Slashdot Mirror


Microsoft Plans To Sell Anti-Virus Software

EvilCowzGoMoo writes "From the makers of our favorite OS comes: Anti-Virus! Yes you heard me right. According to an article on Reuters.com Microsoft is developing its own brand of anti-virus software. Asked if that would hurt sales of competing products, such as Network Associates' McAfee and Symantec's Norton family of products, Nash (chief of Microsoft's security business unit) said that Microsoft said that it would sell its anti-virus program as a separate product from Windows, rather than including it in Windows. My only question is: If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?"

830 comments

  1. Perhaps It Belongs in the OS by Jorj+X.+McKie · · Score: 5, Interesting

    While I'm not certain that I completely trust Microsoft on this, it might make sense to have the antivirus scanner as a part of the OS. Better low-level access, as well as being able to intercept attempts by something like Outlook to execute arbitrary files. Having a unified place to control such actions might help security.

    On the other hand, the major effect might just be to introduce a single point of failure/attack. It's certainly possible to argue that the variety of security software in use makes it harder to attack any given system. For evidence, look at the list of processes that the more sophisticated viruses try to stop.

    Background: I do not customarily use an on-demand scanner. On occasion, I have loaded up a scanner because of suspicious behavior. My Windows box (patched up to date, firewalled) has had only one virus, a backdoor program that was installed when my daughter clicked a "video clip" that she received in an e-mail, before she understood what a spoofed address was. So I'm not convinced that antivirus software is as necessary as it is built up to be.

    --
    I remember your eyes, on the twelfth of July...
    1. Re:Perhaps It Belongs in the OS by yabos · · Score: 5, Insightful

      They shouldn't need a separate program to stop Outlook from doing something stupid. It should just not do something stupid in the first place.

    2. Re:Perhaps It Belongs in the OS by Xzzy · · Score: 5, Insightful

      > Better low-level access, as well as being able to
      > intercept attempts by something like Outlook to
      > execute arbitrary files.

      Yes, because that's such a major improvement over just fixing Outlook itself. :P Maybe financially that makes sense, they get to sell you Outlook AND the anti-virus, but technically speaking it's just plugging holes in the dam.

      The only AV software that Windows needs is Microsoft to stop making so many bloody ways to infect the system.

    3. Re:Perhaps It Belongs in the OS by Otter · · Score: 1

      I'd say the _real_ advantage would be that they could force use of an anti-virus package, and maybe force updates, as well. But selling it as a separate package (for anti-trust reasons, probably) negates that advantage.

    4. Re:Perhaps It Belongs in the OS by NanoGator · · Score: 4, Insightful

      " it might make sense to have the antivirus scanner as a part of the OS. Better low-level access, as well as being able to intercept attempts by something like Outlook to execute arbitrary files. Having a unified place to control such actions might help security."

      That works until everybody cries "anti-trust!" Damned if they do, damned if they don't. There's a lot of lightening up that needs to happen.

      --
      "Derp de derp."
    5. Re:Perhaps It Belongs in the OS by colinramsay · · Score: 4, Insightful

      Unfortunately there isn't a program to stop the user being stupid. No matter which e-mail client is used, they all allow attachments, and without a virus scanner screening those attachments, computer illiterate users are going to get virii.

    6. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      The OS may provide APIs to make writing good AV software easier, but just dumping everything in the OS because 'it will have easier access to things' is entirely silly.

    7. Re:Perhaps It Belongs in the OS by Jorj+X.+McKie · · Score: 2, Interesting

      Yes, that goes without saying. But badly-behaved software is a fact of life. The fact the others are running Outlook decreases the security of my computer, so a preventative in the OS might be helpful. But it also (as I said above) introduces a single point of attack, which is a bad thing from a security analysis point of view.

      Educating developers would also help, but - even in the present climate - I really don't see much of a push for that.

      --
      I remember your eyes, on the twelfth of July...
    8. Re:Perhaps It Belongs in the OS by swordboy · · Score: 1

      I agree.

      Antivirus is now part of the OS. Heck, just today, we saw the first cell phone virus.

      This is great news. Now, all that we need is an anti-spyware countermeasure from MS and we're all set. Stability, security and privacy. What will we all bitch about?

      --

      Life is the leading cause of death in America.
    9. Re:Perhaps It Belongs in the OS by Gr8Apes · · Score: 1
      ...it might make sense to have the antivirus scanner as a part of the OS. Better low-level access...
      Perhaps just creating the appropriate hooks for low-level access would be more appropriate? Then again, they couldn't milk the multi-million dollar AV market.... After all, MS is all about the next thing that will add another 1B+ to their bottom line, or their bank account anyways.
      --
      The cesspool just got a check and balance.
    10. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Yes, and OpenBSD users shouldn't need to run bind and sendmail in a "jail", but many of them do anyway.

    11. Re:Perhaps It Belongs in the OS by mog007 · · Score: 1

      This is the kind of software that the EU should be bitching about for anti-trust. Windows should have anti-virus software built in, not a media player or web browser.

    12. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 1, Insightful

      Unfortunately there isn't a program to stop the user being stupid. No matter which e-mail client is used, they all allow attachments, and without a virus scanner screening those attachments, computer illiterate users are going to get virii.

      Not if you designed your fucking software right, so you had to do something more than just "duuh, double-click it" to execute arbitrary code that someone just mailed you. That won't stop fucktards installing this great new screensaver, but it will stop the mindless clickers, which is most of the battle.

    13. Re:Perhaps It Belongs in the OS by Jane_Dozey · · Score: 1

      No way. Putting more into the OS will make more bugs and vunrabilities occure. It would couter-intuitive. If they wish to bundle AV software with windows, fine. That would make it easier for users to install (and if needed uninstall) an improtant peice of software. Yes, fixing the problems in the first place would help but lets face it: it's not going to happen.
      It can't.
      If they want to make the OS try and spot suspicious activity and alert the userr, fair enough. That would go a long way to increase awareness. But adding more code into the OS would be a great big mistake.

      --
      Silly rabbit
    14. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 2, Informative

      You know, Outlook has been pretty much "fixed" -- it's the only major mail client that just blackholes EXE/PIF/VBS/SCR/etc executible files. You can bet the vast majority of click-n-run trojans are not being spread through Outlook.

      Most of (now pretty rare) "Outlook" exploits are really attacks against the IE HTML engine.

      Of course this is slashdot, where the vast majority of people seemed to have stopped learning anything new about IT when they got fired from their dotcom job in 1999.

    15. Re:Perhaps It Belongs in the OS by Nicholas+Evans · · Score: 1, Interesting

      Do you think the guys at Valve were stupid? IIRC the HL2 code got jacked because something found its way in through Outlook.

    16. Re:Perhaps It Belongs in the OS by Jorj+X.+McKie · · Score: 1

      If they want to make the OS try and spot suspicious activity and alert the user...

      This is a really good idea. When I caught the virus that we did get, it was because ZoneAlarm told me that something was trying to make an outgoing connection that was not authorized. Unfortunately, the WinXP firewall does not seem to have that capability, which makes it somewhat substandard. The logs should at least be there, in case someone knowledgeable wants to look at them.

      --
      I remember your eyes, on the twelfth of July...
    17. Re:Perhaps It Belongs in the OS by sam1am · · Score: 2, Funny
      "Perhaps just creating the appropriate hooks for low-level access would be more appropriate?"

      Great, virus writers would probably love to use them... :)
    18. Re:Perhaps It Belongs in the OS by Teese · · Score: 5, Insightful

      But isn't this a conflict of interest? If MS gets additional revenue from an anti-virus program (especially if that program is a subscription based program), then wouldn't there be internal pressure to make the OS "not as secure" so they can get additional money from there customers? If all of these security initiatives to make the OS more secure pay off, then the kill the market for there own anit-virus products.

      Plus it seems odd to make somebody pay more money to overcome some limitations in the original product, kind of like saying "here we sold you a crappy OS, pay us money and we'll protect you from our mistakes! errrrmmmm, but no guarantes, if our anti-virus software doesn't work you can't sue us")

      Of course, there is only so much any OS can do from protecting users from being stupid, and I guess that is what the anti-virus software does. But if the anti-virus software can protect customers from being stupid, couldn't the OS too? (thus negating the previous argument of "there is only so much any OS can do from protecting the users from being stupid")

      I don't know if bundling the Anti-Virus software would be any better, then you get anti-trust concerns. Plus I think it is extremely important to have multiple Anti-Virus software vendors, if there is only one Anti-Software program (which is what would happen if MS bundled the program with the OS), then it would be a lot easier for virus writers to figure out how to bypass the safe-guards.

      Well, those are my rambling thoughts. In conclusion, I guess I think MS should stay out of the anti-virus software market. Maybe they should concentrate on putting better hooks into the OS so that other software vendors could to their jobs better; or better yet, just make the damned OS more secure.

      --
      "I'm a Genius!"*


      *Not an actual Genius
    19. Re:Perhaps It Belongs in the OS by Freefall90 · · Score: 0

      Microsoft cannot afford to even try to place something like this in the OS itself. They've already been hammered by the EU for similar things. And that wasn't even dealing with high revenue products like anti-virus. As far as not being able to keep their OS up to date, I agree with that. However, keep in mind that most viruses (unless handed to the AV companies before it's released) have at least a short run before anti-virus progs will catch them. It seems to me that writing a virus def is a bit simpler than patching an OS...just my POV. So maybe M$ will have virus defs up in a respectable amount of time like everyone else. For the record, I don't use, or plan to use any background/on-demand virus scanners.

    20. Re:Perhaps It Belongs in the OS by chabotc · · Score: 2, Funny

      Oh B*LL F**K*NG SH*T! (please forgive my french)

      Sure it could be benifitial to have low level hooks in outlook (& -express), but in no way do you need to intergrate anything into the OS to be able to do so!

      Simply use/make a registry key pointing to the .DLL to load and the function to call, and anyone can now make a AV solution for outlook

      The only problem is that MS doesnt want any 3rd party software competing on a level playing field, so they keep intergrating applications into the OS, and keep any low level hooks undocumented, so that they automaticly have leg up over any competetion

    21. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      so you had to do something more than just "duuh, double-click it" to execute arbitrary code that someone just mailed you

      Outlook does this. Mozilla, Eudora, etc do not.

    22. Re:Perhaps It Belongs in the OS by 4of12 · · Score: 5, Insightful

      Unfortunately there isn't a program to stop the user being stupid.

      True enough. But then it is easier to modify applications and their design than it is to modify human beings and their design (well, at least for now...)

      Sometimes products are distributed that haven't been thought out well enough to consider the stupid user problem.

      In this case, "convenient features" about Outlook running attachments is colliding with user stupidity, gullibility, etc. [It's like stories of "free baseball night" at the ballgame - "fans" started to throw their free gifts onto the field when play got boring. Somebody wasn't thinking far enough ahead.]

      While Outlooks ubiquity might exacerbate the problems that Outlook users experience, other mail clients do not seem to have as many problems as Outlook does and certainly not as widespread an impact.

      Careful product design can mitigate the unavoidable problems of "stupid users in a cruel world".

      --
      "Provided by the management for your protection."
    23. Re:Perhaps It Belongs in the OS by Suppafly · · Score: 4, Funny

      Do you think the guys at Valve were stupid?

      Well since you asked. Yes.

    24. Re:Perhaps It Belongs in the OS by Short+Circuit · · Score: 1

      Fixing Outlook would require a complete re-write. It's cheaper for them to try to catch malicious code before it reaches the mail client. Failing that, it's still cheaper for them to scour your computer looking for signs of said code.

    25. Re:Perhaps It Belongs in the OS by itwerx · · Score: 1

      [offtopic]

      Anyone who hooks up through Slashdot Personals -- you **MUST** post about it! Karma be damned!

      Anybody ever reply to that sig? :)

      [/offtopic]

    26. Re:Perhaps It Belongs in the OS by Precipitous · · Score: 2, Interesting

      Note that they aren't selling the anti-virus as part of the OS. In fact, the article states that they won't even bundle it with the OS.

      At any rate, besides the technical considerations of where anti-virus should lie, there are business considerations. Hopefully the AV folks will sit in the building next to the OS folks, so that they can walk across the street and complain about the vulnerabilities.

      On the other hand, maybe they'll start creating new OS vulnerabilities, that only MS AV will protect against ...

      --
      My motto: "A cat is no trade for integrity."
    27. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Of course it belongs in the OS, it IS the OS's responsibility to protect its operations/software/configuration from unauthorized modifications. A virus or a worm is doing just that!

      As a second product line Micro$loth need only exploit their intimate knowledge of its internals to profit from it.

      Scenario:

      1)M$ develops its AV so that it knows how to hook certain instructions in the OS's DLL's where third party companies would not have the knowledge to do without disassembling and illegally reverse engineering M$'s AV product.

      2) M$ secretly and confidentially leaks information to the troll community on exploits which only M$'s AV can trap.

      3)The trolls create an exploit/worm/virus which reaps havoc on the Internet and only M$'s AV community of users are protected and automatically patched and upgraded with OS level patches automatically.

      4)Pandemic breaks out while everyone scrambles to secure a copy of the ONLY product that can protect them until M$ can work out a public patch and put it into normal distribution channels.

      Whats wrong with this picture?

    28. Re:Perhaps It Belongs in the OS by slasher999 · · Score: 2, Informative

      Well, Microsoft released VSAPI and VSAPI2 in Exchange for this purpose, kind of. Vendors can use these API's to scan email messages that are in the store (the Exchange message database) and disinfect them. Instead of incorporating the functionality of a AV product into the OS, I'd rather see VSAPI improved (specifically to allow deletion, and some performance enhancements, although performance issues maybe more related to the AV products) and something like it included at the OS level to improve the file disinfection/deletion/quarantine functions of existing products.

    29. Re:Perhaps It Belongs in the OS by wo1verin3 · · Score: 1

      I was quite happy when AntiVirus was included in DOS 6, even if it was licensed from someone else. Especially since most of the people I work with can't be bothered to go and buy a good one (or download a good free one) to not only make their life easier, but make everyone elses life easier.

    30. Re:Perhaps It Belongs in the OS by stilwebm · · Score: 2, Informative

      That works until everybody cries "anti-trust!" Damned if they do, damned if they don't. There's a lot of lightening up that needs to happen.

      I agree for the most part. Microsoft bought Central Point Systems in the 1990s to integrate Scandisk and Central Point's antivirus scanner (msav) with DOS, but other file system checkers continued to work well and differentiate themselves. As long as Microsoft doesn't keep Symantec, McAfee, et al., from having access to APIs necessary for them to continue their own innovations in Virus Scanning, they will likely innovate features to make some users prefer to buy their product instead of buying Microsoft's. Remember, Microsoft will not be bundling it in with the OS. The problems come when Microsoft strong-arms OEMs to bundle it, especially if they use price pressure to encourage exclusivity (see also MSN vs. AOL, Windows Media vs. Real Player, etc.).

    31. Re:Perhaps It Belongs in the OS by Blublu · · Score: 2, Funny

      While Outlooks ubiquity might exacerbate ...

      I'm sorry, what???

      --
      meh
    32. Re:Perhaps It Belongs in the OS by Alien54 · · Score: 5, Funny
      Careful product design can mitigate the unavoidable problems of "stupid users in a cruel world".

      Two Buttons:

      Do What I Say
      Do What I mean

      Sounds simple enough to me

      --
      "It is a greater offense to steal men's labor, than their clothes"
    33. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0, Troll

      > In this case, "convenient features" about Outlook running attachments

      Yet another retard babbling even though his IT knowledge is 4 years out of date. If you haven't had a comptuer job since the whole ILOVEYOU.vbs thing, it's time to retire your slashdot account.

    34. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Cool! That way, it can detect the OS.

    35. Re:Perhaps It Belongs in the OS by jfdawes · · Score: 1

      Only problem is they are not making it part of the OS, they are making it an extra.

      You make antivirus part of the OS by simply building security into the OS. It's difficult to avoid using UNIX as an example, but there's not a lot of viruses on that OS, now is there?

      Microsoft doing this is like a major car company selling gas guzzling vehicles, while simultaneously lobbying the government to eliminate legislation requiring them to be more fuel efficient as well as going out and buying gas stations. Oh ... wait ...

      Can you spell "conflict of interest"?

    36. Re:Perhaps It Belongs in the OS by JPriest · · Score: 1

      It is going to ship as a seperate product from the OS.

      --
      Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
    37. Re:Perhaps It Belongs in the OS by Shwilmo · · Score: 2, Insightful

      uhh, they left their source code on almost completely unprotected computer systems connected to the internet. All they needed to get at the source code was a password. So yes, that is pretty stupid.

    38. Re:Perhaps It Belongs in the OS by sydb · · Score: 1

      What will we all bitch about?

      All the fucking updates!

      Well, I won't :-)

      --
      Yours Sincerely, Michael.
    39. Re:Perhaps It Belongs in the OS by silicon+not+in+the+v · · Score: 4, Interesting
      Unfortunately there isn't a program to stop the user being stupid. No matter which e-mail client is used, they all allow attachments, and without a virus scanner screening those attachments, computer illiterate users are going to get virii.
      That's one of the best reasons to use something like Yahoo instead of a separate email client. It won't let viruses come in through attachments. When an email has an attachment, the link is to "Scan & Download attachment". It automatically scans first, and if there's a virus found, it just won't let you download it. I think you could get the emails unscanned with POP access, though.

      As to this MS virus scanning software, it seems this could easily violate their court issues for anti-competitive behavior(yeah, like enforce that anyway). I guess by selling it completely separately, instead of including it in Windows, they can say that they are competing on an equal footing. It would still seem though, that they have an unfair advantage in knowing how the operating system works more in depth than their competitors. Don't you think there's going to be some information sharing between the Windows dev team and the AV dev team?
      --
      We may experience some slight turbulence and then...explode. -Capt. Mal Reynolds
    40. Re:Perhaps It Belongs in the OS by TVC15 · · Score: 1

      >it might make sense to have the antivirus scanner as a part of the OS

      Odd that they got the idea to build DRM into the OS before they got the idea to build AV into the OS.

    41. Re:Perhaps It Belongs in the OS by mandalayx · · Score: 4, Interesting

      You're right. There could be a conflict of interest here. Sadly, if you think about it, this is really nothing new. Hang onto your tinfoil hats for a second.

      The fear is that MS will simply not work hard to make their OS secure from viruses, thus generating demand for their associatd virus scanner. In a competitive market, consumers would probably switch OS's, but we have the monopoly and such.

      But listen to this analogy. Suppose you sell a software product. You want to make more money. So you simply leave out some functional parts of the product and sell it as an additional product--or service.

      Isn't that what some companies are doing? Selling software and making money on the service. One can even sell software as a loss leader and make all the money back on the service (see razors and razor blades by Gilette).

    42. Re:Perhaps It Belongs in the OS by homer_ca · · Score: 1

      "Perhaps just creating the appropriate hooks for low-level access would be more appropriate?"

      Microsoft did this already, specifically with disk defrag software. For NT 4.0, Microsoft and Executive software, makers of Diskeeper, developed an undocumented API for low level disk access applicable to defrag software. They eventually disclosed this API to Symantec to use in their Speedisk product, but it remained undocumented.

    43. Re:Perhaps It Belongs in the OS by silicon+not+in+the+v · · Score: 1

      They double the revenue stream by selling the holes and also selling the plugs to fill them.

      --
      We may experience some slight turbulence and then...explode. -Capt. Mal Reynolds
    44. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Yep. We need a low level scanner that prevent downloading email attachment from Outlook, automatic downloading and opening pictures from email, opening Internet from windows explorer, running java and javascript from Internet explrer, outgoing connection from windows media player, running macros in microsoft office product, opening url that's not safe for interent exploer such as url starts with http:// or https://. And it also should able to block all linux sites since it is written by chiness hackers.

    45. Re:Perhaps It Belongs in the OS by tabrnaker · · Score: 1
      Oh B*LL F**K*NG SH*T! (please forgive my french)

      Why do you say this? It's english not french. Are you stupid? Are americans stupid? I believe it's english speakers that are obsessed with using bodily functions as swear words, french people use the catholic church.

    46. Re:Perhaps It Belongs in the OS by steveha · · Score: 1

      Norton Antivirus, for one, already works as you describe. It puts tentacles through the system, and hooks every file access and Internet download to scan them on-the-fly.

      And it is a point of failure. If Norton Antivirus dies on you, it can take down your OS in unpleasant ways.

      Microsoft has a poor track record with security, but an excellent one with providing cool features. Having hooks in the OS that let you scan everything as it goes by is a cool feature.

      Anyway, if Symantec's antivirus solution can already do this, I'm not convinced that antivirus really needs to be integrated into the OS.

      steveha

      --
      lf(1): it's like ls(1) but sorts filenames by extension, tersely
    47. Re:Perhaps It Belongs in the OS by pediddle · · Score: 4, Funny

      My first day at the University of Washington they packed all the freshmen into an indoor arena for orientation. They also gave all 4000 of us gift bags that included frisbees. I don't need to say what happened next.

      College students are stupid enough, and when it comes to computers, most people that use them in their workplaces are even stupider. That said, I agree with you completely that the simplest solution would have been to not give us frisbees in the first place.

    48. Re:Perhaps It Belongs in the OS by Long-EZ · · Score: 4, Funny

      wouldn't there be internal pressure to make the OS "not as secure" so they can get additional money from their customers?

      You mean Microsoft could actually made Windows LESS SECURE? Holy crap!

      What would it do? Network with your security system, wait until you're gone, unlock the doors to your house and use the outside speaker to blast an invitation for burglars to get free stuff?

      --
      >> My ultraviolent Linux switch video.
    49. Re:Perhaps It Belongs in the OS by Grrr · · Score: 1

      ...Plus it seems odd to make somebody pay more money to overcome some limitations in the original product...

      Here, buy our dictionary, it's better than those communal-effort dictionaries...
      Oh - and because so many shifty people are out there messing with the meaning and spelling of words, we very strongly recommend you also buy our dictionary integrity checker. Actually, you'll probably want this subscription to future integrity checker updates, or else your dictionary will become useless (or dangerous to other dictionary users). You're welcome.

      <grrr>

    50. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Um, yes, there IS a program to stop the user from being stupid. It's called the system administrator.

      Most of the damage viruses and worms do, they do because windows systems are almost *always* installed with users having far more rights than they need, completely ignoring the (very good) security features of Windows.

      So the next question you ask is, "Since when do home users have administrators."

      And my response is then why are home users allowed what should be only an administrative level of control over the computer.

      "Because they bought the computer" is not a good answer - it ignores the fact that the internet is a shared medium. If you aren't qualified to access it safely, then you shouldn't be licensed to access it, nor *able* to access it.

      And if you can't offer a functionality without making it unsafe, then you shouldn't offer the service. Case in point, if you can't allow users to download and open executables from untrusted parties safely, then you shouldn't allow them to do so at all. I think that's the true thought behind Palladium, and I agree with it wholeheartedly.

      Imagine if you will...

      The computer using world gets divided into two groups - those licensed for "unrestricted" access to their computers and those licensed only to run software that is trusted by someone who is certified to be knowledgeable.

      Is that a narrowing of our existing rights? Yes, certainly. Is it justified? Yes. Would I be willing to abide by those rules? Yes - I'm pretty confident of my ability to move into the less restricted group, and I think that being there would improve my ability to make a living from those skills - or rather I think that getting rid of all the incompetent people setting up computer systems for money would allow me to earn both more money and more respect - because I *am* a competent administrator.

      Competency and reputation would be critical to continued success as a licensed administrator, encouraging safe, carefully produced services from those individuals.

    51. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Wow, this would be a really profound post....... except for the fact that 1. It already exists. 2. Is evident by the two McAfee Viruscan icons snapped into my Outlook menu bar.

    52. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      "And here come the pretzels!"

    53. Re:Perhaps It Belongs in the OS by nelsonal · · Score: 1

      Yeah but you have to think like a devious exec. You can then point at the horrid restrictions of the anti-trust case and claim that it is stifling innovation.

      Nevermind that you bought all the innovative stuff in the product, and that you would have used it to kill products that were actually innovative (with more crap) but if you can leverage this case to make the DoJ look bad you can get away with more the next time this situation comes up.

      --
      Degaussing scares the bad magnetism out of the monitor and fills it with good karma.
    54. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Outlook Rxpress also imposes a nlock by default.

    55. Re:Perhaps It Belongs in the OS by EvilAlien · · Score: 1

      s/Outlook/users/

      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
    56. Re:Perhaps It Belongs in the OS by westlake · · Score: 3, Informative

      Outlook and Outlook Express do not let you open attachments by default. This was fixed about two years back, and it is about time that Slashdot took notice.

    57. Re:Perhaps It Belongs in the OS by sparcnut · · Score: 1

      I think bundling AV software with Windows would be a major mistake. Generally, your mom and pop Windows users are going to use what comes with the OS - this is one major reason why IE and Outlook are so popular.

      Now think about this: suppose MS did bundle the A/V software with Windows. Look at how often works/viruses/trojans target IE and Outlook, simply because A) most people use them and B) they are always installed on a Windows computer. How many new exploits are going to be written, just as for IE and Outlook, that directly exploit bugs in the MS virus scanner? Such viruses could also be designed to bring others in with them, piggybacking on the exploit that is cracked open by the first virus.

      In contrast, think about if they release it as they say they will - as a seperate product. Now there are 3 major antivirus programs, probably with roughly equal market shares, and an exploit for one doesn't work with the others. This makes it much less likely a virus author would target a specific A/V application, and lessens the spread of the virus even if it does happen.

      On the whole, bundling A/V software with Windows could conceivably make virus problems *worse*.

      It really doesn't matter if the A/V software gets bundled with Windows from the standpoint of increasing protection; hooks into the OS can be placed in either case because the A/V software can always apply small patches to the kernel and drivers. This could give MS an advantage over other A/V products because they have the full source to the OS and can create the hooks.

      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10);'
    58. Re:Perhaps It Belongs in the OS by craXORjack · · Score: 2, Interesting
      While I'm not certain that I completely trust Microsoft on this, it might make sense to have the antivirus scanner as a part of the OS.

      It is widely suspected the authors of many viruses work for the antivirus companies or own stock in them. Imagine if Microsoft bundled antivirus with the OS which would eventually put McAffee and NAV and others out of business like so many others in the past. The virus writers, whoever they may be, could make Microsoft look stupid by releasing threats tailored specifically to attack machines loaded with MS AV. This is one case where it is more difficult for MS to choke off their competitors air supply.

      --
      Liberals call everyone Nazis yet they are the closest thing to it.
    59. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Are you stupid?

    60. Re:Perhaps It Belongs in the OS by slimak · · Score: 3, Interesting
      I STILL cannot understand why it is wrong for Microsoft to release products the compete with existing software. Sure they can have the advantage of knowing more about the OS but tough, they wrote it and marketed it. Putting aside all bias against MS, it seems to me that they should be able to sell/bundle/etc whatever software they want as long as they do not explictly forbid competitor software from executing.

      Are Honda engineers allowed to used design information (such as dimensions) when creating additional trim lines or must they "figure out" how to make things fit? (I assume the former, but don't know first hand). Sure there are aftermarket parts that complete with these -- does honda have to share designs with them too?

      I am not MS fan or foe, but I know that if I ran things over there my only response to all this would be: "Fine, you don't want competition, then we are discontinuing ALL MS products. Bill has enough money. All you Windows users enjoy XP because you're stuck with it."

      Maybe it's the law, but I just don't follow.

    61. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Of course it doesn't let you, it just does it in the background for you without you knowing.

    62. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Why? I can't keep up with every piece of shity software MS releases.

    63. Re:Perhaps It Belongs in the OS by TheGavster · · Score: 1

      This issue already happened with Office. The Offive dev team needs a quick OS tweak to get something working, they walk down the hall and ask. The OpenOffice dev team needs an OS tweak ... they work around it.

      --
      "Because Science" is one step from "Because old book". Try "Because of my experiment testing my falsifiable assertion".
    64. Re:Perhaps It Belongs in the OS by jonbryce · · Score: 1

      I seem to get a very large number of viruses with .pif and .scr attachments. Presumably Outlook must be propagating them.

      I also get a lot of them where they are in .zip files, and sometimes password protected .zip files. This may be to confuse mail filters and virus scanners.

    65. Re:Perhaps It Belongs in the OS by TheGavster · · Score: 1

      Think of it as buying roadside assistance for your car. "This car will never break down on you! By the way, would you like to pay us lots of money so that someone will come give you a lift when you break down?"

      --
      "Because Science" is one step from "Because old book". Try "Because of my experiment testing my falsifiable assertion".
    66. Re:Perhaps It Belongs in the OS by Dog+and+Pony · · Score: 4, Informative

      Where to begin? Code available via internet, running outlook, not firewalled (enough), not patched (enough) and the list just keeps on going.

      Nah, it would be all too easy to answer that question.

    67. Re:Perhaps It Belongs in the OS by shaitand · · Score: 1

      They could just you know, start playing on a level field and fix their products.

      You know, actually compete by releasing superior products instead of using their monopoly to push proprietary technology and create lockin.

      Then nobody needs to lighten up eh?

    68. Re:Perhaps It Belongs in the OS by radish · · Score: 1

      Simply use/make a registry key pointing to the .DLL to load and the function to call, and anyone can now make a AV solution for outlook


      Like they already do? I have McAffee and it integrates perfectly well with Outlook to scan all my incoming/outgoing mail.

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    69. Re:Perhaps It Belongs in the OS by Cromac · · Score: 1
      Note that they aren't selling the anti-virus as part of the OS. In fact, the article states that they won't even bundle it with the OS.

      Neither was IE when Win95 was first released. IE was part of the Plus Pak that was sold seperately. Look where it is today.

      Now with that history, in spite of the anti-trust verdicts, what do you think MS will do with AV software over the next 5-10 years?

    70. Re:Perhaps It Belongs in the OS by KarmaMB84 · · Score: 1

      Or maybe they are being sent by previously infected or unpatched zombies?

    71. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 4, Insightful

      Outlook still allows running attachments, it is just an extra click to confirm you want to do it really.

      The problem with this is that people are too used to clicking yes when asked and will do so here as well.

      The only solution is to not allow it at all and to have people take very conscious and specific actuions (which preferably also demand knowing what they are doing before even being possible)

      Inserting another click is not a solution. Requiring the user to think does go a long way to solving this.

      Thunderbird at least requires you to save it to disk and run it outside thunderbird if it doesn't have a handler defined for a file. It wont allow you to run a random program with the file or run the file itself.

    72. Re:Perhaps It Belongs in the OS by TheCyko1 · · Score: 1

      The simplest solution is not always the best. I think they should have shot and killed anyone caught playing with the Frisbees. Now to apply that to the issue at hand, I think we should shoot and kill anyone caught using this anti-virus software. Problem solved.

      --
      This message was brought to you by the death of 30 brain cells.
    73. Re:Perhaps It Belongs in the OS by Sloppy · · Score: 3, Interesting
      No matter which e-mail client is used, they all allow attachments, and without a virus scanner screening those attachments, computer illiterate users are going to get virii.
      An email client doesn't need to make executing foreign content so easy and transparent, though. Running a trojan should be harder than clicking on an icon in the attachment list. It should require that the user save the attachment, tell the OS that it's an executable program, and then tell the OS to run it. Automatically launching a trojan inside an email just because the user clicked it, is really weird.

      If they are going to keep that horrible UI, then the least they can do is have the subprocess run executables as a nobody-user or otherwise sandbox it where it can't do much harm.

      You can write a program that makes it harder to be stupid. Go ahead and write a Linux program that printfs "Ha ha, got you", attach it, and send it to yourself. Now read that email with pine or elm or even Sylpheed. Now look at what all you have to do, to run it. The difference between what you experience in this experiment, vs what an MS Outlook user experiences, shows exactly what Microsoft did wrong.

      To fight trojans at the OS level, I would add something like a "potentially hostile" attribute to filesystems; something like "setuid nobody". Internet apps should save things with that bit set, and process loaders and viewer apps should take it into account when loading content, and automatically sandbox themselves. Hostile macro in the word processor document that somebody emailed you? No problem, that process isn't running with all the same capabilities that the user has.

      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    74. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 2, Insightful

      > I STILL cannot understand why it is wrong for Microsoft to release products the compete with existing software.

      In itself there is nothing wrong with that.

      What is wrong is:

      1. Using their monopoly in operating systems to give themself a technical advantage.

      2. Using their operating system monopoly to give themselves a market advantage (by for example bundling it with their OS)

      Why?

      Because both result in it being impossible to compete with them, and as a result prevent competition. It is called anti-competitive behavior, and it is illegal if you have a monopoly already. Not having that illegal would mean allowing mega-corporations that determien every aspect of life and that are unchallangable.

      So, while they may enter other markets, they may only do so without using their OS monopoly.

    75. Re:Perhaps It Belongs in the OS by Alan · · Score: 1

      Well, technically they can get such low access to windows through a separate program by just installing a kernel mode driver that could interprete what program is trying to execute what file. In theory anyway.

    76. Re:Perhaps It Belongs in the OS by westlake · · Score: 2, Informative
      In OE: Tools>Options>Security>Virus Protection. Not that well hidden, actually. OE6 posts a warning which is kinda hard to miss as well: "OE removed the following unsafe attachments."

      By default, OE6 also warns you when applications attempt to send e-mail in your name.

    77. Re:Perhaps It Belongs in the OS by PlazMatiC · · Score: 4, Insightful

      Outlook still allows running attachments, it is just an extra click to confirm you want to do it really.

      Not quite correct. In recent versions of Outlook, executable attachments cannot be opened or saved without messing with the registry. There is nowhere in the configuration interface to alter this behaviour. While I personally find this extremely irritating, I can understand why Microsoft has done it. Much of the bad publicity they get regarding security is caused by users not taking proper measures to protect themselves.

      Yes, there are security vulnerabilities in Microsoft's products, but there are also many vulnerabilities in various versions of Samba, OpenSSH, Bind, Sendmail, and many other software packages that are installed on Linux systems. Open Source evangelists seem to have no problem spreading their own FUD about Microsoft software when it comes to security. Take the quote from this article as an example:

      My only question is: If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?

      Microsoft does patch their OS quickly. The only problem is that many many people don't install the patches they provide. The vulnerability that CodeRed exploited was patched three months before the worm was released. The only reason it caused so many issues was because of incompetent Windows sysadmins.

      Linux is no more secure than Windows. I'm sure if you added up all the vulnerabilities in Windows 2000 and compared them to a list of vulnerabilities in all the software on a standard Linux distribution of the same age, Linux would have at least as many as Windows. The only reason Linux doesn't have the same bad reputation as Windows in terms of security is because there are many less Internet-facing Linux machines around, and the owners of the existing Linux machines are, in general, more competent than those of the Windows PCs. As Linux becomes a more accepted desktop OS, there will be worms attacking Linux machines, and its "secure" reputation will dissolve. Make sure you're ready for it, because it's not going to be pretty.

      Disclaimer: I use Linux and Windows at home. I like them both, and I feel they both have their own advantages and disadvantages. I've got no problem using Linux, Windows or DOS for a task if it's the best tool for the job.

    78. Re:Perhaps It Belongs in the OS by Mudcathi · · Score: 4, Funny
      Unfortunately there isn't a program to stop the user being stupid.

      Clippy tried; alas, Clippy was even more stupid than the damn users.

      --

      "He who throws mud, loses ground." - proverb

    79. Re:Perhaps It Belongs in the OS by vsprintf · · Score: 4, Funny

      While Outlooks ubiquity might exacerbate ...

      I'm sorry, what???

      He said, "While Microsoft's desktop monopoly and inattention to security has screwed its own users . . ." But he was being polite about it. HTH.

    80. Re:Perhaps It Belongs in the OS by tupps · · Score: 2, Informative

      Last time I looked the latest version of office still can run on windows 98, or are the MS Office team working on Office 2010 and get tweaks they need put into Windows XP? I beleive that the office team is in exactly the same position that OpenOffice is (except OpenOffice is multi platform). I can see the people building utility apps (eg windows movie maker) for windows XP being able to get a tweaks added to the windows code.

      --
      Go out and get sailing!
    81. Re:Perhaps It Belongs in the OS by milkman_matt · · Score: 1

      Now I'm pretty much against embedding things into the OS ala explorer -- however, one thing that would be nice to have built into the system itself, is anti-virus. If it's built in the way Apple's spellcheck is built in, it would allow every ap in the system to hook into it. Hook Outlook and OE into this system and we may see a lot less viruses (virii, whatever) spread across the internet.

      -Matt

    82. Re:Perhaps It Belongs in the OS by vsprintf · · Score: 1

      Outlook and Outlook Express do not let you open attachments by default. This was fixed about two years back, and it is about time that Slashdot took notice.

      I believe that Slashdot is well aware that Microsoft finally discovered there was an issue with security about "two years back". Unfortunately, most copies of Windows are older than that.

    83. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      And NOW, with the 10 MB limit on attachments and 100mb mailbox size, you can EMAIL YOURSELF EVERYTHING YOU DOWNLOAD AND HAVE YAHOO SCAN IT FOR YOU!!!!!!!

      or you're not H@rDc0R.

    84. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 4, Insightful

      > Not quite correct. In recent versions of Outlook, executable attachments cannot be opened or saved without messing with the registry

      Thats helpfull, tho for what I can see, this only works for new installations. At any rate...

      > Microsoft does patch their OS quickly. The only problem is that many many people don't install the patches they provide.

      While we can argue about if they do patch fast enough, you are definitely right about users not installing their patches.

      When comparing Microsoft today to Microsoft 5 years ago, they have made a giant leap when it comes to security. That said, none of their systems was designed to be used by multiple users simultaneously, and the results of that are still deeply embedded in their designs.

      > Linux is no more secure than Windows. I'm sure if you added up all the vulnerabilities in Windows 2000 and compared them to a list of vulnerabilities in all the software on a standard Linux distribution of the same age, Linux would have at least as many as Windows. The only reason Linux doesn't have the same bad reputation as Windows in terms of security is because there are many less Internet-facing Linux machines around,

      First of all, I'd like to see some statistics on that because I strongly doubt there are more vulnerabilities.

      But regardless, your statement is not true. The first reason for Linux being more secure is a stricter seperation between what is considered kernel and what is not.

      This doesn't mean Linux or any Unix variation is flawless, they have their own problems, and one of the big ones is still privilege escalation due to setuid binaries/scripts.

      Such bugs being exposed to remote attackers however happens a lot less often.

      Because Linux and Windows mostly get used in different ways, its kinda pointless to really compare numbers anyway.

      If you'd want to look at a situation where things compare a lot better, I'd look at IIS and Apache. While Apache's marketshare is bigger, IIS does have a substantial market, and in many cases they are in direct competition with eachother.

      I'd really suggest looking at actually compromised machines over time for those two.

      What I do know is that despite IIS having a smaller marketshare, the majority of exploit probes that I get in the logs of my webserver are IIS related.

      > As Linux becomes a more accepted desktop OS, there will be worms attacking Linux machines, and its "secure" reputation will dissolve. Make sure you're ready for it, because it's not going to be pretty.

      While often brought up, the marketshare argument doesn't match reality at all.

      Besides the Apache/IIS example above, I suggest lookign at for example the Amiga platform.

      While it has a fanatical group of followers still, and had a much larger group of followers in the late 80s and early 90s, it has never had a marketshare of any significance outside some niche markets.

      Yet, viruses and malware are a substantial problem on this platform, and both had reached a maturity level that the PC equivalents took quite a few years to catch up with.

      The Amiga platform also contains a few features and was surrounded by a culture that make it extremely vulnerable for particular kinds of malware, esp. bootsector infecting viruses. Disk images and disks being the primary way of exchanging software being a large factor in that.

      At any rate, a platform needs to have enough users to allow any kind of succesfull virus or trojan, but beyond that popularity seems to be a minor factor, and ease of infecion seems to be a much larger factor.

    85. Re:Perhaps It Belongs in the OS by dustmite · · Score: 1

      The fear is that MS will simply not work hard to make their OS secure from viruses

      You mean like they have in past, before they decided to enter the AV market? ;)

    86. Re:Perhaps It Belongs in the OS by milkman_matt · · Score: 2, Insightful

      Because both result in it being impossible to compete with them, and as a result prevent competition. It is called anti-competitive behavior, and it is illegal if you have a monopoly already. Not having that illegal would mean allowing mega-corporations that determien every aspect of life and that are unchallangable.

      I agree with you, but where do we draw the line? I think this would be a GOOD thing to integrate into the OS at the system level. Sure there's a problem with it due to the fact that Symantec and McAfee and all of these companies sell AV software already. What if they didn't sell it yet? and MS beat them to the punch. Would it be anti-competitive for MS to embed AV software into their OS if no AV software existed yet? In this case it may be a case of taking a good, much needed idea, and putting it where it belongs, in the OS. True, in any fairness they'd probably have to buy out every AV company in existance and hire them on, which would never happen... But this is a real problem. AV works great as is, but I think it could work greater, and eliminate a major percentage of virus threats on the internet if it were built into Windows, and used to eliminate any virus threat on the system. Maybe get ad-aware in there too, heh ;)

      -matt

    87. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 1, Insightful

      A virus scanner only helps if the virus is known and there are definitions available that protect against it.

      No matter how smart the user, if they get hit by a virus 2 hours after it gets into the wild, and it's one which that takes advantage of some absolutely stupid programming in Outlook to auto-execute their payload upon receipt (typically occurs if the "3-line preview" is turned on, which it is by default on some versions of Office, or by manually opening the email), there's no help.

      Your system is infected, it is executing the payload, and nobody outside of Microsoft is to blame. Simply opening an email should not create a world of pain for everyone in your address book, web cache, etc. It is, in a word, inexcusable.

      You do realize that viruses spread in the wild for a day or more before definitions get released? Yes, I agree, there is no help for the morons who are currently infected with 6+ month old mass-email worms, but I've had to go in and clean up after this situation. Only by my refusal to use Outlook was my system spared.

    88. Re:Perhaps It Belongs in the OS by |<amikaze · · Score: 4, Funny


      When they go to open the attachment called "Jennifer XXX cool.jpg.pif", what do you think they actually mean? Show me some porno! What do they get? Viruses.

      Are we going to integrate some kind of porn finder into Outlook, just to keep the users safe?

    89. Re:Perhaps It Belongs in the OS by jtosburn · · Score: 2, Interesting

      Are you kidding? Why do I have to buy a more recent version to fix gross negligence in a product I've already paid for?

      And then when I do buy the upgrade, I'm still vulnerable to all those IE exploits that only require one to even preview an evil html message. Sure, if I slavishly keep Windows updated, I can sort of stay ahead of that curve, but Christ! it's never ending! If I do buy the upgrade, I could turn off html rendering completely, but can I convince my boss to do likewise? Why should I have to? There is absolutely *no reason* why html email can't be safe to just view, but MS is apparently unable to make it so.

      The real solution would involve Outlook only executing 3rd party code in a sandbox, but MS sees this as a loss of functionality rather than a benefit.

      The other real solution might involve re-writing IE, or allowing user specified 3rd party html rendering engines to perform any given Windows required html rendering! Hey imagine that, if you could plug gecko or Opera in there, the problem would vanish. Competition would help keep everyone sharp. /end pipe dream

      Oh well.

    90. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 1

      > Sure there's a problem with it due to the fact that Symantec and McAfee and all of these companies sell AV software already. What if they didn't sell it yet? and MS beat them to the punch.

      So.. instead of having MS pay fines and the like, they should be required to use open specifications and open and unencumbered standards.

      That way they can inegrate what they like, but so can everyone else.

      I agree btw with regards to it being a good thing if MS would provide anti-virus software with windows. How deeply it should be integrated into the system is another thing. The less it depends on the system, the less vulnerable it will be to being fooled by a compromised system into ignoring the compromise.

    91. Re:Perhaps It Belongs in the OS by hearingaid · · Score: 1
      Okay, now this one just can't go by. IE3 came with Win95. The Plus Pack contained a bunch of extra add-ons for Win95. The most commonly used feature in Plus! was the theme support.

      However, I never had a copy of Plus. I did at one point have a copy of Win95 that had had its IE3 surgically removed (it was easy - just change one line in a configuration file. I forget how to do it now, I've been Windows-free for so long :)

      --

      my old sig used to be funny, but then slashcode ate it and now it's not funny anymore

    92. Re:Perhaps It Belongs in the OS by Bush+Pig · · Score: 1

      Maybe he just hasn't been forced to use Windows for the last 4 years. I certainly wish I hadn't.

      --
      What a long, strange trip it's been.
    93. Re:Perhaps It Belongs in the OS by ErikRed1488 · · Score: 1
      Last time I looked the latest version of office still can run on windows 98

      Office 2003, the latest version of Office, requires Windows XP to run.

      --
      I was not touched there by an angel.
    94. Re:Perhaps It Belongs in the OS by OmniVector · · Score: 3, Funny

      heh that reminds me of a skit from upright citizens brigade.

      Baseball park owner: "Last night's marshmallows and lighters night didn't go so well. we didn't see that coming, really. That's why tonight is socks and oranges night! There's nothing harmful people can do with socks and oranges."

      --
      - tristan
    95. Re:Perhaps It Belongs in the OS by black+mariah · · Score: 1

      Earth to idiot: SOFTWARE VULNERABILITIES ARE NOT VIRUSES, YOU FUCKING MORON. I don't know if you're aware of this, but most viruses now propagate themselves through the sheer idiocy of computer users, which can't be controlled on ANY computer. Pull your head out of your ass.

      --
      'Standards' in computing only impress those who are impressed by things like 'standards'.
    96. Re:Perhaps It Belongs in the OS by OmniVector · · Score: 2, Interesting

      if a virus can spread that requires users to unzip a password protected zip attachment, then run the executable do you have any hope whatsoever for operating system or anti-virus companies to solve the social engineering problem of email viruses?

      nothing short of education can fix these problems. until the day where johnny and sue come home from school and tell me about their virus/malware avoidance class today at public school the problem is going to be simply too wide spread to combat. it's not that far fetched. i imagine in 10-15 years computers will be so important to everyday life that it will be an utter necessity that kids know these sorts of things or else the web/computing environment will become unusable.

      --
      - tristan
    97. Re:Perhaps It Belongs in the OS by tupps · · Score: 1

      Actually it supports Windows 2000, but it was a surprise to me that it only supported 2000 and XP. Obviously they are trying to push to get people to upgrade from win98 and the unMEntionable version of windows.

      --
      Go out and get sailing!
    98. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Oh, a lawyer called looking for you. Something about "Longhorn" and "trade secrets".

      Just thought I should let you know.

    99. Re:Perhaps It Belongs in the OS by jamatfu · · Score: 1

      Isn't there something about not owning all the means of production that applies here?

      You make [and sell] the OS that is inherently vulnerable to virus attacks and then you make [and sell separately] the program that supposedly prevents them? Oh yeah, this has got scheme written all over it.

    100. Re:Perhaps It Belongs in the OS by CastrTroy · · Score: 1

      There's a lot of parts of windows that many users of Linux can vouch for as not being part of the actual OS. There's different command lines, User Interfaces, Window managers, boot managers, text editors, resource monitors, and a bunch of other stuff Microsoft bundles as integral parts of their OS. They've been doing this since Windows 3.1. Where they bundled paint, and hyperterminal. All of a sudden Netscape gets mad cause they lost the browser war, and everyone gets all in a huff.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    101. Re:Perhaps It Belongs in the OS by Aliencow · · Score: 1

      No it requires Windows 2000.

    102. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      You are absolutely right!

      Most of these problems are of design, not of execution. Until Microsoft is willing to consider the possibility of enemy action with every new feature they add and design in safeguards against that there is NO antivirus software in the world that will protect against it.

    103. Re:Perhaps It Belongs in the OS by Bush+Pig · · Score: 1

      > ... allowing mega-corporations that determien every aspect of life and that are unchallangable.

      And this is different from our present situation how?

      --
      What a long, strange trip it's been.
    104. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      When they go to open the attachment called "Jennifer XXX cool.jpg.pif"

      There are two problems with this argument:
      1. the users don't know that the attachment is named whatever.jpg.pif because Microsoft, in their infinite wisdom, has decided that users are too stupid to deal with file types and, so, don't even display them.
      2. the most recent and most deadly of viruses require absolutely no user intervention to make them happen. Of course, I am talking about: MSBlaster (only needs to be connected to the Internet, with or without their damned ineffective firewall), Bagel (you don't even have to view the e-mail message to get infected) and the numerous spyware exploits for IE (just view a maliscious web-page to download and install spyware, no warnings, no confirmation).

      The people that write Windows software are brain-dead. Mod me to oblivion if you must but the truth is still there: these are mistakes that only idiots would make and, having made them, that only a company who cares absolutely nothing for its customers would leave open more than a year after them being discovered.

    105. Re:Perhaps It Belongs in the OS by Pyrion · · Score: 1

      Yes there is. Type "shutdown -s" in the run box. :)

      --
      "There is much pleasure to be gained from useless knowledge." - Bertrand Russell.
    106. Re:Perhaps It Belongs in the OS by sootman · · Score: 1

      That's one of the best reasons to use something like Yahoo instead of a separate email client. It won't let viruses come in through attachments. When an email has an attachment, the link is to "Scan & Download attachment". It automatically scans first, and if there's a virus found, it just won't let you download it.

      Unless, of course, it's a passworded .zip file. Then it has no choice but to let you have it. In fact, I doubt it checks even non-passworded .zips. In which case, it's no different than a binary email app that scans attachments before letting you have them, or having something like an A/V app's real-time protection.

      Besides, I like the idea of Microsoft selling A/V software with the tag line "Protect your insecure operating system with help from the people who wrote it!" ;-)

      --
      Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
    107. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Once again, you have this backwards: the only reason you need to have a 3rd party scan your emial is because Microsoft has made it sooo easy to execute attachments. In addition, the defaults in Windows hide the filetype of attachments so you can't even determine that it might be dangerous!

      And you completely ignore the latest, most dangerous round of exploits that require NO user intervention: MSBlaster (requires only an Internet connection, with or without their stupid implementation of a firewall), Bagel (you don't even have to view the e-mail to have a script run) and the numerous IE holes (which only require viewing a malicious web-page to have spyware downloaded and installed without any confirmation).

      And you are going to trust the arhitects of these idiocies to protect you against them? Get real!

    108. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 1

      > And this is different from our present situation how?

      That there are still some limits to what they can do, at least in some places on this planet.

    109. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      >> Do you think the guys at Valve were stupid?

      > Well since you asked. Yes.

      Don't be too harsh on them! Maybe they only left the Valve open for a sec and something leaked...

    110. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 1

      Nescape lost in part due to IE getting bundled with WIndows, in part because NS made a crappy product themselves.

      Same applies to Real.

      That said, the problem is not so much that they bundle their products as such but that they close off the market for others.

      What could be asked from them is to provide OEMs with a bare bones version of the OS and optional components. What they do now is easier, but it costs in the long term due to it closing off any competition on top of the windows platform.

      TO me it sounds a lot better to simply force usage of open standards. Not by forcing Microsoft to use them so much but by the government demanding that any format used for government purposes is freely implementable.

      This is both in the interest of the public and the government, and guarantees that documentation will be available independent of Microsoft or any other producer of software.

      Due to Microsofts current position as by far the largest player for desktop operating system and productivity software, they should be forced by law to provide everyone equal access to the internals of their system. If they don't want that, they must allow a significant competitor to exist. I'd say a 2/3 market coverage would be a nice line for such a thing.

      Asking them to stop integrating features however opposes their possibilities to develop. They may not be great at technological development maybe, but they are obviously good at developing things that appeal to the average person using a computer more then others do.

      If their possibilities for lock-in are taken from them, then they have to maintain this position by means of quality and providing what their users need. As it is, they maintain it by creating incompatibility and lock-in and high cost of migration.

      Such things are for as far as I am concerned what the law calls barriers to competition entering the market and should be dealt with.

    111. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Two years? Try Five.

      Every version of Outlook since 2000 SP2 has blocked executible attachments. If you are still bitching about Outlook 98 or something, get a life.

    112. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      I love when someone gets proven 100% wrong and then proceeds babble a bunch of random stream-of-conciseness mental farts for 10 paragraphs. SillyNickName4me you are truly a tool.

    113. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      > I seem to get a very large number of viruses with .pif and .scr attachments. Presumably Outlook must be propagating them.

      Since Outlook does not allow one to run PIF/SCR files, your presumption shows you to be of sub-normal intelligence.

    114. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Well, yes, but that is to prevent against execution errors; bugs in the program that do unxepected and unanticipated things.

      It is not to prevent design errors; i.e. prevent people from utilizing the very tools that you built into the product from using them in devious, destructive ways beacuse you were too stupid, as the designer, to realize that they could be used this way!

    115. Re:Perhaps It Belongs in the OS by vsprintf · · Score: 1

      And W2K SP2 was released in 1999? I was using the parent's time frame - you would have noticed the quotes if you had the enhanced comment viewing privileges enjoyed by registered Slashdot users instead of that impaired interface that ACs get.

    116. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      > Maybe he just hasn't been forced to use Windows for the last 4 years

      Maybe if he's ignorant, he should shut the fuck up.

    117. Re:Perhaps It Belongs in the OS by michael_cain · · Score: 1

      What belongs in the OS is the concept of a sandbox. The ability to establish (and the default should be quite restrictive) a set of rules for what an executable can and cannot do. So when the mail client launches it, the executable can write to the screen, but not write to the disk (or at least nowhere but the sandbox version of the disk). So when that executable attempts to access the network, nothing happens. There's nothing really wrong with allowing an executable to run, so long as it is restricted as to what it can do. Windows (and DOS before it) have never really shaken off the basic concept of the single-user machine not attached to a network.

    118. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Well, yeah, kinda like IE and Outlook do right now!

    119. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0


      Unfortunately, most copies of Windows are older than that.

      And?

    120. Re:Perhaps It Belongs in the OS by bluGill · · Score: 1

      Linus has just as many problems? Are you comparing apples to apples? Most linux distributions include a lot more than windows does. Hundreds of games, two desktops, several different web servers (even though you can only run one at a time), a couple different office packages, and much more. Sure a lot of that stuff isn't very secure, but windows doesn't include it at all, so you really need to subtract some of it out.

      In any case OpenBSD has an 8 year track record now: 1 remotely expolitable hole! Windoes cannot match that. Yes there are some gotchas, but it you upgrade your machines when OpenBSD does a major release, something they plan well in advance, you should be safe.

    121. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0


      First of all, I'd like to see some statistics on that because I strongly doubt there are more vulnerabilities.

      Statistics? How about trying each for yourself? A fresh install of Windows XP requires 49, as stated by going to the Windows update site, security updates before applying SP1. After SP one that number decreases significantly. What does a default install of RedHat require for the number of security vulnerabilies? It would have to be signficantly less than 49.

    122. Re:Perhaps It Belongs in the OS by DA-MAN · · Score: 3, Funny

      In any case OpenBSD has an 8 year track record now: 1 remotely expolitable hole! Windoes cannot match that. Yes there are some gotchas, but it you upgrade your machines when OpenBSD does a major release, something they plan well in advance, you should be safe.

      That's why I use DOS, it's track record is untouchable even by OpenBSD. It's got 0 (count 'em, 0) remote root exploits in over 20 years!

      --
      Can I get an eye poke?
      Dog House Forum
    123. Re:Perhaps It Belongs in the OS by Matt_R · · Score: 1
      Office 2003, the latest version of Office, requires Windows XP to run.

      Then how am I running office2003 on this Windows 2000 PC? Office 2003 system requirements are here. It lists Win2ksp3 or higher, which is not unreasonable these days.

    124. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      A recent OE upgrade added "security" to attachments. What it did was completly disable the ability to do ANYTHING with the attachment - even attached forwareded text emails. This basically made OE unusable, forcing you to disable "security" altogether.

      This is the most fucked up idea ever. Why can MS just forbid attachements from executing code while still allowing them to be viewed? THIS is the biggest reason outlook is so insecure. All attachements are "executed" and if they are not executable, THEN they are sent to a viewer. When they are sent to a viewer (Windows media player), somtimes the viewer says "Hey, this is actually executable code" and executes it!!!! WTF are they thinking???

      It's the backassward way of doing things that's the problem. It's the "forbid known bad, allow everything else" method, rather than the "forbid everything that isn't explicitly allowed" method. Would any sane person setup a modern firewall by only blocking certain ports with a default allow rule???

      Nope, it's quite evident that "trustworthy computing" is pure marketing with no real action behind it. The end result is massive spam from zombie machines, constant worm probes, DOS attacks, etc.

    125. Re:Perhaps It Belongs in the OS by xsupergr0verx · · Score: 2, Funny

      Are you comparing apples to apples?

      No you Mac zealot, they are comparing Windows to Linux.... sigh..

      Don't hurt me, it was a joke.

      --

      Click here for a free picture of an iPod!
    126. Re:Perhaps It Belongs in the OS by lone_marauder · · Score: 1

      While I'm not certain that I completely trust Microsoft on this, it might make sense to have the antivirus scanner as a part of the OS.

      Three words: conflict of interest.

      --
      who are those slashdot people? they swept over like Mongol-Tartars.
    127. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      The issue is not access to specifications. The issue is access to the market. Any company with smart developers can reverse-engineer anything they need from the OS. However no amount of business smarts can introduce and market a product that has been duplicated by a monopolist.

      If Honda had a monopoly on cars and removed the need for anyone to buy aftermarket parts, they would be culpable of abusing their monopoly position and would be breaking the law.

      Microsoft is a proven monopoly in the court of law. Honda is not.

      Coke and Pepsi have all kinds of anti-competitive contracts (you can only have either all Coke or all Pepsi machines in a school, but not both). However since neither are a monopoly it's not illegal.

      I wouldn't advocate for Microsoft to go away. For better or for worse the stock market and tech industry are tied to them (for now). However I hope that one day there will be a healthy competition for operating systems and office suites, like there is now with games and server software -- where all the real innovation has been going on for quite some time!

    128. Re:Perhaps It Belongs in the OS by bergeron76 · · Score: 4, Insightful

      You said: Outlook and Outlook Express do not let you open attachments by default.

      You meant: Outlook XP and Outlook Express XP do not let you open attachments by default.

      Unfortunately, it will take several years until those versions become the "most prevalent on the internet" versions. Let's see - 2 years ago means that anyone running Office 2002 or prior is a virus-factory.

      Re-post this same message in about 6 years when you can convincingly say that "Outlook" [generically] does NOT let you open attachments by default. I dare surmise that the vast majority of Outlook users are NOT running Outlook XP.

      --
      Don't think that a small group of dedicated individuals can't change the world. It's the only thing that ever has.
    129. Re:Perhaps It Belongs in the OS by 1u3hr · · Score: 2, Interesting
      - however, one thing that would be nice to have built into the system itself, is anti-virus.

      Bad idea -- single known point of failure. One exploit of that (after MS has put all the other commercial AV products out of business) and the next successful virus owns the whole fucking Internet.

    130. Re:Perhaps It Belongs in the OS by CreationX · · Score: 1

      It should be included with the product 'Support' and NOT confused with patches and updates.

      Will the day arrive where MS charges for every patch & update as its terms of reference change to view patches as 'Virus Protection' and therefore chargeable items.

      I would be somewhat understanding if MS charges for virus protection which arise as a result of 3rd party app vulnerabilities, however if the vulnerability is MS based (Windows etc) it should be a free patch, NOT virus protection.

      Make no mistake the potential for MS to term patches as virus updates and therefore a separate, chargeable item, is real.

    131. Re:Perhaps It Belongs in the OS by lpontiac · · Score: 2, Interesting
      The problem with this is that people are too used to clicking yes when asked and will do so here as well.

      And I think this is a result of programs just asking too many stupid questions, the result of an application design process that goes something like this:

      Developer 1: What should we do here?

      Developer 2: I don't know.

      ...

      Developer 1: Hey, let's just let the user decide!

      Developer 2: Yeah, fuckit, if it's wrong, at least this way it's the user's fault, not ours.

      When you installed the first version of iTunes for Windows, it would ask you whether you wanted iTunes to rearrange all of your music files on disk. So many people blindly clicked 'Yes' and then screamed murder when iTunes went ahead and destroyed their finely tuned music directory structure, replacing it with iTunes' own.

      Perhaps if your average Windows user wasn't continually confronted with poorly worded and needless questions, there'd be some change of them actually reading each one and responding intelligently.

    132. Re:Perhaps It Belongs in the OS by clymere · · Score: 1

      You have a valid point...but just because the two teams may share doesn't make that illegal.

      Applying your logic to other platforms, Sun wouldn't be able to sell StarOffice, and Apple wouldn't be allowed to distribute Safari(which incidentally is the EXACT same situation as what MS was sued for concerning IE...Apple just has less market share).

      Apple and Sun have built their careers on having intimate knowledge of both the hardware and software that make up their platforms, sharing this knowledge as much as possible to make both better, along with any other products. If you look at anything other than marketshare, they're really much worse than MS in that regard.

      --
      once you go slack, you never go back
    133. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      It's hillarious what OE6 considers unsafe. A simple c source file (something that must be compiled to run) is considered unsafe and removed. Wonder if .doc files are, that may have macros in them, or if they anticipate the users being smart enough to understand the popup macro box.

    134. Re:Perhaps It Belongs in the OS by noidentity · · Score: 1

      You mean Microsoft could actually made Windows LESS SECURE? Holy crap!

      What would it do? Network with your security system, wait until you're gone, unlock the doors to your house and use the outside speaker to blast an invitation for burglars to get free stuff?


      Only if it lied and said it was a Linux machine.

    135. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Uhm... And yet, as a true slashdot member, I'm sure you keep up to date with the latest release of mozilla, which comes out a whole hell of a lot more often than MS Software releases, discounting patches.

    136. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Outlook 2000 was released in mid-1999. Service Packs are free.

    137. Re:Perhaps It Belongs in the OS by |<amikaze · · Score: 1

      My girlfriend's mom was having problems with OE, saying she couldn't open attachments that were being sent from the school. Turns out they were .doc and .pdf files. If a PDF isn't safe to open, what is?!

    138. Re:Perhaps It Belongs in the OS by Air-conditioned+cowh · · Score: 1

      "Unfortunately there isn't a program to stop the user being stupid."

      How stupid is stupid? To us clicking on an attachment in Windows is suicide but I know many who are unable to discriminate between what they should or shouldn't click on or say "yes" to because of simple information overload. They are bombarded with pop-ups and adware and all the other crud that has become part of life using (or trying to use) Windows.

      A simple solution is for files to have an "executable" flag that isn't set by default on email attachements... oh hang on, it's been done! Just not in Windows.

    139. Re:Perhaps It Belongs in the OS by 10101001+10101001 · · Score: 1

      The major point that seems to be missing is:

      3. Using a successful product to
      a. force the inclusion of another product even when consumers (like OEMs) demand to be allowed to include other products.
      b. implicitly lie about the compatibility of some product with said successful product.

      3a occurred when MS barred OEMs from include Netscape with machine and demoting the appearance of IE after MS threatened to revoke licensing on selling Windows. The fact that MS circumvented the normal competition of products through use of another product was ruled illegal and to me seems clearly unethical.

      3b occurred during the MS Windows 3.11 beta program where some special code was written and obfusciated with a simple xor encryption scheme to detect non-MS-DOS DOSs and display a warning about said DOS not being properly tested. At the time, DR-DOS and MS-DOS were competing products, and MS didn't itself test its product with a competing product but instead stated that testing wasn't done. Beyond being irresponsible to its consumers, the fact is this only demonstrates that MS realized Windows needed to be joined to DOS to prevent competition, which was observed in MS Windows 95. With DOS bundled with Windows, it removed all economic incentive to buy another DOS even when it was discovered that a simple TSR added to DR-DOS would allow it to work with Windows 95.

      Of course, that brings up the issue of where you draw the line. And I think any company can add whatever it wants so long as it doesn't prevent alteration for further customers nor uses deceit to gain consumers. Knowledge or bundling are fine in themselves.

      --
      Eurohacker European paranoia, gun rights, and h
    140. Re:Perhaps It Belongs in the OS by binarybum · · Score: 1

      c'mon. it will be. they'll release it separately and let it gain acclaim at first. If it does not, well then it's a failed experiment - one that never had the chance to tarnish the OS's name. Then they'll integrate it and use it as a selling point for the newest version of the OS (probably whatever follows longhorn).

      --
      ôó
    141. Re:Perhaps It Belongs in the OS by Methuseus · · Score: 1

      Just because we think they are stupid with respect to the security of the code, doesn't mean that we think they are stupid in the game-making.

      Yes, they are idiots for what they did to let the source code out. But then again I believe the people responsible didn't have "network security" as their main job title. Whether that should be one of the main things the coders adhere to, it doesn't affect how we feel about them for the *game* as opposed to the *security*.

      --
      Two things are infinite: the universe and human stupidity, though I'm not yet sure about the universe. - A Einstein
    142. Re:Perhaps It Belongs in the OS by alonsoac · · Score: 1

      Yes but with that turned on the program is unusable for most people. I am asked all the time how to turn that off.

    143. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0
      Au contraire, outlook is pretty stupid for permitting vbscript/javascript code to be executed in the e-mail. Or to allow auto-execution of activex controls and other sorts of stuff which many other mail clients at least have the sense to avoid.

      In Outlook you don't even need to open an e-mail attatchment sent to you, to get infected by a virus.

    144. Re:Perhaps It Belongs in the OS by menkhaura · · Score: 1

      Linux is no more secure than Windows. I'm sure if you added up all the vulnerabilities in Windows 2000 and compared them to a list of vulnerabilities in all the software on a standard Linux distribution of the same age, Linux would have at least as many as Windows.

      Do I need to say more?

      --
      Stupidity is an equal opportunity striker.
      Fellow slashdotter Bill Dog
    145. Re:Perhaps It Belongs in the OS by Kindaian · · Score: 2, Insightful

      I STILL cannot understand why it is wrong for Microsoft to release products the compete with existing software.

      The problem is not that they produce another product.

      The problem is that they profit from the flaws and bugs in one product to sell the other!

      Why patch the OS if we can delay the patch for 2 months and add a detection system in the weekly update of the anti-virus (and make a marketing campaign to raise more subscriptor to the virii info updates)...

      I would think that there is some liability in there if that scenario happens.

    146. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      "Apple wouldn't be allowed to distribute Safari(which incidentally is the EXACT same situation as what MS was sued for concerning IE...Apple just has less market share)."

      UMMM.....

      That and the fact that Apple doesn't do OEM stuff. IE in windows was bad cause MS wouldn't let OEM vendors put anything else in. You wouldn't have this problem on Apple computers.

    147. Re:Perhaps It Belongs in the OS by Mr+Tall · · Score: 1

      Dude, it doesn't matter how many hoops you make people jump through, they'll still infect their machines because they are stupid

      If you included some C source for a virus, included instructions on how to download and install GCC, and then instructions on how to compile and run the virus, people would still get infected

      You'd just have to make sure you worded the email right - like saying it would download nude pictures of some female celebrity...

    148. Re:Perhaps It Belongs in the OS by kwoff · · Score: 1

      I think it's a conflict of interest because they might intentionally develop exploitable software in order to keep their anti-virus software going (similar "reasoning" to the idea that anti-virus software makers might be the ones who actually make viruses). OTOH, if they keep making crappy software, then it will get a bad reputation for being insecure. Oh, wait..

    149. Re:Perhaps It Belongs in the OS by OwlWhacker · · Score: 1

      The issue with bundling is that Microsoft gains an advantage if software is included with the operating system. Most people will use it, not even considering downloading an alternative.

      Concerning Microsoft selling middleware, this also presents Microsoft with an advantage.

      Microsoft can build components into the operating system to enable its middleware products to integrate better together. In fact, Microsoft can make any changes into the operating system to benefit its products over the competition in any way it likes.

      Microsoft is now proclaiming the benefits of its products being tightly integrated (like no other products can offer), and how this provides a better service for people. Microsoft is admitting by this that it has an unfair advantage.

      When Microsoft gains an advantage, it locks competition out.

      And another thing, if Microsoft is selling the software that protects against the holes in its operating system, it would be beneficial for Microsoft to ensure that Windows is always buggy in order to maintain a cash flow from this market.

      It's all down to Microsoft being anti-competitive, and maintaining an illegal monopoly.

      Having Microsoft 'compete' in any market isn't a problem, it's the fact that Microsoft doesn't like to compete, and uses its illegal monopoly to gain an unfair advantage which is the problem.

    150. Re:Perhaps It Belongs in the OS by BokLM · · Score: 0, Troll

      Do you think the guys at Valve were stupid?

      Yes, they were using Outlook.

    151. Re:Perhaps It Belongs in the OS by BokLM · · Score: 1

      Microsoft does patch their OS quickly. The only problem is that many many people don't install the patches they provide. The vulnerability that CodeRed exploited was patched three months before the worm was released. The only reason it caused so many issues was because of incompetent Windows sysadmins.

      Have you heard of this Outlook 2003 vulnerability (Script Execution Vulnerability) ?
      It was discovered on May 17, but no patche today.
      And this Internet Explorer exploit does no have a patche too.
      If you look at this, you'll see that it took them more than 6 monts to release their patche on the LSAS vulnerability (used by Sasser).
      Is that what you call "patch their OS quickly" ?

    152. Re:Perhaps It Belongs in the OS by BokLM · · Score: 1

      That's one of the best reasons to use something like Yahoo instead of a separate email client.

      But if you're running Internet Explorer, you're still not safe, look at this :)

    153. Re:Perhaps It Belongs in the OS by Myopic · · Score: 1

      Frankly I feel like your naivete is a bit disingenuous bit since you say you haven't gotten it before, I'll explain it:

      Here's the theory: as consumers, we benefit from competition in the marketplace; and therefore we have laws which help us preserve competition. You have to accept that lemma before the rest of the argument works. The reason it is wrong for Microsoft to move into certian new subfields of the software market is because of the crushing blow such a move tends to cause to competition in the subfield.

      When Microsoft moves into a new subfield, there are two forces which tend to eliminate the competition which we would otherwise enjoy: first, Microsoft has huge dominance in so many other subfields, people may feel forced to follow them in the new subfield, even if they were previously using a different product; and second, because (depending on your perception) Microsoft uses shady tactics to force their customers into exclusive agreements and contracts. Our courts seem to be divided on whether or not Microsoft is actually in violation of our laws, but many of us believe they are in violation of our common desire to have competition in the software market work in our common favor (which, we claim, it currently does not).

      Furthermore, software is not a unique industry. At least here in America, we have a tradition of compelling market players to play nice with eachother (sometimes, anyway). A recent example that comes to mind is forcing auto manufacturers to share their computer codes with mechanics shops -- because we don't feel like it is fair for the car manufacturer to monopolize the repair market, too. We also compelled AT&T to allow other companies to run signals over their networks, since it was unreasonable to have each company build a whole nation's telephone infrastructure.

      That's it in a nut shell. The argument only works, though, if you buy the idea that the market should work for the benefit of all consumers. Needless to say, I buy it.

    154. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Maybe a "THIS IS AN EXECUTABLE PROGRAM" message could help. If Outlook/Mozilla Mail/... sees something like a double extension (.jpg.pif) puts a remark (red background on the icon?) to prevent the user from clicking thinking it's safe.

      And if a "THIS..." message apears, NO is the default answer and then an "ARE YOU SURE?"

      P.S. : The caps means big font, bold, underlined, ... something that makes it VERY visible.

    155. Re:Perhaps It Belongs in the OS by areve · · Score: 1

      Users should know what a .jpeg, .pdf, .doc etc... extension is and if it's not one they recognise then don't open it. It's worked for me for years. It annoys me that windows by default hides 'known file extensions'. Some thing I always turn off before I install a machine for a friend. It usally takes people a few minuites to get it and saves me hours fixing their PC in the years to follow.

    156. Re:Perhaps It Belongs in the OS by lucas+teh+geek · · Score: 0

      i thought the office family went:

      office 2000
      office xp (AKA 2002)
      office 2003

      did I miss something?

      --
      TIAEAE!
    157. Re:Perhaps It Belongs in the OS by julesh · · Score: 1

      Yes. The problem is, that they don't let you open _any_ attachments. So, when somebody e-mails you a PDF and you can't open it, what do you do? You switch the feature off, because it's the only damned way of getting to the document.

    158. Re:Perhaps It Belongs in the OS by julesh · · Score: 1

      In recent versions of Outlook, executable attachments cannot be opened or saved without messing with the registry. There is nowhere in the configuration interface to alter this behaviour.

      While I admit that I don't have the _most_ recent version, my version has an option under Tools/Options/Security labelled "Do not allow attachments to be saved or opened that could potentially be a virus". It is checked by default, but it is easy to switch off. And its definition of "could potentially be a virus" seems to extend to file types that I regularly exchange via e-mail, including PDF documents.

    159. Re:Perhaps It Belongs in the OS by say · · Score: 1
      Yes, there are security vulnerabilities in Microsoft's products, but there are also many vulnerabilities in various versions of Samba, OpenSSH, Bind, Sendmail, and many other software packages that are installed on Linux systems.

      [snip]

      Linux is no more secure than Windows. I'm sure if you added up all the vulnerabilities in Windows 2000 and compared them to a list of vulnerabilities in all the software on a standard Linux distribution of the same age, Linux would have at least as many as Windows.

      Now, that's one hell of a compare function. We are comparing the number of seucrity holes in the Windows 2000 distibution with an _entire_ GNU/Linux distribution?

      Well, I'm sure the crime level in the US is as high as in Iraq, if you measure it in an absolute number of crimes. It doesn't really make sense, bur sure.

      You might argue that a standard distribution of Linux runs Samba, OpenSSH, bind and sendmail per default. I have never found one that does run all those. Quite a few run samba and openssh. None that I know of run bind, and most have switched sendmail for something more reasonable like postfix or exim.

      We could of course compare the number of security holes in Windows 2000 + some sort of standard suite of daemons to linux with some sort of standard suite of daemons running. While interesting, it would be impossible to draw any conclusion. What is a standard suite of daemons? What is standard setup of those? And so on...

      --
      Roses are #FF0000, violets are #0000FF, all my base are belong to you
    160. Re:Perhaps It Belongs in the OS by j-pimp · · Score: 1

      Well if it were me I'd include instructions for compiling the virus with Open Watcom.

      Remember, While Carmack and Romero used DJGPP to cross compile Doom and quake from their Next boxes, the shipped binaries were compiled in watcom.

      --
      --- Justin Dearing http://www.justaprogrammer.net/ We're just programmers.
    161. Re:Perhaps It Belongs in the OS by julesh · · Score: 1

      Unfortunately there isn't a program to stop the user being stupid. No matter which e-mail client is used, they all allow attachments, and without a virus scanner screening those attachments, computer illiterate users are going to get virii.

      This all comes back to one design flaw in DOS, and one in the Windows shell.

      DOS used filename extensions to distinguish between executable programs and documents, rather than a filesystem flag. At the time, this wasn't recognised as a flaw, despite the fact that other systems (eg Unix) used the flag approach. DOS wasn't designed for use in the kind of environment Unix was designed for. But, it did mean that any form of file transfer that preserves the name can create an executable file.

      Windows multiplied this error by having a single function, ShellOpen, which is used to perform two distinctly different actions: open a document, and execute a program. Of course it followed the DOS convention of using the filename to work out which to do.

      This tempted extensions to windows where code was executed using the mechanism intended for opening documents (eg, if you call ShellOpen with a .vbs file it will be executed).

      These two actions should have been kept separate. And under Unix-style systems they are. I'll admit that Unix by default doesn't provide a document open facility, but there are various common extensions that do, and most of them avoid the mistake in question.

      This means:

      1. It is _impossible_ for a Windows application to tell if opening a file will cause it to be displayed or executed unless it has knowledge about the file type in question. This means that in order to prevent an attachment from executing, the only feasible way forward is to maintain a list of 'known safe' extensions. While these _could_ be subverted by the user installing unusual applications, this is a side case that is probably not worth worrying about.

      This, I believe, is the approach taken by recent versions of Outlook Express. Most users switch the behaviour off. Why? Because the file type list is incomplete, and prevents them from receiving certain types of file that are safe and that they want to be able to receive.

      2. Unix-based mail clients don't have the same problem. When they receive an executable attachment, they either (a) don't have an associated document open facility, so just save the file, following which the user would have to explicitly make it executable before it could be executed, or (b) have the file associated to a text editor if it is written in a scripting language. Some applications could install document open facilities that execute, but this is unusual and is effectively the same as the side case dismissed in (1) anyway.

    162. Re:Perhaps It Belongs in the OS by hardburlyboogerman · · Score: 1

      If I remember correctly,Micro$oft included a virus scanner in the last few version of DOS.(DOS 6.0 to 6.22)Of course,updates were near impossible to get.
      I get worried every time Micro$oft announces something.Windows is too bloated as it is.

      Billborg.exe--We Are Microsoft--Resistance is futile.

      --
      Geek Hillbilly
    163. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 1

      Yes, people will.. but a lot less often then when its as easy as it is now.

      You can forget fixing this problem completely, but it doesn't have to be as buig an issue as it is right now.

    164. Re:Perhaps It Belongs in the OS by pcmanjon · · Score: 1

      1) make insecure and buggy email client
      2) make antivirus to fix above clients bugs
      3) ???
      4) profit!

    165. Re:Perhaps It Belongs in the OS by llevity · · Score: 1

      Actually, I personally think they're also stupid in game making. It's been so oft delayed, by the time it comes out, it's likely to be a whole lot less revolutionary than it seemed at first.

      I don't buy the argument that they had to re-hacker proof the game, thus spending all this time. It's going to get hacked anyway. Spend a month obfuscating and reorganizing your code, and ship it out. My main beef, I guess, is that it wasn't as done as they claimed back pre source theft when they claimed it was going to ship 9/30/2003. But I digress...

    166. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 1

      > Statistics? How about trying each for yourself? A fresh install of Windows XP requires 49, as stated by going to the Windows update site, security updates

      Well, besides the fact that the post I replied to was comparing it to windows 2000.. are that 49 updates for remotely exploitable things or things that can be exploited without requiring user actions? In other words, can I expect to be able to install those updates without getting hacked/infected before having done so?

      > What does a default install of RedHat require for the number of security vulnerabilies?

      I don't use redhat myself, and I believe their distro sucks. Nonetheless, taking a peek at their info tells me that update 1 for the current enterprise server contains some 50 packages, most of which are not security updates but other bugfixes.

      I use FreeBSD myself, and for a workstation install, there have been exactly 2 security issues in 4.9 that would be of importance, and both relate to openssh which is enabled by default. For a server install there are some 2 dozen security updates.

      Of course that is excluding all kinds of additional packages that one might install. But that is just like not counting IIS vulnerabilities on the list of XP vulnerabilities.

      > It would have to be signficantly less than 49.

      Not really. the original poster was claiming it would be significantly more, and was comparing with Windows 2000 (which is used a lot more then XP for business use at the moment)
      It seems that at best it is similar.

    167. Re:Perhaps It Belongs in the OS by (trb001) · · Score: 1

      Perhaps if your average Windows user wasn't continually confronted with poorly worded and needless questions...

      That's very subjective. My girlfriend recently installed her first piece of software (Roller Coaster Tycoon). She's no computer newby, she just has never installed software herself. She asked me what she should do *every* *single* *screen*, including the screen where it asks what directory it should be put in. There's really no hope of engineering an installer that asks few enough questions to appease the typical user while also allowing the program to work the way the user wants. Had iTunes not asked the question about reorganizing a users' music, I guarantee they would've gotten 3000 support calls asking "I *KNOW* I have music on here already, why isn't iTunes picking it up?!"

      --trb

    168. Re:Perhaps It Belongs in the OS by SweetZombieJesus · · Score: 1

      You mean like executing code in the preview window, and automatically adding people to your address book if you reply to them by default?

      --
      Cheezit! We're boned! - famous 31st Century bending unit
    169. Re:Perhaps It Belongs in the OS by Cro+Magnon · · Score: 1

      But, with extension hiding, they don't see "Jennifer XXX cool.jpg.pif", they just see "Jennifer XXX cool.jpg". So they click on it and get pwned!

      --
      Slow down, cowboy! It has been 4 hours since you last posted. You must wait another few hours.
    170. Re:Perhaps It Belongs in the OS by hesiod · · Score: 1

      > I'm sure if you added up all the vulnerabilities in Windows 2000 and compared them to a list of vulnerabilities in all the software on a standard Linux distribution of the same age, Linux would have at least as many as Windows.

      I don't want to come across as a zealot or MS basher or anything, and you've probably heard this before, but an issue with this is that simply the number of vulnerabilities doesn't mean much. Compare which ones will give you root or admin access. Most of the Linux vulns are exploits that usually only affect one or two programs and won't give someone a root shell. On Windows, however, there are more vulns that can give an attacker complete control of the machine (in theory) to act as a zombie or something similar.

    171. Re:Perhaps It Belongs in the OS by hesiod · · Score: 1

      > Yet, viruses and malware are a substantial problem on [The Amiga]

      Have you ever used an Amiga? I've owned a few and NEVER, EVER heard of any malware on them. Some viruses, sure, but I pirated shitloads of software and was never infected by one. However, "the culture," as you say, could have made a virus spread very quickly. At any rate, even accounting for the # of users, I've seen way more viruses for MS software than Workbench/AmigaDOS. Saying it is/was a "substantial problem" is disingenuous at best.

    172. Re:Perhaps It Belongs in the OS by silicon+not+in+the+v · · Score: 1
      I'm going to reply to you, AC, just to prevent you from confusing anyone with your response.
      Once again, you have this backwards: the only reason you need to have a 3rd party scan your emial is because Microsoft has made it sooo easy to execute attachments. In addition, the defaults in Windows hide the filetype of attachments so you can't even determine that it might be dangerous!
      I obviously was not addressing the cause, because we can't fix the cause. We can't make MS rewrite Windows securely. With that given, this is a method to protect ourselves from email viruses. If you don't virus scan your attachments, you have to just throw away ones you don't trust and take a risk on the ones you do trust. If you do virus scan, you have to buy the virus scanning software and maintain that as another program installed on your system, getting updates for it, etc. Scanning through Yahoo has the advantages that 1. It's free 2. They patch their scanning software for the newest virus defs faster than anyone at home. 3. It doesn't have to run on my computer.
      And you completely ignore the latest, most dangerous round of exploits that require NO user intervention: MSBlaster (requires only an Internet connection, with or without their stupid implementation of a firewall), Bagel (you don't even have to view the e-mail to have a script run) and the numerous IE holes (which only require viewing a malicious web-page to have spyware downloaded and installed without any confirmation).
      Once again, your train of thought has derailed. We're talking about scanning email attachments. Virus scanners may be able to rid your system of worms after they have been identified and spread to many computers, but the real way to stop that is a firewall. I use one, so I have never had a problem with MSBlaster or any other worm that doesn't require user action. And, of course, I don't use IE because of those very reasons.
      And you are going to trust the arhitects of these idiocies to protect you against them? Get real!
      I think you may have missed something here. I was talking about Yahoo mail--that's not MS.
      --
      We may experience some slight turbulence and then...explode. -Capt. Mal Reynolds
    173. Re:Perhaps It Belongs in the OS by Magius_AR · · Score: 1
      You said: Outlook and Outlook Express do not let you open attachments by default. You meant: Outlook XP and Outlook Express XP do not let you open attachments by default. Unfortunately, it will take several years until those versions become the "most prevalent on the internet" versions. Let's see - 2 years ago means that anyone running Office 2002 or prior is a virus-factory. Re-post this same message in about 6 years when you can convincingly say that "Outlook" [generically] does NOT let you open attachments by default. I dare surmise that the vast majority of Outlook users are NOT running Outlook XP.
      Patches are out you know.

      I've been running patched Office 2002 which has the annoying trait listed above. It's fair to use "Outlook" generically, seeing as how the "2 years ago" Linux model is defaultly running an exploitable version of SSH. If you're going to discuss unpatched models only, of course something (anything!) is going to be a virus factory.

    174. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Your answer to that question is obvious considering you felt the need to ask.

      To filter you out, there should be a scoring level of: -2:Moron

    175. Re:Perhaps It Belongs in the OS by silicon+not+in+the+v · · Score: 1

      Comment on your sig. I think it's clever, but you might want to correct the information.
      "The way to a man's heart is through the left ventricle."

      Actually the left ventricle would be the way out of a man's heart. The left ventricle is the chamber that pushes the blood out through the aorta to circulate through the rest of the body. The right atrium/auricle is where blood is first received back into the heart. More info can be found here or here.

      --
      We may experience some slight turbulence and then...explode. -Capt. Mal Reynolds
    176. Re:Perhaps It Belongs in the OS by silicon+not+in+the+v · · Score: 1

      I read that Security advisory. That is pretty interesting and another good reason to avoid using IE. In this case, then, it sounds like displaying the HTML message in a separate email client would probably be safe, since this exploit relies on IE's execution of the commands in the HTML.

      --
      We may experience some slight turbulence and then...explode. -Capt. Mal Reynolds
    177. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 1

      If you'd have clicked on the link n the header of my post and read up a bit, you would have found the question to your answer.

      I still use Amigas, and have been using them since the late 80s.

      I currently have two working machines, a modified Amiga 500 (68030, 8mb, scsi) and a modified Amiga 2000 (68040, 16mb, scsi)

      I have seen a lot of viruses and trojans over the years, but no spyware and adware as we know it now. Of course, there was little point to those since most Amigas didn't have a net connection.

      So I guess it depends on your definition of malware, but for me every bit of software that on purpose tries to mess up your machine while either hiding itself, or giving the impression of doing something else, qualifies as malware.

    178. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 1

      I should wake up before posting ;P

      Of course.. you would have found the answer to your question instead of the question to your answer. ah well..
      (goes for another cup of coffee)

    179. Re:Perhaps It Belongs in the OS by nine-times · · Score: 1
      You're absolutely right. You can't completely keep a user from doing stupid things, but good design can limit the amount of damage stupid people can easily do. Especially when you figure that, if they're stupid, they won't be able to figure out how to bypass the safe-guards. (of course, somehow, the REALLY unbelievably stupid people are the ones who manage to accidently bypass every insane safeguard first before destroying their systems, but that's just a mystery of nature)

      Take the simple example of the big "virus" on MacOSX that people were talking about a couple weeks ago. I'm talking about the trojan horse that was posing as MS Office. You run it, and it erases your home directory. However, it can't erase your entire system, because users are not given access to their entire system without entering a password. Plus, good, regular backups of the user-data (which everyone should do anyway), renders this trojan pretty harmless.

      Now, I'm not saying that OSX security can't be bypassed on a larger scale, but compare this situation to Windows, where users run, by default, as administrator. The same sort of simple command could do much more serious damage, deleting every file on your hard drive except those currently in use.

      Of course you'll have to give users certain kinds of access in order to make the computer usable, but I'm not convinced that carefully designed and well-implimented security couldn't all but wipe out the problems of trojan horses, viruses, and spyware.

      I think there's even room for innovation in security design. Take the example of what we can learn from a linux live CD. You burn the CD, and boot from it. Now, no matter what happens, no matter what exploit was exploited, you reboot, and everything is as it was. It seems to me we might take a lesson from the stability this model provides, but incorporate it into a full desktop install, so there's no performance-hit from running from CD, and the configuration files are kept through reboots. I know you can effectively do this in Linux, but it's not done easily by newbies, and it's certainly not done by default.

      Anyway, I'm babbling. The short version of what I want to say is, you're right, better security design lessens the threat of attacks, including when what's being exploited is user-stupidity.

    180. Re:Perhaps It Belongs in the OS by duggy_92127 · · Score: 1
      Maybe it's the law, but I just don't follow.

      IANAL

      In many cases, almost ALL cases, it's not against the law to use this kind of leverage to improve your business. A Honda spoiler is going to be built on when the car is being assembled and painted and whatnot, it's going to look better than a third-party product. They have every right to include them on their vehicles.

      So why can't MS integrate a browser or an AV program with their OS? The difference is the monopoly status of the company when it comes to OSes, AND that the crushing of the competition is harmful to consumers. MS killed Netscape by exploiting its monopoly, to the detriment of consumers; it's that last part that makes it illegal, the monopoly part that makes it possible.

      Honda is not a monopoly, so the same rules don't apply to them. But if ALL cars were Hondas, and they were designed so that only Honda tires worked, AND Honda tires were inferior... that would be Honda abusing its monopoly status to the detriment of the consumer.

      Monopoly companies have too much power in this regard to be allowed to 'compete' like any other company.

      Doug

    181. Re:Perhaps It Belongs in the OS by Gr8Apes · · Score: 1

      Wouldn't that just be ports 135-139? :)

      --
      The cesspool just got a check and balance.
    182. Re:Perhaps It Belongs in the OS by Gr8Apes · · Score: 1

      I thought they created those because Executive Software's DiskkeeperLite extra Lite is included with XP now since MS can finally admit that yes, aunti em, NTFS really does frag files to hell and back (since OS/2, HPFS, and most people that knew about the argument no longer are a threat).

      --
      The cesspool just got a check and balance.
    183. Re:Perhaps It Belongs in the OS by Alien54 · · Score: 1
      Are we going to integrate some kind of porn finder into Outlook, just to keep the users safe?

      Eventually such integration leads to all sorts of things...

      Microsoft! Now with 50% More Porn!

      Also, Microsoft could put a patent on porn, and sue all of the porn suppliers for patent violations.

      --
      "It is a greater offense to steal men's labor, than their clothes"
    184. Re:Perhaps It Belongs in the OS by jcizzy · · Score: 1

      "even stupider" Come on now.

    185. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      Leaving functionality out and selling it as an extra is just fine. This isn't leaving functionality out though. It's leaving quality out.

    186. Re:Perhaps It Belongs in the OS by SillyNickName4me · · Score: 1

      > if a virus can spread that requires users to unzip a password protected zip attachment, then run the executable do you have any hope whatsoever for operating system or anti-virus companies to solve the social engineering problem of email viruses

      Good point, and against that there is little help from technical means.

      > nothing short of education can fix these problems.

      I completely agree that education is the key.

      That said, I believe that the whole way that Windows works (and for that matter, KDE has a bit of this as well) is not helpfull because it teaches a user to not think and take whatever the computer does for granted. Empowering the user? fine. Making complicated things easy? fine. Acting as if complex things are easy? Completely wrong. Worst of all is giving the impression that you don't have to think about what you are doing tho.

      Education also has to come in other forms, and you rightfully point at schools having a task in that.. I'd say that you as parent also have a task in it, even more so when you are a knowledgable user yourself. (sorry, just getting a bit annoyed with parents who don't think they have a responsibility in teaching their kids how to behave, not saying that you are one of them)

    187. Re:Perhaps It Belongs in the OS by OwlWhacker · · Score: 1

      Man, I can't believe that fortune cookie lied.

      Ah well, that's the last time I quote one of those.

    188. Re:Perhaps It Belongs in the OS by Cromac · · Score: 1

      Sorry, but you're wrong, I know amazing isn't it. Win 95 did NOT come with IE3, IE 3 didn't even come out until mid year 1996, I know, I was working on it. The original upgrade version of Win95 didn't have any version of IE at all. http://www.microsoft.com/windows/WinHistoryIE.mspx

    189. Re:Perhaps It Belongs in the OS by hearingaid · · Score: 1

      Mm-hm. But the first full install of Win95 (which was released later) did contain IE. And what's more, IE3 was not in the Plus Pack, which was what I was really objecting to, as I didn't have the silly/stupid thing.

      --

      my old sig used to be funny, but then slashcode ate it and now it's not funny anymore

    190. Re:Perhaps It Belongs in the OS by Anonymous Coward · · Score: 0

      In Windows, any application can hook itself into practically any API call, and intercept attampts to use it. You don't need to change the OS to prevent Outlook from doing something stupid.

    191. Re:Perhaps It Belongs in the OS by pod · · Score: 1

      In the original iTunes dialog box there was no mention of iTunes messing up your directory structures, filenames and ID3 tags. Just iTunes 'organizing your music library'. Heck if you're supposed to know what that means. Perhaps Apple users are used to applications moving their files around for them, so they knew the implied intent behind the question.

      And now, even today, if you let iTunes normalize your tracks (ie detect track volume and adjust on playback so all songs play at roughtly the same volume), it will OVERWRITE, WITHOUT ASKING OR TELLING, the comment field of your ID3v2 tags with junk! Fuck, did that ever piss me off! you'd think it would do the smart thing and store that data in its playlist database, which it is apparently so 'famous' for.

      Anyhow, offtopic, but this behavious is highly annoying. iTunes doesn't even give the user a choice, or notice, when it does something that irreparably modifies/destroys user data. You're saying that's a good thing? I'd rather have too many choices and too much information, than nothing.

      --
      "Hot lesbian witches! It's fucking genius!"
    192. Re:Perhaps It Belongs in the OS by vsprintf · · Score: 1

      And?

      And? And you really need it spelled out for you? If most Windows installations date from before Microsoft even realized they had a security problem, then there is a huge installed base of unsecured machines out there polluting the world's computing environment. Are there any words in that you'd like me to explain? Get a user ID, Coward. It's free.

    193. Re:Perhaps It Belongs in the OS by vsprintf · · Score: 1

      Outlook 2000 was released in mid-1999.

      SP2 was released in 2001.

      Service Packs are free.

      So is posting on Slashdot. Did you read any part of this thread or did you just close your eyes and pick a comment to reply to? I'm beginning to believe that most ACs are actually old /. trolls who were modded under the bridge and have to post AC to get above -1.

    194. Re:Perhaps It Belongs in the OS by vldmr_krn · · Score: 1

      They shouldn't need a separate program to stop Outlook from doing something stupid. It should just not do something stupid in the first place.

      Every default install of Outlook Express 6 I've seen has the security option "Do not allow attachments to be saved or opened that could potentially be a virus" checked, and uses the "Restricted" zone for browsing email. I've never had a virus due to Outlook Express. Outlook is too bloated for my tastes and so I'm not very familiar with it, but I find it easier to believe that this "Outlook is insecure" mantra is just another part of Slashdot's "Microsoft can do no right" attitute, than to believe that Outlook is so radically less secure than Outlook Express.

      Anyone have particularly informative links that detail Outlook's security flaws?

  2. Bonus karma by SeanTobin · · Score: 4, Funny

    10 bonus karma points for the first person to write a worm that exploits a vulnerability in Microsoft's AV software!

    --
    Karma: SELECT `karma` FROM `users` WHERE `userid`=138474;
    1. Re:Bonus karma by Coneasfast · · Score: 2, Insightful

      10 bonus karma points for the first person to write a worm that exploits a vulnerability in Microsoft's AV software!

      you say this as a joke, but seriously there are going to be some losers out there who will attempt to find, and exploit vulnerabilities in their AV app.

      i think MS is making a big mistake and should leave the virus software to 3rd party developers.

      --
      Marge, get me your address book, 4 beers, and my conversation hat.
    2. Re:Bonus karma by 1010011010 · · Score: 5, Funny

      Extra 10 bonus points on top of that if the virus also deletes the Product Activiation data!

      "Hello? Microsoft? I need to re-activate Windows and my anti-virus software so I can clean out this virus..."

      --
      Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
    3. Re:Bonus karma by Carnildo · · Score: 1

      you say this as a joke, but seriously there are going to be some losers out there who will attempt to find, and exploit vulnerabilities in their AV app.

      And of those, a number will succeed.

      --
      "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
    4. Re:Bonus karma by fred_sanford · · Score: 5, Funny

      10 bonus karma points for the first person to write a worm that exploits a vulnerability in Microsoft's AV software!

      MS beat us to it. It's called Outlook.

    5. Re:Bonus karma by TyrranzzX · · Score: 1

      Step 1: Bet everyone on slashdot that MS will include the software by default in their next OS release.

      Step 2: ....

      Step 3: PROFIT!!!!...er...Collect stacks of play money.

    6. Re:Bonus karma by Anonymous Coward · · Score: 0

      NAV required activation now as well and there are many viruses which will corrupt the installation enough to require reinstallation and reactivation.

    7. Re:Bonus karma by Short+Circuit · · Score: 1

      I wouldn't be surprised, but I wouldn't go so far as to expect it.

      This might be the first time Microsoft's ever written an application securely from the ground up, but they've got the manpower to do whatever they set out to do.

      Who knows? Maybe they'll stop using shoddy code generators for this project. :)

    8. Re:Bonus karma by mindfucker · · Score: 4, Insightful
      You say this with the assumption that Microsoft's goal is to keep their customer's computers safe, but it's not.

      Their goal is the same goal as any monopolist: makeing you completely dependent on them so that it's more difficult to switch to a competing product. Once you understand that you can begin to understand the rest of their actions.

    9. Re:Bonus karma by kryptkpr · · Score: 1

      Confirmed, I've seen this in the wild. I'm moving away from NAV, it seems they care more about money then protecting their customers these days.

      --
      DJ kRYPT's Free MP3s!
    10. Re:Bonus karma by ranolen · · Score: 1

      This is exactly where this kind of crap comes from. What is the point of writing such code??? The only thing that you are doing is making more work for yourselves (assuming you are admins). All you do is complain that there are patches to be applied and viruses to be taken care of, but in your next breath you are saying screw MS and write a virus. Get a life and stop writing such crap.

    11. Re:Bonus karma by SirTalon42 · · Score: 1

      HA! Then they lose all the money they can get for making a program that keeps the Anti-Virus safe!

    12. Re:Bonus karma by Anonymous Coward · · Score: 0

      Use Symantec Anti Virus. It isn't "protected" from those product activation.

    13. Re:Bonus karma by 0utRun · · Score: 1

      Are you implying that there'll only be 1 vulnerability?

      win2k had 64,000 bugs in it's first month after release, didn't it?

    14. Re:Bonus karma by Anonymous Coward · · Score: 0

      As a matter of fact, security is one of their main focuses these days. I spoke with a gentleman who knew the inner workings of the corporation. A few months before the release of Server 2k3 - nobody was allowed to develop anything NEW; the entire focus was security - how to make the product more secure. And it shows - you have to enable pretty much everything you want to use to begin with..even IE to an extent.

      I've been a lurker on here for about a year now, maybe more, and the whole "M$ SuX0r" b/s is getting old. Do the latest versions of Linux, Windows, and OS X all work well? Yes, for their audiences. Every OS has its place, and if it didn't, it wouldn't be as popular as it is today. Think about it - while you still get it "free" with your PC, you get OS X with your Mac - yet nobody screams at Apple for it.

      Am I pro-open source? You bet - I like being able to view the source of a program, tweak it, and use it elsewhere. However, a business is a business, legitimate or not. The great robber barons of the US did a LOT more damage than Bill Gates does today, and I believe this should all be put into perspective.

      Even some of the comments about how the _new_ versions of Windows are secure but the old ones aren't are absurd. The latest cars are the safest, but my 1991 model isn't nearly as safe - yet I still drive it, and don't expect Honda to come anytime soon and retrofit it with the latest airbags and crap.

      Face it, children, arguing "mine's better - No, mine!" gets NOWHERE. Get over your nerdy egos and grow up.

  3. Business Lesson 101 by stecoop · · Score: 5, Insightful

    what makes them think they can keep their AV software up to date?

    It just goes to show you that business isn't about who's right or who's wrong but who can make it sound good.

    1. Re:Business Lesson 101 by Anonymous Coward · · Score: 2, Funny

      "Relax, everyone... The vulnerabilities in Windows are all by design. However: No Windows installation is complete without MSAV, included free with the Windows XP Useable Edition Plus Pack. Only $799.75!"

      For awhile now, I've heard Windows-only n00bs mention how great the disk defrag utilities in Windows are, and how Linux sucks because it doesn't have things like that (Never mind the fact that MS filesystems seem to be the only ones that need regular defragmentation). I'm sure that at some point I'll hear something along the same lines about AV software: "Microsoft makes better AV software for protecting Windows against its own bad design than Microsoft's competitors do. MS is great. Yay!"

    2. Re:Business Lesson 101 by irikar · · Score: 1

      Lesson 202:

      How tempting would it be for an anti-virus software company to "indirectly and anonymously promote" the release of a virus such as W32.MyDoom? Wouldn't such a thing boost AV software sales? That would of course be an awful thing to do, but we've seen worst with highly "creative" corporation such as Enron, didn't we?

      In the name of Money and sales boosting, one would be tempted, don't you think?

    3. Re:Business Lesson 101 by dasmegabyte · · Score: 1, Insightful

      As opposed to Slashdot? In every case where there has been a problem with Windows security, it's been AFTER they released a patch for the vulnerability. Every one! And yet, Slashdotters love to make patently untrue jabs like "Ho ho, they can't patch their OS fast enough, guffaw!" How does this kind of thing make it past the editors, anyway? Do they not know? Or do they not care?

      Listen assholes, Microsoft is patching things fine. You're just not RUNNING the patches! It's like getting shot with an arrow and blaming your blacksmith, when you were the one who didn't raise your shield up to avoid the barrage!

      I think if Microsoft releases their AV software for FREE, it'd be a great boon to the community. It could be a good way to help those hold outs who still wait a couple of weeks (or months) before INSTALLING the latest patch "just in case" and who are then surprised when they get fucked by a virus. And then proceed to wail about in on Slashdot. But it they try charging for it, they do institute a big conflict of interest, and to be honest I'd be unlikely to buy it.

      --
      Hey freaks: now you're ju
    4. Re:Business Lesson 101 by SolusSD · · Score: 1

      Hmm, this is all business. It simply doesn't make sense from a pratical viewpoint for the company releasing the patches to fix the security holes to release a program that removes the programs that take advantage of these security holes. Microsoft's first and foremost responsibility is fixing the vunerabilities, not adding another layer of software into the mix themselves to deal with vunerabilities. And why can't Microsoft build patches that remove viruses/trojans taking advantage of the vunerability when they are first installed? doesn't that make more sense than Microsoft devoting programmers towards an Antivirus Program project?

    5. Re:Business Lesson 101 by happyfrogcow · · Score: 1

      oh man, if they released it free or even bundled it with the OS, expect another antitrust lawsuit. they have been found guilty of using their desktop OS monopoly to gain an advantage in other areas. This would be exactly the same situation.

      microsoft should stay out of this software sector, or divide the company into completely seperate entities that have no advantage in interoperation over any other non-MS company.

    6. Re:Business Lesson 101 by peragrin · · Score: 3, Interesting

      Sure just like the last major virus outbreak. The patch was there but you couldn't install it without breaking your non MS apps. Databases, servers, and desktop tools stopped working when the patch was apilied. To top it off it also redid MS networking password file so if you were smart and running Samba on a Linux box for your server, you couldn't apply the patch because you couldn't network any more with your servers.

      Now Breaking the Network protcol is something MS can do, but it sucks when security is your priority so your servers are different than the desktops,(meaning a virus can attack one but not the other) Now you can't apply any patches without breaking something useful.

      --
      i thought once I was found, but it was only a dream.
    7. Re:Business Lesson 101 by Anonymous Coward · · Score: 0

      You've clearly never worked in a major production environment have you? Half the damn msft patches break things, if you think you can slap msft patches on production machines willy nilly and not have servers dieing on you you're nuts.

    8. Re:Business Lesson 101 by Badanov · · Score: 1
      Listen assholes, Microsoft is patching things fine. You're just not RUNNING the patches! It's like getting shot with an arrow and blaming your blacksmith, when you were the one who didn't raise your shield up to avoid the barrage!

      It's more like having a shield in which a major section falls off through no fault of your own.

      Imagine if GM or States Industries in 1941 had produced a product that had vulnerabilities.

      The Sherman tank: great vehicle, but in combat, the front slope falls off and it's the tank crew's fault for not patching the armor to begin with. Shame they have to die for it, but then that's life in a combat zone. Should had that GM patch. It's all their fault for the hole being there.

      THAT is closer to the truth about Microsoft.

      And the 'asshole' appelation? That's the nicest thing anyone has said to me all week.

      --
      Dawn of the Dead
    9. Re:Business Lesson 101 by fermion · · Score: 1
      I think if Microsoft releases their AV software for FREE, it'd be a great boon to the community. It could be a good way to help those hold outs who still wait a couple of weeks (or months) before INSTALLING the latest patch "just in case" and who are then surprised when they get fucked by a virus. And then proceed to wail about in on Slashdot.

      I am getting pretty tired of morons blaming users for not upgrading. These people need to look at how bussiness is run and understand that downtime means loss of funds, and change often means uncontrolled downtime. Furthermore, not everyone has a DSL connection and spends hours every month repairing thier machines. Many people only spend a few hours a week at the computer. They have other things to do than to tie up thier phone line for hours on end to solve a problem they may not even understand.

      What would be a great boon to the community is if MS would release the patches free to everyone, in serveral different forms. I mean, they only offer dowloads to registered customers. How much would it cost for them to have a list of customers without DSL. They could mail a CD to those customers when an update is released. I think such a service would be worth maybe $20/year.

      What would also be a boon would be if MS would decouple it's system components so that I could install only what I needed. Extra stuff on a manufacturer floor production machine, like a full web browser, a media player, full remote access, is just silly. It leaves the machines open to unnecesary vunerabilities.

      The problem is that MS has a vision of the machine they want everyone to run. You have little ability to change the configuration. Now, instead of doing something that will cure the sickness, they add another bandaid. They are so afraid of losing thier desktop monopoly that they are condemning all thier customers to a life of endless patches.

      Bitch.

      --
      "She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
    10. Re:Business Lesson 101 by Anonymous Coward · · Score: 0

      Look, people are pissed because microsoft are now releasing something which is their own doing.

      An anti-virus from a company whose every product is infested with security holes? its clearly a gluttonous ploy to suck up more money from people, whilst extending their patch release time, and letting them get away with even worse coding.

      This is like making the safe drivers pay for unsafe drivers insurance;
      "Hey, you crashed into me on purpose." - "Yea, so cough up some dough and I won't crash into you again.. At least for a while, until a new car comes along."


      OOH, I FUCKING HATE MICROSOFT, THEY SHOULD FUCK OFF INTO A SMALL HOLE AND NEVER RETURN, FUCKING SCUMBAG, WANKSHAFT, MOTHER FUCKING, RECTUM RIDING, COCK SUCKING, ASS SURFING, BUTT PROBING, SHEEP SHAGGING, PROFITEERING, GLUTTONOUS, CUM-DRIBBLING, ARSE LOVING, MONEY MONGERS.

    11. Re:Business Lesson 101 by praxis · · Score: 1

      Have you ever heard of defense in depth? A patch will plug the vulnurability. Some users patch, some don't. Many exploits are worms that require administrator rights. Some users run as an administrator, some don't. Even a patched system that doesn't get exploited might still be able to spread the infection to other systems, but AV software could stop this. Some users run AV, some don't. Read any good book on designing secure software, and defense in depth will be pounded into your thought process repeatedly.

    12. Re:Business Lesson 101 by killjoe · · Score: 1

      "As opposed to Slashdot? In every case where there has been a problem with Windows security, it's been AFTER they released a patch for the vulnerability. Every one! And yet, Slashdotters love to make patently untrue jabs like "Ho ho, they can't patch their OS fast enough, guffaw!" How does this kind of thing make it past the editors, anyway? Do they not know? Or do they not care?"

      So what? Why do you love this corporation so much that you feel compelled to defend them from a bunch of anonymous people. DO you love other corporations just as much? Do you go around yelling at people if they say they don't like fords or maytag washers? If not why not? Why did you choose to make yourself a sycophant for this corporation but not others? Honestly I want to know how MS got you to pledge your allegience to them.

      If you don't have an answer then perhaps one of the people who modded you up do.

      --
      evil is as evil does
    13. Re:Business Lesson 101 by Smallpond · · Score: 1

      Actually, History channel had a show about Liberty ships breaking in half due to weld problems. The patch was a huge metal band riveted along each side of the ship. I think they two bands were called "Service Pack 2" but I could be mistaken.

    14. Re:Business Lesson 101 by The+Toad · · Score: 1

      In every case where there has been a problem with Windows security, it's been AFTER they released a patch for the vulnerability.

      That sounds great, except you're completely wrong. There are plenty of unpatched MS vulnerabilities that are being actively exploited. For example:

      Microsoft Internet Explorer ADODB.Stream Object File Installation Weakness

      And this certainly isn't the only example. They've earned their reputation for ignoring known vulnerabilities:

      pivx list of unpatched IE vulnerabilities from 9/2003

      And before you say that these are IE vulnerabilities, not "Windows" vulnerabilities, you might want to consider Microsoft's own position in a certain court case.

    15. Re:Business Lesson 101 by Anonymous Coward · · Score: 0

      Listen assholes, Microsoft is patching things fine. You're just not RUNNING the patches! It's like getting shot with an arrow and blaming your blacksmith, when you were the one who didn't raise your shield up to avoid the barrage!

      I think this is a bogus analogy. Microsoft is guilty of not patching their own systems and getting burned. The volume and complexity of the patching has been problematic.

      In essense, you can blame the blacksmith if the shield weighed 500 LBS.

    16. Re:Business Lesson 101 by silicon+not+in+the+v · · Score: 1
      microsoft should stay out of this software sector, or divide the company into completely seperate entities that have no advantage in interoperation over any other non-MS company.
      [Lumbergh]Uh...yeah...I think we're going to have to divide up the dev teams along this cube wall here. Peter, you're going to be on the Windows team, and on the other side of the wall, Michael is going to be on the Antivirus team. Did you get the memo about that? Great, thanks...[/Lumbergh]
      --
      We may experience some slight turbulence and then...explode. -Capt. Mal Reynolds
    17. Re:Business Lesson 101 by Anonymous Coward · · Score: 0

      Databases, servers, and desktop tools stopped working when the patch was apilied.

      What patch effected what software here? No need to generalize here, as there are lots of database, server, and desktop tools. It sounds like you are talking out of your ass. If you have a point to make, then make it.

    18. Re:Business Lesson 101 by dasmegabyte · · Score: 1

      Funny. When I installed said patch on all of our systems the day it came out, I had no problems.

      It might be that I'm an amazing systems admin. It might be that the patch you ran was a beta that somehow got up there accidentally.

      Or you might be lying.

      --
      Hey freaks: now you're ju
    19. Re:Business Lesson 101 by Grrr · · Score: 4, Insightful

      In every case where there has been a problem with Windows security, it's been AFTER they released a patch for the vulnerability. Every one!

      - "Microsoft issued a software patch, MS03-032, on Aug. 20 that was supposed to fix the problem. However, that patch failed to close the hole on Windows machines running Internet Explorer Versions 5.01, 5.5 or 6.0.
      On Sept. 8, Microsoft acknowledged problems with the MS03-032 patch and promised to issue a fix as soon as possible. Since that time, no changes have been made to the MS03-032 patch. In the succeeding weeks, hackers moved quickly to take advantage of the company's slow response." ( Computerworld.com )

      - "Two vulnerabilities have been reported in Internet Explorer, which in combination with other known issues can be exploited by malicious people to compromise a user's system.
      1) A variant of the "Location:" local resource access vulnerability can be exploited via a specially crafted URL in the "Location:" HTTP header to open local files. ...
      2) A cross-zone scripting error can be exploited to execute files in the "Local Machine" security zone.
      Secunia has confirmed the vulnerabilities in a fully patched system with Internet Explorer 6.0. It has been reported that the preliminary SP2 prevents exploitation by denying access.
      Successful exploitation requires that a user can be tricked into following a link or view a malicious HTML document.
      NOTE: The vulnerabilities are actively being exploited in the wild to install adware on users' systems." ( Secunia )

      - "The flaw, which is different from RPC DCOM flaw that spawned the Blaster and Nachi worms, makes Windows XP and 2000 servers vulnerable to denial-of-service attacks because of a multi-threaded race condition that exists. A remote attacker could crash the RPC service simply by sending multiple RPC requests. The vulnerability occurs if two threads process the same request, thereby corrupting memory.
      Microsoft still has not released a patch for the flaw, leaving nearly every Windows XP and 2000 system exposed to potential exploits. Microsoft may, however, be preparing an all-encompassing RPC patch that would address this issue and previous flaws surrounding the network service, said Gerhard Eschelbeck, chief technology officer with Qualys Inc., at RSA Conference 2004. RPC is a protocol that one program can use to request a service from another program located elsewhere on a network." - ( searchsecurity.com )

      - "Attackers are taking advantage of a security hole in Internet Explorer not immediately patched by Microsoft
      Security experts have warned that a vulnerability that has apparently been left un-patched by Microsoft is being exploited by attackers "in the wild".
      The "object type" vulnerability, which was first acknowledged publicly by Microsoft on 20 August this year, allows an attacker to take control of a system by embedding malicious code in a Web-page. If the Web page is viewed by an Internet Explorer browser - even a fully patched browser - the malicious code embedded in the Web-page will execute, experts say. Despite Microsoft acknowledging the patch doesn't work, it evidently has not yet issued a working fix for the vulnerability.
      US-based information security company iDefense released a statement over the weekend claiming the vulnerability is being actively exploited "in the wild".
      "Whether you are patched or not, attackers can execute code on your computer at will when you visit a hostile website when using vulnerable versions of Internet Explorer," the statement read.
      The relevant Microsoft bulletin was issued on 20 August and last updated on 8 September." - ( ZDnet - but then again, you didn't say "...after

    20. Re:Business Lesson 101 by dasmegabyte · · Score: 1

      No, it isn't anything like the truth with Microsoft. GM recalls parts that are faulty. Microsoft issues patches. If your GM part fails, and it you never had it fixed for the recall, THAT IS YOUR FAULT.

      As for the military...dude, equipment fails ALL THE TIME in the military, and quite often nothing is ever done about it because the military contract is liability free and the government has to pay either way. Receive a gun that jams 50% of the time on full auto? Tough tittie, private, fire in short bursts. You've never heard of GIs trading their guns for those of dead enemies, or stuffing flak vests into foolishly underarmored points? I'll take Microsoft's patching over that shit any day of the week.

      Oh, and to the "asshole" appelation, feel free to add "shitty debater." You've earned that one.

      --
      Hey freaks: now you're ju
    21. Re:Business Lesson 101 by dasmegabyte · · Score: 1

      I am getting pretty tired of morons blaming users for not upgrading.

      Maybe you should get used to it. Software is an amazingly complex entity and there will always be holes waiting just outside the knowledge of the security community. Which means patches aren't going to stop -- ever. Unless you want to get a virus, you will HAVE to upgrade as soon as possible. I don't wait more than fifteen minutes to patch vulnerabilities in OpenSSH. The risk is too great.

      It's a common myth that downtime causes a loss of funds...I say myth, because a reboot should take less than ten minutes, do it on client machines before lunch, at the end of the day, or before a meeting. As for server machines, well, that might take 15 minutes but maintenance like that should already be occurring after hours by people who are paid to do so. No additional work time plus no additional funds equals ZERO CHANGE. But that number doesn't look as nice in articles for SecurityFocus magazine. Besides, even if it's a hassle, getting hacked is a much bigger one. Duh!

      What would be a great boon to the community is if MS would release the patches free to everyone, in serveral different forms. I mean, they only offer dowloads to registered customers.

      What? No they don't. I don't have an account with Microsoft, and I patch my machines fine. BITS downloads them automatically and AutoUpdate displays them for my perusal. You have NO IDEA what you are talking about. As a Linux user, you could visit this link and get the latest patch for RDS on MDAC 2.1; a component release WHO KNOWS how long ago.

      --
      Hey freaks: now you're ju
    22. Re:Business Lesson 101 by Anonymous Coward · · Score: 0

      I must say, congratulations.

      You've made a very good number of unsubstantiated claims, which are all very false, and been modded as Interesting by a group of your peers.

      One of these days, you will step off of slashdot and realize that you must have some kind of real cite for claims, especially the outrageous ones you make.

    23. Re:Business Lesson 101 by dasmegabyte · · Score: 1

      So what? Why do you love this corporation so much that you feel compelled to defend them from a bunch of anonymous people. DO you love other corporations just as much? Do you go around yelling at people if they say they don't like fords or maytag washers? If not why not? Why did you choose to make yourself a sycophant for this corporation but not others? Honestly I want to know how MS got you to pledge your allegience to them.

      Nothing. They don't have my allegiance. I also defend France and Muslims against misinformed detractors, the Macintosh platform from those who claim it has no software, and the hipster bikini from those who think that thongs are always inherently hotter (sorry guys, but some girls have very flat backsides, and the thong shamefully accentuates this fact).

      In short: I feel that if you are going to make a claim against a person, company, religion, model of car, piece of art, etc, you'd better have a valid reason for doing so. Repeating a lie makes people think it's the truth. Or do you think we should just go ahead and believe all statements made against any of these institutions just because we don't have a vested interest in them, and therefore they're ripe for slander?

      --
      Hey freaks: now you're ju
    24. Re:Business Lesson 101 by Anonymous Coward · · Score: 0

      Or you might be lying.

      Or YOU might be. Why don't you reply to The Toad or Grr when they demonstrate the well-known fact that MS has had many instances of long-standing un-patched vulnerabilities?

      If you're such an amazing sysadmin that you can stay on top of all of Microsofts' patches, why can't you stay on top of what they don' patch? Oh right... being a great sysadmin doesn't mean you aren't a lying shill.

    25. Re:Business Lesson 101 by dasmegabyte · · Score: 1

      I'm not a system admin. If I were, I might occasionally have to invent a problem so I look important. Instead, I am a programmer who also administrates 25 machines in a small company. Two years, two hours a month, no viruses whatsoever and hardly any spam. When a new patch comes out, we install it IMMEDIATELY on two machines: the development server, and the machine of the smartest tech support guy. If problems don't show up in a day or so of hard use, we push them out to the rest of the company, a process which takes about ten minutes since everybody knows how to use automatic updates.

      I am well aware of some of Microsoft's long standing vulnerabilities, such as buffer overflows with bitmaps in IE 5. You will notice that none of them have yet been used to any non-trivial effect by virus writers. This is because they are entirely academic. A virus which requires you to jump through hoops with obscure software will not spread and therefore it's worthless. I don't care. I don't understand why you do, either. You could break into my house if you broke a window. I don't consider my windows an "unpatched vulnerability."

      --
      Hey freaks: now you're ju
    26. Re:Business Lesson 101 by Anonymous Coward · · Score: 0
      Releasing a windows patch takes a lot more effort than adding a virus definition. The book Writing Secure Code (Microsoft Press) estimates that an average Windows Critical Update costs $100 to make and publish. If they make a mistake, they can seriously fuck thins up.

      In comparison, adding a virus definition is as simple as putting one more pattern in a database. Worst case scenario you falsely flag some harmless stuff and people have to click a "No, don't quarentine this" button.

    27. Re:Business Lesson 101 by Anonymous Coward · · Score: 0

      Oops. I meant $100k. Gotta love the "wait 2 minutes to post again" feature in slashcode.

    28. Re:Business Lesson 101 by jimmyharris · · Score: 1
    29. Re:Business Lesson 101 by peragrin · · Score: 1

      Well I did give an example Samba. Also at the time of the virus outbreak the only reason I heard was that it was breaking severs. As for Windows myself I only use ME when I have to. I can't touch WinXP. Of the three times I have used it the system needed to be completely reinstalled twice. Now Linux at perfect, and I can crash it. It just takes more than a few minutes of trying to reset a server.

      I don't touch his XP systems and he doesn't touch my linux systems, Now I not an Admin either, neither is he other than our own personal stuff.

      Also I almost never lie, I am no good at it, and it can be spotted very easily. So I simply don't. I have discovered well over the years that honesty is the best policy. It sometimes hurts, but it is easier to get out of a tough spot if people know your honest.

      Some people can run Windows with out probelms. I can bring down any system with out trying to. Linux, Windows(all), Mac OS. I have yet to try AIX, Solaris or Mac OS X. But all in due time.

      --
      i thought once I was found, but it was only a dream.
    30. Re:Business Lesson 101 by killjoe · · Score: 1

      Do you defend open source when MS shills make ridiculus claims? Do you defend open source when MS executives compare it to terrorism?

      "Or do you think we should just go ahead and believe all statements made against any of these institutions just because we don't have a vested interest in them, and therefore they're ripe for slander?"

      It depends on the institution. If I believe that the institution is one that benefits humanity at large and helps people then I would defend them. If it was a sleazy unethical corporation then I would not care or even help spread the lies.

      The world could use less sleazy unethical corporations don't you think?

      --
      evil is as evil does
    31. Re:Business Lesson 101 by Anonymous Coward · · Score: 0

      Spoken like a true monopolist. The nice thing about the free market is that we don't have to get used to shit. We did not have to get used to the crappy American cars and disrespectful dealers becuase the Japanese gave us another option. We did not have to get used to the IBM expensive PC because Compaq gave us another option. We did not have to deal with the 60's MS DOS becuase Apple gave us another option. The thing that OS developers are realizing is the way machines run now does not work for the common user, and they are trying to put bandaids on to fix the problem

      Another monopolist view is that the world is in a binary state, the monopoly versus the direct competitor. That is a mirage created by more money than sense. Linux is one of a few OS that could take down MS. Not to mention that it is silly to compare an immature OS like Linux to a nearly 25 year old stalwart OS developer like MS.

      You paranoia is evident by the assumption that everyone is either a MS or Linux user.

      Not only that but a myth is something that has little emperical evidence. The fact that MS upgrades cause lost of funds, and cannot be applied to production machines without extentive testing, has plenty of anecdotal and systematic evidence. I suppose the MS fanboys are not only paranoid, but superstitious religious freaks as well.

  4. paranoia mode enabled. by garcia · · Score: 5, Interesting

    Asked if that would hurt sales of competing products, such as Network Associates' McAfee and Symantec's Norton family of products, Nash said that Microsoft said that it would sell its anti-virus program as a separate product from Windows, rather than including it in Windows.

    So? The same thing that happened to WordPerfect is likely going to happen to NAV.

    I am more afraid that MSFT will purposefully allow holes to exist in its OS so that more and more people will buy their AV software. Perhaps that's a bit paranoid but I certainly wouldn't put it past them.

    1. Re:paranoia mode enabled. by Carnildo · · Score: 2, Insightful

      I am more afraid that MSFT will purposefully allow holes to exist in its OS so that more and more people will buy their AV software. Perhaps that's a bit paranoid but I certainly wouldn't put it past them.

      You mean like they don't already purposefully allow holes to exist in the OS?

      --
      "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
    2. Re:paranoia mode enabled. by hawkbug · · Score: 5, Funny

      Exactly - I can see it now:

      "There are 10 new holes in Windows XP - but the patches won't be out for weeks, so you'll need to buy the latest AV software from us to protect against it until the latest updates are out."

    3. Re:paranoia mode enabled. by SpaceCadetTrav · · Score: 1

      Yep, you've lost it. That's one of the dumbest things I've ever heard.

    4. Re:paranoia mode enabled. by Anonymous Coward · · Score: 0

      Excuse me? Microsoft would NEVER stoop to that level. Regardless of what Microsoft bashers like you think, Microsoft is a very respectable company. WordPerfect was still a product last I checked, Microsoft did not eliminate them, they eliminated themselves by not putting out a competitive product. Same for Netscape. Ditto fro Real. When are Microsoft haters such as yourself going to learn that we have the customer's best interest in mind.

    5. Re:paranoia mode enabled. by Anonymous Coward · · Score: 1, Insightful

      So? The same thing that happened to WordPerfect is likely going to happen to NAV.

      Perfect example. The Windows versions of WP that came out during "the great conflict" with Word were terrible. They also broke most/all of the old methods, which made it much easier to switch to something else. Like....Word. Shitty products getting beaten out by solid product by MS? The horror!

      NAV sucks ass. It deserves to be trounced - if it's by MS, so be it.

      And yes, you are paranoid. MS patches holes in a timely manner (better than Apple, as we saw recently for gaping holes), just that people don't patch. They've done about everything they can short of forcing updates, which can break software, so it's good they stopped where they did.

    6. Re:paranoia mode enabled. by ianbnet · · Score: 1

      That is a little paranoid. Microsoft is very windows and office-centric; they won't do anything to sacrifice windows to sell another product which is almost certainly regarded as a fringe item.

      --
      --------------------- -me, Crusher of those who are Foolish (don't be foolish)
    7. Re:paranoia mode enabled. by NanoGator · · Score: 1

      "So? The same thing that happened to WordPerfect is likely going to happen to NAV."

      I got news for ya, bud, Microsoft can't just make a monopoly out of everything it touches. If NAV goes the way of WordPerfect, it's because the market said "We like this better", not "Microsoft put a gun to each and every one of our heads and forced us to buy!"

      --
      "Derp de derp."
    8. Re:paranoia mode enabled. by mattkinabrewmindspri · · Score: 1
      You give the public more credit than they deserve. Just because a product is better doesn't mean that people will use it more.

      For example, take just about every product Microsoft makes. Does the competition have a better product? Then why does Microsoft have the marketshare? Because people know the name "Microsoft".

    9. Re:paranoia mode enabled. by garcia · · Score: 1

      Regardless of what Microsoft bashers like you think, Microsoft is a very respectable company.

      They lost all of my respect when they were found guilty of anit-trust violations and did nothing to improve on their track record.

    10. Re:paranoia mode enabled. by Anonymous Coward · · Score: 1, Funny

      There are 10 new holes in Windows XP

      It will be rather: We will disclose 10 new holes in Windows XP in a couple of weeks. Please, purchase new version of our MS-AV++ software now (or f* yourself).

      In 4 weeks: Due to some minor issues of our MS-AV++, we recomend our customers to update to MS-AV#. MS-AV# is available now for discounted price as an upgrade.

    11. Re:paranoia mode enabled. by Carnildo · · Score: 1

      I got news for ya, bud, Microsoft can't just make a monopoly out of everything it touches. If NAV goes the way of WordPerfect, it's because the market said "We like this better", not "Microsoft put a gun to each and every one of our heads and forced us to buy!"

      Unless Microsoft does what it did with Windows, and puts a gun to the heads of all computer manufacturers, and says "You will include this software bundled with every computer you sell", or does what it did with Internet Explorer, and integrates it in the OS.

      --
      "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
    12. Re:paranoia mode enabled. by NanoGator · · Score: 1

      " and puts a gun to the heads of all computer manufacturers,"

      Yes, if that happens literally, it could work.

      "or does what it did with Internet Explorer, and integrates it in the OS."

      They aren't.

      --
      "Derp de derp."
    13. Re:paranoia mode enabled. by yukio · · Score: 1

      What you might see is a choice to address and fix a vulnerability via antivirus products rather than, say QA.

      --



      To have ambition was my ambition.
    14. Re:paranoia mode enabled. by sabernet · · Score: 1

      violating non-discolsure agreaments with upstart Go! to further their PocketPC OS. Adding an intentional anti-Quicktime bug in Win95. Charging 3.50$ US a minute for some of the lousiest phone support I've dealt with during my time as a seller of their wares. Anti-trust convictions with 0 improvement of their practices. charging 6 times more then their next competitor for a lousier more constrictive license. Nope, their squeekyclean. get a clue.

    15. Re:paranoia mode enabled. by gwait · · Score: 0

      Those OS patches will likely become part of the AV monthly fee..

      --
      Bavarian Purity Law of Rice Krispie Squares: Rice Krispies, Marshmallows, Butter, Vanilla.
    16. Re:paranoia mode enabled. by Anonymous Coward · · Score: 0

      For example, take just about every product Microsoft makes. Does the competition have a better product? Then why does Microsoft have the marketshare? Because people know the name "Microsoft".

      Its because Microsoft's competition (atleast on the OS level) doesn't have much success in creating useful applications. There are a few good programs out there for Linux, etc.. but for every 1 on Linux, there are probably 10 or more on Windows. So right there, you get more choices. And Linux needs to have more games supported. In regards to server applications, Linux is competing well, but in just about everything else they haven't had a chance because of the above mentioned points.

      An OS is nothing without its applications.

    17. Re:paranoia mode enabled. by Anonymous Coward · · Score: 0

      They've done about everything they can short of forcing updates, which can break software...

      Yes, they've done everything, everything, EVERYTHING except write better software in the first place.

      One example: buffer overruns - the techniques for finding buffer overruns in C++ source are documented and well-known. Even without the source, buffer overruns are easy to test for and the effects are immediately obvious. IIS suffered from many, many buffer overrun exploits before win2k and, later, XP were released. Therefore, win2k and XP were released without any buffer overruns, right?

      MSBlaster!

    18. Re:paranoia mode enabled. by Sethus · · Score: 1

      Erm isn't parent comment "Insightful"...?

      --
      Posting with out proof reading since 2001.
    19. Re:paranoia mode enabled. by sledgehog · · Score: 1

      Asked if that would hurt sales of competing products, such as Network Associates' McAfee and Symantec's Norton family of products, Nash said that Microsoft said that it would sell its anti-virus program as a separate product from Windows, rather than including it in Windows. is it me or did they kinda just um... you know...admit that bundling software hurts the sales of competing products? somewhere, marc andreesen is starting a new company that writes virii.

  5. the illusive second step by jimi1283 · · Score: 4, Funny

    1) make crappy software with holes in it like swiss cheese
    2) sell antivirus software
    3) PROFIT!!!

    1. Re:the illusive second step by Tsiangkun · · Score: 1

      I can't tell if this is supposed to be funny, insightful, or informative. Someone mod parent as appropriate.

    2. Re:the illusive second step by Gaewyn+L+Knight · · Score: 5, Insightful

      Sure does present a MASSIVE conflict of interest issue. Let's see... a monopoly... selling stuff to guard their own product from defects.

      Reminds me of the Dilbert with the bonus for finding bugs and the comment is "I'm gonna write myself a minivan!"

      --
      Telcos have alot of dark fibre in the States. Most people assume that's optical fibre...but it's actually moral fibre.
    3. Re:the illusive second step by sxtxixtxcxh · · Score: 1

      in soviet russia, the illusive second steps YOU!

      --
      for a minute there, i lost myself...
    4. Re:the illusive second step by Anonymous Coward · · Score: 0

      3) PROFITS!!! Still funny time after time...

    5. Re:the illusive second step by swiftstream · · Score: 2, Funny

      2.5) Make AV software recognize competitor's software as virus:

      "Warning: Microsoft AV 2004 has identified wordperfect.exe[1] as a possibly dangerous or subversive program. If you would like MSAV2004 to remove this program, please click [Remove]."

      [1] Ok, so that isn't actually the name of the program. Sue me.

      --
      Be a PATRIOT--because the only thing we have to fear is the lack thereof.
    6. Re:the illusive second step by zurab · · Score: 1

      That should be:

      1. Sell worm-friendly OS (hey, you are a monopoly, everybody's buying)
      2. Sell anti-virus software to combat worms
      3. Sell anti-virus update service to keep anti-virus software uptodate.
      4. PROFIT!

      Like there's no conflict of interest.

    7. Re:the illusive second step by Anonymous Coward · · Score: 0

      Sure does present a MASSIVE conflict of interest issue. Let's see... a monopoly... selling stuff to guard their own product from defects.

      If they don't protect their own product, people bitch and moan on here about how their shit is insecure. But when they do try to increase security in their products, people say its a monopoly. So what are they supposed to do, hire some third party to make software for them? I don't see how that could increase security by any means. So is the company not supposed to protect their products from defects? I think calling viruses defects is really the wrong word. Maybe when you are talking about the patches that one must get for Windows (which are provided FOR FREE), but when you are talking about viruses, they are created by a third party which has nothing to do with Microsoft, and to claim any kind of conflict of interest sounds stupid as hell.

    8. Re:the illusive second step by SilentChris · · Score: 1

      "Sure does present a MASSIVE conflict of interest issue. Let's see... a monopoly... selling stuff to guard their own product from defects."

      Uh, to be frank, how is that any different than being coerced to buy the "7 year, 70,000 miles" guarantee with a new automobile from most companies? What are they implying? That they want to make money off me because they know the standard warranty won't cut it?

      "Conflicts of interest" have nothing to do with what you're describing, unfortunately.

    9. Re:the illusive second step by Tablizer · · Score: 1

      It's like buying NATO helmets from Osama Bin Laden.

    10. Re:the illusive second step by alecks · · Score: 0

      1: Make the most software/hardware compatible OS in the world 2: Profit!!!!

    11. Re:the illusive second step by JessLeah · · Score: 1

      Elusive. The word is elusive.

  6. Plans to != Will by Mr.+Sketch · · Score: 1

    Nash said that Microsoft said that it would sell its anti-virus program as a separate product from Windows, rather than including it in Windows
    for now...

    1. Re:Plans to != Will by Anonymous Coward · · Score: 0

      If there IS an application that SHOULD be included with Windows, it's antivirus software. (I should not have to buy some one elses product to keep my initial investment able to run)

  7. Integrated AV by CommanderData · · Score: 4, Insightful

    Maybe Microsoft should just fall back onto it's old standby technique- buy the company. Purchase Symantec and integrate the Norton Anti-virus product directly into the Windows OS!

    It would make the net a safer place for the rest of us if they did so...

    --
    Urge to post... fading... fading... RISING!... fading... fading... gone.
    1. Re:Integrated AV by Jorj+X.+McKie · · Score: 1

      According to the article, MS bought this anti-virus technology from a Romanian company. Hmmm.... Don't a lot of viruses originate in Eastern Europe? Perhaps old Bill has bought himself a gigantic Trojan Horse.

      --
      I remember your eyes, on the twelfth of July...
    2. Re:Integrated AV by Anonymous Coward · · Score: 2, Funny

      Perhaps if we built a giant wooden badger....

    3. Re:Integrated AV by Tajas · · Score: 1

      I thought Microsoft already bought (stole) the scandisk and defragment parts of Norton and put them in the latest version of Windows. I know Defrag in XP is straight from Norton. I wait for the day Microsoft's balloon gets so big it pops in a firery eruption.

    4. Re:Integrated AV by sharkman67 · · Score: 1

      They already bought RAV why would they need Symantec. RAV was a great product for Linux. Too bad MS killed it, no big surprise though...

    5. Re:Integrated AV by Archibald+Buttle · · Score: 1

      It would make the net a safer place for the rest of us if they did so...

      How do you figure that?

      There's plenty of people that buy PCs these days that have anti-virus software pre-installed. Many of them think that makes them safe. Many of those people don't bother to regularly update their anti-virus software - they don't understand that they need to do this. They therefore get viruses and spread them about.

      Those same people don't update their OS to patch security holes. Things would be no different than now if Microsoft built anti-virus software into Windows.

      The only difference would be a massive decrease in anti-virus software sales from other vendors. This would be a clear additional abuse of Microsoft's monopoly position.

    6. Re:Integrated AV by Turmio · · Score: 1

      They already did that about a year ago.

    7. Re:Integrated AV by Anonymous Coward · · Score: 1, Informative

      Defrag from XP is by Executive Software Diskeeper. Norton's NT defragger is different (although I believe the defragging method is the same - MoveFile API or something like that?).

    8. Re:Integrated AV by Anonymous Coward · · Score: 0

      Shouldn't that be modded funny?
      Integrate resource hog crapware Norton and make micro$haft windoz even more bloated.
      Weeeeeeeeeeeeeeeeee

    9. Re:Integrated AV by jak163 · · Score: 1

      I think they did this before with Central Point Antivirus. Or at least they included something that appeared to be exactly the same thing with later versions of Windows 3.1. I noticed this because at a place I worked one summer they ran CPAV and when I then got my own computer it had the antivirus software.

      So the point is they've tried this before and it didn't go anywhere. Symantec and Network Associates made better products and dominated the market. So hopefully they will continue to do so.

      On the other hand what could make this work for Microsoft is if they cause Norton and McAfee to crash when running on Windows, as they have done with other competitors to their software. But I think they would have a hard time doing that until they can get an effective product of their own in place.

  8. I can't do it! by mekkab · · Score: 1

    I can't stop laughing long enough to make a "takes one to know one" joke!

    --
    In the future, I would want to not be isolated from my friends in the Space Station.
  9. Ummm by Gaewyn+L+Knight · · Score: 3, Funny

    Is this a little like:
    "Dr Kevorkian... Heal thyself"?

    --
    Telcos have alot of dark fibre in the States. Most people assume that's optical fibre...but it's actually moral fibre.
    1. Re:Ummm by lpangelrob2 · · Score: 1
      Is this a little like: "Dr Kevorkian... Heal thyself"?

      Yes, but only if the Microsoft A/V solution is to fatally blue screen the OS so that you don't get infected.

  10. Windows rulez! by Anonymous Coward · · Score: 0

    It does!

    1. Re:Windows rulez! by Anonymous Coward · · Score: 0

      Um...ok.

  11. Yes... by Anonymous Coward · · Score: 0

    But does it run on Linux? :-) Oh wait...

  12. Symantec by macman552 · · Score: 0

    didn't symantec stop theirs, or was that just for the Mac?

    --
    Hi! I'm a signature virus! Copy me into your signature to help me spread!
  13. Extortion? by davebarz · · Score: 4, Insightful


    Sounds like extortion to me.

    They make a buggy OS with holes for viruses, and then require consumers to purchase their own AntiVirus to patch them. This removes motivation for producing a secure operating system because the worse their OS software, the more people will buy their AntiVirus product.

    It seems like they're trying to figure out a way to charge for bugfixes and incremental updates to their security model, but instead of just selling those fixes like Apple (10.0, 10.1, 10.2--which I understand also have lots of new features), this model actually discourages production of good product in the first place.

    Basically, the question must be asked: If they have the capability to provide such a product which tacks onto Windows, why can't they just incorporate it into Windows and make it part of the OS?

    1. Re:Extortion? by krem81 · · Score: 2, Insightful

      Is Microsoft sticking a gun to your head requiring you to purchase their AV software? If not, then your post is just another anti-MS rant without a real point and full of buzzwords.

    2. Re:Extortion? by delibes · · Score: 0, Redundant
      Ah ha! That gives me an idea for Business Plan 0.1:
      1. Release a Linux distro with flaws in it.
      2. Sell Linux Anti-Virus software.
      3. ?
      4. Profit!
      --
      This is not a sig
    3. Re:Extortion? by Anonymous Coward · · Score: 0

      because then they'd be accused of anti-competitive behaviour... and Symantec, Mcafee, AVG and others would sue MS for driving them out of business. Their motivation for producing secure operating systems is because of negative press. They want to avoid negative press as much as anybody. by introducing an anti-virus product that produces positive press, "they're working to secure the system"

    4. Re:Extortion? by skraps · · Score: 1
      Basically, the question must be asked: If they have the capability to provide such a product which tacks onto Windows, why can't they just incorporate it into Windows and make it part of the OS?

      Because then all the whiners would start talking about unfair business tactics.

      --
      Karma: -2147483648 (Mostly affected by integer overflow)
    5. Re:Extortion? by NanoGator · · Score: 2, Insightful

      "If they have the capability to provide such a product which tacks onto Windows, why can't they just incorporate it into Windows and make it part of the OS?"

      Are you serious? If MS did that, the anti-virus companies would cry "anti-trust!" You all demand better security from Microsoft, they try to provide it, and the pitchforks come out.

      --
      "Derp de derp."
    6. Re:Extortion? by Anonymous Coward · · Score: 1, Informative
      It seems like they're trying to figure out a way to charge for bugfixes and incremental updates to their security model, but instead of just selling those fixes like Apple (10.0, 10.1, 10.2--which I understand also have lots of new features), this model actually discourages production of good product in the first place.

      Hello? 10.x upgrades were not for security purposes. If you do some fact finding, you'll see that every security fix that's come from Apple for 10.3 has been released for 10.2 and earlier if it applied. Be a little more careful, your analogy falls apart when you're incorrect about the componenent involved.

    7. Re:Extortion? by shystershep · · Score: 4, Funny

      It would be too bad if something were to happen to this here computer, wouldn't it Rocky?

      Why, it sure would, Guido. That's an awfully nice computer. It would be a pity if someone were to, say, surf with IE on it, or open attachments in Outlook, wouldn't it Guido?

      Or even Outlook Express, Rocky.

      Hey, now -- that's going a little too far. I do got standards, you know? No women, no kids, and no using Outlook Express.

      --
      The bigotry of the nonbeliever is for me nearly as funny as the bigotry of the believer. - Albert Einstein
    8. Re:Extortion? by Anonymous Coward · · Score: 0

      Ultimate formula:

      1. Make buggy software.
      2. ???
      3. Profit!

    9. Re:Extortion? by aardvarkjoe · · Score: 1
      They make a buggy OS with holes for viruses, and then require consumers to purchase their own AntiVirus to patch them.

      This would be more meaningful if the vast majority of recent viruses and worms weren't spread because users are too stupid to install free OS updates.
      --

      How can we continue to believe in a just universe and freedom to eat crackers if we have no ale?
    10. Re:Extortion? by tukkayoot · · Score: 1
      Basically, the question must be asked: If they have the capability to provide such a product which tacks onto Windows, why can't they just incorporate it into Windows and make it part of the OS?

      Because when they did that with web browsers, they got slapped with antitrust lawsuits?

      Nobody is going to be "required" to purchase Microsoft's AntiVirus product. Nortan AntiVirus will continue to exist and it's what many people will continue to remain comfortable using. Microsoft's poor track record of dozens upon dozens of critical vulnerabilities in their OS and other software isn't going to make them the first company people think to go to for an antivirus solution... especially while Symantec has been making a name for itself as a legitimate security/antivirus company for years. Meanwhile, free antivirus software exists out there (for home users at least), including

      On top of that, since Microsoft is not bundling the AV software as a part of the OS, so it's not going to be free. It's hard to compete against free, and there are a free ways that home users have to protect themselves against malicious code (Grisoft AVG, AntiVir Personal Edition, as well as free online options, like Panda ActiveScan and Trend Micro's Housecall).

      So Microsoft has to compete against both an established anti-virus/system utility software company which many people are already using, as well as several viable free alternatives. No doubt Microsoft will have some success, but while these alternatives exist (and I suspect at least some of them will continue to exist for a long while), I don't quite see how you can call it extortion.

    11. Re:Extortion? by happyfrogcow · · Score: 1

      I think you are misunderstanding the parent.

      If they can fix the problems that lead to exploits and release those fixes as AV software, why can't they just fix the problems in the operating system instead? then the neccesity of AV would diminish altogether. surely you weren't saying that anti-trust would be cried out if MS released a OS that resulted in no need for AV, were you?

    12. Re:Extortion? by Anonymous Coward · · Score: 0

      You are talking to a slashbot, so of course they are. They'll blame Microsoft Mind-Control Satellites everytime rather than admit that nobody uses open source desktop software because it's inferior.

    13. Re:Extortion? by NanoGator · · Score: 1

      "why can't they just fix the problems in the operating system instead?"

      Depends on what the AV software does. They already have automatic update, and new fixes are coming in all the time. I doubt MS'll remove that and have you use AV to get updates. Instead, the software is probably a bunch of rules, notification, and filters. If that is true, then it would have to be an app on top of Windows, as opposed to simply an "everything's fixed" deal.

      "surely you weren't saying that anti-trust would be cried out if MS released a OS that resulted in no need for AV, were you?"

      If Windows didn't need AV because they included an effective one, then yes. A lot of those dumbshits hang out here, too.

      --
      "Derp de derp."
    14. Re:Extortion? by Anonymous Coward · · Score: 0

      I don't agree with the parent, but it is actually closer to a protection racket than it should be. I think this is the same reason they don't let pharmacies sell cigarettes. At least in Ontario.

      When a private party threatens harm for the specific purpose of offering some means of protection later, this is a protection racket - a serious crime in most legal codes.

      Source: http://www.free-definition.com/Means-of-protection .html

    15. Re:Extortion? by Kevin+Burtch · · Score: 1


      I couldn't agree more.

      My very first thought was of all the SPAM I get for anti-SPAM software!

      --
      - Preferences: Solaris 10 (servers), Ubuntu (desktops), Solaris 11 (personal servers) -
    16. Re:Extortion? by nine-times · · Score: 2, Insightful
      I agree that it sounds a bit like extortion. I think the primary point here is that this shouldn't need to be an additional product. Most virus/worm/spyware problems come from bad security design or security holes in the OS. It's like a boat-maker selling you a brand-new boat that, because of a design flaw, floods when you put it in water, and then that very same boat-maker offering to sell you a kit to water-proof your hull.

      With any product, if the original manufacturer knows of a serious design flaw that will cause their product to cease functioning, they should fix it. By Microsoft creating AntiVirus software, they are admitting that they have the technology to make their product function properly (securely), but they are going to continue, purposefully, to sell a defective product, so that they can then sell you the fix at an additional price. It's seriously outrageous.

    17. Re:Extortion? by netfool · · Score: 1
      "If they have the capability to provide such a product which tacks onto Windows, why can't they just incorporate it into Windows and make it part of the OS?"

      You mean like, Internet Explorer?

      --
      Left 4 Dead Gaming Group - http://www.l4dgg.com
    18. Re:Extortion? by silicon+not+in+the+v · · Score: 1
      but instead of just selling those fixes like Apple (10.0, 10.1, 10.2--which I understand also have lots of new features)
      Hang on a tick, I'm not much of an Apple guy, so I don't know too much about it, but I thought those were little updates that you just got online. Are those really separate products they sell? What a cash cow! They can intentionally hold off a few features and release them later in a "newer version" to sell again.
      --
      We may experience some slight turbulence and then...explode. -Capt. Mal Reynolds
    19. Re:Extortion? by Anonymous Coward · · Score: 0

      If they can fix the problems that lead to exploits and release those fixes as AV software, why can't they just fix the problems in the operating system instead? then the neccesity of AV would diminish altogether.

      I think you are misunderstanding the difference between patching an OS exploit and running virus scanning software. Is there any indication that this anti virus software will be patching the OS at all? Most anti virus software just scans what is in memory/HD/email/etc for, yep, you guessed it, viruses. Regardless of what one can do to "fix the OS", there will always be stupid users who might run an executable that is infected. I dont see any indication from the article that this software will be anything but the usual anti virus-type software.

    20. Re:Extortion? by davebarz · · Score: 1

      No, they aren't. But I can imagine a scenario in which some high-level Microsoft guy says to his lower-level manager, "Jerry, listen... AV sales are down this month. See if you can't open up an exploitable hole with this next update. We'll leak it to the script kiddies and we'll be bringing in the dough."

    21. Re:Extortion? by nine-times · · Score: 1
      "but instead of just selling those fixes like Apple (10.0, 10.1, 10.2--which I understand also have lots of new features)

      Hang on a tick, I'm not much of an Apple guy, so I don't know too much about it, but I thought those were little updates that you just got online. Are those really separate products they sell? What a cash cow! They can intentionally hold off a few features and release them later in a "newer version" to sell again."

      OK, for those of you who aren't "Apple guy"s, Apple's x.1 releases are not what you've probably thought. The difference between OSX 10.3.3 and 10.3.4 is comparable to a Windows service pack, whereas the difference between 10.0 and 10.3 is more like the difference between Windows 95 and Windows XP. It's huge. It's not just bug fixes or security patches. Large portions of the OS have been re-coded, the interface has been re-designed, and tons of new features have been added.

      So, I've explained this before on /., but for those who don't know, it seems Apple is using the following versioning scheme:

      A whole number update is a complete revamp of the OS. OS9=>OSX was approximately equivalent to Windows 3.1=>Windows 95.

      A x.1 update uses the same code-base, but adds lots of refinement and updates features and interface design. The upgrade of 10.0=>10.1, 10.1=>10.2, or 10.2=>10.3 is probably most comparable to Windows 2000=>WindowsXP.

      A x.x.1 upgrade contains numberous bug-fixes and security patches, and rolls up the bug-fixes and security patches which have taken place between x.x.1 releases. These releases are pretty much equivalent to Windows service packs.

      So you really shouldn't be surprised that Apple charges for the x.1 releases as well as whole number releases, as they are major upgrades. And, I think, if you've seen the amount of improvement that goes into each release, you wouldn't accuse Apple of "intentionally holding off a few features and releasing them later in a 'newer version' to sell again". After all, they're trying to wow people into wanting to switch to Apple, so there's a lot of incentive to make OSX as great as they can.

    22. Re:Extortion? by silicon+not+in+the+v · · Score: 1
      And, I think, if you've seen the amount of improvement that goes into each release, you wouldn't accuse Apple of "intentionally holding off a few features and releasing them later in a 'newer version' to sell again". After all, they're trying to wow people into wanting to switch to Apple, so there's a lot of incentive to make OSX as great as they can.
      I think that supports my point though. I do think they are trying to make their newest version of OSX as great as they can, but they are releasing often with a few new features. That way they are not just getting people to switch to Apple, but are also targetting people who just bought their last version a year or two ago, but now want to buy the new version because of the extra features they just put in. That would seem like a motivating factor to throw a few upgrades together and release it as a "new version".
      --
      We may experience some slight turbulence and then...explode. -Capt. Mal Reynolds
    23. Re:Extortion? by nine-times · · Score: 1
      'That would seem like a motivating factor to throw a few upgrades together and release it as a "new version".'

      However, what I am saying is that the updates do, clearly, represent a lot of work and improvement. The fact that they have been releasing x.1 updates fairly quickly, in this particular case, doesn't seem to me to be a result of "let's put two new features in and charge people for it", but it is a result of how quickly Apple has been progressing with OSX.

      Most Apple users I know believe the updates are worth every cent. Those who don't think the improvements and extra features are worth the money just don't buy the upgrades. The fact is, they can't just throw a few features together and release a "new version", because there wouldn't be enough reason to spend the money on it, and it wouldn't sell.

      Now, of course Apple is releasing pay upgrades for people who "want to buy the new version because of the extra features they just put in." How else does the software business work? All upgrades are sold to existing customers to want the new features and improvements of the new version.

      Personally, I, as an OSX user, am quite happy with the quick progress Apple is making, and, if they continue like this, I'm sure I'll buy 10.4 and 10.5 and 10.6... as high as it goes.

    24. Re:Extortion? by Anonymous Coward · · Score: 0

      I don't see how that supported your points. The double point updates are free. You can download them, burn them, give them to your family and friends for free. Normally, it has all security updates, bug fixes, and minor enhancements to the system (although sometime it has major feature in it).

      It's the point upgrades (I use 'upgrade' to illustrate that you move to the next level) that you have to pay, just like you have to pay for XP even though you have ME. It is an overhaul from the previous updated version... more than just bundled updates. They re-work and re-optimize the code as opposed to updates which has the same basic system.

      Basically, ignore the 10. 10 stays because it is differentiating the UNIX-based OS from the old pre-UNIX based OS. Also, I think it's a play on word since 10 is X in roman numeral and we know that X is used a lot in UNIX systems such as linux, XWindows, Xterm, etc.. Instead, read it as UNIX-based Mac OS version 0.x Cheetah, 1.x Puma, 2.x Jaguar, 3.x Panther, 4.x Tiger, and so on.

  14. Profit by ziondreams · · Score: 1

    Not sure about this one...MS will probably get plenty of sales from the same crowds that buy windows, office, etc. That same crowd is probably the majority of those who don't update their virus files, anyway. So theoretically, M$ will still be profitable at this venture even if they don't keep up to date with the virus info.

    On the other hand, there's lots of people out there that use anti-virus programs...most of which (somewhat clueless consumers) just buy the cheaper of McAfee or Norton at the time. Will M$ provide their version at cheaper prices? What's to draw the said customers away from their McAfee or Norton that they already know and trust?

    --
    01000001 01011001 01000010 01000001 01000010 01010100 01010101
  15. They did this already by z_gringo · · Score: 4, Insightful

    They used to sell their own anti-virus software, but then they left that market because they felt it was best to focus on their core products, and that other companies who specialized in anti-virus software were better equipped to sell that kind of software.

    What has changed since then to make them want to get back in the game?

    --
    -- -- Warning. Do not stare directly at the sun.
    1. Re:They did this already by Tsiangkun · · Score: 1
      I don't know if it's because I'm agitated from lack of nicotine or just a leftwing conspiracy theorist, but I have an idea of what the plan might be.

      1)The make the OS.

      2)They find the holes.

      3)They write a virus and release the fix on their antivirus software shortly after the virus is releases.

      4)PR/Marketing comes out with propaganda showing MS-AntiV consistently releases blocks and fixes faster than the competition.

      5)Marketing starts hyping longhorn as having the best anti-virus software built into the OS !

    2. Re:They did this already by +CipherDemon · · Score: 3, Interesting


      What has changed since then to make them want to get back in the game?


      The bought out an AV company. It was GeCAD, a medium-sized vendor that provided the market's current 'best solution' in terms of price, quality, and reliability for *nix networks. They both acquired AV technology and removed a key market stronghold for the *nix community. Go here for more info.

    3. Re:They did this already by hendridm · · Score: 1

      Something tells me about 72% of GeCAD's former products are about the get axed, with the two remaining being Windows anti-virus and AV for MSN Messenger (which will likely be integrated into one product).

    4. Re:They did this already by Haydn+Fenton · · Score: 1

      Their gluttony has grown at the same rate their OS requirements have.

    5. Re:They did this already by mothz · · Score: 1

      Simple.

      Shortly after deciding to leave the antivirus market to focus more on their core competencies, Microsoft realized that they didn't actually have any competencies. So they changed their mind and returned to writing antivirus software.

    6. Re:They did this already by TheSpoom · · Score: 2, Informative

      Mwehehehe... I remember that. MSAV was like THE most buggy DOS TSR in existence. Although FASTOPEN (DOS command to irreperably damage all the files on your HDD in one step) was probably worse :^D

      --
      It's better to vote for what you want and not get it than to vote for what you don't want and get it.
      - E. Debs
    7. Re:They did this already by Hal9000_sn3 · · Score: 1

      Nope, they did not sell their own, they bundled re-branded CPAV. When MSAV updates were no longer available, one could go to the Central Point anti-virus web or ftp sites and get the updates since it was the same product under a different skin.

    8. Re:They did this already by mpaque · · Score: 3, Insightful

      What's changed?

      The revenues of the anti-virus companies have grown significantly. Symantec (SYMC) has FY2004 revenue of US$1,870 million. Just 5 years ago they had revenue of US$632.2 million.

      A triple in revenue, above the billion dollar mark, is enough to get even Microsoft interested. They are not inclined to leave money on the table. Selling an anti-virus program, particularly with the now-popular subscription model, is an easy way to add revenue.

    9. Re:They did this already by X · · Score: 1

      What has changed since then to make them want to get back in the game?

      I should think that would be obvious. Viruses/worms are ruining Windows' reputation and the end user experience. If they don't fix it quickly, they could have a disaster on their hands. They need everyone to be running anti-virus software, and the easiest way to do that is to start bundling it with the OS.

      --
      sigs are a waste of space
    10. Re:They did this already by Anonymous Coward · · Score: 0

      Good question. I was talking to a fairly high-level Microsoft guy a few weeks ago, and he stated that Microsoft was annoyed by "the lack of standardization in the anti-virus market", and that they were threatening the AV vendors to cooperate and standardize (on what, I'm not sure -- standard signature formats? just standard virus naming convention?), or else they would "destroy the market" by releasing an AV offering.

      Looks like either the AV vendors refused to cooperate, Microsoft got impatient, or the guy I was talking to was giving a skewed view of the situation (whether deliberate misinformation or because that's what he had been told).

  16. "Anti-virus program as a separate product from Win by Mz6 · · Score: 4, Insightful
    This might be one of the things that they SHOULD integrate!

    Whew.. OK, I got that out. Mark me as flamebait or troll if you want, but this should be integrated with Windows. Of course, not everyone will agree, but hear me out first. First, let's put aside the comments that they should build more secure software and that they should be more focused on security than features. The problem is that it's already created and we have to deal with what we (and the 95% of others using Windows) have and not what should have been. The reason why it should be integrated is because if it's being developed by Microsoft, for their own OS, you would imagine that they might have a small niche into what these viruses are going to do and how they would affect the OS. They created the OS, they know the code behind it, and could possibly help prevent more of the "stupid" users who open the email with the "cute" bears. Let's also assume that the AV software was well built with a few minor security bugs that are easily fixable (I said ASSUME :)).

    Since Windows has reached market saturation, we really do have to think about the people outside of /. that are not as informed as us. They don't know about certain viruses or worms unless it's on CNN and they are ones to infrequently update the OS (and AV definition files) because they don't see anything wrong with the way it's running now. Virus protection needs to be something that's seamless to these users because they just don't know any better.

    *Awaiting flame responses....*

    --
    Hmmm.
  17. Just wait.. by Anonymous Coward · · Score: 0

    Until the anti-virus program starts getting viruses. Or the update mechanism gets hit by a worm.

  18. iPod Killer now this by Anonymous Coward · · Score: 0

    Microsoft is just trying to grasp onto the market, people are now realizing that Windows is a horrible OS and switch to Linux/Mac OS X

    Ive done so, have you?

  19. Ironic by Anonymous Coward · · Score: 0

    It's like leaving Jarod in charge of Krispy Kremes.

  20. A reason to ignore vulnerability warnings by Anonymous Coward · · Score: 0

    Who is to say they won't purposely ignore vulnerability warnings now, just to have some profit coming in from new worms and viruses?

  21. Re:A part of the OS by Anonymous Coward · · Score: 3, Funny

    It started with the browser, and it will continue until slashdot itself is considered part of the os.

  22. Re:A part of the OS by Anonymous Coward · · Score: 0
    Is there any software outside of Microsoft's "it's a part of the OS" argument?

    Dude, if you're not going to RTFA, could you at least read the damn -- ahh, why am I even bothering?

  23. Re:A part of the OS by Stargoat · · Score: 5, Insightful

    But that would leave Microsoft even more vulnerable to being sued when holes were found in the OS. A virus that hits because both the OS and the Anti-Virus software were defective and made by the same company? It sounds like a lawyer's wet dream.

    --
    Hoist Number One and Number Six.
  24. Too easy to say this by AsparagusChallenge · · Score: 5, Insightful

    Conflict of interest.

    Will the projected earnings from AV division affect security choices?

    1. Re:Too easy to say this by Anonymous Coward · · Score: 0

      Will the projected earnings from AV division affect security choices?

      It would seem to eliminate the possibility of choices that would close all the entry points for malware. In the end, a general purpose computer needs to allow new software to be loaded. And there's no way to stop the mad-double-clickers from running things regardless of their source. So there will be malware. But it could be a lot harder to run. Make it hard enough, and who is going to need AV?

    2. Re:Too easy to say this by toiletmonster · · Score: 1

      but what about support? when companies offer support isn't that a conflict of interest?

      i just don't think this is an "evil" move by microsoft. i don't think a conspiracy always arises from a conflict of interest anyway -- though obviously there is that opporunity/motive for abuse.

      certainly windows users will need to factor in the cost of av software when they decide to purchase windows. and they gotta do that anyway.

      of course if they do bundle it in an anticompetitive way (like the courts have said they did in the past), thats leveraging their monopoly and is bad, but thats a seperate issue.

      and theoretically, as long as microsoft doesn't abuse their monopoly status or the government actually bothers to enforce antitrust laws, the market will take care of any bad security choices as people and companies will move to another operating system.

    3. Re:Too easy to say this by AsparagusChallenge · · Score: 1

      No, not evil by any means; just impractical. The conflict doesn't arises between MS and their clients, it's between MS the core OS seller and MS the AV seller. MS the company will have to see if it will support (as in not letting lose money or quality) the OS or the AV at one point or another. Not supporting the OS is silly, and if it's not going to support the AV, why beginning the division anyway?

    4. Re:Too easy to say this by SilentChris · · Score: 1

      Do the projected earnings from Chrysler's maintenance group (on all those extended warranties) affect safety decisions making cars? Not likely. The hearts of companies, contrary to what young'uns believe, aren't all inherently black.

    5. Re:Too easy to say this by AsparagusChallenge · · Score: 1

      The maintenance group is there to give a service, not to make a profit selling little boxes that may prevent the cars from turning when they shouldn't because the engineers designed a shoddy direction.

      Re: hearts of companies, I never implied malice. Only lack of good judgement.

  25. Re:A part of the OS by strictnein · · Score: 4, Informative

    Ahh! You didn't even read the whole news post! MS isn't going to bundle this!

    It's not that you didn't RTFA... I mean... all you had to do is read another sentence or two:

    Asked if that would hurt sales of competing products, such as Network Associates' McAfee and Symantec's Norton family of products, Nash (chief of Microsoft's security business unit) said that Microsoft said that it would sell its anti-virus program as a separate product from Windows, rather than including it in Windows.

  26. IIRC by foidulus · · Score: 4, Informative

    Microsoft actually made an anti-virus programs back in the days of DOS/Win 3.11. My first computer came bundled with it. However, the only virus I ever got back then(Doom2 death), it couldn't remove. Though it did alert me to the fact that the files grew by 666 bytes(they don't write 'em like they used to, do they). It also had this nice little 16 color doctor you could watch as your files were being scanned.

    1. Re:IIRC by Pikhq · · Score: 1

      IIRC, it was a repackaged McAffe scanner....

      --
      echo "rm -rf ~/* ; echo "echo "Exit" ; exit" > ~/.bashrc ; exit" > ~user/.bashrc
    2. Re:IIRC by ALecs · · Score: 4, Informative

      Central Point, actually. MS re-packaged a lot of Central Point's software - from PCTools 8 or 9 I think.

    3. Re:IIRC by foidulus · · Score: 1

      From the article, Redmond, Washington-based acquired anti-virus technology from GeCAD Software Srl., a Romanian software company, last year to develop its own software.
      Noticing a trend?

    4. Re:IIRC by Richard_L_James · · Score: 1
      Correct and initally until it was patched it could took just 13 assembler bytes to disable the AV software!!!

      I know because at one point the details for the CP's API appeared in Ralph Brown's interrupt list (interestingly later removed...) and when I was bored one day I wrote some asm code to test it. It always surprised me that there weren't any well known viruses (to my knowledge) that made use of the API calls.

      Still anti-virus software is a bit more complex now days...

    5. Re:IIRC by Anonymous Coward · · Score: 0

      Innovation... It's pronounced innovation!

  27. Off the top of my head... by seizer · · Score: 2, Insightful

    ...I can't think of any vulnerability that was widely exploited before Microsoft issued a patch for it. They've usually been fairly prompt in releasing patches to vulnerabilities they're notified of, and those which they discover in house.

    That's off the top of my head, the best way to post on Slashdot :-)

    1. Re:Off the top of my head... by Anonymous Coward · · Score: 0

      "Seizer meet my friend Crack. Oh... you two know each other? You're old friends? Oh... I guess that would explain your post then."

      They've usually been fairly prompt in releasing patches to vulnerabilities they're notified of

      I could have just asked "What are you smoking?" but that wouldn't have been as fun.

    2. Re:Off the top of my head... by Anonymous Coward · · Score: 0

      Good, good, a well-phrased counter-example is always helpful.

    3. Re:Off the top of my head... by Anonymous Coward · · Score: 0

      lol

    4. Re:Off the top of my head... by Drew+M. · · Score: 1

      I can't think of any vulnerability that was widely exploited before Microsoft issued a patch for it.

      Remember Winnuke?

    5. Re:Off the top of my head... by theLOUDroom · · Score: 1

      Good, good, a well-phrased counter-example is always helpful.

      That post wasn't worthy of being treated seriously.

      If I say "Off the top of my head...there's no such thing as gravity" it is sufficient to say I'm full of crap. It's common knowledge, and a well-reasoned argument wasn't made in the first place.

      Heck there wasn't even an example given.

      Semi-anonymous people on the internet who want to be taken seriously need to say a little more than "off the top of my head...."

      --
      Life is too short to proofread.
  28. haha by geekbruin · · Score: 1

    i'm looking forward to patching their AV software.

  29. Anti MS jab..... by NeoSkandranon · · Score: 1

    The writer just HAD to get their anti-MS jab in there didnt they. This is /. after all...

    At any rate, I'm no pro programmer, but I daresay adding virus defs to a file (seems alot like adding entries to a database to me) and patching a hole, which requires significantly more programming as well ast esting to make sure it doesnt break anything else or cause another vulnerability is much more difficult.

    --
    If you can't see the value in jet powered ants you should turn in your nerd card. - Dunbal (464142)
    1. Re:Anti MS jab..... by CerebusUS · · Score: 1

      In addition, Microsoft tends to release their patches in a fairly timely manner (there are exceptions, but for the most part they've slowed down their path release schedule because sys admins were getting overwhelmed with the weekly patch-test-roll to production-test-begin again cycle)

      The majority of compromises are for already-released patches that people simply haven't applied to their machines. While it's Microsoft's fault that the bugs existed to begin with, there's really not much they can do to force these users to patch their boxes.

  30. Re:A part of the OS by ash*embers · · Score: 1

    WHAT??? Remember your history. AV was part of DOS once. The question is, why did M$ stop doing it until now? Maybe because they weren't making extra coin on it I reckon.

  31. Truly something else by Hybby · · Score: 0

    Oh, the absolute irony of Microsoft writing anti-virus software. What next? Viruses which exploit the anti-virus software?

    1. Re:Truly something else by ianbnet · · Score: 1

      oh please let this happen. /. will have a field day.

      --
      --------------------- -me, Crusher of those who are Foolish (don't be foolish)
  32. Other news... by FyRE666 · · Score: 5, Funny

    In other news, Benson and Hedges plan to open their own crematorium franchise; "You go out smokin'!". Rumours also spread of plans by Mc Donalds to open a gymnasium adjacent to each grease restaurant, and Darl Mc Bride, Steve Balmer and Steve Jobs to co-author book entitled "Altruism: The secret to success!! (subtitled: Empowering your workforce with kindness)"...

    1. Re:Other news... by Anonymous Coward · · Score: 0

      Well, McDonalds already sponsor sporting events so it could happen.

    2. Re:Other news... by jafac · · Score: 4, Insightful

      . . . in other news;
      Former Oil Company Halliburton executive, now US Vice President lobbies to start a destabilizing war causing oil markets to fluctuate.

      Extremely Wealthy President pushes through tax cuts which disproportionately reward the extremely wealthy.

      . . . ah, screw it. I could go on all day about these two, but I just don't have the heart anymore.

      --

      These are my friends, See how they glisten. See this one shine, how he smiles in the light.
    3. Re:Other news... by metamatic · · Score: 1

      I know you're joking, but in fact British American Tobacco (BAT) is one of the world's largest sellers of life insurance policies.

      (And yes, they do charge more in premiums if you smoke their other products.)

      --
      GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
    4. Re:Other news... by idamaybrown · · Score: 1

      And even more wealthy candidate wants to be president.

  33. This is actually a good thing by ianbnet · · Score: 1

    It was bound to happen eventually, and I for one am actually glad about it.

    My guess is a lot of OEMs will start shipping this, and my guess is that Microsoft will force reminders into windows to make sure people keep their definitions updated. so many people with Norton or McAfee don't actually bother to renew subscriptions to the virus definitions, and then wonder why they get viruses.

    If Microsoft can at least build reminders into their Windows Update Services, maybe this will help slow the flood.

    Maybe.

    --
    --------------------- -me, Crusher of those who are Foolish (don't be foolish)
    1. Re:This is actually a good thing by huber · · Score: 1

      umm and what makes you think microsoft isnt going to charge a subscription fee? Also NAV already pops up messages warning of subscription expiration. what makes you think these same people will act anyh differently.

    2. Re:This is actually a good thing by Carnildo · · Score: 2, Insightful

      If Microsoft can at least build reminders into their Windows Update Services, maybe this will help slow the flood.

      It won't help much. If you look at the infection pattern of recent viruses and worms, there's an initial growth period, where most of the infections happen, followed by an exponential decay, as antivirus programs are updated and systems are cleaned out.

      The initial growth is usually 24 to 72 hours, during which time the virus is too new for antivirus systems to detect. Where including an antivirus program with Windows will help is the decay period: forced updates will reduce the amount of time infected systems spend spewing out garbage.

      --
      "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
  34. Seperate, until... by Alizarin+Erythrosin · · Score: 4, Insightful

    Microsoft said that it would sell its anti-virus program as a separate product from Windows, rather than including it in Windows.

    They'll keep it seperate alright... until it's been out for a while and they don't gain any market share away from competitors. Then it'll be silently built in. There, but not enabled. Then it will be enabled by default, but with the ability to disable it. Then it will be so "tightly integrated" with the OS that you can't turn it off or your computer "will not operate properly"!

    Hey, it could happen... and has with previous products.

    --
    There are only 10 kinds of people in this world... those who understand binary and those who don't
    1. Re:Seperate, until... by Anonymous Coward · · Score: 2, Insightful

      Will you need to run Windows Update to download new virus defs? Will you need a PassPort account? Will it scan pirated copies of Windows? Will it phone home with a list of s/w on your machine? hmmm.....

    2. Re:Seperate, until... by sparcnut · · Score: 1
      Then it will be so "tightly integrated" with the OS that you can't turn it off or your computer "will not operate properly"!
      Well, they'll actually be right on that one, but for the wrong reason. By then there will be so many nasty/clever viruses floating around, they'll probably knock out the whole system before you can get a competitor's product installed :-)
      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10);'
  35. Another browser war by andrej73 · · Score: 0

    Red corner: 100000 times WINer: Microsoft
    Blue corner: Symantec, Kapersky,...

    --
    Andrej
  36. Microsoft's AV Solution by Anonymous Coward · · Score: 0

    Isn't this akin to allowing the fox to guard the henhouse?

  37. That's been the real plan all along.... by tktk · · Score: 3, Funny
    1. Create a fertile ground for viruses with Windows.

    2. Sell anti-virus software that 'somehow' works the best.

    3. Take over the world.

    1. Re:That's been the real plan all along.... by Anonymous Coward · · Score: 0

      Then they make a movie about it.

      Wait I all ready saw that one.

  38. Re:A part of the OS by `Sean · · Score: 5, Funny
    Microsoft is developing software to protect personal computers running Windows against malicious software

    So, what, it deinstalls Windows for you?

  39. microsoft is not developing a new product by Anonymous Coward · · Score: 0

    remember they bought a maker of linux AV products last year and discontinued their linux support

  40. Anyone remember MSAV? by Anonymous Coward · · Score: 0

    MSAV was the most pathetic piece of virus removal software (and DETECTION) software to roam this earth.
    I hope their new offering is better.

    1. Re:Anyone remember MSAV? by DJ+Rubbie · · Score: 1

      However it did successfully clean out the FORM.A boot virus I had on my 486 running Win 3.1. Those were the days.

      --
      Please direct all bug reports to /dev/null
    2. Re:Anyone remember MSAV? by fprog · · Score: 0

      Yes, I remember cleaning ping pong with MSAV on a i386 SX 25MHz running on MS-DOS 6.x

      That was the good old time where Central Point was still alive with their PC Tools and CPAV.

      Both product where "stolen" and copied by Microsoft with an MS-DOS version of both!
      not mentionning the stacker clone...

    3. Re:Anyone remember MSAV? by Anonymous Coward · · Score: 0

      It is actually. RAV/GeCAD was one of the best rated virus engines in the industry and highly portable to boot.

  41. Re:A part of the OS by 1010011010 · · Score: 3, Insightful

    Microsoft said that it would sell its anti-virus program as a separate product from Windows ... "for now."

    There, is that clearer?

    --
    Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
  42. About time! by Carnildo · · Score: 2, Interesting

    Just for the record, Microsoft produced an antivirus program back in the DOS 6.2/Win 3.1 days. I, and many other people, wondered why they stopped when they released Win95.

    --
    "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
    1. Re:About time! by Tajas · · Score: 1

      I remember that, I actually tried it out off a Win95 13 floppy set (I think). It did no good whatsoever and just managed to slow my system down. This was back in the day when I got Win95.CIH 74 posts to this article in less than 10 mins, rock on!

    2. Re:About time! by NullProg · · Score: 2, Interesting

      Marketing/Gates killed it. If you recall, MS stated Win95 didn't rely on DOS (Remember DrDos?). DOS was dead and therefore no reason to have a DOS based anti-virus scanner. This was the justification for selling Win95 at $80 vs $40 for Win3x. Microsoft did everything in it's power to distance Win9x from DOS.

      Enjoy,

      --
      It's just the normal noises in here.
    3. Re:About time! by theLOUDroom · · Score: 1

      Just for the record, Microsoft produced an antivirus program back in the DOS 6.2/Win 3.1 days. I, and many other people, wondered why they stopped when they released Win95.

      Just for the record, that program was a total joke. It took something like 6 bytes of assembly code for a virus to disable it.

      It was about as useful as a paper mache bullet-proof vest.

      Seriously, I did my own independent test of MSAV, NAV, and F-PROT back in the day on a collection of 300 viruses. Both NAV and F-PROT found all but about ten. MSAV found ONLY ten (approximately).

      That program was probably the most worthless Microsoft program I've ever seen.
      I'm not sure whether I hope they get it right this time, or they mess up just as bad as last time. Maybe if they screw it up bad enough users will decide the Windows is "unfixable" since they already HAVE a virus scanner installed, and move on.

      --
      Life is too short to proofread.
  43. Court is in session... by danielrm26 · · Score: 1

    Goodness. How nice of them to not include it with the OS; that'll keep the lawsuits from competitors down to roughly 3 per minute rather than 150. These guys are voracious. If they do actually manage to squelch their security problems they are going to shake off this Linux issue like a sick poodle.

    On a related note, here's an article on why you should consider using an alternative browser:
    http://channels.lockergnome.com/news/arc hives/2004 0615_why_you_should_dump_internet_explorer.phtml

    --
    dmiessler.com -- grep understanding knowledge
  44. Logical Fallacy... by bcs_metacon.ca · · Score: 3, Interesting

    There's a problem with the idea of them selling the AV software separately from Windows... they always claimed that they had to bundle IE because browsing the web was an integral part of the OS experience... well... when you're talking about Windows, having AV software & keeping it up to date is even MORE of an integral part of the experience than web browsing!

    --

    How appropriate. You fight like a cow.
    1. Re:Logical Fallacy... by ThisNukes4u · · Score: 1

      But you don't get those viruses without using IE. So they are capitalizing on the "success" of IE.

      --
      thisnukes4u.net
    2. Re:Logical Fallacy... by julesh · · Score: 1

      having AV software & keeping it up to date is even MORE of an integral part of the experience

      Me, I always thought that getting viruses was an integral part of it.

  45. They use dto didn't they? by Anonymous Coward · · Score: 0

    I thought there was a crappy AVP program in Win95/Win3.1x

    1. Re:They use dto didn't they? by bhtooefr · · Score: 2, Insightful

      Ahh... you got sucked into THAT FUD. There was one in DOS 6.x, called Microsoft AntiVirus (MSAV.EXE). It was based on Central Point AntiVirus. A Windows version (MWAV.EXE, I think) came with it.

  46. Isn't that a conflict of interest? by thisissilly · · Score: 2, Insightful

    I would think the more holes for viruses they leave in their products, the more anti-virus software they can sell...

  47. Makes sense.... by Anonymous Coward · · Score: 0

    It's kind of like a liquor store holding AA meetings.

  48. Speech less by Anonymous Coward · · Score: 0

    I am just lost for words.

  49. Brilliant by nearlygod · · Score: 1

    1. Create a problem 2. Sell solution to problem you created 3. Profit As the Guiness guys would say... Brilliant!

    --
    The Tools Of Ignorance wanna be a tool?
  50. Trust issues? by MoonBuggy · · Score: 4, Interesting

    Surely if they demonstrated that they made an OS vulnerable to the virus of the day, why should they be trusted to make the software that protects against/fixes said virus?

    There are also definite shades of Dilbert here, where the employees who write the software are paid for every bug they remove from the software. It sounds outlandish but MS have demonstrated some pretty evil business practices; might it be possible for them to put a vulnerability into Windows that allowed viruses which could only be combatted by MS Virus Scan - it could be done in a way that means Norton or McAfee could be slapped with the DMCA if they knew the encryption to access the bit of Windows affected by the virus, but it would be a triviality for the virus writer to break said encryption since they're not worried about the law. </tinfoil hat>

    1. Re:Trust issues? by happyfrogcow · · Score: 2, Interesting

      Another trust issue:

      Will it consider software in directories that have a GPL license to be a virus?

      Will it consider the device driver i wrote for an old graphics card to be a virus?

      Will it consider IBM's web based office productivity suite a virus?

    2. Re:Trust issues? by Anonymous Coward · · Score: 0

      Will it consider IBM's web based office productivity suite a virus?

      Naw, you'll have to wait for longhorn which includes a Shitty Lotus Software scanner.

    3. Re:Trust issues? by Anonymous Coward · · Score: 0

      Another issue:

      You forget to take your medication today?

      You forget to put on your tinfoil hat?

    4. Re:Trust issues? by A_Non_Moose · · Score: 1

      Will it consider software in directories that have a GPL license to be a virus?
      Will it consider the device driver i wrote for an old graphics card to be a virus?
      Will it consider IBM's web based office productivity suite a virus?


      Am I the only one who read that with the "It puts the lotion in the basket" tone of voice?

      Took me a second to realize "it" was the MSAV.

      Yeah, I'm tired...sorry.

      --
      Have you read the moderator guidelines? Well, have you, PUNK? (and I want a Karma: Gnarly option)
  51. Conflict of interests? by Anonymous Coward · · Score: 0

    Sounds like a doctor is also the owner of a coffin shop. I am the best doctor in town if I can cure you, otherwise, I sell you a coffin.

  52. Re:A part of the OS by NanoGator · · Score: 1

    "Is there any software outside of Microsoft's "it's a part of the OS" argument?"

    Yes.

    "Nash (chief of Microsoft's security business unit) said that Microsoft said that it would sell its anti-virus program as a separate product from Windows, ather than including it in Windows."

    --
    "Derp de derp."
  53. in italy we call this mafia by Simon+(S2) · · Score: 4, Funny

    you buy protection from the same people you have to be protected from.

    --
    I just don't trust anything that bleeds for five days and doesn't die.
    1. Re:in italy we call this mafia by Anonymous Coward · · Score: 0

      Mod parent Up.

    2. Re:in italy we call this mafia by lucaschan.com · · Score: 1

      you buy protection from the same people you have to be protected from.

      Exactly. It doesn't make sense for Microsoft (or any OS vendor) to be both a player and umpire at the same time.

      I think the most credible way they could include AV software in Windows is to license it the way Apple does (Virex, IIRC?).

  54. A good idea by Karrde712 · · Score: 1

    For what it's worth, a Microsoft-made antivirus scanner might be a worthwhile tool.

    Since no one but Microsoft has a clear view of what's "under the hood", so to speak, it would probably be much easier for them to generate a more reliable set of heuristics for identifying new virii before the definitions are available.

    --
    You may treat all information submitted above as wild speculation.
  55. and if you believe that... by Roadkills-R-Us · · Score: 1

    "My only question is..." when will they simply include it in the OS, thereby screwing up the folks who've made life with Windows almost bearable all these years? Time after time, MS promises they won't compete with the third parties who helped them survive and thrive, but soon thereafter the new stuff shows up in the OS and the competition either finds a new market really fast, or they die.

    It's all well-documented in the trade press over the years.

  56. 10 Seconds and counting.... by Anonymous Coward · · Score: 0

    I'm betting the Anti-Virus software simply implodes windoze. Maybe this will be the launch of Microsoft Linux. :-)

    Can't you hear the music? Perhaps a Rolling Stones song.... :-D

  57. Re:A part of the OS by ImpiousPunk · · Score: 5, Informative

    Like all "Great" Microsoft products, they didn't develop anything. They bought someone up and slapped their name on it. http://www.ravantivirus.com/

  58. Thats just funny by Nikker · · Score: 1

    Can some one please explain one thing... Most of these viruses / malware etc are based on windows bugs which we all know take a while to release. So will M$ Antivirus release an update for a problem that should just be patched?
    Sounds like a lot of tail chasing to me and of course in any corp- passing the buck will be the soup du jour.
    This is perfect timing for me to finally switch completely to a linux based pc and watch all you win32 bums suffer. You thought that it was tough getting a straight answer out of tech support now???
    HA wait till this launches!!!

    --
    A loop, by its nature, continues. If that didn't make sense, start reading this sentence again.
  59. Conflict of interest ?! by hqm · · Score: 1

    My god, doesn't anyone see the conflict of interest here? WHenever they want to boost revenue in their anti-virus business unit, all the have to do is make Windows more insecure. No wait, that's impossible. Never mind.

    1. Re:Conflict of interest ?! by Anonymous Coward · · Score: 0
      My god, doesn't anyone see the conflict of interest here?

      No, none of the other hundreds of posters caught that. Good thing you're here!
  60. A new wind? by Bin_jammin · · Score: 1

    Be fair, maybe this is an honest attempt for Microsoft to clean up its image regarding security. Perhaps we'll see a bit more focus on prevention and faster patch releases in the near future, sort of a two pronged attack. I have no love for Microsoft, and I'm not defending them, but I'm not into kicking a man in the rear while he's trying to zip up his open fly either...

    1. Re:A new wind? by Jason+Earl · · Score: 2, Insightful

      Microsoft has a ridiculously high Price/Earnings ratio. They have to "grow" or their stock price goes down. Anti-Virus software represents one of the very few significant software niches that Microsoft doesn't already dominate.

      Microsoft's Anti-Virus moves aren't about security, they are about economics. Microsoft is simply doing what it has always done. Microsoft lets its competitors find out the profitable software niches, and then Microsoft uses its cash hoard to buy themselves a seat at the table. Once Microsoft is in the game they use their influence with the major OEMs to make sure that their product is preloaded on quadzillions of machines. Eventually Microsoft's product becomes the de-facto standard, and an army of MCSEs begin spending their time and effort rooting out the last vestiges of the "non-standard" or "legacy" applications.

      On the plus side Microsoft's Anti-Virus software is likely to be less expensive than the competition. So it will probably be a net win for consumers.

    2. Re:A new wind? by Anonymous Coward · · Score: 0

      Eventually Microsoft's product becomes the de-facto standard, and an army of MCSEs begin spending their time and effort rooting out the last vestiges of the "non-standard" or "legacy" applications.

      I was never an MCSE but I am one of those people that has tried to get rid of the old "legacy" crap from Microsoft. I used to run Linux because I hated Windows 95/98/NT and thought that running 95/98 on the desktop and NT on the server was a joke. I also ran Linux because it actually supported a game I played at the time (Quake), but I have since moved all my clients/servers back to Windows (XP on the desktop, 2003 on the server) because it is far superior to any of the horse shit Microsoft used to produce. Of course it still has its faults, but what OS doesnt have its faults? Any way you look at it, XP/2003 is alot better than their old shit, and can really compete against any OS on just about any task.

  61. Several questions for Microsoft by Anonymous Coward · · Score: 0

    1) You created the vulnerabilities. You are already charging us for the patches that are supposed to fix them. Why are you going to charge separately for a tool to detect the exploits?

    2) Speaking of charging to fix your vulnerabilities, why aren't you fixing them rather than spending time and money on writing tools to detect the exploits?

    3) Why aren't the fixes free after I paid for software that should have worked in the first place?

  62. Extortion Anyone? by platinum · · Score: 1

    By selling a vulnerable piece of software then selling another application to prevent it from being exploited sounds like a protection racket to me.

  63. Holy Shit by mrpuffypants · · Score: 4, Funny

    This discussion need a fucking tinfoil Turban over it. Get ready for your conspiracies, folks!

    1. Re:Holy Shit by tool462 · · Score: 1

      I'm with the Dept of Homeland Security. What do you know about these conspiracies? You will come with me for questioning.

  64. I've always wondered about this... by drgonzo59 · · Score: 1

    Microsoft in such a long time never integrated an anti-virus capability into Windows. The virus problem has been existing for such a long time, yet everyone had to go and buy a third party product. I mean, they included a browser, a movie maker, a multi-media, games, all kinds of crap that wasn't that vital for an OS to have. My guess is that they were either too ignorant and stupid or they figured its bad marketing to include anti-viral software - it might imply the main product (Windows) is not secure enough and prone to easy explotation by virus writters (cough..).

  65. You just need the right OS by missing000 · · Score: 3, Funny

    Microsoft has had a couple of secure OS's out for years

  66. Conflict of interest?... by Silvertre · · Score: 1

    What's to stop them from purposely leaving holes open in windows just so that their virus software could be the best to guard against it?

  67. New Distro? by shawn(at)fsu · · Score: 1

    So Microsoft will be distrubuting a new flavor of linux?

    --
    500 dollar reward for tip(s) leading to the arrest of the person(s) who stole my sig.
  68. Critical updates by 0ddity · · Score: 1

    Actually Microsoft is planning on calling the security/critical updates Antivirus software, and it will be updated via Windows update.

    no-one would notice except the /. crowd what was really going on.

  69. Isn't this sort of illegal? by Dimes · · Score: 1

    I mean, "official" monopoly or not.....they have one, with a product that is riddled with security problems...which they can't "seem" to fix.....so the solution for its customers is to...."Sell" them AV software!?!?!?!?

    Isn't there something inherently wrong with that?

    dimes

  70. Pressure for updating AV software by mshultz · · Score: 3, Insightful

    My only question is: If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?"

    ... Because there's a lot more pressure to keep AV software updated as fast as possible. If a user is not happy with the way Norton manages their AV updates, they can switch to McAfee with little inconvenience. But Microsoft is under no direct threat if they wait an extra day, delaying an OS patch, since switching operating systems is a much more serious undertaking.

    Microsoft clearly has the resources together to put together a good product- look at Office, for example. They're not idiots, and I'm sure they realize the urgency of issuing timely AV updates. If they made that one of their priorities, they could probably do a very good job at it.

  71. So who did they buy? by BalDown · · Score: 1

    The big question on my mind is who did Microsoft buy to get into the AV market? I mean, look at a lot of their other product expeditions lately. They're just an offshoot of someone else's work that they bought. Can anyone say VirtualPC? Guess we'll just have to wait and see what it looks like...

    --
    You wasted packets to get this lousy sig.
  72. Conflict of interest? by CheeseTroll · · Score: 1

    3rd-party developers have long complained that MS developers have access to "secret" API's not shared with the outside world.

    Seems like this would be all-too-tempting of a strategy to take with the AV developers, as well. Except in this case it's not only API knowledge, but advance knowledge of security holes discovered by their own developers and testers.

    --
    A post a day keeps productivity at bay.
  73. Oh god... by Anonymous Coward · · Score: 1
    I personally beleive that you should find something that you are good at and proftible in doing and stick with it.

    Im not knocking Microsoft here. Congrats on trying to deversify, BUT I really do not see this working out to well.

    The main reason being is that there are alot of very succesfull and viable AV options out there. Apart from having the Microsoft brand added to the AV Software, it seems as though it will not really bring anything new to the plate.

    On a lighter note, it is quite ironic. Microsoft providing AV software for their OS.....

  74. Great. by eztcld · · Score: 1
    Logical progression of 'fail for profit'
    software engineering. Practiced by the
    most reviled bunch of corporate a$$hats on the
    planet.

    You've got to admire success, but really
    scrutinize people capitalizing on failure.
  75. What makes them think? by hkb · · Score: 1

    If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?

    The same deranged thoughts that make them think they have a lower TCO than Linux, that make them take industry standard protocols and tweak them just enough that they don't work anymore, that they're more secure than *NIX, and that Windows Explorer is a good interface. Duh.

    --
    /* Moderating all non-anonymous trolls up since 2004 */
  76. Re:A part of the OS by xarak · · Score: 2, Funny


    All we need to do now is to prove they include SCO code in their AV, and there'll be more than one set of sheets to clean!

    --
    Atheism is a non-prophet organisation
  77. Re:"Anti-virus program as a separate product from by JVert · · Score: 2, Insightful

    At CES Bill hinted that they were working on anti-virus software but implied it would be a part of the operating system. Could you imagine the crowd turning on him if he said you have to buy one product from microsoft to run your machine and another product to secure it?

  78. This comes as no surprise by PinkX · · Score: 1

    As they, Microsoft, are the ones who bought RAV Antivirus exactly one year ago, just to make it disappear from the market.

    RAV had one of the best and most attractive (in licensing terms) AV solutions for Linux and other *NIX mail and file servers.

    Regards,

    1. Re:This comes as no surprise by Richard_L_James · · Score: 1
      This comes as no surprise

      Agreed as this was the very point I made in this posting Hardly a big surprise.... back in February in relation to this slashdot story - Microsoft Beta Includes Built-in Virus Scanner

  79. MS Doing AV? by czephyr · · Score: 0

    Haha. I did'nt realize Microsoft had a humor department on campus.

    As i recall, Symantec did a lot of the original work on this with MS back in the 80's. Look what happened, MS ended up with truncated versions of Norton's Utilities and AV back then and MS never did a thing to improve on what they originally had.

    I say: Too little, too late to a company that keeps trying to be everyone to everybody.

    There are far better products out there that are'nt included in "Windows".

    And this is coming from a dedicated but very pissed off MS product user for 20 years.

    --
    Sincerely, Czephyr
  80. Don't be fooled by Unloaded · · Score: 1

    "If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?"

    They won't. They'll probably just put thier brand on someone else's. At most they'll write their own engine and cut a deal to buy someone elses signature files (see: MacAfee), but I highly doubt they're doing this from scratch.

  81. Re:A part of the OS by ImpiousPunk · · Score: 1
  82. Its good and its bad. by slashdot_commentator · · Score: 1

    The bad news: given Microsoft's marketing techniques, they will ruthlessly run their AV competitors out of business.

    The good news: Microsoft AV product will lapse into cost-effective mediocrity once they run their competitors out of business. This will increase the presence of viruses in MS OS products, which will increase their reputation for being unreliable and insecure. The end result will be the eventual adoption of Linux in the computer industry. Yay!

    --
    There is no America. There is no democracy. There is only IBM and AT&T and DuPont, Dow, General Electric, and Exxon
  83. DIdn't they do this before? by whiteranger99x · · Score: 1

    If I recall correctly, didn't MS have Anti-Virus software bundled with some odd version of DOS (I remember having it bundled with 6 and Win 3.1)?

    Of course, it could've also been another company's software that they rebranded. I might have to look into that.

    Anyway, getting back to the age of computers that we're in, as someone already cited, it would be a conflict of interest, considering a lot of their security holes are the very reasons viruses are so prominent between the hosts and the Internet.

    --
    Join the TWIT army now!
  84. And most end users say... by Anonymous Coward · · Score: 0


    "Why am i infected , i have [largenamebrand] virus scanner that came with the computer"

    "but you have to keep them up-todate sir, and that costs a subscription for x$ per year"

    "so you are saying i have to pay money every year to the same company for a faulty product that i have already paid for ? "

    "yes sir, you do have your credit card ready sir ? hello ? hellooo?....."

  85. They're gonna SELL it? by Anonymous Coward · · Score: 0

    I see this as a way to ignore Windows security completely. If you complain of exploits, Microsoft will just try to sell you more software.

  86. Re:A part of the OS by Simon+(S2) · · Score: 1

    are you sure they will sell THIS AV?

    the press release:

    "GeCAD Press Release: GeCAD's Antivirus technology to be acquired by Microsoft (Date: 2003-06-10)

    Bucharest, June 10, 2003 - GeCAD Software has announced a definitive agreement with Microsoft Corp., of Redmond, Wash., USA, by which Microsoft will acquire GeCAD's antivirus technology. Microsoft has stated its intention to integrate GeCAD's technology into products and services that will help secure customers.

    "The opportunity to integrate GeCAD technology into Microsoft's future antivirus efforts is a big step not only for us but for the entire Romanian I.T. industry," said Radu Georgescu, President of GeCAD. "Microsoft's choice of a Romanian technology attests to the tremendous software development potential in this country."

    Bucharest based GeCAD is a leading technology company specialised in providing antivirus solutions for all categories of users. Since the creation of the company by entrepreneur Radu Georgescu in 1992 and launch of its first antivirus programme in 1994, GeCAD has grown to an international recognized software company with distributors in more than 60 countries. The company markets its products under the brand "RAV AntiVirus" which protects more than 10 million users worldwide. Many international awards and certifications, which include 'VB 100%', 'Checkmark' and 'ICSA', underscore the company's success as an antivirus solutions provider.
    More recently, GeCAD was awarded two special citations at the I.T. Awards ceremony in 2002 for the 'Best Romanian Software' and the 'Most Innovative Software Company'.

    The GeCAD products feature the unique 'platform independent' antivirus scanning engine that revolutionized the antivirus market. It detects and removes viruses while acting also as signature database for all the modules and programs under any platform or operating system.

    "The acquisition of GeCAD's technology will help secure customers by helping us deliver antivirus solutions for Microsoft products and services," said Mike Nash, corporate vice president of the Security Business Unit at Microsoft. "The significant expertise represented by GeCAD, along with partner antivirus software and our own platform investments, will help us mitigate the threats our customer face from those who write malicious code."

    Commenting on this achievement, H.E President Ion Iliescu of Romania said -"I am a great believer in the tremendous I.T. and software development potential of our people and of our country, I am proud of GeCAD's success and look forward to other Romanian companies following this example."

    Highlighting the importance of this acquisition from the perspective of further strengthening relations between American companies and Romania, H.E. Michael Guest, U.S. Ambassador to Romania said - "I'm delighted at this important acquisition by a first-class American company of a new technology produced here in Romania. This new step highlights even more Romania's clear potential in information technology -- an area in which Romanian students, researchers and entrepreneurs excel. I hope this will be the first of many more partnerships between U.S. and Romanian companies in this and other fields, aimed at broadening and deepening our bilateral trade and investment relationship."

    GeCAD will continue to expand its services and security business and develop new non antivirus related technologies and software solutions."

    --
    I just don't trust anything that bleeds for five days and doesn't die.
  87. Can't really complain... by Jugalator · · Score: 1

    There's software I wish MS should free from its OS, like their Media Player, the Movie Maker, and lots more. But I don't object to neither an integrated anti-virus tool, nor a firewall. As we're moving more and more towards broadband connections that are up all day long, this software is necessary to protect the OS, especially as this OS happen to be the most common one on the market. And who should be able to protect the OS, if not the creators of said OS?

    Yes, there's an irony in attempting to protect the OS by an anti-virus tool instead of actually fixing the security holes, but you need to keep in mind that often it's getting infected by the command of the actual user, as he might be logged in as administrator and clicks that naked Kournikova attachement in an e-mail. It's not all due to security holes, it's often due to lack of knowledge as well. And an anti-virus tool could work as a reasonable safety net here.

    I also think that anti virus and firewalls should no longer be sold as separate products. I'm not for big bloated software packages and I favor Firefox / Thunderbid for these reasons, but I just find security products that were made to be used as a package would be the best and safest solution for the average Joe using computers. It's not like you should run a firewall without antivirus or vice versa anyway...

    --
    Beware: In C++, your friends can see your privates!
    1. Re:Can't really complain... by Jugalator · · Score: 1

      Oops, I missed the "won't be integrated" part too, I kind of assume that nowadays. :-) Oh well, I'm still positive to an integrated anti-virus tool in Windows.

      --
      Beware: In C++, your friends can see your privates!
  88. Again? by gmuslera · · Score: 1
    10-15 years ago there was a Microsoft Antivirus, for DOS, and was a joke, a simple "dir" had more probabilities of finding virus than it. After a while Microsoft realized that it was even more crappy than the average MS product, and retired it from market.

    Now it will try again, now with technology buyed from the ex-RAV antivirus. When they not invent something, at least their start is not so bad (of course, then their corporate policy makes it something unsafe, that have troubles with all non-ms software, and in general a piece of junk, think how evolved most technology adquired by microsoft like IE, MSSQL, Frontpage and so on).

    Now, is nice to see MS marketing in action. First create a problem doing things bad (how much percent of viruses/worms/etc are not for MS plataforms?) and then sell the solution.

  89. RAV, GeCAD, Symantec is slow by telemonster · · Score: 1

    Microsoft bought GeCAD in 2003. GeCAD made the RAV antivirus that was used with Linux and more importantly FreeBSD in mail anti-virus setups. This was a blow, as it was a good program and the announcement was made that the future Unix support would be discontinued.

    Back in 2003 it was apparent that this was going to happen. I was hoping it would be integreated with Windows.

    Symantec is a turd, I noticed it picked up a tar file that had some unix exploit code. Flash.c, this old program that dorked up unix terminal sessions. Symantec's scanner searches for unix utility source for various malicious utilities on windows systems. That is 100% wasted resources being used just to up the number of "viruses" their utility can find.

    --
    Southeastern Virginia REPRESENT!
    1. Re:RAV, GeCAD, Symantec is slow by Anonymous Coward · · Score: 0

      So you're saying it's a waste of time for me to run my virus scanner on my linux file server to catch viruses that moved onto my samba server via open public share or someone who has access to a group drive and let it move onto the next machine in the morning. I don't think so. Conversly M$ has UNIX Tools now. I know there are people out there dumb enought to use it, so it's a good thing to find some "tar file that had some linux/unix exploit code" to stop someone from using it when they shouldn't have it in the first place.

  90. It'll be a pay version of Windows Update by Anonymous Coward · · Score: 0

    Maybe the let them anti-virus customers get their security updates sooner than everyone else.

  91. Business Model by AlphaSys · · Score: 1
    My only question is: If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?"
    That's just it. I think there's a conflict of interest claim to be made. Most viruses propagate by exploiting some security hole or another. If there's money to be made in an epidemic, they might drag their feet on a patch for vuln-X but be johnny-on-the-spot with AV signatures. As a result, the AV product looks good in the press. In that same vein, a planned outbreak where they had the sig ready to go before each variant hit the streets (IOW, an outbreak they create or manage secretly) would make them look "more responsive" than the competition. I make a point to support MS when they get unfair bashing around here, but their venture into this arena bothers me.

    --
    Can I bum a sig? I left mine at the office.
    1. Re:Business Model by n8_f · · Score: 1

      Even worse, won't Microsoft be notified by responsible hackers about the security holes before anyone else? Don't security companies usually give vulnerable developers a month or two before making an exploit public? So it seems like that information, obtained because they make the OS, would give them an anticompetitive advantage over other A/V developers.

      This stinks in so many ways.

  92. So who did they buy to do this for them? by bogie · · Score: 1

    The article didn't say? Probably some tiny European anti-virus maker. Nobody actually believes that Microsoft built theirown AV software from scratch right? Microsoft's MO has been buy up other companies technology and release it as their own for a while now. Not for everthing but certainly a huge percentage of their software.

    --
    If you wanna get rich, you know that payback is a bitch
  93. Whoops... by Anonymous Coward · · Score: 0

    That's going to fail - it doesn't work if you provide step 2 =)

  94. We saw this coming by cybernautix · · Score: 1

    M$ bought GeCAD software (makers of RAV Anti-Virus) a year ago [press release]. What surprises me is that RAV is still available for Linux.

  95. SP2 by Nasarius · · Score: 1

    Anyone who's tested out the release candidate for Windows XP SP2 shouldn't be surprised by this. SP2 attempts to detect antivirus software, and warns that you should install it if you don't have it. I guess the next logical step is selling your own, rather than recommending third-party products. To quote PA, it smells like money.

    --
    LOAD "SIG",8,1
    1. Re:SP2 by hcuar · · Score: 1

      Yeah... interesting point... SP2 didn't recognize AVG. It mentioned products such as NAV and Mcafee... I figure most of the SP2 "features" will be shutoff for most advanced users. Including the new and improved "firewall". Yes, I mean't to use quotes... ;-p

  96. If virus writers stop writing viruses.... by Anonymous Coward · · Score: 0

    Will the anti-virus companies run out of business?

  97. Stocks in this space are down on the news by LukePieStalker · · Score: 1

    Shares of players Symantec and Network Associates have gone way down due to this news.

  98. Re:A part of the OS by bhtooefr · · Score: 1

    Because it wasn't MS doing it - Central Point made it, and Central Point got bought out by Symantec.

    BTW, this caused much FUD. I remember the old "expert" of the family saying that Windows 95 came with an antivirus program, and the copies of IBM AntiVirus I kept putting on mysteriously disappeared every time... (I didn't install on his box, though...)

  99. Damnit play fair by gregm · · Score: 1

    What does patching their OS slowly have to do with adding virus definitions? Nothing.... that's what. That's just stupid FUD that makes us look back.

    Having said that, I think it's a serious confilict of interest for the makers of OutlookX, IE and Windows etc to sell software that feeds off the vulnerabilities they've created or have allowed to happen. I see too many oportunites for them to purposly put in vunerabilites or at the very least leave known vulns in and conviently have the "fix" ready before anyone else.

    Microsoft should be banned from making anit-virus software and further; they forced to pay a percentage of each third-party anti-virus license purchased and we'd see just how quickly the above-mentioned programs would get fixed.

    G

    1. Re:Damnit play fair by polyp2000 · · Score: 1

      Nope, i think that they should be banned for making operating systems completely.

      --
      Electronic Music Made Using Linux http://soundcloud.com/polyp
  100. Re:A part of the OS by ImpiousPunk · · Score: 1

    They aquired this company months ago, and why wouldn't they? Some other company has done most of the legwork, and RAV already makes *nix and Windows AV Clients.

  101. They wouldn't dare... by Anonymous Coward · · Score: 0

    ...include their AV software with Windows. They'd have the DOJ back on their butt so fast. Nice to see they are doing something smart for once, but I'm still not going to buy it.

  102. Cool by cshark · · Score: 1

    Maybe this is part of microsoft's strategy the bleed money slower over the next few years and actually start using their existing investments in useful ways. It's nice to know that third rate Anti-virus company they bought last year is going to good use. Now Microsoft can be a third rate anti-virus company as well. I can't remember who said it, but someone at symantec last week said that he hoped microsoft wouldn't try to do this because they don't have the credentials. Still. It's going to be fun to watch.

    --

    This signature has Super Cow Powers

  103. "Its own brand of anti-virus software" by Anonymous Coward · · Score: 0

    You mean they're going to sell Linux?

  104. this eliminates service packs... by Anonymous Coward · · Score: 0

    so, MS won't need to crank out FREE service packs when you can charge $$$ for it! wow!! well, you can still profit from this by buying MS stocks. if you can't beat them, join them...

  105. I personally can't wait for this to come out. by Cytlid · · Score: 1

    First thing I wanna do, is call up MS support and ask if it works on linux.

    --
    FLR
  106. Quick Updates from MS by Anonymous Coward · · Score: 0

    >If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?

    It will be the usual trick.

    1. Buy an existing competetor
    2. Force incompatibility with other AV software
    3. Jack the prices through the roof because there's no competition left.

    Note: At step 3, your performance is fast - because you are the benchmark.

    Anyone remember the days of C++ compilers under windows? Now that was an interesting story :)

    AC

  107. Who do YOU trust? by Anonymous Coward · · Score: 0

    On the one hand you've got Symantec who have been in the AntiVirus business for a number of years.

    On the other hand you've got Microsoft whose fault this all is.

    I'd rather Microsoft put their resources into FIXING THEIR DAMN SOFTWARE TO MAKE IT SECURE rather than charging more money to deal with the symptoms of their insecure bug-ridden software.

    Bitter? If you've spent a couple of afternoons trying to firefight the latest Windows bourne virus that some stupid berk has brought in on a laptop and infected your network then you would be more than a bit narked off with Microsoft's attitude "Let's not fix it, let's charge money for it!"

  108. Ow! The pain!! Make it stop! Make it stop! by valdis · · Score: 1
    So let me get this straight - the company that writes software that leaks so badly that there's a multi-billion dollar industry in selling plugs for the leaks is going to start selling plugs for an additional charge???

    I'm not sure which worries me more:

    • The fact that they've already proven either unwilling or unable to ship a secure product (and should therefor stay out of the business of selling security add-ons).
    • The fact that they obviously intend to destroy said market like they have for browsers and other competitors - which gets scary when you think of the reliability considerations. If a third-party AV is the only thing that makes using the net anywhere near safe, and there's no third-party AV vendors anymore....
    • The high likelyhood that the M$ AV product will burrow itself into the OS such that it can't easily be removed or replaced, similar to the way IE is glued in, to increase lock-in once you install it.
    • The high likelyhood that the M$ AV product is likely going to end up using yet another undocumented API to integrate into the system.
    • The even higher likelyhood that the M$ AV product will have access to an undocumented API that lets the OS tell the AV what vulnerabilities that particular build of the OS and IE and ActiveX and other bundled bloatware has available for viruses to exploit...

    Remember everybody - Microsoft doesn't have any responsibility to the users. It does have a fiduciary responsibility to the shareholders.

    And we're seeing more proof of it right here...

  109. The last batch of Windows exploits... by foxtrot · · Score: 1

    are the other side of that coin. We gripe that Microsoft can't keep their OS patched, but that's not the real problem. Take Sasser as an example: Sasser exists _because_ Microsoft went and patched their OS. Someone looked at the bugfix, saw what it fixed, and then figured out how to exploit it.

    Damned if they do, damned if they don't.

    As it were, I beleive Microsoft AV is irrelevant. They can't bundle the software in with Windows or they get accused of being anti-competitive, so we're not going to magically have a bunch of XP machines with anti-virus software, so what it amounts to is that the people who are going to buy antivirus software and use it now have one more choice. This will not significantly decrease the number of innoculated machines in the wild.

  110. Hurt Competition? by Unnngh! · · Score: 1
    Asked if that would hurt sales of competing products, such as Network Associates' McAfee and Symantec's Norton family of products, Nash...said that Microsoft said that it would

    Oh wait, did I just that out of context?

    Anytime that MS branches into a field where they will be competing with established competitors, I can only feel sorry for the competitors. MS may not always win in this context but they have a good track record.

  111. You need to read more. by khasim · · Score: 1, Interesting

    Here are some choice quotes for you:

    "Knife the baby"

    "Cut off the air supply"

    Given those quotes, who needs to lighten up? Hmmmm?

    Microsoft could include anti-virus software. They have in the past. And Microsoft could do it without hitting anti-trust laws.

    But when Microsoft SPECIFICALLY refers to killing another company's market by leveraging their monopoly, THAT is the problem.

    You Microsoft apologists are all the same.

    1. Re:You need to read more. by NanoGator · · Score: 1, Insightful

      "Microsoft could include anti-virus software. They have in the past. And Microsoft could do it without hitting anti-trust laws."

      Yeah? And how exactly?

      "But when Microsoft SPECIFICALLY refers to killing another company's market by leveraging their monopoly, THAT is the problem."

      If they could do that, then they'd have more than 3 apps that held monopoly status. Frontpage? Nope. IIS? Nope. Exchange? Nope. Media Player? Nope. Gee, I guess their monopoly isn't all that strong unless people actually want their stuff?

      --
      "Derp de derp."
    2. Re:You need to read more. by drsmithy · · Score: 1
      Here are some choice quotes for you:

      "Knife the baby"

      "Cut off the air supply"

      The number of people who think comments like this are uncommon or meant to be taken literally is an indication of how close the average /. poster has ever been to the managerial meeting room.

  112. Re:"Anti-virus program as a separate product from by Anonymous Coward · · Score: 0

    Here's a brilliant idea. Instead of making anti-virus software to secure holes in the OS, why don't they make the update mechanism more forced such that it patches itself using technology already in place instead of adding more code that does nothing?

  113. Re:A part of the OS by Jorj+X.+McKie · · Score: 1

    The Reuters article does mention GeCAD.

    --
    I remember your eyes, on the twelfth of July...
  114. free? by TejWC · · Score: 2, Insightful

    Microsoft sometimes offers its products for free, even if it didn't come with Windows. The perfect case is when IE came out back before 1997 where Microsoft forced Netscape to enter "the free market". Will Microsoft do the same thing with AntiVirus?

    1. Make it free
    2. Have everybody drop their current AntiVirus and move to Microsoft
    3. Have Microsoft later on integrate it to the OS
    4. Microsoft will have the monopoloy on AntiVirus industry

    Not saying it will happen, but hey, it could...

  115. Re:A part of the OS by Anonymous Coward · · Score: 0

    WHO MODDED THIS A 5. IT SHOULD BE 4

    5 only if the guy was bright enough to say uninstalls windows!

  116. Is this even legal? by Viewsonic · · Score: 1

    It just doesn't sound like something they can legally sell. They're obligated to patch their OS whenever they find out backdoors .. But what if they start to update their anti-virus software before the OS patches? Wouldn't that mean Windows users would be obligated to buy their particular Anti-Virus software? Isn't this entire package a conflict of interest? Perhaps they've been making their software buggy on purpose? I really think the Government needs to start monitoring stuff like this. Code needs to be looked at to see if all of these holes are on purpose and action should be taken if its found it was on purpose. Yes, ive got my tinfoil hat on.

  117. Freedom to Innovate by Anonymous Coward · · Score: 2, Funny

    They bought someone up and slapped their name on it.

    But be sure always to call it please, innovation.

  118. AV vs patches by ornil · · Score: 1

    If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?

    Because they have no immediate financial incentive to do the patches fast (what, are you going to switch to Linux if we don't?) and they have an obvious incentive to make their AV competitive against other AV software. Also, consider that some people will buy their software when they actually get a virus in order to clean up their machine. So they have an extra incentive to have all the latest fixes in.

  119. On this version of anti-virus software by HangingChad · · Score: 1

    The updates will come out a month after the exploits appear on the Internet.

    --
    That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
  120. Yea, lots of faith in Microsoft's security by Timmy+D+Programmer · · Score: 2, Insightful

    Seeing how faith in Microsoft's security is at a all time low I would consider this pretty stupid marketing on their part. Microsoft could completely destroy the antivirus industry just by making better products.

    --


    (If at first you don't succeed, do it different next time!)
  121. Because... by Mz6 · · Score: 1
    "Here's a brilliant idea. Instead of making anti-virus software to secure holes in the OS, why don't they make the update mechanism more forced such that it patches itself using technology already in place instead of adding more code that does nothing?"

    I couldn't imagine the backlash from people if Microsoft FORCED it's product updates.

    The single biggest problem is that sometimes, their product updates cause problems with other software that's running. In a business environment, this causes downtime and lost revenues. That is why each product update from Windows needs to be throughly tested before being rolled out to every machine within the corporate network. A forced rollout would be nothing but a headache.

    --
    Hmmm.
  122. wow. by ricochet81 · · Score: 3, Insightful

    They used to blame AV companies for making virii to generate business, but a company that makes the vulnerabilities in the first place in its OS... wow. let the conspiracies start flowing.

    --
    Error: Id10t detected
  123. Probably unrelated, but by mindfucker · · Score: 2, Informative

    It's interesting considering that Symantec was considering (or at least said they were considering) switching to linux recently.

  124. Just wait... by paranode · · Score: 5, Insightful

    We'll be seeing virus updates that clean and fix the problem before there is even a patch out. What's that? You forgot to renew your yearly subscription? Better pony up or you'll be vulnerable for a long time.

    It's just a little scary that a company that is responsible for almost all viruses and worms is now going to benefit financially from such failure to secure their product. They're marketing their shortcomings to you as a new product! What will they think of next?

    1. Re:Just wait... by Anonymous Coward · · Score: 0

      making you pay monthly for yearly updates?

    2. Re:Just wait... by ranolen · · Score: 1

      This is nothing new. For example, look at the telephone companies, they are selling features to help stop telemarketers from getting through. However, they are also selling ways of getting through directly to the telemarketers.

    3. Re:Just wait... by Anonymous Coward · · Score: 0

      It's just a little scary that a company that is responsible for almost all viruses and worms...

      Hehe, you make it sound like microsoft wants to get hacked; it's just sloppy code on their part. They want vulnerabuilities in their products even less then you do.

      They would do good to take a cue form BSD and rearrange their code into nice, programmer friendly source tree instead of the hacked together code base i'm sure they're using now (ROD).

    4. Re:Just wait... by subl33t · · Score: 1

      Any users stupid enough to use M$s AV deserve every infection they get. "Here is our operating system, widely acknowledged as the most insecure OS on the market. Please buy it. Here is our anti-virus program, which plugs holes that should have already been plugged in the operating system. Please buy it. Sucker."

    5. Re:Just wait... by SilentChris · · Score: 1

      "It's just a little scary that a company that is responsible for almost all viruses and worms..."

      Wow. That's bringing trolling to a whole new level. Someone tell GM: they're responsible because idiots don't put on their seatbelts!

  125. Increasing sales by SnarfQuest · · Score: 5, Funny

    "Hay Balmer, our anti-virus software sales are slipping lately. Let's add remote scripting capability into solitare."

    --
    Who would win this election: Andrew Weiner vs Andrew Weiner's weiner.
    1. Re:Increasing sales by Anonymous Coward · · Score: 0

      Nah, no need to. See, the anti-virus software itself will have remote scripting capability. And it will listen on ALL the ports.

  126. I can see it now by RancidLM · · Score: 1

    User:My Microsoft Antivirus has a virus..

    Tech:Im afraid ur going to need Microsofts MS Antivirus Antivirus...OR.. get norton antivirus..

  127. Another reason why they might be doing this.... by HyperHyper · · Score: 1

    Aside from being a new revenue stream in their ever shrinking market expansion (had to think about that one), perhaps there are some fundamental issues with the current versions of the OS that cannot be "patched".

    Maybe some of the changes that they need to make would piss off their customers big time (changing EULA, changes to API which would break existing code, etc..) that it would be easier just to protect the OS against the viruses so the fundamentals aren't changed.

    I'm a love'em/hate'em type of guy when it comes to MS so while I don't entirely trust them, I think that by building a virus scanner, they are in fact admitting that they can't build a bulletproof OS.

    my 2 cents,
    Darcy

  128. Mac version!?!?! by hc00jw · · Score: 5, Funny

    Fantastic! When can we expect a Mac version?

    1. Re:Mac version!?!?! by Anonymous Coward · · Score: 0

      Bah! When can we expect a Linux version?

  129. I feel so DIRTY!!! by Saeed+al-Sahaf · · Score: 4, Funny

    No problems. No big deal. If you are running Windows either because you have bought into the Microsoft Party Line or for some reason you are required to run Windows, than who better to make a Windows virus killer? Only Microsoft can take advantage of the secret hidden proprietary back-doors and APIs. I mean, look: If your going to sleep with Bill Gates, you're already somewhat dirty, so why not go all the way? Ah, what a visual...

    --
    "Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
    1. Re:I feel so DIRTY!!! by sparcnut · · Score: 1
      I mean, look: If your going to sleep with Bill Gates, you're already somewhat dirty, so why not go all the way? Ah, what a visual...
      Excuse me while I... [retch]
      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10);'
    2. Re:I feel so DIRTY!!! by Anonymous Coward · · Score: 0

      Ewwww.... That's it I'm modding you down for giving me that image.

    3. Re:I feel so DIRTY!!! by Anonymous Coward · · Score: 0

      I mean, look: If your going to sleep with Bill Gates, you're already somewhat dirty, so why not go all the way?

      Man, even if I was gay, I'd hope to have better taste! (apologies to the creator of Microsoft BOB! errrr, on second thought...)

    4. Re:I feel so DIRTY!!! by howlingmoki · · Score: 1

      If your going to sleep with Bill Gates, you?re already somewhat dirty, so why not go all the way? If by "all the way" you mean "give Bill a Hot Lunch and a Filthy Sanchez", then I'd be all for it.

  130. Before getting your panties by The+Bungi · · Score: 2, Insightful
    all in a bunch, perhaps someone would like to provide some numbers that prove the majority of worms in Windows systems are not there because the users are just plain utterly stupid and have no AV software to begin with.

    The current batch of mail worms making the rounds require the user to actually unzip a password protected executable and run it manually.

    Password protected. The password is included in the badly written email message body.

    And yet I can't believe how many of these I get every day, from people who were stupid enough to unzip the file and run it.

    That is a "hole for viruses" you can drive a truck through, and you're probably never, ever going to patch, because it cannot be patched.

    You can get "infected" (because I wouldn't really call it that) regardless of what mail client or operating system you're using. In fact, most worms require user intervention.

    Why aren't they incorporating it into Windows? That's ridiculous. If they did they'd be accused of choking the AV vendors using anti-competitive tactics, and if they don't they'll be accused of everything from extortion to incompetence. It doesn't matter.

    People will continue to get infected because they are ignorant. Not stupid - just ignorant.

    And then one day Linux will be the dominant desktop OS and there will be a worm that requires the user to untar and chmod +x on a bash script (yay monoculture) called "NAKED PICS", which will delete ~/ or turn the box into a spam generator zombie or exploit some vendor-introduced vulnerability that has a big enough user base, and people will actually get infected with it. But of course it will be their fault, not the software's.

    No AV can fix this problem. This is ultimately a PR move by Microsoft. If they have a way to say "hey, we have free AV and you didn't use it" they'll close the final gap. They can patch RPC vulnerabilities 2 months before a live exploit all they want but they can't cure ignorance.

    1. Re:Before getting your panties by mindfucker · · Score: 2, Funny
      I switched my brother from WinXP to Fedora Core 2 recently after he got sick of being hit with twenty spyware popups whenever he loaded a page in IE.

      I'm pretty sure he's safe now because he doesn't know how to install anything.

  131. SP2 Securty Center by Kozar_The_Malignant · · Score: 1

    And let's all guess which AV product will integrate best with SP2's Security Center. I can see the messages now, "Security Center cannot verify the status of your McAfee antivirus software. Your computer may be vulnerable to takeover by hostile or satanic forces." If this is displayed every 15 minutes on every copy of XP Home, how many copies of their AV software do you think they'll sell?

    --
    Some mornings it's hardly worth chewing through the restraints to get out of bed.
  132. Sounds like April 1st at NAI by dylanm · · Score: 1

    When I worked at Network Associates, someone sent out a fake press release that looked very similar to this on April 1st of this year. looks like they should have taken it a little more seriously.

  133. Well, since you asked.... by khasim · · Score: 5, Interesting

    "Yeah? And how exactly?"

    Make it easily and completely removable and publish the API. Again, during the trial, Microsoft claimed that IE could not be removed because removing those .dll's would "cripple" Windows.

    "If they could do that, then they'd have more than 3 apps that held monopoly status. Frontpage? Nope. IIS? Nope. Exchange? Nope. Media Player? Nope. Gee, I guess their monopoly isn't all that strong unless people actually want their stuff?"

    So far, they've only been ruled a monopoly in one market. The desktop x86 market (Windows). Like I said, you need to read more.

    It was cute how you tried to toss in two server apps (IIS and Exchange). Hee hee. :D

    Oh well, you Microsoft apologists are all the same.

    1. Re:Well, since you asked.... by Short+Circuit · · Score: 1

      Exchange I can understand, but you show me a version of Windows 2000/XP that doesn't come prepackaged with IIS.

    2. Re:Well, since you asked.... by NanoGator · · Score: 1

      "Make it easily and completely removable and publish the API."

      Fair point, but I doubt that'd be enough this time around. The main reason being that the AV software out there today is specifically for Windows. MS has an inside advantage towards getting problems fixed.

      "So far, they've only been ruled a monopoly in one market. The desktop x86 market (Windows). Like I said, you need to read more."

      How does this contradict my point that Microsoft doesn't have monopolies everywhere?

      "It was cute how you tried to toss in two server apps (IIS and Exchange). Hee hee. :D"

      Eh? Microsoft isn't the market leader in either app, so what's so 'cute' about it? Microsoft would sure LIKE to be. Same goes for the XBOX, they couldn't buy themselves into #1 there.

      "Oh well, you Microsoft apologists are all the same."

      Uh okay. I suppose I should just drop everything, shake my pitchfork at MS at every turn, and badmouth every little thing they do? That way I could be cool just like everybody else here.

      --
      "Derp de derp."
    3. Re:Well, since you asked.... by NanoGator · · Score: 2, Informative

      "Exchange I can understand, but you show me a version of Windows 2000/XP that doesn't come prepackaged with IIS."

      IIS that comes with 2k or XP only allows 10 connections. Though a fair shade better than GeoCities, you still can't use it for web serving. At best, it's a 'lite edition'.

      --
      "Derp de derp."
    4. Re:Well, since you asked.... by killjoe · · Score: 3, Insightful

      "Uh okay. I suppose I should just drop everything, shake my pitchfork at MS at every turn, and badmouth every little thing they do? That way I could be cool just like everybody else here."

      No just try not to be sycophant for a corporation. Especially if that corporation doesn't give a shit about you, your life, your family, your freedom, your health or any other aspect of your life.

      Why waste your time and energy defending a giant rich corporation from slashdoters? What's in it for you? Why not go to a forum where people discuss washers and defend maytag. Maytag is a corporation too and I bet they need your help just as much as Microsoft does.

      --
      evil is as evil does
    5. Re:Well, since you asked.... by Anonymous Coward · · Score: 0

      It doens't matter because IIS does not account for a major part of the web server market, therefore it CANNOT be a monopoly.

    6. Re:Well, since you asked.... by NanoGator · · Score: 0, Redundant

      "Especially if that corporation doesn't give a shit about you, your life, your family, your freedom, your health or any other aspect of your life."

      Name one that does.

      "Why waste your time and energy defending a giant rich corporation from slashdoters?"

      Actually, I wasn't. The point wasn't that MS was in the right, it was that no matter what they did, people here would bitch.

      "What's in it for you?"

      Nothing that makes it worthwhile.

      "Why not go to a forum where people discuss washers and defend maytag. Maytag is a corporation too and I bet they need your help just as much as Microsoft does."

      You want me to go somewhere else because I don't blindly hate Microsoft and every move they make? Come now, certainly you're more civilized than that. If you're telling me to leave because I've made undisputed observations, then isn't that a big flashing clue that maybe, just maybe, you're not well enough informed on the matter to justify hating MS?

      --
      "Derp de derp."
    7. Re:Well, since you asked.... by Aero+Leviathan · · Score: 1

      WinXP Home.

      --
      ~ Aero
    8. Re:Well, since you asked.... by Anonvmous+Coward · · Score: 1

      "Oh well, you Microsoft apologists are all the same."

      Real classy.

    9. Re:Well, since you asked.... by shaitand · · Score: 1

      "Eh? Microsoft isn't the market leader in either app, so what's so 'cute' about it? Microsoft would sure LIKE to be. Same goes for the XBOX, they couldn't buy themselves into #1 there."

      Microsoft doesn't and never did have a monopoly in the server market. They DO have a monopoly in the desktop market and THAT is what they leverage to gain other monopolies.

      Since their existing monopoly is in the desktop market and not the server market, it stands to reason that they can't exactly leverage their desktop OS monopoly to create server application monopolies.

    10. Re:Well, since you asked.... by killjoe · · Score: 2, Insightful

      "You want me to go somewhere else because I don't blindly hate Microsoft and every move they make? "

      No. I am simply pointing out that other corporations need defending too. Why limit yourself to shilling for just one corporation? Isn't it more rewarding to shill for lots of corporation in lots of different industries?

      I don't think it's fair that you only defend Microsoft. Lots of people hate Ford, GE, Coors, Maytag, Monsanto etc. I am asking you to defend all of these poor helpless corporations against the mean and vicious public.

      "you're not well enough informed on the matter to justify hating MS?"

      I don't need justification to hate a corporation. They are not human beings. They are soul-less immortal beings. When I was growing up I was told that coul-less immortal beings were devils and demons. I think maybe that was the truth.

      --
      evil is as evil does
    11. Re:Well, since you asked.... by NanoGator · · Score: 1

      "Why limit yourself to shilling for just one corporation?"

      Because I'd be modded as off-topic if I were defending Ford in this convo?

      Heh, nice try though.

      --
      "Derp de derp."
    12. Re:Well, since you asked.... by NanoGator · · Score: 1

      "Since their existing monopoly is in the desktop market and not the server market, it stands to reason that they can't exactly leverage their desktop OS monopoly to create server application monopolies."

      Ah... well okay I can understand why people thought I was trying to sneak in an unfair argument there. Thing is, the whole point I was making was that Microsoft can't just go buy or make a monopoly. They've tried VERY hard in the server market, and gee whiz, they just can't do it. They've done everything from make a better product to publishing lies about Linux, yet they still can't crack it.

      It's easy to dismiss that argument as "well they don't have a monopoly there", but the truth is MS just plain cannot go make a monopoly somewhere unless they make a product the market agrees with. Getting back to my original argument, this means they can NOT put Norton out of business without making a superior product.

      --
      "Derp de derp."
    13. Re:Well, since you asked.... by WIAKywbfatw · · Score: 1

      If I remember correctly, that 10 connections limit only applies to the Professional and Home versions of Windows 2000 and Windows XP: the Server versions of Windows 2000 and Windows 2003 have no such limitations.

      Even with the workstation versions of those OSes the 10 connections limit can be easily removed/raised simply by changing a registry key.

      --

      "Accept that some days you are the pigeon, and some days you are the statue." - David Brent, Wernham Hogg
    14. Re:Well, since you asked.... by drsmithy · · Score: 1
      Make it easily and completely removable and publish the API. Again, during the trial, Microsoft claimed that IE could not be removed because removing those .dll's would "cripple" Windows.

      Which was perfectly true. Take those bits out of Windows and it breaks.

    15. Re:Well, since you asked.... by Anonymous Coward · · Score: 0

      A lot of people have figured out how to remove that restriction, and MS knows it.

      Although technically, those that do are violating the license, there are many sites out there running on workstation editions of windows. A lot of them regularly serve more than 10 requests.

    16. Re:Well, since you asked.... by Anonymous Coward · · Score: 0

      Oh well, you Microsoft apologists are all the same.

      And you dare to say that on slashdot ?!

    17. Re:Well, since you asked.... by metamatic · · Score: 1

      A Maytag washing machine killed my mother, you insensitive clod!

      --
      GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
    18. Re:Well, since you asked.... by Anonymous Coward · · Score: 0

      Man you are dense.

    19. Re:Well, since you asked.... by Anonymous Coward · · Score: 0

      Oh wait, I just re-read what you were saying. I'm sorry, I didn't mean to call you dense. Please ignore my last post there.

    20. Re:Well, since you asked.... by Anonymous Coward · · Score: 0

      > Why waste your time and energy.....

      To make it seem like his MSCE has value to his PHB?

      That's what I see when I read it.

    21. Re:Well, since you asked.... by SilentChris · · Score: 1

      "Especially if that corporation doesn't give a shit about you, your life, your family, your freedom, your health or any other aspect of your life."

      Same goes for defending art interests, politicians, etc. None of these "give a shit" about me, my life, my family, my freedom, my health, etc. Even if I planned on voting for X politician, chances are Mr. X has no clue who I even am.

      The goal of a place like Slashdot is to get as many opinions as possible into the mix. Simply firing against any given company (or praising them, like Apple) brings the level of discussion down to a 3rd grade level.

    22. Re:Well, since you asked.... by shaitand · · Score: 1

      "They've done everything from make a better product"

      Really? I missed that one, what product was this?

      I wasn't disagreeing with you entirely like the grandparent however. Just trying to help clarify what he was trying to say on that one point.

      I agree with you that MS cannot make monopolies. Really when you think about it, they didn't even build their first monopoly. The IBM PC Compatible won the desktop market, MS was just along for the ride. All they had to there was not be so blatantly horribly terrible that people would throw them away.

      When you think about it, now that the IBM PC had created a monopoly for them... well they've used that same tactic, their other monopolies have rode on an existing flagship in the market and not been so terrible that EVERYONE threw them away.

      Their desktop monopoly was luck. Their Browser and other monopolies are really just ripples of that first bit of luck. MS has never thus far genuinely won a market.

      Even the server share they do have is arguably just a ripple of their desktop monopoly. After all, if you start them in school running windows, then have them run windows in college. Then it's simply a matter of providing a system which isn't to terrible to get them to setup what they are already used to working with rather than something foreign and alien. Even if the alien thing is better.

    23. Re:Well, since you asked.... by Canberra+Bob · · Score: 1

      "It's easy to dismiss that argument as "well they don't have a monopoly there", but the truth is MS just plain cannot go make a monopoly somewhere unless they make a product the market agrees with"

      Hmm...this may be why the zealots are flaming you. You had the gall to suggest that MS may actually be a monopoly on the desktop because it offers people what they want. You are not saying it directly, but this implies that desktop Linux does NOT offer what the majority of people want.

      This borders on blasphemy you realise!

      Sometimes its just better to let the zealots froth at the mouth, keep patting each other on the back that Linux is ready for the desktop (it is, really, honestly, "have you installed the latest Xandros?" "havent you heard of freedesktop.org?") and flame anyone who dares suggest that Windows has changed since they last used it back in 98. Heck, Outlook hasnt run attachments automatically for the past 2 years, yet they still climb out of the woodwork talking about Outlook automatically running attachments.

      Maybe if people with experience extending beyond "I am a l337 h4x0r" are not wanted, the title should be changed from "Slashdot: news for nerds" to "Slashdot: news for rabid uninformed Linux zealots"

      In response to one of your detractors, neither Red Hat nor Debian has ever done anything for me personally so why should I want to support them either? This attitude that you have to hate a company just because it makes money is just childish in the extreme. Should I also hate myself because I charge for consulting?

    24. Re:Well, since you asked.... by ndykman · · Score: 1

      Let replace a word or two here from above and ponder.

      "Why waste your time and energy" bashing "a giant rich corporation on" slashdot? "What's in it for you? Why not go to a fourm where people discuss washers and" criticize "Maytag. Maytag is a corporationg too and I bet they " make lots of mistakes "just as much as Microsoft does."

      Maybe it's because some people here are actually interested in real discussion? I'm not expecting miracles, and Slashdot will probably always be awash in anti-MS, SCO, flavor/company of the week rethoric, but at the same time, there is interesting and thoughtful discussion.

      Well, sometimes. Pretty often. Maybe not regularly, but on ocassion. One in a while. Er, blue moon, maybe? ;-)

      Oh, another point. MS may actually give a rat's ass, so to speak, if said poster was an employee. Or business partner. Or good customer. Or independent developer. And so on. How much of a rat's ass, I can not say.

    25. Re:Well, since you asked.... by Lehk228 · · Score: 1

      ick, 10 connections, TWS handles more than that as freeware

      --
      Snowden and Manning are heroes.
    26. Re:Well, since you asked.... by Pharmboy · · Score: 1

      Maybe it's because some people here are actually interested in real discussion?

      but it takes swimming through a lot of garbage to find it some days.

      On another note, I have heard about Microsoft working on AV software for a few YEARS now. I searched this page for the word "vaporware" and found nothing, ironically. They used to make AV software, and it wasn't that good (win 3.0 days).

      The monopoly talk has probably slowed them down but the biggest complain I had heard over the years was that the OS should be more virus proof to start with, so it should be included in Windows. And of course, that including it free with the OS is abusing their monopoly because it hurts competition. They can't win.

      The people that bitch the loudest over the lack of security on Windows are the first to bitch that they are hurting other companies by giving the AV away. Of course, they bitch about other actions by Microsoft, and we all agree with some of it.

      There is a certain amount of irony, considering many of us use lots of free software. How many of us run Linux (using iptables), with Spamassassin, ClamAV, MainScanner, tripwire and other products that you often have to buy seperately with Windows. I am one of those that use both OS's, and so are most of users on slashdot, to one degree or another.

      So, its ok if its free (as in beer) on Linux, but not on Windows? Free (as in speech) aside, for the average user its a better value if it works and its free, and its incorporated. I don't trust Microsoft for many reasons, but I am not so sure I can trash them if they did give it away, considering I get the same thing for free (with more choices) on Linux now.

      --
      Tequila: It's not just for breakfast anymore!
    27. Re:Well, since you asked.... by Anonymous Coward · · Score: 0

      >> Why waste your time and energy defending a giant rich corporation from slashdoters? What's in it for you? Why not go to a forum where people discuss washers and defend maytag. Maytag is a corporation too and I bet they need your help just as much as Microsoft does.

      Not to be excessively chauvinistic but... did you read this, Eugenia? :-P

    28. Re:Well, since you asked.... by vsprintf · · Score: 1

      If you're telling me to leave because I've made undisputed observations, then isn't that a big flashing clue that maybe, just maybe, you're not well enough informed on the matter to justify hating MS?

      Well, I can't speak for the OPs, but when you're defending your position from multiple attacks, which "observation" is it that's "undisputed"? Your position seems to be that MS is justified in gouging its users for new software that protects them from the MS software they already paid for. If MS were "in the right", they'd give the AV software to users for free (bundle it) instead of making another profit center based on curing the insecurity of their flagship software. After all, they don't charge users for a browser or a media player or an email client. Perhaps its not "hating MS" as much as taking a realistic look at what they are doing.

    29. Re:Well, since you asked.... by t1m0r4n · · Score: 1

      >>"It was cute how you tried to toss in two server
      >> apps (IIS and Exchange)."

      > Microsoft isn't the market leader in either app,
      > so what's so 'cute' about it?

      O.k., I'll bite. On the MS platform I think IIS and Exchange are the market leaders. I don't know too many shops that that use alternate software if they chose MS for the server OS. MS would really like to dominate the server environment, and as their share grows, so grows the popularity of the apps.

      As for my personal take on the AV debate, I would like to see MS buy out Panda Antivirus and include it in the standard OS, and even stick in in Windows Update. Would make my life much easier. But, while I'm dreaming, I would also like to see MS decide to embrace open source, and all those virus writes should start being nice. That would make me happy!

    30. Re:Well, since you asked.... by Anonymous Coward · · Score: 0

      Don't get me started on Maytag. First, they try to claim in their commercials that I'll never need a repairman. Ha! And then when I ask them to send me the repairman, I get a rotting corpse left outside my door. What kind of service is that?

    31. Re:Well, since you asked.... by Anonymous Coward · · Score: 0

      > And then when I ask them to send me the repairman, I get a rotting corpse left outside my door. What kind of service is that?

      Funeral services?

    32. Re:Well, since you asked.... by killjoe · · Score: 1

      No not here. Shilling for Ford here is indeed offtopic. You need to shill for ford on other boards where cars are discussed. Then you need to shill for maytag on boards where appliances are discussed.

      Being a corporate shill is not easy but corporations need brave and hard working people like you to stick up for them.

      --
      evil is as evil does
    33. Re:Well, since you asked.... by killjoe · · Score: 1

      I don't see anything wrong with anybody attacking any corporation, any time, for any reason, anywhere.

      I do however think that there is something sick and disgusting about shilling for them. I find it odd and pathetic that people wear corporation logos and proudly associate themselves with a soul-less imortal and aroral entitites like corporations.

      I could understand if you are astro turfing and getting paid for it at that point it's just a job. To do it for free though? that's just disgusting.

      --
      evil is as evil does
    34. Re:Well, since you asked.... by killjoe · · Score: 1

      I would have no objection to defending anybody, any organization or any politicial who was working for the betterment of mankind.

      I just find it sick and disgusting that people would defend a sleazy and unethical corporation like microsoft. How do people sleep at night? They must have no conscience I guess.

      --
      evil is as evil does
    35. Re:Well, since you asked.... by NanoGator · · Score: 1

      "Being a corporate shill is not easy but corporations need brave and hard working people like you to stick up for them."

      Okie doke. If I ever decide to be a shill, I'll keep that in mind. G'nite, sir. :)

      --
      "Derp de derp."
    36. Re:Well, since you asked.... by killjoe · · Score: 1

      "Okie doke. If I ever decide to be a shill, I'll keep that in mind. G'nite, sir. :)"

      You mean for ford or maytag? Why not? You are already a shill for microsoft, a quick reading of your posts ought to make that crystal clear to anybody who bothers to read them. As long as you are shilling for corporations why not expand your repetoire.

      --
      evil is as evil does
    37. Re:Well, since you asked.... by Cro+Magnon · · Score: 1

      Um, doesn't it breaks WITH those bits too?

      --
      Slow down, cowboy! It has been 4 hours since you last posted. You must wait another few hours.
    38. Re:Well, since you asked.... by NanoGator · · Score: 1

      "You mean for ford or maytag?"

      Which one pays more?

      "You are already a shill for microsoft, a quick reading of your posts ought to make that crystal clear to anybody who bothers to read them."

      Heh. No, I'm not, sorry. It doesn't appear as though you've followed my posts very carefully. You're not calling me one because I'm going out of my way to 'support' them. Rather, it's because I'm right in this particular case. (Notice that there's no real rebuttal here, just a little inaccurate name calling.)

      Nice try, though. ;)

      --
      "Derp de derp."
    39. Re:Well, since you asked.... by killjoe · · Score: 1

      "You're not calling me one because I'm going out of my way to 'support' them. Rather, it's because I'm right in this particular case. (Notice that there's no real rebuttal here, just a little inaccurate name calling.)"

      Once again a quick reading of your posting history makes it crystal clear that you are a MS shill.

      As for what ever argument you are making that's irrelevant. You are defending a corporation. I don't understand why anybody would take even 10 seconds out of their lives to defend a sleazy unethical ccrporation like MS. It's not like MS doesn't spend millions of dollars hiring PR firms and advertising agencies to push their point of view on us. Why do you think they also need your help? What do you get out of it? Maybe you are on the payroll. That would be the only reason I can think of for somebody to defend bastards like MS.

      --
      evil is as evil does
    40. Re:Well, since you asked.... by NanoGator · · Score: 1

      "Once again a quick reading of your posting history makes it crystal clear that you are a MS shill."

      Nope. I've roasted them a few times. You obviously haven't put any energy into finding that out. Nice try, though. ;)

      "You are defending a corporation."

      Nope.

      " I don't understand why anybody would take even 10 seconds out of their lives to defend a sleazy unethical ccrporation like MS."

      Haven't defended them. I have brought up opposing view points on particular things they've done, but I've never ever said they themselves were good/ethical/honest/etc.

      "Why do you think they also need your help?"

      Never said they did. Not helping them. Correcting somebody != supporting anybody in particular.

      "What do you get out of it?"

      Well, sometimes I get the joy of attracting morons into pointless debates. I always have a good chuckle at the peeps that waste their time calling me name. They try to get to me but it doesn't work, so they keep trying and trying and trying. In the end, I'm still going about my business, and they're banging their fists on their desk. Amusing stuff. ;)

      "That would be the only reason I can think of for somebody to defend bastards like MS."

      Yeah well I wouldn't expect an uninformed person to be able to think of a whole lot of reasons for anything. I wouldn't expect much more than for a person like that to call people that disagree with them names and try to say they have a financial interest in having a particular view. No no.. they just goooo with the floooow. Afterall, you have a bunch of instant friends if you hate MS. It's like a cult or something.

      Have a good night. :)

      --
      "Derp de derp."
    41. Re:Well, since you asked.... by Anonvmous+Coward · · Score: 1

      "Nope. I've roasted them a few times."

      I can vouch for that. He was particularly vocal during MS's anti-Linux campaign not all that long ago.

      NG isn't an MS fanboy or shill or whatever you want to call him. If he is anybody's shill, he's Nintendo's. One day he will describe himself as an unnoffical spokesman for Nintendo.

    42. Re:Well, since you asked.... by killjoe · · Score: 1

      "Never said they did. Not helping them. Correcting somebody != supporting anybody in particular."

      The following is a true story.

      Today I was in a sporting goods store. Two people were talking about some fly fishing socks that cost $14.00. One said something like "Why would a sock cost 14 dollars" the other said "Cos it's simms sock I guess. I bet lots of suckers buy it because of the name. I would never pay 14 dollars for a pair of socks, they probably will fall apart a week after you buy them anyway".

      The conversation is not verbatim but you get the point. These two people were making fun of Simms socks, the company and the stupid people who would buy their stupid product.

      You know what? It never occured to me that I should correct them. It never occured to me that I should say to them that simms makes fine products and the socks were probably worth the 14 dollars.

      Why?

      Because I don't give a flying fuck about Simms the corporation or their 14 dollar socks. I would not waste 10 seconds of my time trying to stick up for simms. Even if their socks were the best socks in the world I wouldn't give a shit.

      So you still haven't answered my question.

      Why do you care so much about MS and their products that you feel the need to inject yourself into a conversation on their behalf?

      Would you have defended Simms in that situation? Would you have injected yourself into that conversation. Do you routienly correct everybody who says something bad about any product from any corporation? If not why this time? Why MS?

      That's a serious question. See if you can answer it, if not for me then for yourself.

      --
      evil is as evil does
    43. Re:Well, since you asked.... by NanoGator · · Score: 1

      "Why do you care so much about MS and their products that you feel the need to inject yourself into a conversation on their behalf? ... That's a serious question. See if you can answer it, if not for me then for yourself."

      I did answer it. Here's the summary: I wasn't defending MS, I was correcting what I believed to be an error.

      "Do you routienly correct everybody who says something bad about any product from any corporation?"

      Nope.

      "If not why this time?"

      Because I had info to share, and a little bit of time to share it.

      "Why MS?"

      So are you being willfully dense now? I've answered this like 3 times now. I've never ever defended MS as a corporation. In this particular case, I wasn't even defending a product or service of theirs. Why do I have the feeling you're just going to say "That's not an answer, why are you really doing it?"

      Heh.

      "That's a serious question. See if you can answer it, if not for me then for yourself."

      Nice try. :)

      --
      "Derp de derp."
    44. Re:Well, since you asked.... by killjoe · · Score: 1

      It sounds like not even you know why you did it.

      Fair enough. Most people don't think too much about why they do the things they do.

      --
      evil is as evil does
    45. Re:Well, since you asked.... by NanoGator · · Score: 1

      "It sounds like not even you know why you did it."

      Hmm.. let's see...

      ""Here's the summary: I wasn't defending MS, I was correcting what I believed to be an error."

      Now that's pretty embarrasing. Nice try. ;)

      --
      "Derp de derp."
    46. Re:Well, since you asked.... by killjoe · · Score: 1

      Once again you missed the point entirely.

      I guess you'll never get it and I'll never understand you because we are very different human beings.

      You are they type of a person who would interject themself into a conversation about a corporation and try to correct some misunderstanding about that corporation. I am not. I don't give a flying fuck about any corporation and it does not bother me if somebody has some misunderstanding about that corporation. I don't feel compelled to set the record straight.

      You say what you did but you don't say why you did it. Why did you feel compelled to correct the so called error? I never felt compelled to intervene on behalf of Simms about the socks why did you feel compelled to intervene on behalf of MS?

      BTW you were indeed defending MS. You have lots of posts in your history where you defend MS.

      --
      evil is as evil does
    47. Re:Well, since you asked.... by NanoGator · · Score: 1

      "BTW you were indeed defending MS."

      BTW, no I wasn't. Go reread my initial post, it was about the people/industry's response to it. It was not about Microsoft.

      "You have lots of posts in your history where you defend MS."

      Don't confuse being critical of the Slashdot Community with being pro-MS. If you really understood the point of a lot of posts I've made, you'd realize that. However, since you are stuck on a false presumption, there's not a whole lot I could do to set you straight. Sorry. Find me when you are receptive about anything.

      --
      "Derp de derp."
    48. Re:Well, since you asked.... by killjoe · · Score: 1

      YOur posting history is there for everybody to see. You can continue to deny that you are a shill but a quick resding will make it apparent. BTW You regularly are called on your shilling by lots of people and your response is always "am not".

      As I said you and I are completely different kinds of human beings. I don't think we will ever see eye to eye. I don't get people like you and you will never get people like me.

      --
      evil is as evil does
    49. Re:Well, since you asked.... by NanoGator · · Score: 1

      "You can continue to deny that you are a shill but a quick resding will make it apparent.

      Heh you just embarrased yourself again. You obviously havent seen my posting history.

      "You regularly are called on your shilling by lots of people.."

      Shill? Not really. May I assume you mean more names than just shill? In that case, you are correct.

      Every single time, especially your case, it was out of anger at me, and not some analysis of the facts. (Of course, if they used facts, they couldn't prove I'm a shill or MS apologist, or that I suck Billy Gates's dick, etc.) They hate Microsoft. They hate me for not joining the cool club. They call me names thinking it'll bother me. It doesn't. I get a good chuckle out of it, though. :)

      "and you will never get people like me."

      Oh believe me, I get you. There was a time I was like you. I used to think everybody who liked Mac was a 'fag'. I was a real dickhead then. Fortunately, I've grown out of it into a more objective lifestyle. Hopefully you'll grow out of it, too. There are very few things on this planet that are simply black and white.

      --
      "Derp de derp."
  134. Re:"Anti-virus program as a separate product from by TheFlyingGoat · · Score: 1

    Perhaps the smartest business method they could employ would be to build the scanner into the OS, provide free dat updates for the first x days/months/years, and then ask for a subscription fee after that, just like all the other companies do. If you don't want to use it, you can easily just install McAfee or Norton and turn off the MS scanner. Assuming they'd keep up with the viruses, just like McAfee does, I'd be willing to pay a small fee each year. If they kept it low ($1?), they'd have tons of people use the service and make lots more money.

    Of course, it would be smart for them to provide free updates to protect against certain viruses if they're slamming the net hard. MS has to pay bandwidth fees too, so I'm sure they wouldn't mind getting slammed a little less when certain viruses come out.

    --
    You have enemies? Good. That means you've stood up for something, sometime in your life. --Winston Churchill
  135. Re:"Anti-virus program as a separate product from by betadog · · Score: 1

    I wonder if they are selling this as a separate product to avoid getting sued by other makers of antivirus software.

  136. Re:A part of the OS by Provocateur · · Score: 1

    Yes. In a bold and unusual anti-virus strategy, that sets it apart from the competition, it surgically removes the healthy organism, and effectively quarantines the virus, on your hard drive. The hard drive can then be encased and shipped to Microsoft for forensic analysis to determine the origins of the virus and the level of severity of contamination.

    --
    WARNING: Smartphones have side effects--most of them undocumented.
  137. Seperate product from Windows? by Anonymous Coward · · Score: 0

    Does this not make sense? As if microsoft is going to make any money marketing this product to anyone OTHER than windows people..
    "Buy Microsoft Virus Scanner! Now available for Linux and OSX!"

  138. Re:A part of the OS by zulux · · Score: 1

    They bought someone up and slapped their name on it. http://www.ravantivirus.com/

    RAV Antivirus also supported Linux and FreeBSD, and were proud of it.

    --

    Moneyed corporations, non-working 'poor' and criminal prisoners are turning productive citizens into tax-slaves.

  139. Microsoft Business Model revisited by osho_gg · · Score: 1

    This the microsoft business model for the 90's decade.

    1. Relese products with bugs, problems, instabilities.
    2. Release newer versions of products with fixes to old bugs and some new versions. Charge pretty good money for the upgrade.
    3. Go back to Step 2. PROFIT!

    But, now that their core money-making products (windows OS and MS Office) are not making enough money with this business model; here is the business model for the next decade.

    1. Release products that are extremely insecure and prone to viruses.
    2. Release anti-virus software to guard against such virus and charge for it. Fix old viruses while creating patches in the product that enable new viruses.
    3. Repeat steps 1 and 2 and laugh all the way to the bank. PROFIT!

    As the little bill said watching harry potter, bloody brilliant!

    cheers!
    Osho

  140. What has changed? by MrMastadon · · Score: 1

    They need new revenue streams, that is what has changed. If you can't fine new ones, then create them. I believe we have term for that - extortion. As someone has already mentioned.

  141. MSAV by rfernand79 · · Score: 3, Insightful

    They already had one! It was included in MS-DOS 6.2, called MSAV. It sucked anyway.

  142. RAV Antivirus for Linux, RIP! by Orion+Blastar · · Score: 1

    I use CLAMAV for Linux anyway, I won't miss RAV Antivirus for Linux.

    --
    Remember, Slashdot does not have a -1 disagree moderation, and no, troll, flamebait, and overrated are not substitutes.
  143. I smell a lawsuit by Spazmania · · Score: 1

    This is a dumb idea. You have to pay the company extra to be protected from the defects in the company's product? That's like selling a car but if you want all five lugs for the tire its extra. Oh yeah, and if you don't buy the option, its recommended that you drive slowly on only smooth roads.

    If I were a trial lawyer I'd be rubbing my hands with glee.

    --
    Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
    1. Re:I smell a lawsuit by Anonymous Coward · · Score: 0

      yeah im sure microsoft are just SHITTING THEMSELVES about being taken to court.
      you're right about lawyers though. this kind of stuff is glee hand rubbing time. wouldnt surprise me if m$ legal dept came up with the idea.

  144. Patching OS is different from updating virus data by mldqj · · Score: 1

    My only question is: If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?"

    If you let Symantec or Network Associates to maintain Windows, I don't believe they could do much better than Microsoft. But their anti-virus softwares are the most popular, and the updates are quite in time.
    To patch an OS, a lot of testing must be done to ensure that the patch does not break something else.

  145. Isn't there... by cs02rm0 · · Score: 2, Interesting

    ...just a slight conflict of interest here?

    Normally we see crappy AV software picking up fake hits to make it look good... where will MS go with this... false positives to make the AV software look good or cover ups to make the OS look good?

    It might be a novel idea and almost certainly redundant... but what about the idea of focusing more resources on prevention rather than cure? It'd be less admin for them, although, they'd be another 'feature' down to further clog up Windoze.

  146. so they try again... by tazanator · · Score: 1

    in Dos 6.22 they atempted to run an AV product, it was a lackluster but freebie included in the DOS install. Unfortunantly they are still extremly slow releaseing new virus signatures for this product (I am still waiting for a new one against code red...). I hope this product will push them to seperate from the OS but I know it will hook into the OS and bind making other competators products fail to install (ala. the netscape/real player issues).

    --
    I'm told you are what you eat, does that mean I can be you by tomorrow with some A1?
  147. I thought they already did.. by thebra · · Score: 1

    isn't it called Windows Update?

  148. Meh by Haydn+Fenton · · Score: 5, Insightful

    Does anybody else find this a bit unfair? (Yeah, I know that's M$'s gameplan, but still)

    I mean, the only OS which viruses are a major threat is windows.. and now they're going to sell AV software? That just takes the piss in my opinion.

    "Hey Bill, we can't possibly fight off all these viruses, surely we'll start losing customers at some point", "Hey, I know! lets sell some Antivirus software, that way we make yet more money and we can get away with releasing patches at an even slower rate, and we get away with terrible programming"...

    1. Re:Meh by Short+Circuit · · Score: 5, Funny

      Too bad your average consumer doesn't know enough about computers to see the irony:

      Salesperson: Buy our Operating System!

      Customer: OK.

      Salesperson: Now buy our Antivirus solution! Without it, hackers will steal your identity.

      Customer: Egads! Here! Take all my cash!

    2. Re:Meh by sprins · · Score: 4, Insightful

      My parent-message is modded as "Funny" but should have been modded "Sad" as this is indeed the bitter irony.

    3. Re:Meh by grioghar · · Score: 2, Interesting

      Actually, the average user DOES see this, but they're too afraid to transition to something else.

      I sale computers in a Mom & Pop shop for a living, and I almost pity the people who buy new machines, only to have the machine exploited 30 minutes later when they first hook it up to the Internet.

      An average week finds angry faces and empty threats of wishing there was an alternative to Microsoft. I promote my precious (see Golum) Apples, but the price difference and the software compatibilities stop a lot of people from switching.

      I watch these people get hit in the pocketbooks for Microsoft's insecurities. I mean, hey, it pays my paycheck, but there NEEDS to be a better way. Regardless of whether or not Microsoft can provide this with *their* AV software, well, that's to be seen. They're a fairly innovative company in how they operate (COMPLETELY subjective comment, yes, but XP has empowered 80+yos to print, scan, copy, and fax with an ease not found previously), so we'll see what they do here.

      --
      Can you ping me now? Gooood! | Manhappenin.Net - Things to do
    4. Re:Meh by wuice · · Score: 1

      Of course, if the AV software had been bundled with the OS, there would be an outcry (maybe by you, but definitely by someone here, or many someones here) that this was anti-competitive, leveraging their monopoly powers to force other AV firms out of business, etc, etc. It's feasible that the Justice Dept wouldn't be too happy about it either.

      On the other hand, I'm sure Symantec and the like are stoked that Microsoft is going to be charging for their AV software.

    5. Re:Meh by mingot · · Score: 1

      I sale computers in a Mom & Pop shop for a living, and I almost pity the people who buy new machines, only to have the machine exploited 30 minutes later when they first hook it up to the Internet.

      If I were selling boxes in a mom and pop type of establishment I tend to think that I'd have a ghosted install of XP home with all of the latest and greatest patches for the common hardware configurations I sold. Oh, and before the sale would diddle the registry to insert the proper serial for the OEM package you gave to the customer.

    6. Re:Meh by vsprintf · · Score: 1

      Too bad your average consumer doesn't know enough about computers to see the irony:

      Truly. Imagine the advertising campaign: A bunch of steely-eyed body-builders in butterfly costumes holding assault weapons, their backs against the wall, while a bunch of clueless users joyously slide down the hallway in a slow-motion group hug. And the voice-over jingle: "Who you gonna' call to make sure the Windows (R)(TM)(C) are closed?" (to the Ghostbusters theme, of course). BTW, the above idea is hereby copyrighted, MS - contact me if you want to deal.

      Seriously, the irony really is hard to believe. Here is a company selling people software to keep an eye on the holes in the software that they previously sold to the people . . . And then I guess it goes recursive: The anti-virus-program-monitor and the anti-virus-program-monitor-anti-virus-program, etc., until the system is finally deadlocked since all resources and CPU time are used preventing any process from doing anything. Then blame it on the hardware for being too slow. Man, what a great racket.

    7. Re:Meh by 1u3hr · · Score: 1
      sale computers in a Mom & Pop shop for a living, and I almost pity the people who buy new machines, only to have the machine exploited 30 minutes later when they first hook it up to the Internet.

      Probably you aren't allowed to patch the systems before you sell them, but you could give, or sell if you're mercenary, a CD with the XP SP1 "network install" (offline), and later patches.

    8. Re:Meh by Anonymous Coward · · Score: 0

      You Dogbert!!

    9. Re:Meh by grioghar · · Score: 1

      I guess I didn't clarify on that, but yes, *we* do patch them up. I didn't make it clear I was referring to the heavyweights in personal computers, like Dell, Gateway, Compaq. Those machines are the machines we see in our service center more than any for patch issues. (See Blaster and Sasser).

      --
      Can you ping me now? Gooood! | Manhappenin.Net - Things to do
  149. Conflict of Interest by Anonymous Coward · · Score: 0

    I'm having a hard time seeing how this isn't a conflict of interest. Create the vulnerability, then charge to fix it. Find the vulnerability, fix it in MS anti-virus, don't tell competitors.

  150. I think that's called... by maynard · · Score: 1

    ...a 'conflict of interest'. Does it really make sense for the OS vendor that can't secure its product to sell a product for securing its insecure product?

    "Hey, I gotta deal for you... five hundred bucks a week and no one breaks your Windows. See? That's called protection!!!"

  151. only question by trustedserf · · Score: 1
    My only question is: If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?

    That's your only question?

    --
    (null)
  152. Creating the problem and selling the solution by Anonymous Coward · · Score: 1, Interesting

    Didn't the FCC go after a Messenger spammer that was advertising via Messenger that they could stop Messenger ads by buying their product? The basis for their suit was that the company was helping create the problem for which they were selling a solution. Is it just me or does this sound somewhat similar?

  153. Now that's a monopoly! by Mustang+Matt · · Score: 0, Offtopic

    1. Make holes in OS for virii to infect
    2. Make anti-virus software to sell to people using your products.
    3. PROFIT!!!

    --
    The man who trades freedom for security does not deserve nor will he ever receive either. - Benjamin Franklin
  154. Re:"Anti-virus program as a separate product from by nova_ostrich · · Score: 1

    IMO, anti-virus has been one of the things that Microsoft has done right, as far as integration is concerned. We geeks like being able to have a choice in products, and even now with a seperate product, Microsoft is still giving us a choice. Seems a little odd for them, but hey, I'll go with it. Obviously, there's some sanity left there for them to realize that allowing users (or the company said users buy their computer from) to have a choice is a good thing. Now if only they'd let us get rid of IE if we don't want it on our system.

    Hey, stop laughing! A guy can hope right?

    --
    It's scary being a Flash and Flex developer on Slashdot. You guys are unnaturally rabid.
  155. Re:"Anti-virus program as a separate product from by CptSkydrop · · Score: 1

    I find that Microsoft applications purchased seperately from Windows integrate themselves as it is. If it does the job then it won't be Microsoft that will be doing the integration it will be the middle men as it will become an expected feature of windows computers (I can imagine it being installed on pre-installed os bundles routinely).

    It is bad that it isn't as standard and you have to pay extra for it but come to think of it if I had the option of a cheaper windows license without the AV I'd go for it. People who use free AV software and those with outstanding licenses for AV software can save themselves some money.

  156. RAV Anti-Virus by Anonymous Coward · · Score: 0

    It seems most people missed this - MS bought the RAV antivurus company last year. From their web page:

    Bucharest, June 10, 2003 - GeCAD Software has announced a definitive agreement with Microsoft Corp., of Redmond, Wash., USA, by which Microsoft will acquire GeCAD's antivirus technology. Microsoft has stated its intention to integrate GeCAD's technology into products and services that will help secure customers.

  157. Competition by Fiver- · · Score: 1

    You know, back during the original Microsoft antitrust trial with Judge Jackson, David Boies, etc., Microsoft had the former head of Symantec testify for their side. I was DYING for Boies to ask him how he would feel if MS ever created an anti-virus program, but amazingly it never came up. I have a feeling he wouldn't have felt so charitable if their partner suddenly became a competitor.

  158. A fool and his software... by gphinch · · Score: 2, Funny

    ..are soon property of Microsoft

    --
    in bed.
  159. to give them credit... by BeatdownGeek · · Score: 1
    If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?
    I think the problem with patches (once the hole is found) is that it's a pain in the arse for sys admins to install another patch on a whole network, especially if it may cause problems in their environment. That's why MS started only releasing patches once a month (so I understand).

    So I think the idea here may be that AV will have less of an effect on the OS but still protect against exploits, since it's just another applicatoion running on the computer rather than a change to the OS. Hence it's easier to deploy an AV update than a patch. MS usually has patches done in short order after a vuln is found anyways.

    The other thing is, AV does protect stupid people, if the virus definitions are up to date, because it can scan email attachments and watch what ppl download to stop them from doing something stupid.

    Not to say that stupid people won't find a way to break things anyway...

    This also doesn't justify MS making their own AV when there are already perfectly good solutions out there (MacAffee and Norton). I wouldn't use MS's AV anyways. The UI would probably be a rediculously dumbed wizard like their explorer search or windows firewall. No thanks. The whole thing sounds like monopoly leverage to me.

  160. Re:"Anti-virus program as a separate product from by pangian · · Score: 1

    Nah, this is the best of all worlds.

    With subscription fees that small it's easier to just collect the $$ up front, charge 10 or 20 clams up front for free updates for as long as the software is supported (presumably would correspond with how long the OS it designed for is supported). the only reason to charge a yearly subscription fee is if the price is high enough that a big chunk of people would bulk at paying everything up front.

    Plus if you allow people to decide up front whether they want this feature/package whatever you want to call it, you can 1)avoid the antitrust lawsuits and 2)not have to include it in the price of the software, allowing you to keep the OS at a nice round $*99 or $*49 figure and rake in a few extra clams on top.

  161. Re:A part of the OS by Anonymous Coward · · Score: 2, Insightful

    Nothing a shady EULA won't cure, I'm sure.

  162. How ironic by NynexNinja · · Score: 5, Funny

    Microsoft selling Anti-Virus software is like al-Qaida selling life insurance.

    1. Re:How ironic by pr0c · · Score: 1

      uh no.. Microsoft selling Anti-Virus software is like GM selling extended warranties... We don't expect the product to break however if it does this will help.

      And btw, you do realize life insurance will not save your life or bring you back from the dead right? How is the two alike in your post?

    2. Re:How ironic by 4lex · · Score: 1

      Actually, I suppose you mean: like al-Quaida selling coffins.

      (The one selling life insurance would be most happy if mortality drops to zero. If viri dissapear, who is going to buy AV?)

      --
      My journal. Mainly about freedom.
  163. What about Spyware? by Idealius · · Score: 1

    The lines between spyware and viruses are blurring more and more everyday. McCafee and Symantec's scanners (along with AVG & AntiVir) both detect various instances of spyware. Basically, some of the items that show up in AdAware you'll see your A/V report, too. Should be interesting seeing what happens to the Spyware scanning market after Microsoft's A/V release as well as the A/V scanning market..

  164. Not the browser. by hndrcks · · Score: 1

    IIRC, it was the font business that MS trampled first. Then came disk compression, etc. etc. etc... then the browser.

    Wasn't 'Bob' the attempt to co-opt Slashdot? You be the judge.

    --
    Everyone will start to cheer when you put on your sailin' shoes.
  165. Conflict of Interest by Phrogman · · Score: 1, Redundant

    I mean, you buy their OS software and it has lousy security allowing thousands of viruses to easily infiltrate your computer unless you have virus protection installed. They are seemingly incapable of writing a secure version of their operating system - and their attempt at it got delayed again recently I think.

    Now they are going to market a line of Anti-Virus software to help treat their buggy insecure OS.

    What possible incentive will there be for Microsoft to tighten up the security on their OS? If the OS department is sucessful in making a secure version of the next windows, they wipe out the market for the Anti-virus department - and possibly end the new product line.

    This is rather like a used car lot knowingly selling me a car with severe mechanical problems that they didn't appraise me of at the time of sale, then offering to fix those problems for an additional fee as soon as I have bought it. In most places that would be considered a Con Job I think...

    --
    "The first time I got drunk, I got married. The second time I bought a chimpanzee, after that I stayed sober" Arian Seid
  166. It has to be said... by medelliadegray · · Score: 2, Funny

    Write Buggy OS...
    Monopolise Buggy OS...
    Profit!

    Neglect to Fix Holes in Buggy OS...
    Charge for fixes the H4X0rs exploit...
    Profit!^Profit!

    --
    Troll, Troll, go away and flame again some other day
  167. These latest worms and viruses are uncreative by Anonymous Coward · · Score: 0

    This will hopefully make the h4x0rz try harder.

  168. TCO by tallpaul · · Score: 3, Insightful

    What I wonder is - the cost of Anti-Virus software included in all these "Linux vs Windows TCO" comparisons.

    Microsoft themselves making AV software is tantamount to admitting that it is pretty much a requirement that you have AV software in order to run any Windows machine (I know I, and most other systems administrators wouldn't considering running Windows without it). At current market prices for Norton/McAfee, that adds about $40 for the first year (license plus 1 year virus signature updates) + $20/yr afterwards (for virus signature updates). Due to the mfr dropping support, you have to pay $40 every couple of years for a new version also. Admittedly you can get site licenses and buy licenses in bulk which reduces the cost.

  169. Re:A part of the OS by hdparm · · Score: 1
    According to MS, AV software will be separate program - not part of the OS (that's if you believe what MS says).

    Real question is - who is going to make and sell product that will patch MS's AV application?

  170. funny by Anonymous Coward · · Score: 0

    let me be the first to say llllllllllllloooooooooooooooooooooooooolllllllllll llllllllllllllll
    rofl
    ms wants to sell an anti virus!!!!!!!!!!!!!!!!
    wtf if so add it to the os it needs it

  171. Trust ? by Evil+Pete · · Score: 1

    While I'm not certain that I completely trust Microsoft on this

    Repeat after me "conflict of interest". If MS sells anti-virus software then the more insecure the target of the viruses (MS software) then the more product they will sell. I know they are just trying to solve their security issues, but this dependency is worrying.

    --
    Bitter and proud of it.
  172. now let's see how this would work... by theCat · · Score: 1

    ...in practice:

    1. MS-OS team finds or is alerted to 'sploit.
    2. MS-OS team intern walks across the hall and alerts AV team.
    3. MS-AV team issues a 'sploit sig, that goes out over the hourly MS-AV update buried within a dozen other sigs concerning the usual run of worm/viri. No other 'sploit-of-the-day announcement is made.
    4. MS-OS team orders pizza and beer, and continues work on Longhorn.
    5. Within the hour, third-party companies get helldesk calls from 100,000 users of their product that just broke because it does something that looks like malicious activity. They blame Microsoft, and set about patching their software against the MS-AV behavior.
    6. End-users of third-party software buy software updates and stop blaming MS for their problems.

    So is this the end of Windows code patches and the start of third-party patches and updates? I suspect it is far easier to reconfig a built-in MS-AV firewall against exploits and worms than to try and hunt down bad code in their 5 million plus lines of such, even if it pretty much will hose someone else.

    It makes a crude form of sense. It is also admission of defeat at the OS layer. That no doubt is healthy. The 'hiding behind a fig leaf' approach has proven less than healthy.

    Other Things We Can Expect to See(TM):

    -- MS will market their product as superior to other AV because it is more closely integrated with OS update processes;
    -- MS marketing will position their damaged OS as 'self-healing' when loaded with MS-AV;
    -- MS will convince retailers to bundle MS-AV for consumer systems and cite the growing consumer demand for 'self-healing systems';
    -- CPUs will bog down under the AV load as MS-AV spends all its time updating itself and blocking exploits, and so Intel will issue a new chipset with MS-AV acceleration or even MS-AV in firmware, thus driving additional sales of both Intel motherboards and new MSWindows installations;
    -- Longhorn will ship with the software formerly known as MS-AV built into the OS layer, the need for this based on consumer demand for a self-healing OS;
    -- Most 3rd-party AV vendors will go out of business;
    -- Engineering 'exploit reactive systems' around Longhorn will become a new business model for retailers, replacing the idea that one should correct vulnerable code at the outset;
    -- The quality of code and operating systems will fall from the discussion of what is or is not a good system or a good software company;
    -- Non-technical types will stop seeing MSWindows as a problem, and instead will yammer about which hardware and CPU combination provides the best reactive defense.
    -- Virus and worm authors will resume the old practice of writing exploits against hardware, or against firmware;

    Is this better than what we have now? I'm not sure either way. But it sounds costly.

    --
    =^..^= all your rodent are belong to us
  173. Breaking News!!! by Anonymous Coward · · Score: 0
    "... My only question is: If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?"

    Sorry timothy, but according to an 'independent' study:
    "On average, Microsoft had a fix available 25 days after a security issue was publicly disclosed."
    and "Microsoft was the only vendor to have corrected 100% of the publicly known flaws during the study's time period."

    Please feel free to read more, and don't forget that since you saw it on the net it must be true!

  174. Rav strikes back... with a M$ vengeance! by Ares+Halcyon · · Score: 1

    While RAV for Linux e-mail servers worked decently, the Windows Desktop version was less than acceptable... No centralized management, you had to be administrator to load updated virus definitions... a nightmare!

    I think MS will have trouble getting people to actually use this product and might end up abandoning it, just like they did with the NGSCB...

    1. Re:Rav strikes back... with a M$ vengeance! by spafbnerf · · Score: 1

      While RAV for Linux e-mail servers worked decently, the Windows Desktop version was less than acceptable... No centralized management, you had to be administrator to load updated virus definitions... a nightmare!

      The latest released versions of RAV for Win32 before they pulled it did have some sort of functionality for distributing updates across a LAN, which I found worked quite satisfactorily in my setups (I provided technical support for RAV products in my region).

      More importantly, the engine is very good and thats what MS wanted. In my tests commisioned by my employers I found it to be mostly a couple to many times faster than the other popular antivirus software of the time. It was also the antivirus product with the widest platform support for non-MS platforms, which made it extra funny that MS bought it. ;)

  175. My 2 cents by mackman · · Score: 1

    Personally, I don't care if MS makes virus protection software. More power to 'em. It'll make the other virus protection vendors work harder and we'll get a better product.

    What I want is to have Microsoft add a virus protection requirement to their OS. It shouldn't care what software you use, but it shouldn't let you turn on your network adapter without making sure your virus definition are up to date (ok, you can turn on networking but only to download the new defs).

    The internet would be a much happier place, and all the virus software makers (MS included) would get a major boost in sales.

    I think the next fortune 500 company to be nailed by a DDOS from a MS virus should sue MS to get something like this into the next Windows release.

  176. Re:"Anti-virus program as a separate product from by maskedbishounen · · Score: 1

    Just how, do you purpose, that these users who "don't know any better" will know to update their AV definitions?

    Ohh, wait, maybe these are the *same* people who don't update their systems with the latest patches from the Windows Update, and end up getting these virii/worms in the first place? ..and there you go, the inherit flaw with whole idea.

    Now, if MSFT wants to make some stand alone virii scanner and is willing to keep their definitions as up to date as, say, NAV's, that's possibly a good thing.

    If they integrate it into the system and hope it will somehow automagically protect users, just like those automatic updates you always turn off, that's a bad thing; or at least quite foolish, to say the least.

    At most, this is a fix. The solution, impossible as it may be, is to educate users. Oft the solution is no fun, as in this case. Oh well, fix away....

    --
    "An infinite number of monkeys typing into GNU emacs would never make a good program."
  177. All you idiots... by Anonymous Coward · · Score: 0

    Commenting on Antitrust issues, blah, blah, blah...Talking about "making software to cover their own security holes"...Well, you know what? LInux isn't much better. And if it were "profitable" for virus writers to write something for Linux, they would. But there's reasons why Linux isn't "profitable" to write virii for right now, and you all know them as well as I do...Now STFU

  178. Writings on the wall by neurocutie · · Score: 3, Interesting
    Guess its time to short Symmantec and McAfee stock... the variants are endless, but they all lead to one thing: MS "Antivirus" eventually getting 100% "market share".

    Let's see...

    MS AV is the most effective AV product because they can put in special hooks in Windows/Outlook to allow better AV protection and detection, but only MS AV knows how to use those hooks, or...

    MS^H^HSome hacker can "inadvertently" release a virus of their own that only MS AV can stop (for any number of reasons, indeed, who would know better how to write a nasty virus for Windows but MS itself, and of course the best way to drive MS AV sales is for there to be lots of nasty viruses running around), or...

    MS AV is quickest to protect against new viruses because Windows can be altered to add in special virus detection and reporting services that report new virus data directly back to MS, or...

    MS AV will include and become the only or the most effective way of getting new patches (ostensibly just against new viri, but in actuality, all Windows bugs), ala Windows Update (for a subscription fee, of course). Free Windows Update may remain, but the MS AV will become the enterprise standard for updating and protecting Windows, (again for a fee, just a way of charging for patches), or...

    Given better internal virus detection within Windows, it may be possible to construct a Windows "immune system" that learns how to protect itself. Intimate access to Windows internals required.

    Then there is always the, "We changed our minds and decided to bundle MS AV in the next release of Windows (since it was hard to find enough other reasons for customers to see that Windows XXXXP is a value-added proposition for $200 a copy)".

    The beginning of the end for yet another sector of the 3rd Windows software/utilities market...

  179. M$ will make other AV software crash by SirLanse · · Score: 1

    They will have AV software.
    Tell you to patch OS.
    Then the other AV products crash.
    They tell you to buy M$ product.
    PROFIT!!!
    Ask Wordperfect or DR-Dos

  180. Customer demand by rsilvergun · · Score: 2, Insightful

    I'm not saying Microsoft is being dragged kicking and screaming into antivirus software, but there's definately a demand from customers for Microsoft to provide end-to-end solutions. People get pissy when they see Microsoft doesn't have antivirus software. Their attitude is: You got me into this mess, now get me out. Not a microsoft fan boy (I've got slack 9.1 at home), but to be fair this is something they're probably doing to just to get people off their back.

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
  181. Bah! by Anonymous Coward · · Score: 0

    Who got rid of Wordperfect back in the days where I worked? Not the people sitting writing letters, manuals etc. No it was the bosses, and all the ones that had to use it all the time, cursed it into hell. And never were so many documents lost or corrupted.
    And of course the big savings we got in licenses were dropped by MS just after we finished upgrading all workstations.

  182. Microsoft making AV software... by Wig · · Score: 1

    ...is ridiculous. It would go something like this: Microsoft Anti-Virus has deteced a virus known as "explorer.exe" which will be deleted. Good job, Microsoft.

  183. Like buying a new car... by Anonymous Coward · · Score: 1, Funny

    This is like buying a new car where the brakes aren't just quite up to stopping the car. But... for a few hundred extra dollars, you can buy (from the same manufacturer), a brand new "SEA ANCHOR"(tm). When thrown from the vehicle, and attached to "SEA CHAIN"(tm) and "SEA CHAIN"(tm) is properly attached to your vehicle by one of our specially approved retailers (with appropriate licencing), you will have the ability to stop much more quickly than ever before! No more will you have to go looking for soft trees or hills to do the stopping for you. Call your local representative today (note: "SEA CHAIN" and "SEA ANCHOR" availability: July 2005).

  184. Here's the source code!!! In C# no less! by Anonymous Coward · · Score: 0

    // MS antivirus
    // build 1235 (it took a while to get this just right)

    using UnpublishedAPIs;
    using AntiVirusUtil;

    class AntiVirus {
    static void Main () {
    // run all double-clicked mail attachments in virtual machine
    UAPIActiveOutlookEXESandbox();
    // No network ports opened from attachments
    UAPIEXESandboxCanOpenNetwork(False);
    // Turn on hidden stack protection
    UAPIStackProtection(True);
    // waiting for 2.0 on this
    //TreatLinuxPartitionAsVirus(1);
    // As required in all our public releases
    NSABackDoor(True);
    }
    }

  185. Best AV solution for Windows? by Anonymous Coward · · Score: 0

    Welcome to Linux 2.4.26.

    darkstar login: nobody
    Password:

    God is the tangential point between zero and infinity.
    -- Alfred Jarry

    $ your-favorite-x86-emulator windows.img

  186. Guess unlike me you don't agree with... by AWHITEMAN · · Score: 0

    Capital punishment for any and all virus, worm, and trojan writers.

    May as well add spammers and spyware writers to that list.

    --
    -- Note to liberals, yes please flee to Canada.
  187. users accept daily AV updates, so daily OS updates by Locutus · · Score: 1

    Users accept daily AV updates, so daily OS updates are probably next and this is how MSFT will get people used to it.

    There are many Windows users out there who don't patch Windows monthly as is requried. But, a bunch of those probably have AV software which they have, and accept, doing daily updates.

    I'll bet it won't be long before MS AV not only does daily AV updates but it also tucks in some OS updates too.

    Either way, time for another Windows software sector to say good bye because Microsoft wants the market to keep it's profits up. IMHO.

    LoB

    --
    "Anyone who stands out in the middle of a road looks like roadkill to me." --Linus
  188. Re:"Anti-virus program as a separate product from by Anonymous Coward · · Score: 0

    Why would anyone ever consider buying another Microsoft product? Goofiness in Win3.1 through WinXP, the puked up mess that MS_Office has become, MSN ...

    The thought of buying their anti-virus stuff, with or without a complimentary copy of the OS, is laughable.

  189. The safe side by pigreco314 · · Score: 1

    The real good news would be Microsoft developing viruses

    --
    "linux" is a very common word and was not included in your search.
  190. Why trust MSFT to get it right? RAV AntiVirus. by rjamestaylor · · Score: 1
    If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?
    • One good reason to think that they can do this right is their aquisition of the creators of RAV Anti-Virus last year. RAV was a great multiplatform (including Linux) Anti-Virus tool. Best configuration: external SMTP (MTA) using Postfix/Qmail with RAV Anti-Virus acting as a Gateway for internal-only Exchange 2000 server. I don't think that will be a config option with MSFT's "new" product, but whatever they got would surely be worth looking at.
    • Then, of course, drop Windows and switch to Linux (SUSE, RedHat, or Xandros are places I'd recommend taking a look).

    --
    -- @rjamestaylor on Ello
  191. Re:A part of the OS by gcaseye6677 · · Score: 2, Interesting

    Maybe they won't bundle it right now, but do you not think this is a possibility long term? I see this as the only reason why they are making an anti-virus program. Otherwise, why try to break into a field in which there is already extensive competition (something Microsoft hates) and in which they don't exactly have the greatest reputation?

  192. Silly Geek by Lord+Kano · · Score: 1

    My only question is: If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?

    Outsourcing.

    LK

    --
    "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
  193. This fits Microsoft's style by bruns · · Score: 1

    Microsoft usually only does something AFTER the fact, rarely before, which means that an AntiVirus product fits within their style perfectly.

    Why write good code in the first place, when you can just 'fix' the problem after people start getting owned with your AntiVirus software?

    Of course, we'll start seeing MSKB articles on how their antivirus software 'accidentally' picks up Mozilla or OpenOffice as a virus and deletes it.

    --
    Brielle
  194. Re:"Anti-virus program as a separate product from by Anonymous Coward · · Score: 0

    I completely agree. Many people on here are weeping at the impending demise of Norton and McAfee, well tough. If you play on Microsoft's turf (Windows), you should be smart enough to have a backup plan for when they decide they don't want you to play there anymore. I'll enjoy watching the monster they supported eat their lunch out from under them, and I hope it hurts like hell.

  195. Re:"Anti-virus program as a separate product from by Anonymous Coward · · Score: 0

    "... the puked up mess that MS_Office has become ..."

    Ah! Festively colored peas and carrots, a few unripened turds, and a paperclip! Now, that's innovation!

  196. i dont care anymore... by Anonymous Coward · · Score: 0

    im so glad i switched to linux... and ive finnaly reached the pint were i dont give a damn about what microsofts screwing up. it just gets so tiriring, tyriring hearing about all of their suky jobs

  197. MSAV (Microsoft Anti-Virus) by spoonyfork · · Score: 2, Informative

    Anyone else remember MSAV for DOS?

    --
    Speak truth to power.
  198. BS by Booleus · · Score: 1

    I can't stomach the argument that MS shouldn't bundle AV software with their OS. Why the heck not??? IMHO, every OS would benefit substantially from changing the perception of antivirus protection from a software package, to an integrated part of any respectable OS. Funny, we allow OS developers to build many things in except for features which already exist as stand-alone apps.

    1. Re:BS by polyp2000 · · Score: 1

      I think that is incredibly short sighted. Think about it... What you are saying effectively is this. The operating system should be secure in the first place, for the manufacturer of "Said OS" to supply Anti-Virus software is effectively admitting that they know "Said OS" has security flaws and rather than improving the OS, via patches and updates, instead they are charging you extra money to pay for inadequacies that they know about. This is abuse of power plain and simple.

      --
      Electronic Music Made Using Linux http://soundcloud.com/polyp
    2. Re:BS by Booleus · · Score: 1

      No that's not what I mean, I would think the opposite, it should be bundled with the OS and considered a critical component of the OS, not something to be charged for. This might bring OS publishers to begin thinking that AV protection is a critical part of an OS. I am also not only talking security flaws, but actual threats that can not be prevented by a patch to the OS, such as unsafe executable attachments. Although it might put a few companies out of business, all of the people angry with Microsoft's lack of security would finally get what they have asked for.

    3. Re:BS by polyp2000 · · Score: 1

      Well, I agree, however I do feel that in terms of AV software being supplied with the OS; If it were supplied with the OS, then it really shouldnt be termed AV software. Rather the OS should have the holes patched up in the first place so that viruses are not an issue.

      --
      Electronic Music Made Using Linux http://soundcloud.com/polyp
  199. Think this is a good thing by Zed2K · · Score: 1

    I would like to see an antivirus application more integrated into the windows OS. Norton is a buggy and bloated piece of junk, and mcafee isn't much better. I personally use AVG cause its free but would love an antivirus package that is silently integrated into the OS and outlook right out of the box. XP comes with a firewall built in, why not antivirus as well?

  200. User level virus by gr8_phk · · Score: 5, Insightful
    "No matter which e-mail client is used, they all allow attachments, and without a virus scanner screening those attachments, computer illiterate users are going to get virii."

    And if they are running a Unix variant that attachment will only run at user level. No low level system modification can be made, so you can then log in as another user (or root) and delete said infected files which should all be in their home dir and not mixed in with 10000 .dll files. They should also have to make a little extra effort to get it to run in the first place, which will discourage some percentage of them too.

    1. Re:User level virus by westlake · · Score: 2, Interesting

      It is cold comfort to know that root remains untouched, but your home directory has been trashed.
      You may have to be a little more clever in laying your trap, but users will launch executables that look attractive and plausible.

    2. Re:User level virus by radish · · Score: 1

      And if you are running on a recent version of Windows, the exact same thing is true. However, lots of people run windows as Admin by default. That's their fault. Just the same as people who use RedHat day to day as root. It all comes down to users - in general *nix users are smarter than Windows users, thus, we see more problems on Windows.

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    3. Re:User level virus by Trailer+Trash · · Score: 4, Interesting

      And if they are running a Unix variant that attachment will only run at user level. No low level system modification can be made, so you can then log in as another user (or root) and delete said infected files which should all be in their home dir and not mixed in with 10000 .dll files.

      Sigh. How many times do we have to go over this for the slow learners? Two things.

      First, all of my important files are in my home directory owned by my user. A virus doesn't need root-level access to destroy everything of importance to me. It's nice that the files in /etc, /usr/bin, etc. are all locked so that my unprivileged user can't destroy them. Who cares? They're safely on a CD here, they're on the Debian site, they're available all over the internet. My own files exist in my directory (and backups). Those are what's important to me.

      Second, the modern worm/virus spreads by either remotely exploiting vulnerabilities on other machines or re-emailing itself. Guess what: it doesn't need root privileges for either of those operations. None, nada, zilch.

      The only reason a virus would want root privs would be to infect system binaries and spread to other users. This paradigm is mostly dead in the Unix world on 99% or more of the machines in use; everybody has their own machine. Spreading from machine to machine is the game, and that simply doesn't require any privileges.

      The bottom line is that if you could trick users into running a Perl script that came through email, which wouldn't be that difficult for a certain percentage of them, you could write a decent worm for Linux. Not a problem now, but when my mother is using Linux, it's a big problem. "But it came from my friend Kate at church and said to save the file and then type this in at the command line..." The extra step will weed out a lot of the real cluebies, to be sure, but with enough of them it'll be a problem.

    4. Re:User level virus by Door-opening+Fascist · · Score: 1

      Kind of. It might not mean much on a workstation that only one user uses, but imagine if you running a server with thousands of users. And if you're really concerned, taking frequent backups isn't such a bad idea, even without the concern of virii.

    5. Re:User level virus by Door-opening+Fascist · · Score: 1

      This isn't just true with UNIX. Any OS that actually supports a distinction between user and administrator will have that. VMS, ITS, OS/390, MVS, OS/400, zOS, zVM, and a host of others all have that same functionality.

      Come to think of it, it really is just Microsoft and some old Apple products that have this problem.

    6. Re:User level virus by Anonymous Coward · · Score: 0

      What do you want to loose most?
      Your 500 mb. documents from school and other studies or your system?
      Okay, system is intact but all your work just disappeared.

    7. Re:User level virus by JesseL · · Score: 1

      Well, isn't it a lot easier to recover from a backup all the critical/unique data that used to reside in your /home directory, if you still have a completly functioning computer?

      If you suspect you may have been infected, isn't it nice to be able to simply restore your /home and trust that you don't need to kill half a day or more formating your drives and reinstalling everything?

      And if you have a firewall that disallows viruses from sending email, wouldn't it be nice if the virus couldn't just disable the firewall because it lacks the permissions to do so?

      --
      "Prefiero morir de pie que vivir siempre arrodillado!"
    8. Re:User level virus by runderwo · · Score: 1
      And if they are running a Unix variant that attachment will only run at user level. No low level system modification can be made
      In theory, that is. Unfortunately, reality sucks.

    9. Re:User level virus by tupps · · Score: 1

      When you install windows XP home doesn't it make you the single super user account for the computer? None of the user level unix based systems (MacOSX, Linux) do this by default except for Lindows. It is a pain that every once and a while you have to type the super user account details for certain upgrades or installs but a hell of a lot better than the windows situation.

      --
      Go out and get sailing!
    10. Re:User level virus by Anonymous Coward · · Score: 0

      unless theyre running linux and havent patched those pesky root exploitS

    11. Re:User level virus by Anonymous Coward · · Score: 0

      You are of course assuming that a user running a Unix variant will actually be running as a user, and not as root. I've run into some clueless windows users who were curious about linux and chose to always run as root. And of course there is at least one distro out there encouraging this behavior if I read correctly (lindows).

    12. Re:User level virus by hearingaid · · Score: 2, Informative
      Yes, for the single user.

      However, people are using viruses to install things like open-relay SMTP servers on computers. The POSIX security framework will make it harder to launch executables that perform that type of action.

      What's more, in order for a mailer to launch an executable program, you'd need a mailcap entry that included a reference to /bin/sh. The real problem is Windows' broken way of launching applications, by treating them as just lost cousins of document files.

      --

      my old sig used to be funny, but then slashcode ate it and now it's not funny anymore

    13. Re:User level virus by vsprintf · · Score: 1

      Subject: K3W1 Perl script
      From: Yur Mom
      To: linuxguy532891732@hotmail.com

      Hi Reletive

      I got this great Perl script that does loads of great stuff. You have to run it to find out. Uh, save the atachtment to yur home directery, then use the chmod comand from a terminil window to make it executable. OK so far? K3W1! Now cd to your home and in the terminil Window (heh) type "./biteme.pl" but don't use the quotes man and don't look at the script first. Promise? Enjoy.

      Love,

      M0m

    14. Re:User level virus by dbIII · · Score: 1
      And if they are running a Unix variant that attachment will only run at user level.
      There is no reason why that cannot be done in MS Windows either - the current versions of NT (XP and server2003) are now truly multiuser. Permissions just need to be fixed and some kind of wrapper to handle older programs that require admin rights to run. If MS want their OS to be seen as something serious, and not just a slowly maturing upstart in server space they need to be able to stop the necessity to run a whole lot of things as root.

      Clicking on an email attachment should never allow a program to be installed without user intervention, and certainly should never mess with the registry. We'll probably see some of these very basic ideas in longhorn - if not it will be a disappointment.

      As for MS releasing antivirus software - why not? So long as they don't get anticompetitive about it (eg. Undocumented OS security patches start coming as part of the antivirus software, or OS patches cripple other antivirus software) it is a good idea - but I think they should correct some of the fundamental flaws that make the propagation of viruses so simple as well.

    15. Re:User level virus by Lorean · · Score: 1

      What, you don't believe in making regular backups?

    16. Re:User level virus by 1u3hr · · Score: 1
      t is cold comfort to know that root remains untouched, but your home directory has been trashed. You may have to be a little more clever in laying your trap, but users will launch executables that look attractive and plausible.

      Yes, once you get it it's bad. However, without root privileges it will be much harder for such a virus/Trojan to spread to other systems.

    17. Re:User level virus by majiCk · · Score: 1

      The bottom line is that if you could trick users into running a Perl script that came through email, which wouldn't be that difficult for a certain percentage of them, you could write a decent worm for Linux.

      If you can make it fit into four 80-column lines that get inserted into the victim's .signature file, i bet you could even get curious techies with it.

    18. Re:User level virus by Anonymous Coward · · Score: 0

      The only reason a virus would want root privs would be to infect system binaries and spread to other users. This paradigm is mostly dead in the Unix world on 99% or more of the machines in use; everybody has their own machine. Spreading from machine to machine is the game, and that simply doesn't require any privileges.

      Well... not quite. At places like universities, and probably similar work environments, there is such a thing as NFS. A user typically not only has access to their home directory, but to everyone's home. They just rarely have write permission. Unless they're root. So while ~newbie is probably toast, ~aaaaa, ~aaaab, ~aaaac etc. are still safe.

      Secondly, what if an exploit uses raw socket access (uncommon TCP flags and whatnot)? Under Linux, you need to be root for this. No root, no raw sockets, no raw socket exploit.

      You are right that usually, "my home is what's important!" It's just not always as clear-cut as you think.

    19. Re:User level virus by julesh · · Score: 1

      The bottom line is that if you could trick users into running a Perl script that came through email, which wouldn't be that difficult for a certain percentage of them

      The more complicated the instructions, the smaller that percentage, I'd be willing to bet. Why? Because the more text there is, the more chance there is that you'd like at it and say, "But xxx who sent it to me wouldn't write that."

      While "Could you look at this and let me know what you think?" is something maybe 70% of English speakers would write, and of the other 30% very few would be spotted, a list of technical instructions is much more likely to seem wrong.

    20. Re:User level virus by ookaze · · Score: 1

      Sigh. How many times do we have to go over this for the slow learners? Two things.

      I think I have to sigh too.
      People that say such things, I think, never ever use a Linux/Unix desktop.
      I think you are the slow learner.

      I always see the same fallacious argument :
      - Viruses on Linux have the goal of destroying your home. Just because of Linux, you see, because no virus on Windows is doing that nowadays, they just mess up the system. If they did, that's the all machine that would be erased. Anyway, the kind of users who would fall for these viruses would not even be able to launch them on a Linux platform. That's the case NOW, I don't see why it would become worst tomorrow.

      - I repeat, your mother could not launch that perl script you are talking about. No Linux client give you shell access directly, none will permit you to launch something such as perl or sh. Do you imply people who write Linux mail software are stupid or what ? They didn't do it before, and now that we see the danger, they will do it ? Come on !

      In the improbable case where the perl script would be launched and worked, you would not even need any antivirus software to eradicate it. When your mother see it doesn't do anything, she will most probably erase it.

      All this is assuming future desktop distros will have the home partition executable.

    21. Re:User level virus by Eythian · · Score: 1

      Earlier this year I saw someone, on a Linux machine, who had gotten one of the email worms sent to her. She saved it to disk using Pine, scp'ed it from the mail server (this is a uni network) to the local machine, and finally asked someone nearby for help when typing './whateveritwascalled.exe' wouldn't work.

      People are going to do their best to run viruses, no matter what.

    22. Re:User level virus by 4lex · · Score: 1

      How many times do I have to suggest this?
      Do you have permission to delete files from a user called backup, who does nothing but making copies from every file you modify from time to time? (for example: once every hour, and once every week, bzipping the latter). Do you have too small a hard disk, in these days? If not to both questions: how exactly are you supposed to be able to delete your files without root access?

      --
      My journal. Mainly about freedom.
    23. Re:User level virus by Cro+Magnon · · Score: 1

      Not only does XP install with a single superuser account, but a lot of Windoze software won't run in a limited account.

      --
      Slow down, cowboy! It has been 4 hours since you last posted. You must wait another few hours.
    24. Re:User level virus by Cro+Magnon · · Score: 1

      What's a backup?

      --
      Slow down, cowboy! It has been 4 hours since you last posted. You must wait another few hours.
    25. Re:User level virus by Magius_AR · · Score: 1
      And if they are running a Unix variant that attachment will only run at user level.
      Lemme get this straight. When making this comparison, you assume incompetent Windows users, but competent Unix users? How fair is that? It's just as easy to not run as Administrator in Windows as it is not to run as root on a Unix variant.

      Frankly, if UNIX was the popular system instead of Windows, you'd find _just as many_ lazy people logging on as root all the time instead of an unpriviledged account. And its because they're just that, lazy.

  201. Wrong Topic. Should be "It's funny, laugh" by refactored · · Score: 2, Funny

    Please reassign to correct topic.

  202. Re:A part of the OS by Ckwop · · Score: 1

    No they're not bundeling this one but be sure as hell they'll use secret APIs in their package and the virus checker that currently work fine with see either diminished performance or just simply break.

    Microsoft are generally not very good at the competition game but they are good at crushing people with dodgy business practices.

    Simon.

  203. An early prediction by eaolson · · Score: 1
    The article says:
    Asked if that would hurt sales of competing products, such as Network Associates' McAfee and Symantec's Norton family of products, Nash said that Microsoft said that it would sell its anti-virus program as a separate product from Windows, rather than including it in Windows.

    Sure, now they have no plans to integrate it into the OS. A version of Windows or two down the line, on the other hand, they may have an entirely different perspective. At which point, purchases of McAfee and Norton will plummet.

    Abuse of a monopoly? Sure. But they can drag out the litigation, such that, by the time it's completed, the competitors are out of business and it's a moot point.

  204. System Tray Icon for Microsoft AV by jazman_777 · · Score: 1

    Microsoft Bob's head.

    --
    Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
  205. Re:A part of the OS by Anonymous Coward · · Score: 0

    Why, Symantec of course!

  206. In a related story... by Anonymous Coward · · Score: 0

    Typhoid Mary to start selling condoms.

  207. Anti-virus anti-virus by Wild+Bill+TX · · Score: 1

    Of course, we all know that event will lead to the creation of the world's first anti-virus software for an anti-virus program.

  208. Re:A part of the OS by Anonymous Coward · · Score: 0

    In some cases, MS snapping up something and integrating it into the OS is a good thing... anyone remember the product DirectX was derived from? I think it sold for $4K beforehand... I personally don't have many fond memories of wondering if a game worked under Glide, or OpenGL, etc... "Oops, your Voodoo accellerator is worthless with this title because it doesn't support OpenGL!"

  209. Ahhhh, yes... by Anonymous Coward · · Score: 0

    There's nothing like asking an arsonist to be the fire chief!

  210. #2 DISCOVERED!!! by kcornia · · Score: 1

    1. Sell buggy OS
    2. Sell software that fixes bugs in #1
    3. Profit!!!

    Its like finding the end of pi.. Pure nirvana

  211. What I just don't understand... by Wiser87 · · Score: 1

    ...is why doesn't Microsoft just stick with a few things to do and try to make them better, instead of trying to do a little bit of everything and doing an "ok" job.

    1. Re:What I just don't understand... by Anonymous Coward · · Score: 0

      They don't know how. :P

  212. They already have AV software by WildCode · · Score: 1

    they just let it fall by the wayside ... remember "Microsoft AntiVirus"

  213. In Other News... by Arrgh · · Score: 1

    Microsoft Spreads Dirt, Sells Vacuum Cleaners

  214. Hmmm.... by archen · · Score: 1

    If Microsoft thinks Antivirus is so important that they themselves are getting into the market, then I wonder if they are going to include this information in the TCO arguments against Linux.

  215. Brilliant!!! by shaitand · · Score: 1

    Obviously this was always their gameplan.

    Buy a buggy and rather crappy OS that was originally intended to run just one application and never designed to be general purpose or secure.

    Ride the IBM PC to monopolyhood (MS certainly had no part in attaining it's own dominate position).

    Keep OS crappy and buggy, guaranteeing wave after wave of hacks and virus. Has anyone looked at the numbers and noticed that the proportion of viruses written for windows to other OS's is GREATER than the marketshare proportions? The numbers NEVER supported the marketshare argument. 93% of the desktop true. But it's 99.(insert several trailing 9's here)% of the viruses which exploit MS bugs.

    Then release anti-virus, after all, who knows the bugs better than you who wrote them in the first place!!!

    Step 1. Gain monopoly status in the desktop market.

    Step 2. Create easily remote exploitable easy to find SEVERE holes intentionally.

    Step 3. Release A/V software to "cure" the computer of the viruses which exploit those holes.

    Step 4. Profit!!!

    oops... no ? step :(

    Seriously is there anyone else who doubts they could get away with this if there weren't so many companies who have no choice but to use their software despite it?

    I think selling A/V software exploits their monopoly and is AN EXTREMELY SEVERE conflict of interest... whether it's bundled or not.

  216. From the "Jag mötte Lassie" dept. by CrystalFalcon · · Score: 1

    I've met and spoken with this guy in the story (Mike Nash), in an elevator. I was wearing my full motorcycle suit, and he noticed a few tears in the fabric.

    He asked if it wasn't dangerous going at those speeds (like 100-150 mph). I explained that the suit protects me, but it takes a few tears in the process when accidents happen.

    Funny he should now be the security guy at Microsoft, given his concern for motorcycle safety :-)

    Accidentally, Mike Nash was also the guy who closed the department I worked at and laid me off... (though, I have to add, it was done with all the dignity one could reasonably ask for).

  217. Had to happen sooner or later by Deleriux · · Score: 1

    Think of it from an MS point of view.

    Pointy haired people buy all MS when they can. I know they have everywhere i've worked.

    MS Exchange, MS Office, MS IIS, MS Sql.. now MS AV.

    As with anything MS. Itll be very popular, most people just lurve MS for nearly anything. Theyll download it with a crack simply because its Ms's latest offering. I know people whove downloaded cracked XP Media edition stuff ffs. And thats the most restricted O/S they have!

    In a way I think they are gonna shoot themselves in the foot, because if its unpopular which is unlikely but you know might happen ;) it'll be a another dead project.

    Whats worse is if it does take off and becomes popular once its cracked via a virus and propagates around the globe to every computer MS will look REALLY silly and then people will move O/S's as even Joe User is going to never trust MS again!

  218. It'll fail... by Anita+Coney · · Score: 1

    Except for Office, every product that Microsoft sells that is not bundled with Windows fails, i.e., either fails to sell or sells well but loses tons of money. Every single one. I doubt if this will be any different.

    --
    If someone says he and his monkey have nothing to hide, they almost certainly do.
  219. This Is Old News by onecrazyfoo · · Score: 2, Informative

    In typical MS fashion they bought out this company a while back for this express purpose. The only thing that wasn't known is when and this article doesn't enlighten us any further. So like I said, this is old news.

  220. No surprise here by steveha · · Score: 2, Informative

    Microsoft loves to make money. They would love to be in a situation where you buy a product from them, and then you just keep sending them money on a nice, predictable basis.

    Antivirus software is perfect from that point of view. I'm actually kind of surprised it took them this long to do it. I suspect they just didn't want to annoy Symantec and the other companies.

    Antivirus software is one of the few products where I think paying an annual fee really makes sense. You need constant, continuous updates to make sure that your protection is good, so you feel like you are getting something for your money.

    Despite the above, the free software community has actually shown that it can provide effective antivirus software for free. ClamAV was originally designed to be a server-side antivirus solution only, but there is a Windows version available now (file scanning only, it doesn't yet intercept downloads and scan them automatically). ClamAV works and it has a good track record of getting updates quickly to dectect new viruses.

    http://www.clamav.net/

    I run Debian GNU/Linux on my server and on my desktops, and I'm not too worried about viruses and worms. But I do have ClamAV running on my mail server, and it intercepts dozens of viruses per month. I have not seen any email containing a virus or worm ever get past it.

    steveha

    --
    lf(1): it's like ls(1) but sorts filenames by extension, tersely
    1. Re:No surprise here by bruns · · Score: 1

      I just uploaded a new build today of the SOSDG ClamAV For Windows version with some new features and bug fixes.

      We are however, working on interface which should allow real time scanning like what Norton Antivirus offers.

      http://www.sosdg.org/clamav-win32/index.php

      --
      Brielle
    2. Re:No surprise here by steveha · · Score: 1

      I'm happy to hear about it! Thanks for your work on ClamAV.

      steveha

      --
      lf(1): it's like ls(1) but sorts filenames by extension, tersely
  221. liar liar pants on fire by ShadowRage · · Score: 1

    well it might be sold separately, but once installed, how hard will it be to remove, if it can be removed, and will removing it purposely open your system up to many vulerabilities?

    and what's stopping them from putting it in longhorn? or a window release before longhorn (say if they pull a windows ME with windows XP)

  222. Re:A part of the OS by Talinom · · Score: 1

    I'm wondering how long it will take for this new MS product to come down with a virus of it's own. It seems to have happened to every other product they have put out.

    --
    "Giving money and power to governments is like giving whiskey and car keys to teenage boys." - P.J. O'Rourke
  223. Re:A part of the OS by `Sean · · Score: 1
    who modded this a 5

    Your mom.

  224. Am I The Only One... by Long-EZ · · Score: 1
    Am I the only one who thinks this is like my corner heroine pusher selling maps to direct customers to the methadone clinic?

    As always, if you aren't part of the solution, you're part of the problem. In this case, I'd say Microsoft is MOST of the problem.

    The goofy thing is, they're finally trying to lock down some things, and they've now reached the point where a pro-Microsoft friend of mine has an Exchange server at his small business and can no longer open DOC file email attachments without saving them, firing up Word, and manually opening them. Meanwhile, My Linux box runs Mozilla, and the nasty DOCs autolaunch OpenOffice just fine, still with no risk of malware execution. The user friendly shoe is on the other foot now, bucko. So can someone please tell me why Microsoft continues to maintain a monopolistic stranglehold on the PC market? Are sheeple really that stupid?

    --
    >> My ultraviolent Linux switch video.
  225. but...? by chamblah · · Score: 1
    thought they already offered it here?

  226. Hahahaha by SatanicPuppy · · Score: 0

    It's so asinine!

    Another OS would just work to make themselves safe from viruses by improving their security, tightening up their code, and closing programming loopholes, but not Microsoft! No no no, they just add another piece of crap on to their already bloated code!

    On top of that, they piss of the companies that have the most experience with viri at a time when they do not yet HAVE a competing product!

    This is just such a bad idea. The anti-virus companies have been doing this for years! Norton in particular has made it the cornerstone of their business to fill the voids MS leaves in Windows.

    --
    ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    1. Re:Hahahaha by Anonymous Coward · · Score: 0

      Ahh, Alcohol - the source of, and solution to, all the world's problems.

      Microsoft, the cause of, and solution to, all the world's problems

  227. Unbelievable by filmsmith · · Score: 1

    If Microsoft actually makes a viable income from this then Bill Gates will have sunk to a new low. He'll be like the schoolyard bully who walks up to you, puts his hand around your throat and says "Pay me $10 to be your friend or I'll punch you in the face!"

    What's truly depressing is that almost everyone will pony up to befriend the 'gentle giant.'

    fs

  228. A Coup! by polyp2000 · · Score: 1

    This is such a damn coup! If selling anti-virus software becomes a revenue generator for microsoft they are effectively saying that their operating system will never be secure, because the moment they make windows secure they cut of demand for their anti-virus software sales. This, is as good a reason as any to ditch Redmond as ever their has been.

    Just how far can they take this monopoly?

    --
    Electronic Music Made Using Linux http://soundcloud.com/polyp
  229. Belchfire Motors Press Release by zogger · · Score: 1


    Belchfire Motors Introduces New Products

    Wednesday, June 16, 2004

    Detroit/Stuttgart/Tokyo/Seoul

    to: assignment desk, day editor

    Belchfire Motors Inc is proud to announce our new exciting product line with advanced technology features. All Belchfire Motors automobiles, light trucks, and medium and heavy road trucks will now have the option of the latest in technology-wheels!

    Yes, wheels.

    "It's a concept we have been struggling with for years now" says Lawrence "Larry" O' Toole, CTO for Belchfire, Inc. "We listen to our customers-after tens of engineer hours and feedback from our beta tester, we think we're able to cater to our customers now in a forward looking manner, to bring them this technology which will greatly enhance their motoring pleasure and highway safety and convenience" he adds.

    New Belchfire Wheels will be released to dealers as a value add on option for all belchfire vehicles in second quarter 2004, with both subscription AND lease models available, as well as in the exciting designer color, black.

  230. They are going to sell OS X? by NSupremo · · Score: 0

    The more people NOT using MS Windows - The BETTER for us all.

    --
    http://en.wikipedia.org/wiki/2004_U.S._Election_co ntroversies_and_irregularities
  231. Microsoft proprietary secret holes. by Ungrounded+Lightning · · Score: 1

    I am more afraid that MSFT will purposefully allow holes to exist in its OS so that more and more people will buy their AV software. Perhaps that's a bit paranoid but I certainly wouldn't put it past them.

    Remember the hidden interface hooks that Microsoft used to make their products run better than their competitors'?

    Just think how much Microsoft's anti-virus product would outdo their competitors's offerings if Microsoft inserted secret security holes in the OS and the fixes in their AV at the same time.

    Users of Microsoft's AV product would never get bit, while the competitors would have to wait until somebody got worms, develop a signature, and distribute it during the height of the infestatin.

    And if THAT isn't enough to swat 'em down, Microsoft's AV division (or a rogue within it) could quietly start releasing exploits into the wild from time to time, to make the competitors look even worse.

    The upside (from the Linux/Unix/Apple/etc side) is that eliminating the Micrsoft-related external AV market (either through honest competition OR pereditory tactics like those above) reduces the security level of Microsoft's OS product to about the "apply all the latest patches" level. They've already proven incompetent to keep that level safe without external help. So that could encourage the migration away from their swiss-cheesey products.

    And the beauty of this is that the corporate politics of the existance of an AV software product group encourage it to cannibalize the rest of the company in order to show a profit. Microsoft creates their own cace of cancer.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  232. First Microsoft AV virus by Anonymous Coward · · Score: 0

    Let's start the pool for how long it takes for a virus to come out that uses Microsoft's AV.

  233. A good idea, since... by foobrain · · Score: 1

    ...they also built a virus SDK.

  234. Feds will stop this by nurb432 · · Score: 1

    I'm pretty sure that the feds would put a stop to this if they try to pull that stunt.

    Integrating for 'free' ( they will just raise the cost of the OS to 'integrate the cost' ) into the OS would fly, but charging additional fees to fix something you sold that is effectively broke? Nah that wont last long.

    But, it might last long enough to destroy the competition....

    --
    ---- Booth was a patriot ----
  235. Same with windows! by FatSean · · Score: 1

    I think I'm the only person who operates his W2k machine as a 'regular' user. The worse that can happen is I lose data (I hope...), but that's why we have incremental backups!

    --
    Blar.
  236. Well, I better start... by Maxite · · Score: 1

    ... learning how to use Linux.

    --
    Ah, you found me!
  237. But they *did* buy their way in by xixax · · Score: 2, Informative
    Why are people thinking that MS "developed" an AV product when they acquired GeCAD AV recently. It just looks like Symantec and Nortons weren't up for sale at the time. Too bad for them...

    Xix.

    --
    "Everything is adjustable, provided you have the right tools"
    1. Re:But they *did* buy their way in by f0rt0r · · Score: 1

      >Symantec and Nortons weren't up for sale at the >time.

      Aren't those two items the same thing?

      --
      I can't afford a sig!
  238. Thank you. by Anonymous Coward · · Score: 1, Funny

    There's nothing as satisfying as the solid "splut" noise made when a big sack of crap is properly bitch-slapped.

    1. Re:Thank you. by Grrr · · Score: 1

      Aw, you say the nicest things...

      (Gracias. I needed the laugh.)

      <grrr>

  239. It's called .... by Snoopy77 · · Score: 1

    Linux

    --
    "She's a West Texas girl, just like me" - G.W Bush Iraqis
  240. No Need to fix the OS no more by Psymunn · · Score: 2, Insightful

    I don't think there's somethign wrong with softwaer bundeling really (KDE does it to no end)
    What I see as the major issue with Microsoft selling Anti-Virus Software is not them trying to press their monopoly, but that it creates a conflict of interest
    The economic viability of antivirus software depends on a virus checker being able to stop a virus and, more importantly, there being a virus in the first place. Basically, I don't like the idea that IE, having contracted a severe case of malware, is essentially going to be earning the boys at redmond money.
    Course, i could be wrong.

    --
    The Neo-Bohemian Techno-Socialist
  241. AV Software doesn't have to patch future holes by Ra5pu7in · · Score: 1

    Actually, the entire business model in use by the anti-virus software companies is this:

    1) Learn about a new virus
    2) Add an update that can spot just this new virus
    3) Rinse and repeat

    They have not developed anti-virus software that is future-thinking and intuitive. In other words, anti-virus software doesn't have to know that a hole exists and patch it. When the hole is discovered and the virus loosed, it just has to be quick to distribute its update that catches that virus.

    At least by separating the anti-virus actions from the OS updates to handle the hole, there is a slim chance a consumer would catch and remove the virus sooner.

    ============

    Rambling a little off-topic here, but this is the same problem that we see with anti-spam, anti-spyware, and anti-adware programs. None of these is able to identify new items unless they match a known item closely enough. For example, anti-spam filters have simply caused spammer to spell a word with inserted punctuation or use terms with multiple meanings or send emails that are little more than random words. A large part of this problem is viability. It is not profitable for these companies to develop software that would be 100% effective now and into the future. That would result in market saturation and no further need for the programmer's efforts.

    --
    I was taking one day at a time, but then several days got together and ambushed me. (from a Rhymes with Orange comic)
  242. What this sounds like to me... by holden+caufield · · Score: 1

    ...is a way to move the home user to a subscription-based model of purchases without them knowing it.

    Think about it. If the OS is constantly plagued by problems, MS can charge users to keep their systems patched. If they combine the virus defs along with windowsupdate fixes, then they've created a revenue stream that takes some of the burden off of the release date for Longhorn.

    Or, maybe my tinfoil hat is on too tight.

    --
    I'll create an amusing sig when I have something meaningful to post.
  243. Where microsoft is getting the tech by viperblades · · Score: 1

    not sure if anyones posted this, but this is my guess on where microsoft's anti-virus technology is coming from.
    http://www.infoworld.com/article/03/06/11/H Nrav_1. html

  244. Might as well jump in with both feet by BuckaBooBob · · Score: 1

    Well I can see it now... exploits in their AV software to gain access to the OS...

    Hmm Theres a thought... Exploit the Software that is meant to protect you from exploits.. On MS could come up with something this crazy... and I am sure once its out alot of people will be looking for the exploits just to make the statement :)

    --
    Who needs WiFi when we can have Packet Over Sheep! http://datacomm.org/PoS-InternetDraft.txt
  245. MS integrates apps to lock users in by rbird76 · · Score: 1

    The same people who put out patches that break the OS/other applications, the same people who allowed email viruses to run by default...are telling me they can keep my computer safe from the security holes they couldn't avoid in the first place. They are selling a product whose existence depends in part on their incompetence.

    Why don't people here trust MS's intentions? MS enters markets not because it has a product, but because it has locked-in users. They've done it before (does IE ring a bell?) and there is no reason to expect that they won't try again. If they wanted to avoid antitrust screaming, they could have FIXED THEIR &$%*(*NG PRODUCT. Making something more complicated is not going to make it safer; simplifying it does (or at least decreases users' chances of hurting themselves). If people want bells and whistles, you isolate them from critical applications or minimize the connections between the B+W and the OS and then secure the few connections that you do have. Instead MS focuses on integrating B+W into their products and making them as inextricable as possible, in the process making the system more complex and less secure. You don't do this to make users happy, because making users happy could be done better and more easily in other ways. You do it so that users have to use MS products to avoid breaking other products. Good design minimzes the consequences of user errors. Bad design amplifies those consequences.

    MS software seems to amplify the consequences of user error/incompetence for its own aggrandizement, and now wants to profit further from those consequences. Is this the mindset of someone from whom you should buy security products, and whom you should trust not to abuse the authority that those products require?

  246. Re:A part of the OS by Anonymous Coward · · Score: 0

    Don;t be silly. This will be protected with EULAs so that even if the AV software itself destroys your computer, MS won't even owe you a refund.

  247. Make profit by smartdreamer · · Score: 1
    To me, this looks like a great way to make people pay for patches. Remember the previous story on slashdot saying M$ was thinking about making pay for service pack?
    This is a more subtile way of doing so. Including it in the OS would mean it's "free" as Internet Explorer and it would put attention of anti-trust officals on their back.

    Now M$ makes the bugs, the patchs, the anti-viruses... and they have enough ressources to make viruses if they want to. ;)

    1. Make bugs / holes 2. Make patch / anti-virus 3. Profits! $$

  248. A nice hardware IDE RAID 5 solution by tamnir · · Score: 1

    A few months ago, I was looking for a hardware RAID 5 solution using IDE disks, with hotswap and the whole shebang, and OS independant. I found:

    this pretty spiffy unit .

    A bit pricy, but does a great job. It is totally independant from the OS, since the motherboard just sees it as a normal disk, and does pretty much everything you may want from a hardware RAID 5 solution (hotswap, transparent rebuilds, array roaming, capacity expansion...).

    Note: my first unit was faulty and I had to get it fixed a few times, until finally I got it exchanged. Since then, no more problems with it. But note that it did a great job even through its own hardware failures: all I had to do was put all the disks in the new unit, and my array was back up.

    --
    I code, therefore I am.
  249. Microsoft able to keep up to date? by pdp0x14 · · Score: 1

    Microsoft will be no less able to stay up to date with patches than McAfee or anyone else. This will be a product that has its own revenue stream that depends directly on its efficacy. Microsoft will fund the updates to the level necessary to keep up.

    Keeping the OS up to date -- unfortunately -- is not as important to their revenues.

  250. This is a joke, right? by BCW2 · · Score: 1

    Would anyone in their right mind by AV software from the source of the problem? It will probably be as poorly written as the OS that is the problem. Can you imagine the complex lockups this will cause? Those new cases without a reset button will be realy useless.

    The truly nauseating thing is, some fools will actually buy it. Of course they are the ones that click on everything anyway.

    --
    Professional Politicians are not the solution, they ARE the problem.
  251. Financial model by Anonymous Coward · · Score: 0

    Old model:
    Cost of fixing bugs: $100MM a year
    Profit/loss = ($100MM)

    New Model:
    Cost of fixing bugs: 0 (stop fixing bugs)
    Cost of developing antivirus: $10MM
    Revenue: $2B
    Profit/loss = $1.99B

    This is called turning things around. Instead of fixing bugs for free, now they will sell the antivirus and make money.

  252. Microsoft's new delema = should we bother... by AWHITEMAN · · Score: 0

    making it secure in the first place????

    --
    -- Note to liberals, yes please flee to Canada.
  253. Would you like airbags with your car? by stonedyak · · Score: 1

    Isn't this like selling airbags as an optional extra with a car that is known to have defective brakes?

    Also, if people can't even keep their system patches up to date why would they keep their virus scanners up to date??

  254. Conspiracy theory by Anonymous Coward · · Score: 0

    This is the way Microsoft will migrate people into paying for fixes to their OS.

    One can only assume that sooner or later "security patches" will be treated as "Virus Protection" and will only be available via a paid up Microsoft AV subscription.

    Yet another reason to move to an more secure and cost-effective platform.

  255. And I thought they bought RAV for fun... by xQx · · Score: 1

    Really? Microsoft are thinking about selling virus scanners???

    That comes as a huge suprise to all the RAV users out there who had to move to something else because microsoft purchased the company and pulled support for linux.

    Could Slashdot be any more behind the times???

  256. Far be it from me to defend the beast... by InThane · · Score: 2, Informative

    I worked at Microsoft during the Win2k development cycle, testing the (then NT5) user interface. There was a LOT of screaming from the Office 2k people, who wanted to roll their stuff into the core OS, so that they could hook into it with the suite.

    The NT5 team told them to get stuffed, at least as far as I know. I was also a peon at the time (and I no longer work there) so I can't say for certain that was the case.

    --
    InThane
  257. Inept by Anonymous Coward · · Score: 0

    The reporter is right: if they can't plug their own holes, they're not going to do better with an AV product. Which is not to say it won't sell well anyway. After all, the Vole hath the Monopoly Clout.

    But I think the effects are more far reaching. Eliminating important cottage industries and third party vendors will hurt MS and make them an oddity. They will be more isolated, and if the brain trusts around in these companies can't make a living writing for Windows, they'll pick another platform. And if that happens, things might get difficult and lonely for the Redmond corporation suddenly out on the fringe.

    All in all I think it's a good sign. MS have made a number of clumsy strategic mistakes of late. It's a happy reminder that they've been largely lucky, but also that they're panicking. And knowing they're panicking and getting more scared for every day gives any ethical career IT grunt immense pleasure.

  258. Like selling an umbrella to someone you pissed on by Anonymous Coward · · Score: 0

    "Gee, it's wet in here, isn't it? I've got just what you need."

  259. They created the problem, now they make users pay. by TheCeltic · · Score: 1

    Brilliant! (Truly). The marketing from MS is truly brilliant. When it comes to innovations, ideas and technology.. well, they are all lacking in Redmond.. but marketing, it's the best!

    --
    =-=-=-=-=-=-=-= - The Celtic - =-=-=-=-=-=-=-=
  260. Competition is always good by Locutus233 · · Score: 1

    I think it mite be a good idea to let microsoft make antivirus software. Norton, Mcafee, and Bitdefender are all pretty shity desktop products. I would love to see mcshitty and Norton improve there support and provide better support for there products, currently they are shit. I would like to see someone resolve all the outstanding issues with these two products. What i suspect will proabbly happen though is microsoft will just resell someone elses product like sophos or bitdefender and put a pretty skin on it like they did with there wifi products. Its about time though someone offered some real competion to this market.

  261. Remember the days of yesteryear... by Finsterwald+P+Ogleth · · Score: 1

    All well and good, but please recall that MS WELDED the dang dll's together in order to make it "un-removable". I seem to recall that the dll's they combined were NOT tightly related, but provided them a convenient excuse as to why they couldn't be removed...they had strategically combined them so that you take the IE out of the environment, you take some core OS functionality along with it.

    1. Re:Remember the days of yesteryear... by drsmithy · · Score: 1
      All well and good, but please recall that MS WELDED the dang dll's together in order to make it "un-removable".

      What, in much the same way KDE and Qt are "welded" together ?

      I seem to recall that the dll's they combined were NOT tightly related, but provided them a convenient excuse as to why they couldn't be removed...they had strategically combined them so that you take the IE out of the environment, you take some core OS functionality along with it.

      The IE components were heavily used within parts of the OS like the help system and the shell to provide relevant functionality. Last I checked, code re-use was consider A Good Thing.

  262. MS business plan by niittyniemi · · Score: 1


    1. Sell buggy OS.
    2. Profit!
    3. Don't spend money fixing bugs.
    4. Profit!
    5. Sell AV.
    6. Profit!
    7. ??
    8. Profit!

    ....ad nauseum

    Is it just me who thinks it's dishonest for an OS manufacturer to sell
    bug fixes for software they've produced? That way it suits their
    bottom line to produce an OS that is riddled with holes.....oh, wait...

    --
    The Machine stops.
  263. Unlike IE, this probably belongs in the OS by Anonymous Coward · · Score: 0

    Obviously viruses take advantage of security loopholes in the OS. Why shouldn't MS integrate a virus scanner? Then again, going after the symptoms (virii) is infinitely less effective than curing the problem (insecure OS).

  264. I can see the articles now... by Jace+of+Fuse! · · Score: 1

    A new virus is spreading around the NET, this one spreads itself through users who have installed Microsoft's Antivirus Software by exploiting a vulnerability for which Microsoft has already issued a patch.

    Groovy.

    --

    "Everything you know is wrong. (And stupid.)"

    Moderation Totals: Wrong=2, Stupid=3, Total=5.
  265. M$ Invents new form of Currency by ztirffritz · · Score: 1

    Apparently, viruses are worth money to M$. If I understand this correctly, they are going to sell a product to fix the shortcomings of their own OS?!? When will people see the obvious stupidity of this arrangement. It is a stroke of genious on the behalf of M$, but if users go along with this, they deserve all the virii they can contract. I can also imagine some more nasty anti-monopoly lawsuits coming out of this. M$ will start hiring all the russian virus writers they can get their hands on, then create patches to block their own viruses. Brilliant business strategy. Then Norton and NA cry "Foul" because they don't have access to M$'s virus writers. Don't you also think that it could help an anti-virus app if its creators have access to the OS' source code and their competitors do not?

    --
    Why doesn't anything interesting happen when I have mod points?
  266. So, to summarize: by Cervantes · · Score: 1

    10 Print "Microsoft software sucks! It's so open to virii, they need to do something!"
    20 Print "What? Microsoft is making a virus scanner? They'll probably embed it in the OS, making it impossible for anyone else to compete! Those bastards!"
    30 Print "What??? They're going to CHARGE us for it? Just another way to boost the monopoly! Those pricks! This is just another example of how they suck all your money dry, just like the... well, money-sucking VAMPIRES they are!"
    40 Print "Ha! M$ has decided against making a virus scanner... those bastards! We win, we win!"
    50 GOTO 10

    --
    If I knew the wedgies I gave you back in 6th grade would have resulted in this . . . I might have taken a moments pause.
  267. Microsoft Anti Virus Software by DukeLinux · · Score: 1

    Isn't that really just format c: at the DOS prompt? I think Windows qualifies as a virus by itself. Including anti virus software with Windows would have to render it more useless or better yet simply uninstall it. Perhaps select "flavors" of Linux could be marketed as "Windows Anti-Virus" software. It makes sense to me.

  268. Is this what we call . . . by master2b · · Score: 1

    a 'self licking ice cream cone?'

    ba - dum - tssshh

    --

    Listen to Reality!
  269. sticking up for M$ ? by shnives · · Score: 1

    /puts asbestos suit on. here are a few thoughts on just why M$ would consider doing something like this. Firstly some posters are saying that M$ is already very slow in patching its os for vulnerabilities. Whether this is even true or not does not matter, but it does mean they are already IN the anti-virus business, because everybody blames them for os vulnerabilities anyway. It was only a matter of time until some creative person at M$ came to the conclusion that if they were already in the anti-virus biz. they might as well get paid for it. This is a pretty smart move imo. By separating it from the os they get 5 major benefits. 1 the possibility of anti-trust legal problems are removed. 2 they get a new source of revenue for work they were doing anyway. 3 this shifts pressure from their os having to deal with malicious attacks. The blanket statement can be if you are at risk to said attacks please buy the anti-virus software. 4 They can now easily get away with charging extra for it; if anyone does not like this policy, they can just state they are doing this to a) not be sued, b) because they are nice guys and want to give the consumer/competition a fair shake. 5 Further reducing piracy, all of these auto up dates &c are one of the most effective ways of geting poeple to buy software. But there are hacks out there to get auto updates anyway. Piracy will always be out there, M$ knows this, and doesnt really give a $hit about the hardcore pirates anyway--they are the group that will never pay. The casual pirate, however, that gets their corporate xp off kazaa, will be hung out to dry. Someone also posted some conspiracy idea about M$ also employing those who produce Virii. What you may call conspiracy is business as usual at M$. They can buy any virus creator on the planet, anytime they want. In fact they have a history of hiring those who caused them serious competition. There is nothing unethical about this, it is simple business practice; any company will want the best employees. This also happened with banking software, many hackers who were not very good criminals were caught stealing funds from banks. The banks offered non prosecution, and a decent salary for helping them prevent anymore such hacking. The previous "security experts" that were working for the bank became living history like Gary Coleman. What is different about M$ is the fact that they have an UNHEALTHY cash position. I dont know what it is at this moment, but a year ago their cash was at 48 BILLION. Now the scary part of this was that very smart finacial advisors told the company that this was bad--it was too much cash to just have lying around. I am not a very good financial advisor I suppose, because I would never tell anyone with 48 billion in cash lying around that they had a problem. I would call it a solution. The next question is how will it affect other anti-virus "experts". M$'s answer is simple business; we dont care. They are under no obligation to baby sit other companies, and the world is a harsh place. Being a corporation, they have a specific modus operandi; to do what is best for them. That is to expand their business, have a healthy bottom line, and protect themselves from attacks on various levels, both known and unpredictable. This is not immoral, but amoral. To put it in prespective, if M$ wanted to be percieved as a moral company they could use just their cashola to colonize Mars, invade/liberate Iraq, or even wipe out world hunger and employ very many subsidized farmers at the same time.

  270. perhaps someone can splain this to me by louden+obscure · · Score: 1

    the feds see a problem with a bundled ms OS browser, but ms aftermarket anti-virus software for an ms OS or two that attracts virus' and worms like stink on shit doesn't raise an eyebrow. perhaps i've had one too many beers to follow the logic chain.

    --
    Serenity now, insanity later.
    1. Re:perhaps someone can splain this to me by BCW2 · · Score: 1

      No, I think you see the problem more clearly than any lawyer ever will.

      --
      Professional Politicians are not the solution, they ARE the problem.
    2. Re:perhaps someone can splain this to me by louden+obscure · · Score: 1

      phew, i thought i was in over my head on this one.

      --
      Serenity now, insanity later.
  271. Re:"Anti-virus program as a separate product from by glitch23 · · Score: 1

    The reason why it should be integrated is because if it's being developed by Microsoft, for their own OS, you would imagine that they might have a small niche into what these viruses are going to do and how they would affect the OS. They created the OS, they know the code behind it, and could possibly help prevent more of the "stupid" users who open the email with the "cute" bears.

    I'm just proposing this as an idea so mod as you wish but if MS is going to use that as their advantage then other AV companies can complain that they have an unfair advantage b/c they make the OS. They should share their knowledge (even at a cost) with other AV companies so they know the ins and outs of how a virus can affect the system as well.

    --
    this nation, under God, shall have a new birth of freedom. -- Lincoln, Gettysburg Address
  272. This business model looks very interesting... by oktokie · · Score: 1

    When windows 95/98 had numerous memory leaks which
    were not fixed for long time, I seriously gave a thought that Bill had secret contract with all of the memory manufacturals so he could increase the sales on the memory modules!

    Now, more buggier or intentionally introduced bugs / and holes on the operating system can increase sales of the antivirus software!

    If Billy knew that he had created monster which cannot be replaced but seen that he end is near...then why not stab the own creation and profit from it's blood!?? It was going to die anyway..(I am refering to the reason why microsoft wanted to get into the multimedia/entertainment business(console) and network gear business(they had it going for some time but abruptly cancelled everything when cisco found linksys very cute)...

    More bugs in windows leads to no decline in OS sales...
    More bugs in windows leads to the increased sales in antivirus software...

    Ha...

    I can only think of two words = "Antitrust!!!" & "Violation!!!"

  273. Ge... Bu... *head explodes* by The+Master+Control+P · · Score: 1

    That's got to be right near the top of the list of great oxymorons... The company that produces what is arguably the most insecure operating system, most insecure web browser, and most insecure E-Mail client of all time is going to produce *antivirus software.* Oh, man... If you think it's bad with people using Nortons and McAfee, think what happens when it's your MS-Antivirus that gets 0wn3d by the latest virus/worm/trojan/ping-of-death.

  274. Re:A part of the OS by dgatwood · · Score: 1
    Here's what I'm wondering.... What's to stop Microsoft from intentionally adding holes in Windows, providing a suitable intrusion detection mechanism in their AV software, and waiting for someone to exploit it?

    "Only Microsoft's AntiVirus software protected users against the ScreamingMoron virus. Shouldn't your business have the best tools money can buy?"

    Or even without intentionally adding holes, what's to stop them from turning this into an alpha security patch program whereby their AV software protects against problems in their OS before they disclose the vulnerabilities to anyone else?

    Am I the only one who thinks this could be a breathtakingly anti-consumer conflict of interest?

    --

    Check out my sci-fi/humor trilogy at PatriotsBooks.

  275. MSAV by jhobbs · · Score: 1

    I'm not sure why many people find it suprising that Microsoft plans to enter the anti-virus market. If anything I am suprised that they do not plan to bundle it. Microsoft included an anti-virus tool in MS-DOS 6.2 and above, but never included one with Windows95 and above.

  276. MS patches fast enough, users don't by darth_zeth · · Score: 3, Interesting

    If they can't seem to patch their OS fast enough, what makes them think they can keep their AV software up to date?

    MS is pretty good about putting out a patch every time a vulnerability is discovered, usually with in a few days.

    But users never patch their systems. I do tech support for small businesses, and every time MS sends out a Critical update about a security vulnerability, two to four weeks later a virus comes out. And when that happens, we get calls. MOST of the recent worms out there were 100% preventable with a patch, even if you DID open up an email attachment.

    If users were smart enough to run Windows updates every once and a while, or set it to auto-update, they wouldn't have a fraction of the problems. When i get a hold of a customer's computer, more often then not there's at least 10 critical updates that need to be downloaded form Windows Updates. (gf's mom's had 21)

    So yeah, blame MS for making an OS to begin with, but don't blame MS because users don't take the opportunity to download patches that MS supplies.

    --
    "Nobody writes jokes in base 13." - Douglas Adams
  277. My AV plan by theolein · · Score: 1

    Although I mainly use Mac OSX on a day to day basis, I need a PC to check websites in Windows IE. I have no wish and no time to fuck with the horrors of patching Win2k/XP and friends for sasser, blaster (I spent a number of hours today trying in vain to fix a friend's Win2k PC that had been infected by no less than 12 different viruses and tojans. System was hosed, impossible), so I actually just resorted to the idea of just using Win98 with Firefox for any serious browsing and IE6 for checking my sites and webmail if needed. Amazingly, even though this machine has no AV software and no firewall, it has not been hit by any of the remote exploits currently out there (obviously, since they almost all target service vulnerabilities on the NT kernel).

    Works like a charm. have done the same for my sister and old mother and they have less problems than they had when they were on Win2k and WinXP respectively.

  278. Not MS's first AV by Anonymous Coward · · Score: 0

    Remember back in the DOS days? I distinctly remember DOS 6 coming with AV software (including, I believe, a version with a Windows GUI).

  279. It's called Windows update by darth_zeth · · Score: 2, Insightful

    almost all infections can be stopped before there's a VIRUS out. Just get the patches. If i recall, Sasser, Netsky and Blaster could have been worhtless.... if people had patched their systems. Hell it took over a month after the security update came out for Blaster to come out.

    --
    "Nobody writes jokes in base 13." - Douglas Adams
  280. Microsoft DOES have the inside advantage. by khasim · · Score: 1

    "Fair point, but I doubt that'd be enough this time around. The main reason being that the AV software out there today is specifically for Windows. MS has an inside advantage towards getting problems fixed."

    Therefore, to avoid ALL APPEARANCES OF IMPROPRIETY they would have to keep a "Chinese Wall" between the rest of the developers and the anti-virus developers.

    The Microsoft anti-virus team would have to work with the same, published API's that all the other anti-virus teams use. This way, the Microsoft anti-virus team would NOT have any advantage over the other vendors.

    Or, as I said before, Microsoft would have to publish the API's and make their product easily removed and replaced AND allow OEM's to remove and replace it (another thing that Microsoft was doing in the Netscape trial).

    In fact, it is VERY easy for Microsoft to enter the anti-virus market and NOT be in violation of anti-trust laws.

    "How does this contradict my point that Microsoft doesn't have monopolies everywhere?"

    I never said that Microsoft didn't have monopolies everywhere. I said they had ONE. And they have been found GUILTY of leveraging that ONE monopoly to gain advantages in other markets.

    "Eh? Microsoft isn't the market leader in either app, so what's so 'cute' about it? Microsoft would sure LIKE to be. Same goes for the XBOX, they couldn't buy themselves into #1 there."

    It's "cute" in that you can't claim that they were NOT found to be a monopoly so you're switching to claiming that they don't have LOTS of monopolies. Since no one ever claimed they had LOTS of monopolies, your attempt is "cute".

    "Uh okay. I suppose I should just drop everything, shake my pitchfork at MS at every turn, and badmouth every little thing they do? That way I could be cool just like everybody else here."

    Unthinking hatred is no better nor worse than unthinking loyalty.

    People do NOT trust Microsoft because of Microsoft's DOCUMENTED PAST BEHAVIOUR.

    That's frequently refered to as "learning" or "experience".

    And you have a problem with this?

    Or is it that you feel it is necessary to give Microsoft the benefit of a doubt this time because, this time, they just MIGHT act differently than ALL those other times.

    And that behaviour is typically termed an "apologist".

    So, if you aren't an apoligist, then WHY do you believe that Microsoft will NOT try to violate anti-trust laws this time?

    Don't say "innocent until proven guilty".
    The easy counters are:
    "A leopard does not change his spots"
    "Fool me once, shame on you, fool me twice..."

    1. Re:Microsoft DOES have the inside advantage. by JediJorgie · · Score: 1

      "Unthinking hatred is no better nor worse than unthinking loyalty." Try to sell that to the family someone who has been beaten to death because of their skin color or the church they attend. Jorgie

  281. Pinky or The Brain? by Anonymous Coward · · Score: 0
    If this is yet another plot to TAKE OVER THE WORLD, is it a Pinky Plot or is it a Brain Plot?

    If it is a Pinky Plot then it is an example of the incredible stupidity that Microsoft often emits, say having a security patch that breaks all other software when it is installed.

    If it is a Brain Plot then it represents the fiendish backroom double think that had Microsoft meeting with NetScape to divide the browser market between them. (This came out during the anti-trust trial.)

    In either case, I hope that it turns out like all the other Pinky and The Brain plots: a complete failure.....

  282. Old news.. *yawn* by Radix999 · · Score: 1

    I'm surprised something like this made front page /. news. But then again it IS microsoft.. so hey.. jump on the bandwagon.

    Microsoft clearly made their intentions to develop Microsoft branded Antivirus software last year when they bought GeCAD Software - the makers of RAV Antivirus.

    Quick google search revealed one of the news stories about that event - http://www.technewsworld.com/story/31139.html

    "at the time of the purchase, the company said it would put GeCAD's engineers to work integrating antivirus products with future versions of Windows, including next-generation platforms such as Longhorn." - 18 July, 2003

    --
    -- Wireless WaFreenet user since March 2002
  283. You have an excellent point there. by khasim · · Score: 1

    But lots of "discussions" tend downwards towards pure emotional levels (just like in the 3rd grade).

    There is some justification for this. It seems that people reach a decision FIRST and then rationalize it to themselves.

    You can see that in almost all of the political "discussions". People will accept certain behaviour from "their" candidate (or politicians associated with "their" party) but will rant against identical (or almost identical) behaviour on the "other" side.

    In technology, it should be easier to restrict the discussion to facts and such. But that may be why we don't see so many replies to most pure technology articles.

    But when there is room for emotion (Microsoft "bad" vs you're all Microsoft haters) we see hundreds of replies.

    Bring politics into the discussion and we can see over 1,000 replies.

    As you said, none of them give a shit about you.

    It seems to be an emotional need to "justify" ourselves and our "choices". As such, I don't see it ending any time soon. :(

  284. Re:A part of the OS by bluesnowmonkey · · Score: 1

    Little news flash for you: what Microsoft says and what Microsoft does are not necessarily the same thing.

  285. Please learn what "literally" means. by khasim · · Score: 1

    "The number of people who think comments like this are uncommon or meant to be taken literally is an indication of how close the average /. poster has ever been to the managerial meeting room."

    So, if no one here actually believed that Microsoft was suggesting that someone kill a child, that means that "the average /. poster" has probably been to the "managerial meeting room"?

    Did YOU believe that someone's child was being threatened?

    "Literally"?

  286. Re:A part of the OS by SphericalCrusher · · Score: 1

    I think Microsoft just has the attitude of "You want to attack us? We'll defend ourselves!" in mind when they brought up this idea. I think it's pretty smart though -- they no longer have to rely on the help of other non-Microsoft programs... but then again, it only adds to the large list of things Microsoft has their fingers in. Tisk tisk.. Monopolies...

    --
    "Instant gratification takes too long." - Carrie Fisher
  287. Resources could be used to FIX the os by Anonymous Coward · · Score: 0

    Its a waste of resources. Why not simply use the people they were going to assign to this project and have them working in conjunction with the various other teams that do IE, outlook etc and have them help out in actually fixing those weak products, instead of resorting to a band-aid system like the an additional AV.

    But then again they don't make money off providing bug fixes and updates (at least not in the short term).

  288. An ethical dilemma? by usermilk · · Score: 4, Interesting

    There is an obvious conflict of interests with Microsoft releasing anti-virus software for their own operating system, but one has to wonder if it is unethical. The two trains of thought I am following are as follows:

    Microsoft is not making the viruses that affect their operating system. By making a piece of software to protect their customers from these viruses they are providing a service, this service is not illegal or immoral. What would be immoral is Microsoft abruptly ceasing the release of patches to protect end-users from virus exploits. Many viruses exist only because their is an exploit in the operating system for their taking advantage of. If Microsoft no longer patches these exploits in an effort to make an extra few bucks, they would be acting immorally.

    I, however see their anti-virus as a seperate outlet. There are users who don't want to patch their operating system. If you can sell these users anti-virus software which automatically updates its definitions, they won't worry about a need to patch their operating system to protect them from viruses. It will be done through the anti-virus software. Hell, the software can automate Windows Update for them, and patch their system automagically. The rest of us who don't but M$-AV will have to patch the operating system ourselves.

    The second train of thought is business oriented. Microsoft is a business, and in the words of my friend James, "...businesses aren't in the habit of accepting a decline in profits." By patching their operating system and allowing persons who do not purchase their anti-virus software to be safe from viruses, Microsoft may not make any profit from their anti-virus software. The conspiracy theorist in me brought the light the idea that Microsoft may actually create exploits or viruses in an effort to help their anti-virus software suceed. This thought is ludacrious. Microsoft would be risking jail time if they created viruses. If they created exploits they would be risking horrible publicity.

    Viruses can exist without exploits, macro viruses take advantage of something that cannot be patched, automation. Microsoft just sees an open market and wants to take advantage of it. I see no ethical dilemma at all, just capitalism.

  289. ROFLMAO!!!! by digital+photo · · Score: 1

    BWAHAHAHAHAHAHHAAHA!!!!!

    I'm sorry, but the maker of the #1 targetted platform which is almost synonymous with virii, system crashes, and security issues... is the LAST organization to be making anti-virus software.

    It's a bit late for April fools... seriously, *wipes tears* they aren't REALLY thinking of producing anti-virus software, are they?

    Prediction: The antivirus software produced by MS will, itself, be a security hole through which all virii, spammers, and abusers of the net come through into your computer.

    We all saw how wonderful it was when Back Office was brought onto the scene... do we really want an anti-virus product as well?

    *LOL* I'm SO glad I use a non-Windows platform laptop, desktop, and server system.

    I feel sorry for the Windows folk who will ultimately be the bearers of whatever ill this bears fruit to. :(

  290. The only true antivirus by ReNeGaDe75 · · Score: 1

    Antivirus software shouldn't be necessary in the first place. Virus outbreaks work because of the following situations:

    - Flaw in the OS (When you spend $299 on the OS... they shouldn't be charging you to fix it, it was their mistake to begin with)
    - User was stupid enough to execute the virus
    - User was executing random email attachments with administrator priveleges.
    - User did not apply the security updates that they need.

    The first one is the responsibility of the vendor to fix... not Symantec to cover up. Microsoft could do better at it, but they do a decent enough job of patching (not as good as open source OS's, but I can live with it)

    The second can be fixed by educating users better. You hear those things on the news, but when somebody first learns to use a computer, nobody ever says "don't run programs you got in your email from people you don't know". It should be stressed. I mean really, it's common sense. But people do it anyway.

    Running as administrator is both a user error and a design flaw. Windows shouldn't be setting up users as admins by default. Fuck user-friendly. It's not very user-friendly when browsing a malicious page in IE can destroy your hard drive. Then you'll wish you weren't an admin. Users should also be educated in how to not use admin rights. It goes both ways.

    And the last one, well, back to educating users. Tell them to install patches. If they are too lazy to install patches, it's their own lazyass fault when they end up having to reinstall their OS.

    It's one thing to be lazy, it's another to be stupid...

    --
    Hypocrisy is the 8th deadly sin.
  291. I have one question? by Anonymous Coward · · Score: 0

    Did Microsoft knew of a vulnerability before or after they wrote the anti-virus software to guard against it?

  292. I hear another anti-competitive suit coming.... by Anonymous Coward · · Score: 0

    If they don't use their intimite knowledge of the OS what makes their av software better? If they do, every anti-virus software maker has a lawsuit against them.

  293. Our OS sux, so buy our AV! by I-R-Baboon · · Score: 1

    How about you try securing your OSes up a bit instead!

    Doesn't this seem a bit more like extortion? Kind of like saying the Cops suck, but pay higher taxes to have them and then pay an additional fee for a personal security force that may do the job...who is sponsored by City Hall. Don't think about addressing the crime problem or why the police force is a failure.

    --
    -1 Overrated (Too many big words for me to comprehend)
  294. conflict of interest by null-sRc · · Score: 2, Insightful

    this is a classic case of conflict of interests.

    now they will want to delay patches to security holes forcing people to pay for their anti-virus software.

    I've always figured if you keep windows update up to the minute, then there's no need for an AV suite..

    --
    -judging another only defines yourself
  295. can you say "conflict of interest"? by Anonymous Coward · · Score: 0

    I can.

  296. Re:A part of the OS by Trolling4Dollars · · Score: 1

    Doesn't ANYONE remember that Microsoft used to package an Antivirus program with the OS back in the Win 3.1 days? It lived in C:\Windows\System and was called something like VSCAN.EXE or something like that. I think it was made by Norton and was kind of a stripped down util. The more things change, the more they stay the same...

  297. Simple by blitz77 · · Score: 1

    What's the fuss all about? If you don't like the idea of MS selling AV software, then don't buy it. Nothing to see here, let's move on.

  298. A (real life) window is not a bug by Augusto · · Score: 1

    > You could break into my house if you broke a window. I don't consider my windows an "unpatched vulnerability."

    If you break your common window with a rock, that is not a bug. If you can attack a program and make it do things it's not supposed to, that's a bug. There's a big difference here.

    After all, from a real life analogy taken from the real world, if you put a firewall on your computer you should be fine. Think of it as a big wall around your house, unbreakable. You go watch TV (a passive undertaking) and you shouldn't expect break ins.

    In the MS world, your wall won't do you any good, when bening functions like clicking on a link can cause a major security problem (let's not even talk about the simple task of reading email).

    Goodness gracious, the other day I had to go to somebody's machine that had very nasty spyware installed! The spyware was so bad, that it would refuse to be removed and when I did and I wrote over the HOST file so it never goes to that server again, the spyware would overwirte my edited HOST file and remove it's entry! This type of stuff is just unnaceptable!

    --

    - sigs are for wimps.
  299. You need to apologize by Augusto · · Score: 1

    > As opposed to Slashdot? In every case where there has been a problem with Windows security, it's been AFTER they released a patch for the vulnerability. Every one!

    You've already been easily proven totally wrong on this. When can we expect your apology?

    --

    - sigs are for wimps.
  300. Ugh, this is what happens with lack of sleep by bruns · · Score: 1

    Ugh, this is what happens with lack of sleep.

    Enjoy!

    http://www.sosdg.org/spoof/mskb666-691.html

    --
    Brielle
  301. -1, Goebbels by Anonymous Coward · · Score: 0

    Stop repeating the communist lies.

  302. Precursor to Palladium perhaps? by CloakSmrf · · Score: 1

    I wouldn't be surprised if this is Microsoft's first tentative introduction of Palladium technology into the market place.

    Get people used to it, conveniently integrate it into the O/S down the track (in Longhorn?) as 'demand explodes', and then adjust the definition of suspicious application behaviour and viruses.

    We'll be computing to the MS tune in no time at all!

  303. Will M$'s antivirus program remove Windows? by Anonymous Coward · · Score: 0

    After all, M$ Windows is the most prolific virus out there.

  304. Analogy (was Re:Perhaps It Belongs in the OS) by Anonymous Coward · · Score: 0

    Buying antivirus software from Microsoft would be like buying Life Insurance from the Mafia.

    Something you can't live without...

  305. Apples and orchards......... by Anonymous Coward · · Score: 0

    Comparing the vulnerabilities of Win2k to a standard Linux distro is not accurate. With Win2k, you get.....um, Win2k and IE. With a Linux distro you get about 2000 apps, so vulnerabilities in the apps (nothing to do with the OS itself) are counted as "Linux flaws". M$ tried that arguement a while back, and it was shot down very quickly.

  306. Obligitory Dilbert Quote by Anonymous Coward · · Score: 0

    Dumb generic guy: "Isnt that like paying a burglar to guard my house?"

    Dogbert: "Excuse me while i wag."

  307. Allrighty! Sign me up! by Anonymous Coward · · Score: 0

    So Microsoft wants to sell antivirus software? Good enough for me. Let's see...

    1) Buy new Microsoft antivirus.

    2) Install on PC.

    3) Run first scan.

    4) WindowsOS vanishes (hey wait a minute...)

    5) Somebody at tech support profits, dammit!

  308. Supply and demand for viruses by HogynCymraeg · · Score: 0

    Now they can meet both! :)

  309. Happy AIDS by TheRock53 · · Score: 1

    With the introduction of this new MS antivirus defense system, AIDS now can mutate and get itself a new environment, the e-world!

  310. lol by desalien · · Score: 1

    why didn't they just buy symantec ???

    --
    make install, not war
  311. while wrist-slapping from the DoJ is probably by waspleg · · Score: 1

    annoying

    i would imagine gates doesn't like answering questions in court

    and you know all that anti-trust stuff about incorporating the browser they probably don't wanna sit through that again for anti-virus

  312. Brilliant by tsa · · Score: 1

    This is one of MS's most brilliant moves ever. They turn one of their weaknesses into cash by selling sofware that patches flaws in their own software. This shows that Bill still is a marketing genius. I guess almost every /.-er knows someone who trusts MS and will certainly buy this handy new product of theirs. MS, although I don't love your products I have to congratulate you with this one.

    --

    -- Cheers!

  313. Microsoft Previous Anti-Virus Software by maverickman · · Score: 1

    They used to provide something in the early 90s (MSAV) which worked with Windows NT3.5 - it used to flag anything written in VB as a potential virus (it flagged any self-modifying code) so couln't have been that bad a product;-) More seriously there is a whiff of poacher turned gamekeeper turned poacher here...

  314. Mods: Not Funny, Insightful... by hughk · · Score: 1

    Whether the poster meant it or not, that was actually a very insightful comment. The office help assistant popped up often in cases where it wasn't appropriate (It looks like you are trying to write a letter...) and not at all when it could have been very useful. Just think how much would have been saved it it warned people about executable attachments and reminded them that the email 'from' line could have been forged. If it just stopped one in ten users from infecting themselves, that still means less zombies.

    --
    See my journal, I write things there
  315. Microsoft Plans To Sell Anti-Virus Software by turnin · · Score: 1

    World largest baby feed manufacture plans to sell condoms.

  316. Pay yearly to use your own computer!!! by Anita+Coney · · Score: 3, Interesting

    We all know that Microsoft has been itching to get us to pay yearly for the use of their OS. This is their attempt to get that gravy train rolling.

    Sure, Microsoft's antivirus app will be a separate product. Sure it will not be bundled with Windows. However, I'd bet anything that it WILL be bundled with new computers via special deals to manufacturers.

    After a year, those new computer buyers will get messages to pay some money to continue receiving updates.

    Once we're used to paying every year (or every month?!) for antivirus updates, Microsoft will start charging us yearly for other updates.

    Microsoft will be smart and will start out with a reasonable price. But it won't be too long before we're paying about $80 a year for the right to use our computers.

    --
    If someone says he and his monkey have nothing to hide, they almost certainly do.
  317. Re:"Anti-virus program as a separate product from by Tei · · Score: 1

    "They created the OS, they know the code behind it,"

    Nope. You assign "god" atributes to the engineers at Microsoft. The code is a mess, a cancer of lots and lots of files, made by a army of guys. Doestnot exist a single men that know everything about all the code. Because Its too complex for a single men.

    Example:
    As you may remenber, the Samba implementation of SMB protocol is better than Windows one.

    --

    -Woof woof woof!

  318. Perhaps It Doesn't Belong in the OS by PenguinJames · · Score: 1

    It belongs in the OS? That would the Microsoft model. Integrate everything, so that 1. the user's easiest option is to use the Microsoft product and 2. it's impossible to determine which component has failed, causing a crash.

    The primary job of the OS is to sit between the hardware and the userland software. A well designed OS with good APIs doesn't need unnecessary "features" (read: bugs) to be integrated. If the OS manages only what it must, the quality will be better.

    Microsoft's security track record is very poor. Like the original post said, they can't keep their primary product, Windows, up to date. How can MS be expected to keep up with the hundreds of new virii released every month? Microsoft AV, whether integrated with the OS, bundled with the OS, or sold separately, will just open up a new venue for attack.

    Robin Williams' impression of Bill Gates: "Monopoly's just a game, Senator, I'm trying to control the world!"

    --
    The box said, "Requires Windows XP or Better"...
    So I installed Linux.
  319. That is not our problem. by jotaeleemeese · · Score: 1

    Companies that become a monopoly can't do whatever they want. In this case MS should just keep out of the Antivirus arena and allow antivirus companies to fight amongst themselves for that chunk of the IT market.

    Or they could provide what is clearly a differentiated product at a price that reflects the cost of its production. To pull a Internet Explorer on this area would be illegal and immoral.

    --
    IANAL but write like a drunk one.
  320. Yeah, blame the user. by jotaeleemeese · · Score: 1

    Users are told the tool they bought is the greatest thing since sliced bread, but it quickly transpires that in order to keep your machine clean you need to invest a lot of time and money in endless patching that most probably the poor owenr deos not understand what it is doing at all.

    --
    IANAL but write like a drunk one.
    1. Re:Yeah, blame the user. by aardvarkjoe · · Score: 1

      Yes, I do blame the user. It's not like it's any big secret that all operating systems need to be patched on occasion. People should be responsible for themselves, instead of claiming that the corporation / the government / society / whoever else should be their babysitter.

      --

      How can we continue to believe in a just universe and freedom to eat crackers if we have no ale?
  321. Re:This should be interesting...:-) by Anonymous Coward · · Score: 0

    Well, since the M$ OS is the world's most common virus, I can't wait to see AV software that destroys itself...:-)

  322. Eset NOD32 by bonch · · Score: 1

    Screw Microsoft, I use NOD32--the absolute best anti-virus software out there. Eset is totally committed to keeping the virus signatures up to date. The other day, I received no less than three automatic updates to the virus database. NOD32 has won several detection awards and passed many tests that Norton didn't pass, but the more telling triumph of NOD32's prowess is the fact that Microsoft currently uses it for their corporate networks. :)

  323. well.... by compro01 · · Score: 1

    i agree with this in theory, as EVERYONE should have AV software. but if it is being made by MS, i might be kinda worried. IME, i haven't had any problems with the major (read: MSBLAST, Sasser, etc.) virii as the patches are for the most part out long before the virii are. i was infected with both but they couldn't do a GD thing as i had the patches, then my AV (norton(shadup)) quickly removed them. i would like if MS licenced the software from someone else (norton) and included it with the OS but seperate from the os (core of it, but it would still install with windows).

    --
    upon the advice of my lawyer, i have no sig at this time
  324. am i the only one to see this as 'bait and switch' by LifesABeach · · Score: 0

    lets see if 'ol papa bear has this figured out correctly.

    in the united states when a product has incorrectly enginerred a flaw, the product is recalled and or repaired at the manufactures expense.

    when windows has an incorrectly enginerred a flaw, they'll sell you a 'patch' for it?

    is this a great country or what!

  325. I think you've hit the reason. by khasim · · Score: 1

    "It's not like MS doesn't spend millions of dollars hiring PR firms and advertising agencies to push their point of view on us."

    They spend that much money because it works. NanoGator is a good example of such.

    Just look at this thread.

    He is saying that people here will think that Microsoft is violating anti-trust laws if/when Microsoft gets into the anti-virus market.

    He is NOT saying that Microsoft will NOT violate the anti-trust laws.

    He is NOT saying that Microsoft has NOT violated anti-trust laws.

    But he is crying about other people who do not trust Microsoft now because of Microsoft's past, documented, behaviour.

    In other words, he is crying about people LEARNING from EXPERIENCE. He is crying that those people are vocal about it on this website.

    I don't think he's on their payroll, but maybe he is.

    I think he's just gotten his emotional self-worth tied up with defending Microsoft against the cynical masses on slashdot.

    Or maybe he is simply against the cynicism of the masses on slashdot?

    Whichever it is, the end result is the same.

    He is opposing the expression of knowledge gained from experience and the extrapolation of that knowledge.

    1. Re:I think you've hit the reason. by NanoGator · · Score: 1

      "He is saying that people here will think that Microsoft is violating anti-trust laws if/when Microsoft gets into the anti-virus market."

      Yep, you got it.

      "But he is crying about other people who do not trust Microsoft now because of Microsoft's past, documented, behaviour."

      Wrong. I'm actually advocating people use their brains a bit, as opposed to just hating Microsoft because it's the cool thing to do.

      "I don't think he's on their payroll, but maybe he is."

      If I were on their payroll, I would be fired for several of the not-so-nice comments I've made about MS.

      "I think he's just gotten his emotional self-worth tied up with defending Microsoft against the cynical masses on slashdot."

      Nah.

      "Or maybe he is simply against the cynicism of the masses on slashdot?"

      Hmm... I think you're close on that one. If I could put my finger on it I'd give you a clearer picture of it.

      "He is opposing the expression of knowledge gained from experience and the extrapolation of that knowledge."

      Um, no. In general, I am against uninformed hatred. Imagine how you'd feel if I were modded up for saying "Pff Linux totally sucks. Nothing works on it. Its interface is horrible. And, it really isn't any more stable than Windows." Would you be a Linux 'shill' for defending it? Zealot? Linux apologist? Or would you be responding to my thoughtless idiocy that demonstrates that I had done no research at all? Think about it.

      Good evening.

      --
      "Derp de derp."
  326. MOD PARENT OFF-TOPIC by Anonymous Coward · · Score: 0

    ummm... WTF does this have to do with Anti-Virus software?

  327. This has *got* to be illegal by Anonymous Coward · · Score: 0

    It's like a car manufacturer releasing a model with faulty brakes and then opening a chain of brake repair stores. Come on....surely you yankees have some kind of law against this?

    -d

  328. Why do you believe that they did not? by khasim · · Score: 1

    NanoGator says:
    "Wrong. I'm actually advocating people use their brains a bit, as opposed to just hating Microsoft because it's the cool thing to do."

    And your basis for believing that someone is basing his opinion on what is "cool" as opposed to established facts is.........?

    "Um, no. In general, I am against uninformed hatred."

    Again, what is your basis for believing that someone is basing his opinion on what is "cool" as opposed to established facts is.........?

    If you do not have a factual basis for that belief, then you are guilty of exactly the same behaviour you claim to oppose.

    So, what is your basis?

    1. Re:Why do you believe that they did not? by NanoGator · · Score: 1

      "Again, what is your basis for believing that someone is basing his opinion on what is "cool" as opposed to established facts is.........?"

      Heh. You mean besides his saying he hates the entire company because its evil? Nice try, man. You're scraping the bottom of the barrel with that one.

      --
      "Derp de derp."
  329. Linux distros by bonch · · Score: 1

    After all, Linux distros don't do that with people's volunteer work when they sell their branded boxes of CDs.

  330. I see that you have experience IIS... by Anonymous Coward · · Score: 0

    ... perhaps you should consider installing Apache instead.. or simply blow the doze box away for Anything else..

  331. Here is the ORIGINAL post you replied to. by khasim · · Score: 1

    http://slashdot.org/comments.pl?sid=111314&thresho ld=1&commentsort=0&tid=109&mode=thread&cid=9445792

    "While I'm not certain that I completely trust Microsoft on this, it might make sense to have the antivirus scanner as a part of the OS. Better low-level access, as well as being able to intercept attempts by something like Outlook to execute arbitrary files. Having a unified place to control such actions might help security.

    On the other hand, the major effect might just be to introduce a single point of failure/attack. It's certainly possible to argue that the variety of security software in use makes it harder to attack any given system. For evidence, look at the list of processes that the more sophisticated viruses try to stop.

    Background: I do not customarily use an on-demand scanner. On occasion, I have loaded up a scanner because of suspicious behavior. My Windows box (patched up to date, firewalled) has had only one virus, a backdoor program that was installed when my daughter clicked a "video clip" that she received in an e-mail, before she understood what a spoofed address was. So I'm not convinced that antivirus software is as necessary as it is built up to be."

    I'm having a little trouble finding "evil" in there. Not to mention that he seems to be making some very good points about "single point of failure/attack".

    So, it does seem that you went into your rant WITHOUT any cause.

    1. Re:Here is the ORIGINAL post you replied to. by NanoGator · · Score: 1

      "I'm having a little trouble finding "evil" in there."

      You're right. I was confused about which part of the thread we were discussing. Sorry about that.

      "So, it does seem that you went into your rant WITHOUT any cause."

      Wrong. My response to the comment you pointed out was quite fair. When I finally got down to my 'shake my pitchfork' comment, you had already called me an MS Apologist.

      Your strategy of finding something to pin this on me with hasn't been fruitful yet. Keep trying, it's quite entertaining. ;)

      --
      "Derp de derp."
  332. No, it was not "fair". by khasim · · Score: 1

    A legitimate post detailing a legitimate security concern (the "single point of failure")... ...and you responded with your rant.

    THAT is the behaviour of an apologist.

    You did not address any of the technical points he made. You just went into rant mode.

    Just like all the other apologists out there.

    1. Re:No, it was not "fair". by NanoGator · · Score: 1

      "..and you responded with your rant."

      I made a valid point.

      "You did not address any of the technical points he made. You just went into rant mode."

      Didn't need to address his technical points, the response of the rest of the industry was a bigger problem.

      "Just like all the other apologists out there."

      "But wait! You just went off on a rant!! You didn't address the technical point that my point was valid!!"

      Heh. Your debate format needs a little work.

      --
      "Derp de derp."
  333. What "valid point" was that? by khasim · · Score: 1

    He said that if Microsoft did that, there would be an issue of "single point of failure".

    You replied with:
    "That works until everybody cries "anti-trust!" Damned if they do, damned if they don't. There's a lot of lightening up that needs to happen."

    I'm sure that sounds like a "valid point" to you. But that is just more evidence that you're a shill.

    "Didn't need to address his technical points, the response of the rest of the industry was a bigger problem."

    No it was not because it was NOT part of his post.

    You were not replying to his post because his post did not contain anything relating to why your response was.

    Someone said something technical that was less than supportive about one of Microsoft's potential choices and YOU had to jump in and claim that lots of bad people out there were anti-Microsoft.

    The post that triggered your response did not contain anything that you were posting about.

    You cruise /. looking for posts that are less than flattering about Microsoft and then you launch into your rant about those bad people who hate Microsoft. Regardless of whether the post is factual or not.

    To YOU that might sound like rational behaviour.

    buh bye, my little shill.

    1. Re:What "valid point" was that? by NanoGator · · Score: 1

      "But that is just more evidence that you're a shill."

      Nope, it's not. My comment was not pro-Microsoft in any way, shape, or form.

      "You were not replying to his post because his post did not contain anything relating to why your response was."

      Untrue. He said it should be included with the OS. I explained what would happen if they did.

      "You cruise /. looking for posts that are less than flattering about Microsoft and then you launch into your rant about those bad people who hate Microsoft."

      Nope.

      "To YOU that might sound like rational behaviour."

      Rational... like trying too hard to prove I'm a shill even though the evidence doesn't exist? Please. Heh.

      Nice try. :)

      --
      "Derp de derp."
    2. Re:What "valid point" was that? by Anonvmous+Coward · · Score: 1

      "Rational... like trying too hard to prove I'm a shill even though the evidence doesn't exist? Please. Heh."

      He is still sore over the spanking you gave him over the WMD/zealousy debate.

  334. MS AV is like the fox guarding the hen house... by ralfalot · · Score: 1

    What's to stop MS for introducing more holes (intentional or not) and making the "fixes" only available through their AV product? Seems like somebody at DOJ should be questioning this!

  335. That is a lie. by khasim · · Score: 1

    "I did answer it. Here's the summary: I wasn't defending MS, I was correcting what I believed to be an error."

    As I pointed out, the ORIGINAL post your replied to had nothing to do with your pro-Microsoft rant.

    The ORIGINAL post was about legitimate technological issues (such as "single point of failure").

  336. You're so full of shit. Heh. by NanoGator · · Score: 1

    "As I pointed out, the ORIGINAL post your replied to had nothing to do with..."

    Let's look at what he said:

    "While I'm not certain that I completely trust Microsoft on this, it might make sense to have the antivirus scanner as a part of the OS."

    Topic: MS could put a scanner witht he OS.
    Response: MS cannot do that without consequences.

    Conclusion: My response had something to do with what he said. Focusing on 'technical' is completely irrelevent. My response to his topic was equally as appropriate as your response to mine.

    "...to do with your pro-Microsoft rant."

    For me to write a pro-Microsoft rant, I have to say something nice about Microsoft.

    "The ORIGINAL post was about legitimate technological issues"

    Actually his original post was that MS should consider including the scanner with the OS, the technical details were to justify why they'd be able to compete with other virus scanners out there. It's also worth mentioning that I said the technical part of his post would work.

    Boy you're trying awfully hard to prove something that isn't true. Must be a democrat. ;)

    --
    "Derp de derp."
  337. And that is ANOTHER lie. by khasim · · Score: 1

    I notice that you left out YOUR response. :D

    Here is what you say NOW:

    "I did answer it. Here's the summary: I wasn't defending MS, I was correcting what I believed to be an error."

    Yet here is your ORIGINAL response:

    "That works until everybody cries "anti-trust!" Damned if they do, damned if they don't. There's a lot of lightening up that needs to happen."

    So, where is the "error" that you were "correcting" with that statement?

    1. Re:And that is ANOTHER lie. by NanoGator · · Score: 1

      You know, it's too bad we're not friends. We could have some really amusing debates. Heh.

      The error was that MS wouldn't be allowed to do it.

      --
      "Derp de derp."
  338. Is the AV they're planning to sell is McAfee? by AngusSF · · Score: 1

    See this story at Computer Reseller News, which claims McAfee is for sale and Microsoft may be the only buyer in sight.

    --
    "A gun is a tool, Marian. No better, no worse than any other tool. An axe, a shovel, or anything." Shane (1953)