have an IPv6 tunnel to that remote (by 3k miles) box. Protocol 41/port25 is not filtered :)

    The all new, shiny, "UhOh"'s (this decade) style CONSUMER internet is not the [D]ARPA-Net that some of us grew up with. Not even the "rough town" internet of the mid 90s to the late 90s.

    No this is the network for those people who believe that one network of the Internet is the "intranet." Where even those that thought SMB and IPX were good ideas were considered "technical." (I remember the first time I deal with a Novell network, asking my friend the admin how to turn off the curses interface and get to the real command line. "No, that's it." I setup my Sun IPC to do print and file service and his box with PC-NFS and asked why they thought novell was worth $20k) (the IPC was fairly used at the time, but BSDi 1.0 was just out too, for less on them Pentium/33s).

    The consumer net has people who need protection. Perhaps under the banner of "to help them" but just as important is to protect ME from them.

    I long ago proposed that AOL, Compusa, Prodigy (the trailer park of the Internet) and those guys have OC48's between them and a 56k modem to the rest of us. Didn't happen and now those people are all around dumping sewage into our streams.

    I'm about set to refuse mail that DIDN'T come from an IPv6 address and regress.

    So filter port 25. The net is in crisis from the consumer FatPipe providers.

    Motivate the vendors (MS, but also the Linux distros, Sun and everyone else to NOT COME OUT OF THE BOX WITH 20+ ports listening!!).

    I clean up hacked Linux and Sun regularly. We need "echo" on for WHAT good reason? If Sun can't come up with a simple CLI tool to manage inetd.conf (it's a perl script), then they shouldn't be playing on the net.

    Linux needs rpc's by default why?

    99%* of linux user use packages built by strangers for what good reason? (at least with source, 1 of thousand of users can LOOK at mutt-1.4i.tar.gz that md5 checksums to:
    a67bcdf1a1cd53d61ccd3ebf3993ba59

    With a binary, it's a crapshoot.

    The internet is a bad neighborhood and some folks need protecting and we need protecting from some folks. Just don't tell gramma that we're walling her IN, just 'splain that the wall is to keep the baddies OUT.)

    --
    Mr Cranky
    (in my 22nd year of using this new fangled "network" thingy. Archie was good enough for me.)

    * ok, I made up 99% but anyone have real numbers that frighten less?

    1. Re:The modern consumer Internet by SillyNickName4me · · Score: 1

      It all depends on how such a thign would work.

      I run my own mailserver (my isp explicitly allows it) and handle mail domains for myself, my family and some friends. Would really suck to get port 25 blocked.

      What would work however is for isps to provide some basic firewall functionality which their customers can configure using a web interface and that by default blocks all dangerous ports.

    2. Re:The modern consumer Internet by Anonymous Coward · · Score: 0

      those guys have OC48's between them and a 56k modem to the rest of us.

      I realize you're making an analogy, but you're close to touching on something that's very real. Use your raw polluted Internet connection to run tunnels to other outposts of clue. These can be friends, who then tunnel to other friends, and so on.

      Run an internal addressing scheme of some sort, and have some way of dealing with dead tunnels when someone has to drop off for awhile. OpenVPN in bridged Ethernet mode with OSPF running might be one way, and routed mode with BGP might be another.

      This is already happening in communities who have put together wireless networks. Taking it to the wired side is the next logical step.

    3. Re:The modern consumer Internet by andynz · · Score: 1

      You touched a nerve with me there. Whenever I set up a sun box I wonder why the hell it needs to listen on all the RPC ports just to run a fucking GUI.

    4. Re:The modern consumer Internet by MrChuck · · Score: 1
      Want why that F*cking daemon can't be told to listen to ONLY port 127.0.0.1/::1 or even basics like "talk only to this (set of) subnet(s)".

      It's REALLY hard to get BASICS in like IPFilter and tcpwrappers and a non-stupid inetd in a corporate and phearful environment. "But it's not supported!"

      With SunOS 4.1.2, I started just compiling my own X11(R4 or R6) and fvwm (yeah, I can dump olvwm) and the tools I needed. Then I didn't HAVE to be on a Sun. And it worked on an Alpha I had for a while, and on a BSDi box. And it was all the same on all the platforms. Motif? OpenLook? CDE (shudder - committee designed environment)? Thanks, but no.

      Open Source* Rules!

      * and san dimas high school football ;)

    5. Re:The modern consumer Internet by MrChuck · · Score: 1
      It would be hard to get the mass-market ISPs to go for it (and its nigh impossible with DHCP - even when my "dynamic" home addr hasn't changed in 11 months - even with a 6 hr blackout (stupid old UPS and 4 minute backup of 30 watts)):

      But a "go to the website and CHECK HERE to open up inbound port 25".

      At the least, I'd be delighted to see $PROVIDER to a scan and relay check of all their customers' port 25 .

      And I can survive, begrudingly, with sending OUTBOUND mail via smarthost to their mail relay. AOL makes me. Hell, ME at *work* makes me now. less than 0.05% (5 in 10k) of mail from client*.comcast|attbi has comcast or attbi in the domain name. Granted, that's not guarantee of spam, but in looking at 20k FROM addresses, I'm not going far on a limb suggesting that it was a BIG win to block.

    6. Re:The modern consumer Internet by SillyNickName4me · · Score: 1

      Hmm, its actually not that impossible when combined with dhcp, at least not for technical reasons. Maybe the equipment often used by isps doesn't ffer the possibility, but I am pretty confident that it wouldn't take me that long to get such a thing to work on freebsd for example, and it shouldn't be difficult on Linux either.

      > At the least, I'd be delighted to see $PROVIDER to a scan and relay check of all their customers' port 25 .

      Something which my provider actually does. if it fails, they turn on a filter on the port. (heh, which emans thay actually do have that capability.. they use dhcp tho give a fixed addy)

    7. Re:The modern consumer Internet by JPriest · · Score: 1
      So if all ISP's started blocking 25 you might get stuck paying someone 5 or 10 $ a month to host your domain mail for you and *gasp* actually get more mail than spam.

      That is a short sighted solution to the problem though, the better workaround would be to require you to keep a DNS record for your SMTP server on your domain.

      It would solve the problem of rogue systems being used for spam and you could keep your setup :P

      --
      Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
    8. Re:The modern consumer Internet by SillyNickName4me · · Score: 1

      I host my own mail for a lot of reasons which go a bit too far to explain here, but hosting it somewhere else is simply not a solution for me untill that means actually having control over the machine it is hosted on. That means renting a dedicated server somewhere and that is gonna be more expensive then $5-10/month.

      And of course I do have DNS records for my mailserver ;)
      But hrm, my isp has a policy of scanning their customers for open relays and selectively filtering port 25 where needed. Works for me as well, but wont stop email based worms from spreading.

      I still see no problem in an isp givign a choice between open/protected connections, and it seems the technology for it exists.

    9. Re:The modern consumer Internet by JPriest · · Score: 1

      You have an MX record for your mail server but there is no standard DNS record for SMTP servers. If my mail exchanger is getting mail from your SMTP server there is no DNS record (aside from A) to see if it is a valid mail server and not 24-77-128.dyn.dsl.someisp.com.

      --
      Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
    10. Re:The modern consumer Internet by SillyNickName4me · · Score: 1

      Ah yeah. well, some proposals for that are in the works, but its gonna be a while before that becomes part of any standard I'm afraid.

  92. I brought this up years ago. by Ozric · · Score: 1

    And you know what.. I got modded to hell for it. After many years of always being right, I have come the the conclusion that everyone would be better off if they would just listen to me the first time.

  93. Re:For crying out loud, INSTALL A FIREWALL, alread by freeweed · · Score: 1

    Sure, Windows could be better in terms of security, but that wouldn't even be a problem if all those insecure services were behind (even a minimal) firewall.

    Would be even less of a problem if Microsoft shipped those services turned off by default. Sure, the 1 in a million that need RPC services running (and don't know how to enable it) would suffer... it's pretty simple, really.

    --
    Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
  94. ISPs-Freedom: Cash or check? by Anonymous Coward · · Score: 0

    "Maybe I want to have port 25 open so I can run a mail server."

    Which promptly gets rooted, and made into a servent of the dark side.

    "Point is that I want to decide what is open and closed."

    Everyone wants to be free. No one wants to take responsability for that freedom.

    1. Re:ISPs-Freedom: Cash or check? by andy_shepard · · Score: 1

      Which promptly gets rooted, and made into a servent of the dark side.

      You mean like the way the home mail server I've been running for the past two years hasn't been?

  95. Seems kind of like literacy to me by AxelTorvalds · · Score: 1
    Once the masses were illiterate, then they were taught to read and at that point they can start to make their own decisions. Wasn't the rift between the Catholic chuch and the protestants because of Martin Luther's belief that people other than clergy were able to read the Bible and interpret it? Same kind of revolution here, just much smaller scale. Martin Luther spawned a religious revolution that has resulted in thousands and thousands of different sects, cults, and belief structures. Some are good, some are bad; a small handful of grown up in to quite robust churches with well developed dogma and beliefs. A lot of nasty stuff happened as a result also but by in large the world seems to be a far better place today than it was then.

    Broadband isn't the cause of vulnerabilities, it just exposes them. These are all problems that have already been there and never fixed. Will there be another virus that infect millions and millions of people? Sure, stoned and jerusalem did too and stoned required a floppy to be booted in a computer back in the day. People shouldn't run programs they get from the net without caution. That's what they said about BBSes 20 years ago.

    Give it time, things will work themselves out. To be honest I'm far more worried and some of the more modern attacks that attack the fundamental trust models. There is a TTL attack where you can carefully craft packets with screwy TTL values and a 56K link can DoS a 3Mbit link, that's just exploiting the way the protocol is designed to work. Should attacks like that become really pervasive that is something that can cause damage.

  96. Re:There needs to be more Government Regulations by Anonymous Coward · · Score: 0

    I think the government needs a system to pre-screen Net users. If they aren't suspected of being idiots they could have a green flag attached to their packets which would allow the packets to route freely across the Internet. Those suspected of being idiots would have their packets flagged yellow, and would still be routable, but would be automatically scanned for viruses/spam and monitored for otherwise suspicious activity. The vast majority would be flagged red though and wouldn't be routed at all. Just an idea.

  97. Things ARE improving behind the scenes by J.+T.+MacLeod · · Score: 4, Informative

    I work for a small ISP, and things are absolutely improving behind the scenes. Most old broadband network designs were not built with the present day in mind. It was, perhaps, shortsighted, but who saw this coming?

    We're installing dedicated spam/virus filtering machines. We're changing our network drastically, going from a very simple network structure to one where every DSL bridge's ATM channel is carried up to a router doing Proxy-ARP, so we can cut out broadcast traffic and regulate traffic for every customer's connection (cutting down on both viruses spread via broadcast traffic as well as DoS attacks).

    On top of that, we police the network to find users with viruses, then call them and, if they can't do it themselves, clean their PCs for free.

    Things are definitely picking up on the ISP end. Now if only the customers would take a few steps...

    1. Re:Things ARE improving behind the scenes by ttys00 · · Score: 1

      Can you please expand your business to Australia and take over Telstra?

    2. Re:Things ARE improving behind the scenes by Qzukk · · Score: 1

      And on top of all of that, have you started egress filtering to drop spoofed packets as they leave your network? Packets from a DSL customer in kentuky addressed from .tw are a sure sign that the Evil Bit should be set.

      It would go a long way in deflating DDoS attacks quickly.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    3. Re:Things ARE improving behind the scenes by J.+T.+MacLeod · · Score: 1

      Thanks, I'll check. I'm honestly not sure at the moment.

      It wasn't that long ago that we took over the management of the network after it had been set up by trained monkeys (crack-smoking trained monkeys, at that).

      Neither my boss (the actual admin), nor I were network admins prior, so there are some obvious things that hit us as "I should have thought of that earlier" revelations. Nonetheless, the company is committed to customer service (hard to believe, but true), and we are committed to a safe, friendly network, so when we find something we can do, we do it.

      I only wish I knew of some information repository/guide to help us fill in the gaps. Nonetheless, I believe we are far ahead of the curve (or will be once we get our new network equipment in).

    4. Re:Things ARE improving behind the scenes by cms108 · · Score: 1

      "...and, if they can't do it themselves, clean their PCs for free"

      That's nice of you.. at the ISP I used to work for, if they thought you had a virus, they'd disable your account. And they wouldn't reactivate it until you managed to convince them you'd got rid of it.

    5. Re:Things ARE improving behind the scenes by Anonymous Coward · · Score: 0

      You, sir, are a modern-day hero.

    6. Re:Things ARE improving behind the scenes by Qzukk · · Score: 1

      I'll echo AC's response about your heroism. Not only does egress filtering save the internet, it will help cut your costs by dropping obvious trash packets before they hit your upstream provider.

      (This is why the big backbones don't do it for you, why should they cut down on billable bandwidth used? ;)

      If every ISP in the world did this, there wouldn't be much need for any other kind of regulation. If you're being naughty, its traceable back to at least your ISP (you could be spoofing some other customer's IP). The ISP could then use a bit more restrictive filtering to track down who is being naughty, and perhaps pick up whoever is trying to control them.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
  98. Re:It's not the broadband by Anonymous Coward · · Score: 1, Insightful

    You made an unqualified statement bashing Microsoft. You didn't provide reasoning, facts or even theories. Why are you so suprised that a short, stupid blanket statement was modded down?

    Your statement was pure flamebait.

    And Microsoft, while their security practices are abysmal, aren't the only ones to blame.

  99. [TROLL] Re:The party will soon be over. by TruthSeeker · · Score: 1

    Dictionary.com on Economy
    "Careful, thrifty management of resources, such as money, materials, or labor"


    This is a general definition, it can be applied to the "economy" of a prehistoric tribe living in a village.

    However, applying this definition to today's system seems a bit exagerated, especially for the "careful" part.

    Our economy in the US is not an artifact. Our economy IS planed with an onjective goal in mind. That is, you trade labor, services, or good in exchange for the same of different value.

    1) Planed ? I can't find a plan in what seems to be fractal patterns.

    2) According to what you say, the goal of your economy (ours as well) is to maintain itself. Not anything else ; and not social progress, in any way.

    If what you say were true, then by all intent, thievery would be acceptable as a natural form of economic evolution.

    It is, as long as you don't get caught - survival of the fittest (the one able to steal without being caught), remember ?

    --
    I sense much beer in you. Beer leads to intoxication, intoxication leads to hangover. Hangover leads to sobering.
    1. Re:[TROLL] Re:The party will soon be over. by DigiShaman · · Score: 1

      Our economy is planned in that it encourages an on-going increase in the standard of living for those that take part in the system. Which is why drugs, prostitution, and thievery are written into law as it has been regarded as a threat to the status-quo of American prosperity. If you violate these laws, you will be punished.

      Remember, pure evolution can only take place in a system of pure anarchy. And the moment laws are broken, checks and balances (such as regulations) will be put into place to enforce those said laws.

      --
      Life is not for the lazy.
    2. Re:[TROLL] Re:The party will soon be over. by TruthSeeker · · Score: 1

      Our economy is planned in that it encourages an on-going increase in the standard of living for those that take part in the system.

      This is the theory ; true, it works when speaking at a gross level (say a country). However, there is a glitch somewhere, for goods and services tend to regroup in the hands of a very few.

      Which is why drugs, prostitution, and thievery are written into law as it has been regarded as a threat to the status-quo of American prosperity.

      True ; not American-specific however.

      But let me remind you that these are means to the same goal than the rest of the economy : selling drugs makes you rich, "managing" a bunch of prostitutes and thievery too.

      Making one rich is increasing one's standard of living.

      Moreover, I don't really see the difference between selling drugs and selling video games (both cost a lot and are addictive), between prostitution and live shows on the 'net, or between thievery and, say, patents abuse.

      If you violate these laws, you will be punished.

      Once again, this is under the assumption that you'll get caught.

      If you compare the risk to the profit, even if you know you may have to pay fines and spend some time in jail ... well, I'm not sure that it always has a negative outcome in the long run.

      Remember, pure evolution can only take place in a system of pure anarchy.

      I do agree on this one.

      And the moment laws are broken, checks and balances (such as regulations) will be put into place to enforce those said laws.

      In my opinion, mankind (including demographics, economics, etc...) is a very complex dynamic system.

      It will be chaotic without any laws, right.

      Adding a few laws makes it fractal, self-repeating ; just check stock market archives over the last century. The system is almost stable.

      However, I think that adding too much laws breaks the whole system ; it will not become more stable. On the contrary, it will become chaotic again.

      Sorry for polluting this topic ...

      --
      I sense much beer in you. Beer leads to intoxication, intoxication leads to hangover. Hangover leads to sobering.
  100. Giving people acess... by Fullmetal+Edward · · Score: 1

    Giving people access to the internet is like giving everyone a gun. Sooner or later someone will steal the gun unless you take care of it and keep it hidden/protected.

    Everyone seems to think they need some uber connection to get their 2.5 e-mails a day faster. They seem to think it's up to the ISP to block spam and any other problems they may present because "they pay for this".

    It's like going "Oi police, protect my house 24 hours a day becaus eI help pay for you". We need to start letting these people lose their PCs, let us repair them and get rich and just point out to them that it's UP TO THEM and not the ISPs.

    I've never had spam and only 1 virus in about 4 years of being online. Now if I can have a record like that without doing much but updating firewalls, virus scanners and knowing that .exes are evil in all forms (ever seen a proggy run that wasn't .exe and crash? :P ), why can't others do this.

    Then again most the people using e-mail can't even type without having to have someone read each key to them JUST incase they get it wrong..

    --
    --- [Insert intresting Sig here]
  101. Re:I'm so wide by Anonymous Coward · · Score: 0

    Why don't the editors delete page widening posts? This is not a free speech / censorship issue. Widening the page is not speech, its vandalism. Just because I browse at -1 and endure GNAA posts doesn't mean that I want to scroll across the page just to read an entire post. In fact, I think page widening tramples on free speech itself since it obscures other people's posts by making them harder to read.

  102. The price of progress by MagicDude · · Score: 1

    High speed internet has increased the proliferation of virii, but you have to take the good and the bad. Cars have gotten faster since they were invented, and as such we've had more high speed crashes and fatilities. It's just something that's inherent to speeding up the process ... you speed EVERYTHING up, the good and the bad. And for the most part the good outweighs the bad.

  103. MS_HATER by Anonymous Coward · · Score: 0

    Take freedoms? Yes, take some people's freedom to use Microsoft products.

  104. Immunity on dialups to many things by FxChiP · · Score: 1

    Not only is dialup an "immune system" to worms (well, not really, it just slows things up a bit), it also gives you a fighting chance to get the hell out of here. On a cable modem, you're pretty much screwed because you get the image in the snap of a finger. :D

    1. Re:Immunity on dialups to many things by Anonymous Coward · · Score: 0

      All links to goatse deserve automatic troll-mods.
      Can any Slashcoders add this to slash please?

  105. Awareness by bluetrident · · Score: 1

    I think TwistedSpring is right on in asking this question. I'm always explaining what a firewall, spyware, or Anti-Virus software is. The internet has become commonplace, grandparents are using email, it's become another form of media.

    But as it grows, there is also more risk. I think that educating the new users is mandatory. I oftentimes find myself saying, "it's not as safe as it was, but here's some sites to look at to protect your computer." The average joe looks to his 'geek buddy in the office' to point him in the right direction when his pc keeps shutting down because he's got the blaster worm. my speil of zonealarm, spybot, and norton is at least enough to keep them going. i honestly think that as more and more people are introduced to the web, the more it can grow.

    granted, i'm tired of cleaning viruses and malware off of pc's, but maybe if i keep harping on computer protection, eventually joe sixpack will listen and when his buddy says his computer's acting strange, he'll say, 'do you have anti-virus software on it?'

  106. Strange definition of freedom by geekee · · Score: 3, Insightful

    "I'm not only worried about viruses and spam levels. Part of the reason the MPAA and RIAA are taking such an interest in Internet activity is that file sharing has become so much easier with the availability of broadband, and as usual there are murmerings of regulation. Before the broadband revolution, the involvement of the MPAA and RIAA in Internet affairs was small, and their argument was less convincing. "

    If you're using the internet to violate copyright laws, that is not an exercise in freedom, but instead an exercise infringing on someone elses rights. The fact that you weren't caught before doesn't mean the internet is becoming less free. It means there is less anarchy on the internet.

    --
    Vote for Pedro
  107. The problem is... by m1chael · · Score: 0

    that people make excuses for everything. It's the interent (purposely miss pelled), it's get-t-t-ting too fast. If that's your attitude you deserve what's coming to you, biatch.

    --
    I know you are psychotic, but please make an effort.
  108. My Take...Make right take flight. by Anonymous Coward · · Score: 0

    "I appreciate your perspective, but I disagree. Intenet usage ought to be a RIGHT. Why? Because the guarantee of free speech in our constitution is meaningless if it does not entail an access to the communications media."

    So by your logic, the newspaper has to print your manifesto? The TV station has to show your rants? The radio has to let your screed over the air?

    You may have the right to speak, but no one is obligated to carry your message, or even listen to you. So the Internet isn't a right. Just as me having a telephone isn't a right.

    1. Re:My Take...Make right take flight. by Minna+Kirai · · Score: 1

      So by your logic, the newspaper has to print your manifesto?

      No. But if you pay them enough to make them happy, then the government must allow it. (The same error present in the rest of your examples)

    2. Re:My Take...Make right take flight. by Anonymous Coward · · Score: 0

      No, but you can print your own damn newspaper if you want.

  109. Solutions? by Gldm · · Score: 2, Informative

    Well there's solutions to some of these problems, but nobody would really want to implement them.

    Let's talk about spam and adware: Outlaw it. Why is it proving to be so hard to kick congress off their fat lazy asses and make it easier for people to smack these bitches where it hurts, their wallets? Given what happened with the do not call list you'd think this would be a piece of cake. Why is adware even permitted to exist? You'd think with all the heightened security concern that methods of running unwanted code without a user's consent or knowledge of its installation would be a major issue.

    Viruses/worms/trojans: Change the way email works. Step one, NO ATTATCHMENTS. Seriously, why the hell are we using email to shuttle files around? It was not designed for this. What alternative is there for people to share files? I dunno, maybe P2P? Or maybe personal web servers? But wait, that's bad, then broadband providers would have to allow upstream that isn't horribly crippled or god forbid minor webservers on their networks. Let's look at the advantages of sending a link to a file on your machine in an email versus attatching the file:

    1. Reduced mail traffic. If your mail goes out to a 100 person list, and only 5 people care to check out the file, only the bandwidth for those 5 is used.

    2. Traceable distribution path. We know where the file came from, even if it's malicious code, someone is accountable for hosting it. It's just slightly harder to infect a user's machine, start up a webserver unknowingly, host a file, and trojan a link into their emails than just spew an .exe to their entire adressbook via their ISP's mail server.

    Peer to peer copyright infringement: Face it, it's here, it's not going away. Either make what people want to watch and hear available when they want it for a price they won't balk at, or suffer. I mean how impractical is this? Itunes doesn't seem to be having any problems. Maybe it's not so much people are unwilling to pay for a movie or a CD as they are unwilling to go down to a store and get something overpriced or find out it's out of stock. Maybe it's easier to consume TV by watching exactly the episode you want of the show you like without having to plan your day around it. Not everything downloaded is even available for sale. People want it, but companies aren't supplying it, so they're going the less than legal route to get it. There will always be piracy for any medium, people taped CDs and the radio and copied VHS tapes. P2P is just making access to content easier. If there isn't enough legal content or the access isn't easy enough, guess what people will go to instead? I would rather pay what the average monthly cable bill is and be able to search for and download whatever TV episodes or movies I wanted to watch than pay it to have to wait for them to come on so I could watch them or record them. It's not about the money.

    --

    Introducing the new Occam Fusion! Now with sqrt(-1) fewer blades!

    1. Re:Solutions? by Anonymous Coward · · Score: 0

      Viruses/worms/trojans: Change the way email works. Step one, NO ATTATCHMENTS.

      Are you insane? E-mail worked just fine the way it was, until Microsoft came along with their shitty mail clients. I'd agree that changes need to be made to prevent spam, but that's a different problem entirely than fucktards who blindly double-click (and whose mail client allows them to do it) everything that finds its way into their inbox.

      I got some more news for you, Sparky: People who are too stupid to take precautions against trojans/worms/viruses now are never going to figure out FTP or how to set up a personal web server to shuttle files to other people.

    2. Re:Solutions? by Gldm · · Score: 1
      Are you insane? E-mail worked just fine the way it was, until Microsoft came along with their shitty mail clients. I'd agree that changes need to be made to prevent spam, but that's a different problem entirely than fucktards who blindly double-click (and whose mail client allows them to do it) everything that finds its way into their inbox.

      If they're stupid enough to click on attatchments in outlook, they're stupid enough to click on them in anything else. MS isn't the problem here. Why wasn't it a problem before then? Maybe because the internet was mostly geeks, researchers, and CS students before that. But this is slashdot, feel free to blame MS for everything whether it's their fault or not.

      I got some more news for you, Sparky: People who are too stupid to take precautions against trojans/worms/viruses now are never going to figure out FTP or how to set up a personal web server to shuttle files to other people.

      Thanks for agreeing with me. People are just too stupid and refuse to be educated. The only solution to the problem is to prevent the behavior causing it. People are too stupid to setup the servers? Like they're too stupid to set up a mail server or an ident server? The solution is simplify and automate the process. Obviously this raises the same issue as outlook in that if you have alot of automatic little webservers they may be vulnerable to targeted attacks. The thing is, web browsing is usually pull based, and email attatchments are push, so I think problems would still spread less.

      --

      Introducing the new Occam Fusion! Now with sqrt(-1) fewer blades!

    3. Re:Solutions? by mcrbids · · Score: 1

      Change the way email works. Step one, NO ATTATCHMENTS. Seriously, why the hell are we using email to shuttle files around? It was not designed for this.

      This has to be one of the most uneducated, pedantic, and just plain *wrong* posts I've seen, even on slashdot.

      The purpose of email is to transfer (communicate) information from userA to userB. Whether that information is ASCII text, html, or base64 encoded binary information is largely irrelevant.

      Email is most definitely designed to handle attachments, from a very early age.

      1) Traffic is a small cost compared to the cost of labor. Who cares about saving $0.03 worth of traffic that then brings $2 of labor costs publishing files to an FTP server?

      2) You have traceability. Most any email program allows you to view the headers of an email.

      Get real.

      --
      I have no problem with your religion until you decide it's reason to deprive others of the truth.
    4. Re:Solutions? by advocate_one · · Score: 1
      The thing is, web browsing is usually pull based, and email attatchments are push, so I think problems would still spread less.

      oh boy... are you clueless or what... the latest worms are pull based with no attachments and just a carefully crafted link to the payload on the compromised machine that sent out the email...

      "The latest Bagle incarnation has done away with the attachment altogether and spreads when a vulnerable user opens the e-mail using an unpatched version of Microsoft Outlook. If their Outlook preview pane is open, the victim's machine will be compromised automatically. Because of this change in tactics, experts fear the worm could spread very quickly.

      Sophos's senior technology consultant, Graham Cluley, said: "This is a really sneaky, cunning trick. It's exploiting a five- or six-month-old Outlook security vulnerability so that just previewing an e-mail--not the attachment--in an unpatched copy of Outlook will result in the virus being dragged from an infected machine to your machine. This has the potential to spread very quickly because so many people, particularly home users, have not applied the patches.""
      --
      Donald 'Duck' Dunn: We had a band powerful enough to turn goat piss into gasoline.
  110. Pining for the "good old days". by Anonymous Coward · · Score: 0

    "We need to get back to the days of having Internet access being a utility, much like electricity or water, where one could hook in and use it any way one will. The looming threat is control, lockdown, and homogenization that promises to render this medium as stale as commercial radio."

    The problem with your post is that it's harder to affect someone elses power or water, but if you could? Then you would suffer the consequences every bit as much as broadband is presently.

    Also siteas going pay is the right of whomever produces the content. You may have gotten it free before, but that was with the permission of the producer, not some inate right.

    And last you pine for the good old days, but in the good old days unless you payed for your own connection. Someone else had a measure of control over what you did. They may not have exercised it, but...

  111. Dialup not standard by leandrod · · Score: 2, Insightful

    Let's take a look at your assumptions.

    > standard dialup

    There is no such thing. Dialup just happens to be cheaper if you don't use the Net heavily, and to be universally available. There ain't anything standard about it.

    Nor is broadband what people really need. Rid them of the actual dialing time delays, and they will live happily with 128Kbps or even 64Kbps. This would be somewhat cheaper, would make these users less interesting to be targetted by spammers, and would help webdesigner go slow with flash and fancy graphics.

    So what we need is competition in the last mile Net connections, so that this bandwidth madness is checked.

    Now, perhaps MS users should be required to have firewalls by default, and to give permission for ISPs to routinely check them for virii, spyware and the such? Perhaps partition all ISPs in MS Windows and the sane world, the MS Windows world being firewalled at the ISP so that MS Windows users can only do so much harm to their fellow sufferers?

    --
    Leandro Guimarães Faria Corcete DUTRA
    DA, DBA, SysAdmin, Data Modeller
    GNU Project, Debian GNU/Lin
    1. Re:Dialup not standard by EvilTwinSkippy · · Score: 1
      There is no such thing. Dialup just happens to be cheaper if you don't use the Net heavily, and to be universally available. There ain't anything standard about it.

      So PPP and SLIP are all figments of my deranged imagination.

      Now, perhaps MS users should be required to have firewalls by default, and to give permission for ISPs to routinely check them for virii, spyware and the such? Perhaps partition all ISPs in MS Windows and the sane world, the MS Windows world being firewalled at the ISP so that MS Windows users can only do so much harm to their fellow sufferers?

      No, here is a better thought. How about design something the doesn't become infected as soon as it connects to a network. There is absolutely NO reason why a fresh install of XP needs to have RPC turned on. NONE. You go try to turn it off. It's buried under services. And good luck downloading the "fix" when your machine reboots every 60 seconds.

      Here is another idea, stop knitting extraneous crap into the core OS. There is no such thing as an escalation of privilages on a MickeySoft system because all of your apps run as admin! (What security is in place is a shell game.)

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
  112. Well you have the real answer by Sycraft-fu · · Score: 2, Insightful

    Turning off connections and refusing to turn them on until the problem is fixed. If ISPs started doing this, people would start patching, geting anti-virus software and so on. Your average person doesn't care if they get infected since it doesn't affect them in ways they notice. Not having Internet, they'll notice and care about. What's more, they'll probably have to pay to have it fixed, either by taking it to a shop or buying software. This gives them even more incentive to prevent future occurances.

  113. WHY use this crap???? by brunes69 · · Score: 1

    Of course that story was from 2 weeks ago so it's old news. This week the latest variant has no attachment at all. It's just HTML that exploits an IE bug that downloads the worm from the infected computer that sent the message.

    This type of nonsense blows my mind. Why in God's name would anyone use this crap?!?!? I mean, I use Windows at work, but the first freaking thing I did when I got my new machine was download Thunderbird and remove all the Outlook shortcuts. Its a POS and should be banned.

    1. Re:WHY use this crap???? by antic · · Score: 1

      I disagree. I use Outlook and have no complaints. I have my security settings raised so that attempts to integrate ActiveX and the like are blocked. Dodgy emails are quarantined by my host, and anything that gets through either has infected attachments stripped, or I (oh my god) don't open.

      --
      'Thats they exact same thing a banana wrench monkey.'
    2. Re:WHY use this crap???? by Inda · · Score: 1

      Have you tried to open BAT, EXE, or VBS files in Outlook in the last few _years_?

      un-possible. Can't be done. Outlook complains like fuck.

      It's not as bad as it once was. I happen to like it.

      It deals with these new activeX virus fine too. It complains like fuck about them. There is no option to view them as the virus writer intended.

      --
      This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
  114. Re:It's not the broadband by gtrubetskoy · · Score: 0, Troll
    And Microsoft, while their security practices are abysmal, aren't the only ones to blame.

    So who do you suggest is to blame, if not Microsoft?

    The article makes an assertion that proliferation of worms will negatively impact freedoms of the Internet. Microsoft created Outlook and Explorer, both of which can be made to execute arbitrary code on an unsuspecting user's machine, which is the vulnerability exploited by literally all of the worms circulating out there right now, and your suggestion is that someone other than the party responsible for those vulnerabilities is to blame? This is sort of like saying that criminals aren't the only ones to blame for their crimes.

  115. Treat everyone who gets a virus like a child. by Anonymous Coward · · Score: 1, Interesting

    Treat everyone who gets a virus like a child. If your computer is a broadband connection and you get a trojan or virus which is detected by the broadband company then they should have the right to treat you like a child because you have shown that you are not responable enough to use the Internet without "training wheels.

    These "training wheels" would consist of software that these people would be forced to use after they get infected. First the broadband company should shut down access from that computer. Then if the person wants to use that broadband company agian, he must agree to have software installed on his computer which will check for and update virus definition files daily and check for security patches daily and download and install them if a new one is present.

    This system only punishes the guilty (fools who already got a trojan or virus somehow) and leaves everyone else alone to use the Internet as usual.

  116. That's the proper solution to this problem by Sycraft-fu · · Score: 1

    You provide an economic incentive for them to go and learn how to prevent this from happening in the future. Most people, if they have to pay to have their computer fixed enough times, will do something to prevent that.

    Depending on where you make most of your money (service or repeat hardware sales) you might want to inform them that they can educate themselves as to how not to have this happen, which would prevent the need of future service.

  117. my $0.02 by kendoka · · Score: 2, Funny

    Who says it hasn't happened already? I remember when the Internet only exercised censorship over advertisements. Now the ads are free, the naked girls aren't, and if you wanted to see how a bomb works the FBI and the CIA will fight over who gets to shoot you first.

    (Not that I ever download, or condone the use of pornography, or building bombs. Please don't shoot me, Ashcroft. =))

  118. Microsoft leading to internet breakdown. by handmedowns · · Score: 2, Interesting

    I'd like to point out that I haven't been infected by a worm or virus yet. Thats not to say my system is bug free.. though linux does have its ups when it comes to security. As far as spam goes, mail delivery needs to be redesigned. And not one of these dumbass MS solutions of a nickle an email.

    --
    The road between democracy and tyranny is paved with secrecy in the name of security.
  119. Why don't we... by Flamingcheeze · · Score: 1

    Why don't we just ask the Koreans? Eveyone and their dog had broadband there.

    --
    The Philosophy of Liberty | lewrockwell.com
  120. Microsoft is taking care of that by Sycraft-fu · · Score: 2, Interesting

    Windows XP has a software firewall that is simple, but works pretty well for most users. Stateful, permits outbound, denys inbound. It will allow inbound upon user request (in the config menu) or program request (not sure how that works). It's off by default.

    However, it's not going to be for long. Service Pack 2 is going to turn it on by default. This will cause plenty of whining and MS bashing, I'm sure, but hopefully it will help a little bit.

    However the main problem these days is with attachment-clicking syndrome. Most viruses don't come through exploits, they just come through e-mail. For every one like Blaster that uses an exploit there are 500 like Bagel that go via e-mail attachment. People need to learn to quit opening random attachments.

  121. give your head a shake... by Anonymous Coward · · Score: 0

    The Internet SHOULD BE A RIGHT and it should NEVER be filtered
    or have access to it restricted in ANY WAY. The Internet is the only
    place on earth that gives people REAL FREEDOM instead of government
    issued pre-approved freedom morsels(with restrictions of course).

    A virus or worm or ddos problem? GET OVER IT it's part of the
    freedom that the Internet offers. If ANY kind of restrictions or
    filtering or regulation is allowed it will be taken and used as a
    wedge to turn the freedom of the Internet into the type of spoon
    fed service you get from cable TV or the like. Do you want that to
    happen? Copyright infringement? screw that copyrights have been abused
    anyway... Intellectual property? screw that as well... the digital age
    is transforming the way we can get/access things and business will
    have to change to accommodate IT not the other way around.

    It figures that the only good thing I've seen come out of
    ANY of the societies on earth will be crushed and destroyed
    because the people in power and those not in power simply can't
    handle people having REAL FREEDOM... GIVE YOUR HEAD A SHAKE PEOPLE!

  122. The internet went to hell May 5, 1992 by sdo1 · · Score: 2, Interesting
    The internet went to hell May 5, 1992 and it has never recovered. That was the day that AOL started allowing their users to post to usenet. Breakdown? No, it's been breaking down for nearly 12 years.

    -S

    --
    --- What parts of "shall make no law", "shall not be infringed", and "shall not be violated" don't you understand?
  123. PC use is irresponsible. by Cow007 · · Score: 0, Flamebait

    Let us not forget that one of the main reasons it is sow easy to spread vifuses and worms is beacause M$ Windoze makes it possible. If more people used system software based on unix or linux then things just woulden't have gotten to this point.

    --
    411 Y0UR 8453 4R3 8310NG 70 U5!! -NSA
    1. Re:PC use is irresponsible. by kr00bar · · Score: 0

      Why is this flamebait? It's the truth. Most worms exploit flaws in M$...

      We could exploit flaws in any system, but there is much less hatred against the linux and open source cummunity than against the "M$ community".

      I would expand beyond the "M$ community" and go straight to capitalism. The people hate capitalistic behaviour. As technology advances, the mass becomes more knowledgeable and more powerful. They find ways to circumvent capitalistic procedures (file sharing for free instead of paying for profits).

      This angers the captialistic community (which, btw, is fairly powerful). Thus the MPAA and RIAA take action. Which fuels the anger and hatred even more.

      How far will this go? Now that the mass has tasted power, will it become corrupted like all the others who have been in contact with it?

      It wil be interesting to see how this unfolds.

    2. Re:PC use is irresponsible. by Cow007 · · Score: 0

      Werd up G! Who cares this point system thing is stupid anyway.

      --
      411 Y0UR 8453 4R3 8310NG 70 U5!! -NSA
  124. Re:It's not the broadband by gtrubetskoy · · Score: 0, Troll
    the vast majority of all the problems we are having are due to problems with primarily Microsoft Outlook, as well as other Microsoft software.
    Any proof or facts to point this out, or is this just another one of your false blanket statements?
    Proof: here, here and here; and there is plenty more where that came from, these are just top three for today - note how they all exploit MS Explorer vulnerabilities.

    Now, anyone semi-profficient in visual basic can write a very destructive virus.

    Yet another blanket statement with no proof or backup.
    It is pretty well known that many of the e-mail worms out there were written in visualbasic. here is an example.
    In any of your posts I have yet to see any facts, the only fact that you have presented is that you don't have any resources or any backup/proof for anything you say.
    Well, I'm sorry you are so uninformed that you don't know about these things already.
    Say hi to Tanya for me.
    Whatever
  125. OT: Is it me or is google down? by Anonymous Coward · · Score: 1, Funny
    502... server encountered a temporary error and could not complete your request.

    Please try again in 30 seconds.

    Its been down for 15 minutes or so as of 6:32 PM Pacific Time...

    And people thought it was bad when /. is down...
    its the end!

  126. Quite Alarmist of You by the0ther · · Score: 1

    That's a really alarmist opinion to take. What would the solution be? Take a pill dude.

  127. Will the Internet "survive"? by Anonymous Coward · · Score: 0

    Well, it survived the first clueless freakoid onslaught, as AOL, CompuServe and Prodigy flooded the Internet the first time.

    The problem might again be back on the ISP's side for some of the solution. Do ISPs start blocking most ports for residential broadband connections (like the NetBIOS ports...that might be a great start), essentially leaving only Port 80 and "secure" ports (like for SSH)? Do they start restricting residential users to using only web-based e-mail access and remove POP3/IMAP message access, or at least block Outlook users' access to said services and ports?

    Who knows? But eventually it will come down to a few of the major ISPs and other service providers understanding how most of the recent viruses/worms/trojans/DDOS things tend to work, and colluding (here is that evil word) with each other to put the clamps down in a mostly heavy-handed and abrupt fashion, but possibly as quietly as possible (or at least until Congress is asking them what they are doing about this evil menace by evil-doers).

    Or maybe it will result in all the various large domains (i.e., the various cable and DSL providers) essentially turning into a bunch of big NAT'd and firewalled fiefdoms at their main internet access points...

    Also, there does not seem to be an ecomonic reason for ISPs to try and come up with part of a solution, one way or another. Whether it is from the Heavy Hand of Government laying fines on subscribers or on the service itself for "permitting" or "facilitating" (by not trying to prevent or make exceedingly difficult) misuse of internet services and facilities, or some whizbang technical solution or solutions that make the recent spate of network-based attacks much more difficult to pull off or easier to turn off, then not much will change.

    But maybe some of these things will start getting nasty. It always seemed like the old PC viruses of the past that were the most feared, and thus garnered the most attention by antivirus geeks, were the ones that deleted files or f'ing with partition or FAT tables. The more subtle ones, that changed file content, got less.

  128. Mitigation by rixstep · · Score: 2, Interesting

    There are mitigating factors, and ironically most of it is tied to the baby Bells and their competitors.

    Every communication line is multiplexed. In other words, a telephone trunk line open to the public at large may actually only be able to handle 1/10 of the total possible traffic.

    But broadband lines have been multiplexed much worse.

    So that as long as everyone does not use broadband, the speeds are high; but as soon as everyone goes over to it, guess what will happen?

    And then those who want the speed they had in the beginning will get a new offer: pay twice as much again and you can have it back. And so forth.

    So things are faster now, but it's not a constant upward curve.

    1. Re:Mitigation by EvilTwinSkippy · · Score: 1
      You've got to get out of the suburbs man. Downtown they have enough population density to install the properly rated switches and exchanges.

      Pats 784/784 dsl modem

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
  129. Let's ALL Go Back to Dialup.... by Anonymous Coward · · Score: 0

    Internet Access..... The only people who use broadband internet access are pirates, pornographers, and thiefs! The MPAA and the RIAA know best....

  130. Broadband access vs. human global mobility by Noco · · Score: 4, Interesting

    This idea of broadband access creating a "breeding ground" for new malicious code as well as allowing the code to be spread more rapidly and universally seems to parrallel the problems that have been facing public health officials for the last century.

    With the increase in human mobility due to cars, trains, planes, etc. more people can come in contact from disparate places more rapidly and more often. This has resulted in once isolated diseases with limited scope becoming important health concerns. SARS is a prime example. Toronto became an infected city, though thousands of miles away from the epicenter. Yet we develop technology to aid in the detection and treatment of diseases. We don't, though, regulate people's movement. Temporarily there might be economic forces that isolate areas (i.e. airline travel stops due to lack of demand) but such effedts are temporary.

    I don't see a need to necessarily worry that broadband access's negative effects will trigger overregulation. Instead, I think that systems will be developed that mimic biologic systems. Oftentimes, evolution has produced solutions to complex problems in very elegant ways that we could not have developed using traditional methods.

  131. just be aware by ChefDuJour · · Score: 1

    I am under the assumption that most /. users are competent when it comes to handling spam and virii. I regularly cycle my primary e-mail address and use the farthest thing from Outlook as an e-mail client, in addition to simply harvesting e-mails from a party I am not familiar with and junking them with glee.

    What I am trying to say is use a degree of competency and the user will not even be aware that around them is this supposed world of disorder and choas.

  132. not a very good argument by hshana · · Score: 2, Insightful

    I don't see how the two are closely related. IMO, more broadband will increase freedom because it will give more people more access to larger amounts of information. Also, an "always on" connection will encourage more people to host their own websites and share even more information. As the threat from viruses increases, those who don't take the time to learn about and protect themselves from the risks will be removed from the pool of people participating. I think people will quickly learn to buy virus software and click the "yes, I want to install that update" button. The internet is too great a resource for people not to invest the time and effort to maintain their link to it.

  133. Re:And... the Poll of the week... err... year! by Anonymous Coward · · Score: 0

    Are slashdot editors bias?

    Are Democrats biased? How about Republicans? Please, I'm sure that one of these groups is "bias". Won't you please tell me which?

  134. the source of the problem or the problem source by Anonymous Coward · · Score: 0

    With all the M$ slander I'd hate to conform but the basis of most of these problems comes from the fact that Microsoft won't implement approved standards.

    Honestly, what advanced features of Mutt for instance, are exploitable by an incoming email? If say I do have clickable links it would at least then be my own fault if I was tracked by image tagging (or whatever the term is now).

    Standards keep evolving for the worst as the majority continually incorporate them and become dependant. It's like the internet is full of junkies, they're just not on smack, they're on M$.

    It's got to the point now where my plain ol' locally configured MTA can't even connect to a mail sever over my bandwidth hogging 56k connection to deliver an email because the stereo-type of acceptable internet use has changed for the worse. I am blocked because I am on a dynamic IP.

    My mail client and 56k connection do not contribute to any of this service degradation but I am the first one to be blocked and ignored.

    Where else in our existence can rules be made by the powerful for the powerful and the weaker democratic exterminated? OK it's not as bad as all that but Capitalistic society indeed sucks arse.

    I would just love to at least see a plain text only version of outlook (may I add mime compliant) for the more network aware windows user. *snigger* yeah I can see that happening. Jeez I crack myself up.

    To wrap it up, although this dynamic content revolution is impeding me to an extent (there is always a way round), I pray (meditate, think about with joy, take your pick) that it is hopefully the undoing of these corporate empires driving their own standards for the bottom dollar. If it all came crashing down tomorrow I know that I'd still be /stand ing and I'm sure along with me, the ppl at the FSF and the Open Source community in general would be having a jolly old chuckle.

    You can only hope. For now, it's time to reboot.

  135. ISPs become more sophisticated too by HuguesT · · Score: 3, Insightful

    Today's broadband ISPs are a bit more sophisticated than the shabby dialup operations of yesteryear. Now they offer as standard spam & viruses filtering, NAT, real routers as opposed to modems, and more.

    Also more and more mere users have come to understand the importance of patching, disabling services, not trusting attachments etc and even Microsoft is supposed to be shipping some kind of firewall software as standard now.

    Things are not as one-sided as it looks.

  136. Solutions? by dacarr · · Score: 1
    One solution to the problem is that one could just simply install Linux boxen on all the idiots. Sure, they'll miss their MS Outbreak, but the compatibility issues alone will cause these viruses and back doors to simply not run.

    At least, that is, until they rebuild them for Linux.

    --
    This sig no verb.
  137. Reminds me of "A Fire Upon the Deep" by CheeseTroll · · Score: 1
    In Vernor Vinge's novel, the galaxy is divided into different zones, where different laws of physics apply. Earth is in the "slow" zone, where nothing can travel faster than the speed of light, but other parts are not so limited. When an ancient "Blight" gets released, the only way to stop it is to expand the Slow zone until it encompasses the Blight and wipes out its ability to spread effectively.

    Moral of the story: Put everyone back on 28.8 connections, and Slammer, et al., will wither and die.

    No thanks - I'll take my chances!

    --
    A post a day keeps productivity at bay.
  138. I block all the DSL and cable addresses by Skapare · · Score: 1

    I block all the DSL and cable addresses I know about, mostly by means of a large domain name based list I have compiled, plus a few DNS based blacklists. But I think spammers are figuring out that I'm doing this, and in their desperation to ensure I end up with the largest penis in the world, they have resorted to making their spam zombies use their ISP mail servers instead of connecting direct to my mail servers. This is a definite trend. I guess I will have to start blocking those servers next. In the mean time, I'm providing the abuse desks at those ISPs with lots more evidence to ignore. I wonder what the spammers will do if I just quit using the internet altogether? Carrier pigeon?

    --
    now we need to go OSS in diesel cars
  139. Dial up was fun by teklob · · Score: 1

    I've often wished for the days of dialup internet was a nicer place but as technology makes faster connections possible, people make faster connections necessary by thinking "everyone has dsl, its no problem to download a 500mb file" also I bet the infection rate of worms would drop drastically if everyone wasn't 'Always-On,' connected 24/7

  140. Most Linux install disks will clean a PC by Skapare · · Score: 2, Funny

    Most Linux install disks will clean a PC. Not only will they clean the PC of the infection, but they will also clean it of spyware, as well as greedware. And it's free.

    --
    now we need to go OSS in diesel cars
  141. Not an accurate estimation by ScrewMaster · · Score: 3, Insightful

    The advent of widespread broadband access, per se, is hardly cause for a breakdown in basic Internet functionality. Talk about inferring cause and effect. What is responsible is a breakdown in the caliber of the network user. Prior to the Internet being opened for public access, you had primarily large-scale governmental, corporate or institutional users, any of whom are (presumably) a harder target than the average Dell owner with a Surfboard. By the logic of this post, it would make perfect sense to restrict everyone to 110 bps Baudot communications in order to make it harder for worms to proliferate. That's ridiculous. What needs to be done is to secure the network, by both the end user and the connectivity provider. Blaming high transfer rates is, well, like trying to cure diarrhea by tinkering with the plumbing in your bathroom. If you try to treat a problem symptomatically, rather than analytically, you are unlikely to find a cure.

    --
    The higher the technology, the sharper that two-edged sword.
  142. What do you mean by "authenticated access"? by Skapare · · Score: 1

    What do you mean by "authenticated access"? Do you mean the password the user uses to submit mail via AUTH-SMTP and/or MSA? I'm sure the virus will (when it needs to) just sit there and wait for the user to actually send some mail, and just spy on the entered password, and proceed to spam far and wide at some point thereafter (like when the computer goes idle so the user doesn't know the spamming has started).

    --
    now we need to go OSS in diesel cars
  143. Re:It's not the broadband by Anonymous Coward · · Score: 0

    You do know that a whole sluice of other programs, open-source and closed, over the years have had bugs which allow execution of code, root exploits etc etc.

    Yes, lambast MS for making for poor security decisions and software. Also blame clueless users and admins who don't apply patches, or click on attachments sent from strangers. Blame other software that is equally as comprimised as MS's products. Blame companies that make progarms that need to be run in administrative capibilites. Blame virus and worm writers, ffs. If there weren't virus and worm writers, would poor security even matter?

    Microsoft are a not the whole internet, you know. There are other parties to blame as well as MS.

    The first worm of the internet, was a unix worm.

    and your suggestion is that someone other than the party responsible for those vulnerabilities is to blame? This is sort of like saying that criminals aren't the only ones to blame for their crimes.

    You really are have bitten hard on the anti-ms fud that the trolls spew, haven't you? I never said Microsoft weren't to blame, I just said they weren't the only ones. Read up this same comment.

  144. Everyone else should be at 300bps... by rthille · · Score: 1

    While I've got a OC-192!

    Oh wait, the servers I want to get to should be on fast connections too!

    --
    Awesome furniture, accessories and cabinetry in Santa Rosa, CA: http://humanity-home.com/
  145. Re:It's not the broadband by Anonymous Coward · · Score: 0

    The recent blaster worm was not written in visual-basic. Lots of worms are written in C, java and god knows what else. Does that mean we should blame Sun et.al as well?

    By the way, one example doesn't make a trend, nor qualifies as proof. Show us hard data showing percentage of statistics affecting Internet explorer, or hard data showing the percentage of worms written in VB.

  146. Not if... by Lord+of+the+Fries · · Score: 1

    The network becomes a more heterogenous environment. It's how eco systems (macro and micro) protect themselves. And they can communicate "information" relatively quickly.

    --
    One man's pink plane is another man's blue plane.
  147. User Stupidity by Anonymous Coward · · Score: 0

    User stupidity is the #1 reason for virus outbreaks, worms, and the like. I wouldn't blame broadband, I'd blame the people with broadband who are too stupid to handle it.

    The reason for the morbid degradation of the internet is due to an increase in the number of exploitable people using it. What tech savvy person buys SPAM, opens "cool_song.mp3.exe", or doesn't question their computer when random popups start occuring? If everyone on the internet was smart, most of the crap wouldn't be around.

  148. Horse Hockey! Light up the unused fiber. by MMHere · · Score: 1

    What about all that backbone fiber that was laid leading up to the .com bubble burst? I'm talking about high-speed fiber of which only 1% is currently lit.

    My Broadcom stock went from $50 to $1 because telcos and other infrastructure types over-bought and laid fiber. Much of it remains unused.

    If lit, how many additional resources (routers, telco cabinet equipment) would have to be added to accomodate the new fiber capacity? I'm guessing the conduits are populated, but the switches aren't present...

  149. Broadband isn't bad. by Tuxedo+Jack · · Score: 1

    It's the plethora of idiots with unsecured Windows boxes on broadband who don't know about firewalls or antivirus software or routers that's bad.

    --

    Striking fear in the authors of godawful fanfiction, I am here, appearing in darkness, Tuxedo Jack!
  150. Three things not to believe by salesgeek · · Score: 1
    1. The Internet will fail because of ______. We are doomed AAAAUUUUUHHHHGGGGHHHHH!

    We've been hearing this since back in the day. Whatever. The internet evolves in a "darwinistic" way just like malware. Right now the problem is poor or non-existent security on client computers. Clients on the net will have to get fixed or they will be cut off a la Comcast. So the IT people of the world will make a few billion fixing broken software. Nothing new here. Whoop-de-doo.


    2. When your dentist says "this will hurt just a little."

    3. Any engineer or tech that says that it simply can't be done

    As a rule, it's better to say "I can't think of a way to do this." Never is too strong. Maybe you can't find a way, but someone else will.

    --
    -- $G
  151. i have to say it... by Anonymous Coward · · Score: 0

    ...that none of these problems seem to exist with Mac OS, FreeBSD, or even (GASP) Linux. so broadband is not a negative effect on the internet, or our freedoms. it's a negative effect on windows . so to save the internet we must bomb microsoft.

    who's with me?

  152. I still don't see this fixing the problem... by Brightest+Light · · Score: 1
    If we want to see Linux on the desktop for less technically clued-in users, why not make the *BSD/OS X (Solaris too maybe) move of having a priveledged administrator account, and leaving root disabled by default?

    If Joe User needs to use the privileged administrator account to do things like installing software, changing system settings, etc etc; they'll simply use the privileged administrator account as their normal account. Though they may not have full access to everything root can do, I can still see this leading to the same problems you'll find when Joe User uses the Administrator account on his Windows box as a normal user account. As the grandparent said, the Problem Exists Between Chair And Keyboard. Regardless of the operating system, put an idiot at the keyboard and they'll wreak havoc with it (intentionally or unintentionally). What makes you think that the same sort of people who STILL haven't patched for things like Codered and NIMDA would patch for things like Lion/Ramen? Changing the operating system fixes nothing if the person who uses it is still bereft of any sort of competency.

    1. Re:I still don't see this fixing the problem... by grahamm · · Score: 1

      In a corporate environment Joe User should not need to have access to a privileged account. That is what the IT staff are there for. I remember the days when the corporate desktop computer would be a 'dumb' terminal onto the mainframe. Users seemed to cope quite well with data entry on forms etc. The vast majority of business, as opposed to home, users should not need to even know what OS their computer is running. All they should need to know is how to use the applications which they need to do their job.

    2. Re:I still don't see this fixing the problem... by Brightest+Light · · Score: 1

      god, the thought of setting up thin clients/dumb terminals for our users here makes me wet... and maybe someday the tech gods will smile upon me and grant my request. i totally agree with you.

    3. Re:I still don't see this fixing the problem... by ahodgson · · Score: 1

      They coped so well, in fact, that as soon as PC's became affordable every department in every company rushed out and bought truckloads.

      Users want to do stuff with their computers, not just stuff that IT thinks they should be able to do. That's why we have PC's in the first place.

      Not that I think they're actually competent to do it, of course.

  153. A Point, but... by suwain_2 · · Score: 1

    I really don't like the point here, but it's hard to articulate why.

    As cell phones become more popular, we're enabling instant communication between people. This helps to promote terrorism, as terrorists now have what's essentially instant, private communication with each other. Cell phones are thus leading to a social breakdown through terrorism.

    It's preposterous to argue that. You can't really say I'm wrong -- terrorists could use cell phones to communicate more readily. That's how I feel about the whole point here: yes, you can transmit viruses faster, but I think it's really a pointless observation.

    --
    ________________________________________________
    suwain_2 :: quality slashdot p
  154. No by Anonymous Coward · · Score: 0

    No, no, maye, no and no. Thanks for playing.

    Wish they would save dumb-ass posts like this for the weekend.

  155. Already Happening, Roadrunner blocking TCP by Anonymous Coward · · Score: 0

    Houston Roadrunner, as part of their recent bandwidth upgrade has started blocking ALL incoming TCP traffic. While this prevents people from running their own webservers and email servers, it also prevents more innocuous things like ssh servers for remote access, and most P2P connections. Very annoying.

  156. It's not dying... by Anonymous Coward · · Score: 0

    It's evolving!

    We'll probably eventually just lock down everything, and only let familiar things in.

  157. 404? by metalhed77 · · Score: 1

    You wouldn't get a 404 error. 404 = page not found. There has to be a server to know that the page isn't on it. What would happen is a 'site is not responding'. You wouldn't get any responses from the site.

    --
    Photos.
    1. Re:404? by eofpi · · Score: 1

      Which, in the world's most common browser, shows up with the same error page.

      --
      Y'know, you blow up one sun and suddenly everyone expects you to walk on water.
  158. Have to disagree with you by dbc · · Score: 1

    Maybe for you, but that's not everyone's idea of ideal service. My ISP has discovered that about 1.5 T1's worth of his bandwidth is going to NOTHING BUT PORT SCANS, 99% of which originate in a tiny handful of APNIC and RIPE netblocks. You know what? A poll of his customers showed that most of us wished he would just lop those dark corners of the internet off. He is getting his IBP to implement exactly those filters on most of his IP blocks. Those few customers that need to do business with those heathens can have one of the raw, unfiltered IP's, and deal with the port scans. The rest of us get our upstream bandwidth back, and many fewer portscan hits against our firewalls. Hurray!!

  159. Earplugs! by Phidoux · · Score: 2, Funny

    Earplugs! Haven't you ever tried them? They work wonders with my noisy PC... Huh?! What did you say?

    1. Re:Earplugs! by shadowmas · · Score: 1

      i'm used to wearing earphones at my pc even when i'm not listening to music. its very nice since it blocks out the fan noise.

    2. Re:Earplugs! by Phidoux · · Score: 1

      Good idea, but wearing headphones to bed is a problem. The cord isn't long enough.

    3. Re:Earplugs! by Short+Circuit · · Score: 1

      Fpr you, maybe. My computer sits at the head of my bed, and I have a 1/8" stereo extension cord so that there's a jack hanging on the bottom of the top bunk.

  160. Interesting vision... by nametaken · · Score: 1

    With the least perverse kind of overtones possible, I think it's safe to say quite a few slashdotters would be interested in seeing what the consequences of said programs would be when a truly vicious one achieves high saturation.

    Anyone wanna see what the internet would be like with 1/3 it's normal traffic? I picture it like a sort of post-apocalyptic scene where the survivors rule.

    Of course, this idea is only neat if I'm one of those 'survivors'.

  161. Watch Internet-inside-Internet appear by bigberk · · Score: 1

    The problem isn't broadband, but rather too many clueless users. It sounds awful to say it, but there are too many uneducated people with powerful computer connected to the Internet.

    My guess is that a new Internet will appear (possibly using VPN or IP-over-IP tunneling) that will re-establish the Internet as we knew it. Possibly comprising of academics, hippies, and techno geeks. Sweet.

  162. Slave to the Machine by pipingguy · · Score: 1

    Ironically, while reading this story's comments, the auto-included Slashdot bottom-page quote was: "If you own a machine, you are in turn owned by it, and spend your time serving it..."

    Are we all enjoying life yet?

  163. evolution by null-sRc · · Score: 1

    the article speaks of worms & such evolving to bring down "the internet".

    nothing evolves without a need.
    Including the internet. thanks worms!

    --
    -judging another only defines yourself
  164. worms don't take away freedoms; governments do by Sivaram_Velauthapill · · Score: 1

    The threat to freedom posed by worms and other malicious attacks is several magnitudes smaller than the threat from governments and insidious corporations.

    For example, spam (which would fit into the 'insidious corporation' category--after all, spammers make millions of dollars in profits is what is driving it) will decrease the quality of e-mail more than any virus or trojan horse spread through e-mail. People are more likely to scale back e-mail usage because of spam than virus attacks. Similarly, governments tracking you (and your devices such as cellphones, PDAs, etc) through IP addresses will be greater threat to freedoms than the worst worm. Of course, the worst scenario is when corporations work with governments to take away freedoms (things like RIAA and MPAA would fit into this).

    Viruses, worms, and others can be stopped--the user has the power. Just like how you can stop mosquitoes by using mosquito netting or anti-bug repellant, you can prevent these attacks by using firewalls, not clicking on unknown attachments, and so on. In contrast, government and corporate influence is difficult to combat by a single person.

    The only problem with worms/viruses/etc right now is that the general public is unaware of the aforementioned solutions. Computer users don't even know what a firewall is. Hopefully the day will come when users know as much of a firewall as bug repellant.

    Sivaram Velauthapillai

    --
    Sivaram Velauthapillai
    Seeking the meaning of life... @slashdot of all places ;)
  165. *Internet* breaking down? by Jugalator · · Score: 3, Interesting

    Are you sure about that? I thought it was signs of some *software* breaking down. Keep in mind that the vast majority of regular users who doesn't have much insight in security are coincidentally also using one of the least secure operating systems with Internet access.

    Maybe the inter... ahem, software would heal with new development philosophies?

    --
    Beware: In C++, your friends can see your privates!
  166. ISPs will take care of it for us by MoZ-RedShirt · · Score: 1

    ISPs will find technical solutions to this problem, because it is their backbone that gets beaten up by all this crazy stuff that's circling around.

    There will come the time where outbound smtp or netbios or sql-server or whatever will be blocked for residential ip pools, so that Joe Average's PC that got infected by 17 different worms/viruses/spamproxies/whatever can't propagate them further.

    If you need some of the blocked ports you will have to call support or use a webtool and let them open it up for your connection.

    This way the users who don't need the ports or don't even know what ports are, can't contribute unknowingly to the problem. And you can asume that those technically literate enough to request opening some ports on the ISP firewall are responsible enough to take precautions to avoid infection with malware.

    The best method of course would be to watch all traffic originating from home PCs and if virus traffic is found to cut off the connection until the PC is cleaned. But I don't know if intrusion detection systems are capable of scanning traffic in the Gbit/s range and if scanners are reliable enough to not report false positives.

    And I would make it mandatory in the ISP terms of service to have a virus scanner on every PC that wants to connect to the Internet.

    Then we can blacklist all ISPs that dont require their users to have clean PCs so that everyone is free to filter traffic from those sites.

    RedShirt

    --
    Microsft spel chekar vor sail, worgs grate !!!
  167. Experience agrees with you. by twitter · · Score: 1
    You are absolutly right. The "problem" with the internet is not that it works well! The problem is that most people are running insecure crap. The answer is not to criple people's ability to exchange information freely, the answer is to use the right tool for the job. People servicing computers see it all day long, Windows is broken not the internet.

    Dial up users with Windoze get hosed just as fast as "broadband" users and have additional risks. They use the same email, IM, and browsing software and they get just as poluted. They will wait longer to get less information, but they will wait as long as it takes because they have to. The automated root kits will get them while tyey are trying to browse CNN and the email worms come with their email just like those for broadband. The only difference is that they have to go someplace to get a software fix because they don't have the time to research and download one. Dial up users also have uniqe problems, porn dialers and disconect malware. Porn dialers ring up charge lines in the middle of the night so the user recieves $500 phone bills at the end of the month. Hang up programs hang up the user frequently so that they have to wait for a reconnect. Go dialup! Porn dialers are more common than you think and commercial software may even be using the technique to gather information.

    Windows sucks. It's designed to control and screw the user. Information exchange and user functions are secondary goals to money making in Redmond.

    Don't blame the user, help them out. Commercial software vendors bombard them with BS and make life difficult for free software users. They are constantly inventing new file formats and abusing patent law to make sure free implementations don't exist. While there are free alternatives for everything worth while, the average user does not know this. Nor is the average user in a position to do the research it takes to purchase reasonalbe devices that will work. If you are clever, you will see this as a chance to make money for yourself!

    You don't have to screw your neighbor to make money.

    --

    Friends don't help friends install M$ junk.

    1. Re:Experience agrees with you. by igloo-x · · Score: 0

      What the fuck is this shit?

      Windows sucks. It's designed to control and screw the user. Information exchange and user functions are secondary goals to money making in Redmond.

      Please tell me you don't believe any of what you've just said otherwise i'm going to have to kill myself right-fucking-now.

      Tell me, what exactly is to stop these same dialers from operating on a linux machine? Provided a normal user can access the modem (which is almost always the case) there is NOTHING to stop malicious software from exploiting a browser hole, writing a script to the users' home directory and tagging a line on to the end of .bashrc, and performing exactly the same shit as you so vehemently attack windows of "being designed for?"

      And that's without root access. What if the same script managed to exploit some unpactched security hole? Your machine could be turned into fucking spam relay, but hey! at least it'd be an ultra-fast, reliable, stable and open source spam relay!

      Windows isn't the problem, linux (and don't say you didn't imply it) isn't the answer. The problem will always sit between the keyboard and the chair. It doesn't matter what the user is running on their computer, if there is money to be pried from their pockets, "Commercial software vendors" will be front and center, offering thousands of smiley faces at unbelieveble discount prices. If there aren't any ways to do it now, there will be soon, and as soon as there is they'll be there. Security through obscurity is nothing to hide behind. For an OS that only a fraction of desktop users use, there are more bugs discovered per month than there are in Windows, and if you think you can trust your average user to download a diff and patch their kernel to fix it you are sadly misguided.

    2. Re:Experience agrees with you. by Anonymous Coward · · Score: 0
      Moderators: Please note that "twitter" is a known fanatical psycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

      I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

      If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

      For example, in this recent post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

      More? Just read though this post and the subsequent replies. I guess this stands on its own.

      More? Bad spelling in astounding conspiracy theories, more offtopic FUD and uninformed "I'm right, look at me" rants, promptly proven wrong. Worse even, twitter wants to be RMS, apparently (that first one is a winner). I mean, really. You think?

      FUD, FUD, FUD, FUD, offtopic FUD, and more FUD. This guy is like the Monty Python SPAM skit, but with FUD and more FUD instead of canned meat. Amazed

  168. Tinfoil Hat Time by Anonymous Coward · · Score: 0

    This is all a part of Microsoft's Master Plan, aka Road Map for the Future.

    1. Notice that the Internet really is a threat.
    2. Kill Netscape by choking off its air supply. (Give away IE for free and bundle it.)
    3. Put out buggy OS and App code that damages the internet.
    4. Call for drastic changes to the basic internet protocols.
    5. ?
    6. Sit back, fat cat like, and collect your tolls from all "internet" (MS version) traffic and transactions. (The email stamps was only a ruse, mwhahahaha, we wanted it all!)
    7. Profit????

    A Nony Mouse

  169. back to the internet of 1844 by peter303 · · Score: 1

    We should all go back to the telegraph and one-key keyboards then!

  170. Eating your words by Nuclear+Elephant · · Score: 1

    Didn't Bob Metcalfe, the father of Ethernet, also predict the Internet would collapse on itself by 1996? He ended up eating his words publicly, and now the ONLY thing Bob is well known for is inventing Ethernet. So be careful, mentioning 'Internet' and 'Collapse' will upset the Illuminati and ruin your career.

  171. Ahhh... no. by abb3w · · Score: 1

    Obviously, the time to distribute fixed and patches goes down as well.

    The real "time to distribute patches" is the total of (a) the time required for the manufacturer to discover the bug, (b) the time required to create a patch, (c) the time required to for the user to figure out that yes, they REALLY DO NEED TO DOWNLOAD the $%^&ing patch, (d) the time required to download the patch, and (e) the time required to actually install it (and usually, reboot).

    Increasingly available high bandwidth/throughput connections on DSL will cut into the time for step (d), but the big problem is at the "Aunt Tillie" bottleneck at step (c)... which increasing connection speed won't help diddly.

    --
    //Information does not want to be free; it wants to breed.
  172. Think about THIS - Same Argument/Different Context by Compulawyer · · Score: 1
    Highway access leads to serious accidents, therefore something must be done NOW!

    I'll leave it to the reader to determine which (if any) consequences logically follow:

    • Safe Usage habits should be encouraged and appropriately enforced (e.g., don't double-click on strange file attachments, disconnect obviously infected machines from the network);
    • Tools used to access the infrastructure should be safe (your car - in the US at least - is mandated to adhere to certain minimum safety standards);
    • All access should be shut down so nothing bad will happen.

    Before you start flaming me for the second item, I am NOT saying that I think the computing industry (hard- and soft- ware) should be regulated. HOWEVER, I am a BIG fan of personal responsibility. Think about these points and how the computing world would be if adopted by everyone:

    • If you are a professional coder/MFG, put out professional quality products and TAKE RESPONSIBILITY for those products. Too many companies have hidden behind licensing terms that absolve them of resposibility for too long.
    • If you are an amateur coder/mfg, label your products clearly as such and let people know this from the moment they begin to use your product. That way the users can decide whether the amount of risk inherent in using your product is an amount they are willing to accept.
    • Use common sense and think about the consequences of your actions.
    How many virus/worm infections could be stopped if ISPs simply shut off access to infected machines when they see drastic changes in network usage patterns that indicate infection? This is my opinion, but I would rather have to make a phone call to my ISP than to have my box remain rooted by someone. This is just an example, but I think it makes the point about common sense.

    Remember the computing community is a COMMUNITY, and there is one baseline principle that lets all within a community coexist: Swing your arms around you all that you want, but your right to swing your arms ends where my nose begins.

    --

    Laws affecting technology will always be bad until enough techies become lawyers.

  173. Solution to the Problem by SteevR · · Score: 1

    Law enforcement agencies are slowly moving towards "non-lethal" technologies to solve the issue of nuetralizing their "problems".

    Why not create a relatively non-destructive (in a larger social sense) strain of virii that exploit the holes that other worms, trojans, and virii utilize/open? It could cause the operating system to not boot, or just completely disable the network, not affecting user data. What this would achieve is forcing the L-class user to take their machine to their guru or guru-for-hire to fix the problem, before their machine could inflict any more nastiness on the rest of Netville.

    --
    Performing sanity checks on your own beliefs is vital in avoiding poisoned koolaid.
  174. A Critical Mass by HerbanLegend · · Score: 1
    I don't think that the increased broadband speeds will really effect the Internet in the long run.

    Anytime you make a large change in the culture, like when the Internet first emerged from the underground, you are going to have a massive die-off, followed by a flowering of new growth that would have been thought impossible before.

    Remember when the .com's crashed? Internet commerce exploded, then collapsed. But then - then it recovered in ways that weren't anticipated. And just think - now we can get pictures of a man dropping a deuce on his wife's forehead for pennies a day!

    But seriously, what is needed in the computer world these days is an understanding, especially on the part of Microsoft, that uneducated people are a threat to themselves and to those who are educated. How hard would it be for Microsoft to put together a tutorial that teaches new computer users HOW their computer works?

    Currently, Windows Help (I tried it, once) is basically a collection of self-aggrandizing propaganda pages talking about how Windows can do this, can do that, is all-powerful and ever-living. It doesn't say a word about why crashes happen, what can be done about them, how Windows uses it's drivers to communicate with hardware, etc.

    Not that everyone would be interested in such a tutorial, but if more people understood what their computer is actually doing, behind the scenes, how an email message is put together, addressed, sent; then they wouldn't be falling for these "social engineering" viruses. (ie. "Naked Pics of Britney Spears, attached!", or more realistically, "You file request here is put on attach sexy!")

    The other day I got an spoof email directed towards my paypal account. These folks thought I would type in my username and password, give out ALL my personal information, just because they had done a nice job spoofing paypal's layout. I didn't fall for it, but I can imagine thousands of people who would. I found myself frantically emailing clients who are inept, my family and friends, warning them that it isn't real, because I could see how an ignorant person would fall for it.

    If those people knew that you can look at the message headers to figure out where the mail "really" came from, these viruses wouldn't infect very many people.

    Or how about this - many years ago the mail was so corrupt that the government had to step in and establish the Postal Service. It might not be a bad idea to require individuals to identify themselves reliably before being able to send an email from a given address. A centralized system would be easy for the government to abuse, but perhaps there is a way around that.

  175. Not the technology, but how it is used by AwesomeJT · · Score: 1
    Broadband is just a way to connect. Sure, it allows spammers to deliver more message from their home. It also allows those darn popups to appear quicker or those banner ads to download faster, etc. It's just a tool. It's how it is used that is good or bad.

    Guns can't shoot themselves -- they require people to pull the trigger. Broadband itself isn't bad, it's the spammers --regardless if they use dialup, T1, T3, or better.

    Spammers have done a great job of making my email almost useless. Most spam solutions still allow too many false positives or negatives to be worth the money.

    Adversiting on the web is going to do the same thing -- give it a few more years and the web will be just one big collection of advertising. There are many sites that started out with a wealth of knowledge and modest Ads they have turned into commercial land with little, if any, real content. In my opinion, About.com is a good example. In a few years, the vast major of the web will be this way.

    --
    SPAM solution made easy: 1 spammer, 5 cords of rope, 5 hourses, and fireworks. Be creative.
    1. Re:Not the technology, but how it is used by Anonymous Coward · · Score: 0

      And every day people try to force the opposite on us - outlawing the tool instead of the uses.

  176. This is the most foolish headline I've seen on /. by Voltas · · Score: 3, Insightful

    The internet is a free scale network. If you look up some of the information behind such a network you would realize a few KNOWNS

    Believe it or not a free scall network and the Internet:

    Can not be destroyed
    Can not be owned
    Individual or single entitites on it only have minimel impact (HUBS having the most influeance, and I don't me devices)
    No one can even fully understand the complete workings of the internet.

    These are almost FACTs, I know some may despute them but with out going to deep into the concepts I can asure you that Broadband or a Nuclear War will not destry the internet (Though it might lower its usage a little)

    --
    -- Disclaimer: I can't really back up anything I post on /. --
  177. Re:For crying out loud, INSTALL A FIREWALL, alread by goodydot · · Score: 1

    I like the idea of an ISP providing unfiltered access, then slowly restricting it as your system becomes infected with various crap, eventually cutting you off entirely when your PC creates mad network traffic. In addition, though, they could provide a service whereby they keep you computer updated and protected if you CHOOSE it. They could provide McAfee or whatever, close ports to your drop, etc. This, of course, would cost an extra $2 or so, but I know a lot of people who are uber-paranoid about viruses, but lack the intelligence to practice safe surfing and would gladly pay a small pittance to have these services protecting them. People are far more aware than they used to be of the existance of viruses thanks to articles in the NYTimes and such. BAH!

  178. Cheaper broadband?!?!?! ( alittle offtopic) by Anonymous Coward · · Score: 0

    I signed up for time warner road runner in august of 1999 in columbus, ohio for 39.99 a month. I know pay, 4.5 years later, 44.95 a month!!!!!!

    what the fuck am i doing wrong.

  179. Re:For crying out loud, INSTALL A FIREWALL, alread by mbessey · · Score: 1

    I think there's an inherent conflict there in that the corporate market is going to want many services enabled by default (computer browsing, etc), and the home user should have those disabled.

    I guess since XP does the Wizard" thing for Internet setup, they could use your answer to "are you on a local area network" to shut down things for a home user. On the other hand, lots of people have home networks now...

    -Mark

  180. Won't help anytime soon, I'd bet by mbessey · · Score: 1

    Windows XP SP2 is obviously only going to help if the user base has XP installed. I expect there'll be lots of systems out there running older versions of Windows for some time to come.

    I don't think we'll ever have a good solution for "attachment-clicking syndrome". Wouldn't be too hard for the OS to check for obvious problems, though -

    "Your computer has attempted to connect to more than 5 different email (SMTP) servers in the last ten seconds. This is USUALLY the result of a computer virus. Click > to disable smtp to any server other than your default email server(s)"

    -Mark

  181. PIF, SCR, etc. by billstewart · · Score: 1
    Outlook doesn't mind letting you open /PIF or .SCR files, though.

    And while it isn't as bad as it once was, and in fact does some things very well, it's still broken enough to be extremely aggravating.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  182. Explaining things to Telstra? by billstewart · · Score: 1

    You can't really use the words "explain" and "Telstra" in the same sentence without a negative and a couple of intensifiers in there somewhere. They've historically been the most totally clueless telco in any economically developed country; India's VSNL was worse (but are gradually liberalizing), and there are little underdeveloped countries that have worse service. And yes, Australia's as big as the main part of the United States, but Telstra couldn't find enough clues do the Right Thing in Sydney, where 1/4 of the population lives, much less out back in Wagga Wagga.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  183. yawn. by twitter · · Score: 1
    What the fuck is this shit?

    Looks like a M$ fanboy losing his temper or being paid to look like they are. Tut, tut.

    Please tell me you don't believe any of what you've just said otherwise i'm going to have to kill myself right-fucking-now.

    Keep your head but, yes, I believe it.

    Tell me, what exactly is to stop these same dialers from operating on a linux machine?

    OK, I'll tell you. The three things that make it very difficult for free software to have Windoze type problems are:

    1. Good Design
    2. Variety
    3. Code Quality

    First, sound design. With free software all hardware is controled by the kernel running as root. This makes it much harder for malware to do things it should not. You might be able to trick my browser, but you won't get permision to run my modem very easily. Good design also makes it harder for other people to make my machine do anything at all. My mail clients don't call processes automatically because someone sent me a sound file. I have to save the file or tell my client to do that. My OS does not have files that I can't see or erase, so clean up is much easier to. Windoze is a single user OS with lots of band-aids and very poor hardware control and software that does things it should not.

    Then again, you have no idea what software I'm running so you don't know how to craft the thing that breaks me. Sure, I'm unusual and post screenshots of my desktop, so you might be able to take me out personally, but outside the M$ monoculture you are not going to be able to craft a 21k Venerial Bisease that creams the internet. There are simply too many options available with too many versions within each option.

    Worse for Billy boy, the number of holes in free software is low due to PEER REVIEW.

    All three of these things greatly reduce your ability to own my machine with worms. A Linux, Solaris, OSX or BSD user has to try very hard to make their computer something that can be broken. Windoze gets broken automatically and regularly and the problem is not going to be solved with anything less than a fresh start: AV, Firewalls, blocked ports, draconian email and software restrictions have all proven inefective. The problem is not on the operator's side of the keyboard, it's the big fat trap that's been set by Billy inside the machine.

    Don't think Billy's not trying. I'm sure he'd give me a nickle if I could craft a work to take out so much as 5% of the world's free computers. I can imagine he's got teams of people in India working on it. It's not going to work.

    The proof is easy to see. Windoze machines get burnt all the time. BSD, Linux, Mac, OS/2, Solaris and other OS don't. Free software runs most of the web and sends most of the worlds email. The targets are all there and very high profile. When they run Microsoft, they get nailed. When they run anything else, life is much easier for them.

    Now, that did not hurt did it? Install Mepis or some similar software at your place of work today. Make yourself root and lock the others out if you don't trust them. Your job will be soooooooooooooo much easier.

    --

    Friends don't help friends install M$ junk.

    1. Re:yawn. by Anonymous Coward · · Score: 0
      Moderators: Please note that "twitter" is a known fanatical psycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

      I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

      If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

      For example, in this recent post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

      More? Just read though this post and the subsequent replies. I guess this stands on its own.

      More? Bad spelling in astounding conspiracy theories, more offtopic FUD and uninformed "I'm right, look at me" rants, promptly proven wrong. Worse even, twitter wants to be RMS, apparently (that first one is a winner). I mean, really. You think?

      FUD, FUD, FUD, FUD, offtopic FUD, and more FUD. This guy is like the Monty Python SPAM skit, but with FUD and more FUD instead of canned meat. Amazed

    2. Re:yawn. by igloo-x · · Score: 1, Insightful

      Looks like a M$ fanboy losing his temper or being paid to look like they are. Tut, tut.

      Don't flatter yourself.

      With free software all hardware is controled by the kernel running as root.

      How is this different to Winodows, Dumbass? Go on, name ONE piece of hardware on a standard Windows desktop that is driven from userspace. There aren't any, because in your fantastical world of free software wonderfulness and Microsoft villiany, you're forgetting the basic fucking principles of computer science i.e., what a 'kernel' is and does.

      Tell me, do you actually know ANYTHING about the way Windows is 'designed', or anything about good design at all for that matter? From the rest of your piss-poor arguments you could probably just guess you don't, but in this case I don't even need to do that, and this is why:

      I've just written a mail client that opens attachments automatcally, runs, activex and javascripts without even prompting the user, and displays new messages as they are downloaded without asking either. I published it under the GPL, therefore it is free software. LOL not so safe now, are you? But wait! You're now going to tell me how you wouldn't run my mail reader in a million years because you only run quality software. Of course, I COULD actually use the same argument, or I could just state the fact that by default, microsoft outlook runs in restricted sites zone and will not allow the user to parse any harmful user attachments without specific re-configuration first. OH NO! FACTS! QUICK! DON'T LISTEN! MICROSOFT ARE EVIL AND FUCK BABIES! LALALALALALA!

      My OS does not have files that I can't see or erase, so clean up is much easier to.

      I am actually interested in what you meant with this little nugget of grammatic gold. In the rest of your post, you argue the merits of an operating system that the user can't fuck up even if they tried. Surely files you can't erase or even see would be nothing but beneficial to this argument? Either way, you're wrong, because contrary to your paranoid believe there are no such files in Windows.

      Then again, you have no idea what software I'm running

      Yes! Just out of interest, boys and girls, this is one of the many reasons why free software will never hit the bigtime on desktop machines.

      Worse for Billy boy, the number of holes in free software is low due to PEER REVIEW.

      Just because its open source doesn't mean anyone is going to read it. This is why people uncover kernel exploits in 2.6 and trace the code waaay back to early in the 2.4 tree where it was introduced MONTHS ago. Why weren't they spotted as soon as the code was released? If that particular developer got of of bed on the wrong side that morning would the flaw have been spotted at all? This, of course, makes you wonder. Then dismiss your argument as being retarded trash.

      A Linux, Solaris, OSX or BSD user has to try very hard to make their computer something that can be broken

      I can do it in two keystrokes: su. Where are all your wonderful fucking permissions now?

      Windoze gets broken automatically and regularly

      That's odd, I've been running windows 2000 since it came out and I haven't had to flatten and re-install once, nor has my system beem compromised once. Why is this? Because the problem is STILL between the keyboard and the chair.

    3. Re:yawn. by Anonymous Coward · · Score: 0

      twit,

      Just a FYI - "M$" does not "pay" people to monitor your posts and disagree with you. "M$" has no interest in you whatsoever, no matter how much you wish that was the case. Also, people who disagree with you are not necessarily "M$ fanboys", at least any more than you're the quintessential "open sores fanboy". Trust me twit, nobody gets paid to disagree with you. That's a freebie.

      Finally, I suggest you seek professional help for your obvious psychological issues. You seem to be a pathological liar who refuses to acknowledge reality. That kinda sucks, don't you think?

      Hope you get better soon.

    4. Re:yawn. by Anonymous Coward · · Score: 0
      Please die

      :D

    5. Re:yawn. by Anonymous Coward · · Score: 0

      Oh look, -1 Flamebait. Tut, tut.

  184. Blaming DSL for the ills of MicroSoft by kahealani · · Score: 0

    What enables worms and virii to propogate rapidly is the insane widespread use of notoriously vulnerable software: MicroSoftware, to be precise. Don't blame high speed connections for this.

    --
    All Rights Reserve Without Prejudice, Angela Kahealani. All information + transactions nonnegotiable + private.
  185. It's not the right question. by Snyke · · Score: 1

    Not the increase of bandwidth malware, spammer and other buggers can use that will lead to a breakdown.
    The misconceptions of the basic structure of the internet in the past are all it needs (see SMTP which does not include any security measures).
    The problem emerges just now since it obviously brought us to a point where there is no other way than to solve them.