Slashdot Mirror


Microsoft Acquires Spyware Removal Company

ack154 writes "Checking for updates on my new favorite spyware removal company, I found that Microsoft has acquired Giant AntiSpyware as of 12/16. I must say that it is very refreshing to see Microsoft finally start to take some serious action to help combat this rampant problem. According to the Giant site, a beta version is expected within one month for Microsoft customers (running Windows 2000 and later, of course)."

442 comments

  1. IE? by AmigaAvenger · · Score: 5, Funny

    So i'm going to assume the first logical step is that the software uninstalls/disables IE?

    1. Re:IE? by jZnat · · Score: 1, Funny

      Actually, it's going to be "uninstall/disable windows".

      Or throw computer out window and procede to torch it with your handy-dandy flamethrower.

      --
      'Yes, firefox is indeed greater than women. Can women block pops up for you? No. Can Firefox show you naked women? Yes.'
    2. Re:IE? by Anonymous Coward · · Score: 0, Informative

      Erm? IE is tightly integrated into windows... You disable IE and well not much will work. They want to shove adds down your throat not make your computer unusuable.

    3. Re:IE? by yummy1991 · · Score: 5, Funny

      I thought windows already was disabled.

    4. Re:IE? by OmegaBlac · · Score: 1
      So i'm going to assume the first logical step is that the software uninstalls/disables IE?
      Or displays a diagram showing the user where the power plug is and how to disconnect it from the PC.
    5. Re:IE? by Lord+Prox · · Score: 3, Funny

      *ahem* it's not disabled, it's differently abled you insensitive clod...

    6. Re:IE? by Commander+Trollco · · Score: 0, Troll

      Omg +1 insightful, a kneejerk unsupported insult! Wh don't you try to back up that lameassed comment with some facts?

      It's not that hard, there are many legitimate ways to poke fun(or denigrate, as you prefer) Windows, mostly dealing with security. Yet with all these options to build a strong basis for argument, you pick none of them, and simply make what appears to be either a joke or a half-thought insult. With those kind of argumentative skills, you are sure going to be converting alot of people...

      --
      http://persianews.on.nimp.org/?u=Tar_Baby
    7. Re:IE? by Zorilla · · Score: 2, Insightful

      Well, I guess we can start with this.

      --

      It would be cool if it didn't suck.
    8. Re:IE? by Anonymous Coward · · Score: 0

      That's sensitivity challenged clod, you sensitivity challenged clod!

    9. Re:IE? by SpaceKow · · Score: 1

      Or check for any modifications of IE and other service oriented software.

    10. Re:IE? by SpaceKow · · Score: 2, Insightful

      I just hope it does not remove ads from competing companies like Google or Yahho.

      I

    11. Re:IE? by Jebediah21 · · Score: 1

      MS: Both a crippling disease and a crippling software company!

      --

      Everytime you look at porn a devil gets their horns.
    12. Re:IE? by Ash-Fox · · Score: 1

      How to disable IE:

      1) Goto c:\windows\system32
      2) Set permisions for "everyone" on "mshtml.dll" to deny
      3) Reset all security zones in IE to high
      4) Log all users out
      5) Everyone log back in.

      End result: IE doesn't work

      Problems:

      The .chm helpfiles don't work, but .hlp files work fine.

      Oh no! The helpfiles that NEVER give me any useful information when I have a problem other than "Check if the device is plugged", "Contact the software vender for more help" etc.. etc.. is not going to work!

      --
      Change is certain; progress is not obligatory.
    13. Re:IE? by Anonymous Coward · · Score: 0

      Running Microsoft Spyware Remover... done.

      Insert system disk.

  2. Typical Microsoft by l810c · · Score: 3, Insightful
    How long has their 'security first' initative been going on? They must not be getting anywhere, because they now have to aquire their security apps.

    What percentage of spyware comes in through IE and ActiveX? Seems like they would just fix that. Stop it at the door, don't wait for it to get in and then Try to kill it.

    I sure hope they don't start charging for this after the beta. Talk about a conflict of interest. We have this buggy, highly exploitable browser that we do not plan on updating for a couple of years until Longhorn comes out. But in the meantime, you can Buy this program that will maybe help after the fact.

    1. Re:Typical Microsoft by lordkuri · · Score: 2, Insightful

      I sure hope they don't start charging for this after the beta.

      now I'm no lawyer, but isn't that borderline extortion? or maybe racketeering?

    2. Re:Typical Microsoft by danpat · · Score: 3, Interesting

      Don't be silly. From a profit taking point of view, why on earth would they want to fix the problem, when it's the potential source of extra revenue?

      From MS's point of view, their large marketshare combined with a demand for security fixes has actually *created* demand for more things they can sell, rather than harming their business. With no real competitors in their space, they have the luxury of taking their time fixing things. There is no percieved alternative so they're not driven to compete with anyone in the security space.

    3. Re:Typical Microsoft by Anonymous Coward · · Score: 4, Interesting

      Performing workarounds for Windows is what leads to acceptance of viruses (just buy an antivirus) and what leads to acceptance of spyware (just buy an antispyware) and what leads to acceptance of systems so bogged down by combinations of the above (just reinstall every 6 months).

      It's a bit like living in a really bad neighbourhood and denying it's a problem. "Oh we're OK, we live in a safe area. As long as you put bars on all your windows, don't leave the house when it's dark, put up bullet proof windows, and don't make eye contact with the neighbours you're perfectly safe"

      Apart from how it's broken, it works perfectly.

      MS is fucked, but they don't mind. The consumer state of society today means MS can just tell people they need to buy something, and people will do what they're told to.

    4. Re:Typical Microsoft by Johnathon_Dough · · Score: 4, Informative
      I sure hope they don't start charging for this after the beta.

      "Microsoft's tool, expected to be available within 30 days, initially will be free but the company isn't ruling out charging for future versions. 'We're going to be working through the issue of pricing and licensing," Nash said. "We'll come up with a plan and roll that out.' Microsoft's disclosure that it may eventually charge extra for Windows protection reflects a recognition inside the company that it could collect significant profits by helping to protect its customers,"
      Article Source

      Looks like they are investigating how much, not if.

      --
      If you are one in a million, then there are six thousand people who are just like you.
    5. Re:Typical Microsoft by MinutiaeMan · · Score: 2, Insightful

      It seems to me that the basic act of having a free beta testing period for new software, after which fee is charged, is an acceptable, though not entirely aboveboard practice. (After all, you get free use of their software for a time, and they get lots of extra beta testers. Of course, it also could be considered as getting lots of free QA work...)

      Of course, in Microsoft's case, the extortion would be forcing customers to buy into their Windows monopoly, and then charging those customers extra money so that their system isn't a buggy piece of sh*t any longer.

      And that doesn't even consider the fact that Microsoft distributing an anti-software program will likely put an enormous hurt on every other anti-spyware company out there right now...

    6. Re:Typical Microsoft by LiquidCoooled · · Score: 1

      hurt on every other anti-spyware company out there

      That really does depend upon whos definition of spyware you use.
      There is a fine line between "Authorised partners" and "deceptive bundleware".

      --
      liqbase :: faster than paper
    7. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      "Oh we're OK, we live in a safe area. As long as you put bars on all your windows, don't leave the house when it's dark, put up bullet proof windows, and don't make eye contact with the neighbours you're perfectly safe"


      I'm sorry to say but there are no safe neighbourhoods on "the internet", we're all on the same one. If you think you're any safer from Worms, Virii, Adware and Spyware just by using Linux or Macs then you my friend are sadly mistaken. I have to administer mac's at my college, and every one of them has anti spyware anti virus on them. Why would this be? Admittedly Linux machines dont have the infections yet but they are ones I've used online for a total of 15 minutes so not long enough to be infected. Calm down the windows bashing OK?

    8. Re:Typical Microsoft by bob+beta · · Score: 2, Interesting

      Don't be silly. From a profit taking point of view, why on earth would they want to fix the problem, when it's the potential source of extra revenue?

      You just described the 'give the software away for free, make your money providing support' business plan, as championed by some of the Open Source advocates.

    9. Re:Typical Microsoft by spectre_240sx · · Score: 4, Insightful

      Did anyone else notice that EVERYONE seems to profit here? Besides the end user of course. Microsoft makes bad software and saves money on fixing security holes because they've basically got a captive audience. Advertising companies figure out how to exploit these security holes and generate revenue by throwing computers down the toilet. Anti-Spyware companies profit from getting rid of software exploiting said security holes. Microsoft turns it around fully and purchases Anti-Spyware company for... even more profit!!!

      This is why I'm saving up for a PowerMac.

    10. Re:Typical Microsoft by afidel · · Score: 4, Interesting

      Actually I have come up with an almost perfect solution for most people. I have a pair of scripts that use the Microsoft command line ACL tool from the 2000 server resource kit. The first one sets the downloaded program files directory to read only for everyone, and the other sets it to read for everyone and full controll for the person running the script (they obviously must have permissions on the parent container in order to be able to change the ACL's on the downloaded program files directory). Basically you normally run with read only permissions and only change to full permission to allow trusted ActiveX controlls to install. This gets you most of the protection of disabling ActiveX without breaking things like the Adobe Reader plugin. I expect Microsoft might include something like this in the next major revision of IE, there is precidense with the run as restricted user feature in XP.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    11. Re:Typical Microsoft by ScrewMaster · · Score: 1

      Well ... yes and no. IF spyware only entered a system via Internet Explorer or operating system security holes, I would tend to agree. However, there are many, many shareware (and regular commercial) applications that bundle third-party spyware modules or have spyware-like capabilities of their own. That's not Microsoft's fault or responsibility, and if they wish to market a product that helps identify such products I don't see anything wrong with that. In principle.

      Now ... having said that, I can't believe I just said that.

      --
      The higher the technology, the sharper that two-edged sword.
    12. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      Like car manufactures charging for a car alarm?

    13. Re:Typical Microsoft by raddan · · Score: 4, Interesting
      What percentage of spyware comes in through IE and ActiveX? Seems like they would just fix that. Stop it at the door, don't wait for it to get in and then Try to kill it.

      This is exactly the point I've been trying to make within our corporation for the last year. Relatively unsuccessfully, I might add.

      Naturally, our office, which I admin and which has about 100 PC users, is almost completely a Firefox shop. Malware was a serious problem when I arrived, and after implementing a centralized antivirus setup and switching everyone to Firefox, support calls have dwindled to nearly nothing, and the few calls I have gotten were those few sneaky users who thought that they could get away with using IE behind my back.

      I was in a corporation-wide IT meeting last month, and I brought up using Firefox. Apparently the help desks for other offices are totally swamped. So the head IT guy asks me if switching has affected malware infection rate, so I told him the same thing I mentioned above. The room was totally silent; these guys were shocked. The meeting ended with a decision to start "testing" Firefox, but a few people were outright hostile to the idea at all. As far as I'm aware, they still haven't even given the "testing" idea a second thought, even though their malware problem continues to grow.

      But the big thing stopping us from going to Firefox completely is our damn intranet apps. We've poured millions into these half-assed ActiveX programs that require IE. I mean, WTF? Why on Earth would you write a web-based application that requires a specific OS (Windows), a specific browser (IE), and a specific processor (i386)? It's madness! Sure, you could argue that application updates can still be done centrally, but even this they've fucked up-- every time an update comes out, we have to remove the program manually from "C:\windows\downloaded program files". Talk about living in the dark ages!

      Anyhow... I'm guessing that this is the big reason why Microsoft doesn't just axe the whole ActiveX thing-- this would be a nightmare for many an IT manager. Not to mention-- look at where ActiveX came from: it started as OLE, became COM, and is now becoming .NET. MS has dumped tons of cash into a flawed piece of software, and thousands of programmers know how to write software for it.

    14. Re:Typical Microsoft by EvilAlien · · Score: 1
      Ya, typical /. too. Faulty biased conclusions at all, right from the start. Yup, this acquisition must be evidence that the security thing isn't getting anyways. Yup. That whole SP2 thing including no-execute bit support, a better firewall, etc... all of that must have been a fever dream.

      Microsoft does something to help shore up a weakness in their OS products, and somehow its still evil.

      Windows tends to promote use of the computer with administrator privileges, because that is what people are like. That means any ol' software that the user runs can do all sorts of things behind the scenes like change the registry to run apps at startup without the user knowing, social engineering to make them actually approve such a thing, bogus value propositions like Gator, etc etc. Microsoft, rather than waste a bunch of time writing something in house, picks up some code so they don't have to start from scratch...

      This is a Good Thing, zealots.

      People who don't use IE can still have spyware, sorry to break it to you. IE is not the problem. It is part of the problem, or at least one of the common vectors through which spyware gets in, but it is not the problem.

      Guess what? If Microsoft announces that they are going to integrate integrity checking and tighter controls over software installation, registry editing, etc, and do it for free, then I bet you'll be posting about how evil they are for integrated stuff right into the OS when it should be separate so we have choice, just like with that evil browser IE.

      Microsoft, though not my favorate software developer in the world, deserves kudos for addressing the important issues facing their customers.

      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
    15. Re:Typical Microsoft by malfunct · · Score: 2, Interesting

      I don't know about you but on my SP2 box activeX controls are stopped at the door unless I click the yellow bar. Now there may be ways around that but I have not seen any spyware on my machine since I installed sp2.

      --

      "You can now flame me, I am full of love,"

    16. Re:Typical Microsoft by Chess_the_cat · · Score: 1

      Damned if they do, damned if they don't. Seems to me they should get some credit for trying to mend their ways.

      --
      Support the First Amendment. Read at -1
    17. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      How dare you use sysadmin skills to resolve local issues! If this keeps up, we'll have to transfer you to the Unix team. In the future, please file your MS Bitch forms in triplicate and get back to playing Quake. --HR

    18. Re:Typical Microsoft by SlimFastForYou · · Score: 1

      Ah, but spyware tends to do more placing rather than removing.

      In an imaginary universe, Microsoft manufactures cars. Their car alarm will actually unlock the doors if certain frequencies are transmitted (many additional frequencies are found every week!). And in this universe, there are many, many kids who want to stick A.B.C. gum (the kind you find below chairs) on the inside of YOUR car just for the hell of it.

      So it would be like:
      Car manufacturers (Microsoft) opening a detail shop specializing in gum removal. While potentially lucrative (they haven't yet announced if they would charge), their shoddy alarms are what granted access to the kids with gum in the first place.

      Thats why many people would be upset if Microsoft decided to charge for spyware removal.

      Some CS concepts are difficult to find real world examples for.

    19. Re:Typical Microsoft by bogie · · Score: 2, Insightful

      Unfucking believable. And when they run every other anti-spyware company out of business then what? We are stuck with the same company that makes the flaws and then sells us software to protect us from those flaws. Can you say fucking conflict of interest? Design better software, don't sell me a bandaid I have to pay a subscription for.

      --
      If you wanna get rich, you know that payback is a bitch
    20. Re:Typical Microsoft by Anonymous Coward · · Score: 1, Interesting

      I do contract work for Microsoft through an unnamed company. I've been doing it for about a month and a half now, and I'm making more money than I ever have and I'm almost completely convinced that I should quit. I've got only this to say: NOTHING works there. The network is slower than dialup (I shit you not, slower than 56K dialup) and about 30% of the time even accessing an internal website on the LAN will return a network error. Their internal tools are more buggy and crash-prone than the software they sell. Their ultimate fixer for any problem? "Did you try rebooting?" Also, it takes like a week for a new user's permissions to propagate to all of the requisite domain controllers. A week. Flip some bits here, flip some bits there, wtf takes a week? Well, it is WINDOWS...

      And their middle-management system is laughable. (this is why they need to charge so much for the software: middle managers who contribute nada) They take a simple, one-man project (like something you could easily solve with a Perl script), divide it amongst two TEAMS of people of 4+ people each, and then wonder why nothing gets done. Maybe it's because each person has such a small piece of the pie that you need to assemble both teams at the exact same time in order to accomplish anything and most everyone is too busy coming in late or leaving early or taking a long lunch or just not being in their office to come to those meetings.

      So you're totally right: MS is fucked, but they don't mind.

    21. Re:Typical Microsoft by TheMediaWrangler · · Score: 1

      They must not be getting anywhere, because they now have to aquire their security apps.

      They just want to cash in on the opportunity. Security looks like good business, so why not exploit it? Remember the theory that antivirus software makers were actually making the viruses in the first place? That may not have been true, but it did look like an amazing business model with unlimited revenue potential.

      --
      People should not fear what they do not understand; people should fear because they do not understand.
    22. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      When will people learn? Companies acquire other companies. This isn't a sign of inferiority, it's sign of reality. If I want to add a new offering, I could spend years of R&D and corporate shuffling trying to get something out the door, always lagging behind competition. Or, I could buy an established entity, get its name recognition, its products, its expertise and be able to play ball immediately. This is how business works, and there's nothing wrong with it. Most of these companies have a 3 - 5 year exit strategy of being bought out anyway. That's what makes them successful.

    23. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      when they run out the other companies providing anti-spyware for free, you mean? come off it. if they were providing it for free you would have a point. but, hey, as long as you get to get indignant, that's really what's important here.

    24. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      They do/will, just not here. This place is just a clusterfuck.

    25. Re:Typical Microsoft by ozmanjusri · · Score: 3, Interesting

      I have to administer mac's at my college, and every one of them has anti spyware anti virus on them. Why would this be?

      Shouldn't you be asking the administrator this question? Hang on....

      Admittedly Linux machines dont have the infections yet but they are ones I've used online for a total of 15 minutes so not long enough to be infected.

      Maybe you should have waited an hour or two before posting then.

      Or you could just ask someone who's used Linux online for a little longer than you. They might be able to tell you how likely it is that you'll pick up an infestation of spyware (Hint: It's somewhere between Buckley's and none).

      --
      "I've got more toys than Teruhisa Kitahara."
    26. Re:Typical Microsoft by emseabrown · · Score: 1

      Windows tends to promote use of the computer with administrator privileges, because that is what people are like.

      while i can only support my point with anecdotal evidence, i think you are wrong.

      the major difference is that the software industry is largely peer reviewed. not policed by some goverment agency (excluding the riaa). the government and fancy lawyers protect us from other large corps such as automotive and pharmacutical companies. should something go awry with the above, all hell and lawyers break loose. should something go awry with software... you lose and all slashdot cries linux.

      we are the same as any other "educated" group; expecting others to take time and interest into those things we hold dear

      last thought: how many of the ppl you know change their own oil.

    27. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      Rant on Insightful IT man, Rant on.

    28. Re:Typical Microsoft by DrugCheese · · Score: 1

      Can't just fix it, because there's money in having it break.

      There's also money in bloating software and operating systems.

      --
      *DrugCheese rants*
    29. Re:Typical Microsoft by MightyMartian · · Score: 0

      > Damned if they do, damned if they don't. Seems to me they should get some credit
      > for trying to mend their ways.

      But they're not mending their ways. They're just buying a anti-spyware package to cover their a**es. The problem is that the Internet Explorer/Outlook Express suite is buggy software that they keep papering the cracks on (and this is only the latest example) without actually fixing the underlying issues.

      The unfortunate thing here is that I think it's at least semi-permanent. MS has trained a whole generation of users to expect pretty pictures in their email and easy installation of browser components, and while they have made steps in the last year or so, it still remains that there is a vast number of computers out there that are, to one extent or another, wide open to all sorts of attacks.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    30. Re:Typical Microsoft by sulli · · Score: 1
      So use IE only for the ActiveX apps and not for anything else. To make it even better, set up a proxy that bans IE from accessing any other site and tells the user that Firefox is required.

      Then give a demo to your Microsoft rep. Ha.

      --

      sulli
      RTFJ.
    31. Re:Typical Microsoft by Ibanez · · Score: 4, Insightful

      Well, until the average person realizes how crooked this is, its one hell of a business plan. You have to give it to them, they're pretty close to mastering the art of screwing your customers.

      Its almost like a drug dealer who also owns the rehab center.

    32. Re:Typical Microsoft by gad_zuki! · · Score: 2, Insightful

      >Or you could just ask someone who's used Linux online for a little longer than you.

      I dont care what OS you are using, if the software you are installing is bundled with spyware then you're "infected."

      The problem isn't really technical, although getting rid of the abused and proprietary activeX system would help. Even then the spyware people would just partner up with some free app like they have done with bearshare, limewire, etc.

      The problem, as usual is between the keyboard and the chair. Not to mention shady marketing practices and unreadable EULA's.

    33. Re:Typical Microsoft by delus10n0 · · Score: 1

      If they're going to give it away for free, I'm really glad I shelled out $50 or whatever for SpamInspector. Is Microsoft going to refund me now?

      --
      Not All Who Wander Are Lost
    34. Re:Typical Microsoft by Tim+C · · Score: 1

      What percentage of spyware comes in through IE and ActiveX?

      I don't know, and I'm betting that you don't either. My gut feeling is that an awful lot of it is installed by the user with their permission though, piggybacking on other programs (think Kazaa and similar) or just as a trojan (Bonzi Buddy, etc).

      Hell, I downloaded a screensaver from a large-looking Windows download site a couple of months ago only to find that it had been trojaned. Not using IE won't save you from that.

    35. Re:Typical Microsoft by Jessta · · Score: 1

      The point of this is that microsoft will be seen as looking out for the security of it's users.

      Users think
      firewalls + anti virus software +
      anti spyware software
      = security

      Amazing that all of these are backups for failed security.

      --
      ...and that is all I have to say about that.
      http://jessta.id.au
    36. Re:Typical Microsoft by derphilipp · · Score: 1

      Well, not as long as the BSD Guys: http://opendarwin.org/~mww/systems-2004/RIMG0013.J PG


      Yes, I made that cheesy photo and my camera has a pixel error

      --
      Spelling mistakes: My is english spoken not tongue of mother.
    37. Re:Typical Microsoft by Anonymous Coward · · Score: 0


      Please don't use analogies any more.

    38. Re:Typical Microsoft by obeythefist · · Score: 4, Funny

      In a fit of bizarre insight, it occurs to me that perhaps until Linux does have problems with spyware, it hasn't proven itself ready for the desktop.

      More as an indicator really, if ad companies think there's money in exploiting linux, then linux has obviously made the grade!

      I think it's probably only a matter of time before linux viruses and spyware become more prevalent. This is a testament to the success of linux and the evil bastartude of the advertising industry.

      --
      I am government man, come from the government. The government has sent me. -- G.I.R.
    39. Re:Typical Microsoft by Taladar · · Score: 1

      So it is not their fault all users run as administrator per default?

    40. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      Most spyware doesn't make it onto computer through security holes. Most of it makes on it on when the user consents to an operation, like installing bonzai buddy, some bullcrap weather 'notification' program, or blindly installs an ActiveX plugin with the promise of free pr0n.

    41. Re:Typical Microsoft by Keeper · · Score: 2, Informative

      You can get this same set of functionality by adding 'trusted' sites (ie: sites you are willing to run ActiveX controls on) to the trusted sites zone. Modify the internet zone activex setting which turns on/off activex controls to "administrator approved". If there is an ActiveX control you know is safe and want to be viewable in the "internet zone", add the control to the list of administrator approved controls.

      Wish SP2 you also have the ability to disable specific ActiveX controls so that they'll never run.

    42. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      You just described the 'give the software away for free, make your money providing support' business plan, as championed by some of the Open Source advocates.

      No MS would still make money on windows they are just trying to get extra revenue. If they don't make this software free then I think there going to get taken to court over this one... Not that they care but it would still fall under racketeering laws.

    43. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      If they're going to give it away for free, I'm really glad I shelled out $50 or whatever for SpamInspector. Is Microsoft going to refund me now?

      Holy fuck, what a stupid twunt.

    44. Re:Typical Microsoft by Zorilla · · Score: 1

      No, just the same as if you had discovered a free, superior, and currently existing product such as Ad-Aware and/or Spyboy S&D instead of burning cash on some software that doesn't do its job.

      --

      It would be cool if it didn't suck.
    45. Re:Typical Microsoft by ozmanjusri · · Score: 1

      I dont care what OS you are using, if the software you are installing is bundled with spyware then you're "infected."

      The OS matters because a properly designed OS will make it much harder for spyware to sink its hooks so deeply into the user's computer. The reason Giant is so good is that it removes spyware other solutions can't. The reason other software doesn't remove all spyware is because removing spyware from Windows is hard. The fact that it will be easy to remove their garbage means that Linux (and Mac OSX) will be much less attractive targets for spyware sellers.

      --
      "I've got more toys than Teruhisa Kitahara."
    46. Re:Typical Microsoft by hedge_death_shootout · · Score: 1

      They might be able to tell you how likely it is that you'll pick up an infestation of spyware (Hint: It's somewhere between Buckley's and none).

      Of course, the small space between 'Buckleys' (whatever that is) and none is large enough for key beardy open-source advocate Richard Stallman to get his servers owned by unknown nefarious baddies.

      For months.

      Total server compromise - somewhat more serious than 'spyware', some would consider.

      He must have been running Windows NT without key security updates or something. Maybe he was running an unpatched SQLServer instance...

    47. Re:Typical Microsoft by OwlWhacker · · Score: 1

      Not only is it of financial benefit to Microsoft for spyware to be rife; but, for Microsoft to buy an anti-spyware company, isn't this making a statement that spyware is now accepted as an inevitable part of using Windows?

      From the look of things, Microsoft should be able to rapidly make back the millions it spent on Trustworthy Computing.

    48. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      > But the big thing stopping us from going to Firefox
      > completely is our damn intranet apps. We've poured
      > millions into these half-assed ActiveX programs that
      > require IE.

      This project allows you to host ActiveX controls in Mozilla-based browsers:

      http://www.iol.ie/~locka/mozilla/plugin.htm

      I used it a few years ago to access an IE-only corporate intranet and it worked well, you might want to check it out.

      --Phil.

    49. Re:Typical Microsoft by Darkangael · · Score: 0

      I dont care what OS you are using, if the software you are installing is bundled with spyware then you're "infected."

      That is true, but as far as I and anyone I have ever met knows, only on windows can software trivially install itself without somebody specifically requesting for some kind of software to be installed. There are exploits in other OS products which allow servers to be exploited,but the damage these applications can do is severely limited in most cases thanks to the encouragement and tools provided to have permission systems that make sense (as opposed to most windows "solutions" which are encouraged or required to use admin or system priviliges to run any kind of network service). They are also not normally enabled by default. Nor are they specifically and inextricably embedded into the OS.

    50. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      I've administered dozens of macs the last ten years. I've never installed any anti-anything software and all macs were online whole days, never had any problem/virus/spyware.
      If at your college all macs have anti-virus and anti-spyware programs running that only means a realy good salesman sold them or the guy that ordered them got a free iPod with it.

    51. Re:Typical Microsoft by bob670 · · Score: 1

      Is that you Steve Ballmer, I should have guessed by your username?

    52. Re:Typical Microsoft by f()rK()_Bomb · · Score: 1

      Mircosoft are like drug pushers they give you the first hit for free...

      ...then they jack up the price 8^)

      --
      "The space elevator will be built about 50 years after everyone stops laughing." - Arthur C. Clarke ~1980
    53. Re:Typical Microsoft by hachete · · Score: 1

      Mod this post as insightful because you're right. I've heard people say that they buy MS *because* it's got a virus checker. I can just hear those same people saying "we have to buy Windows because it's got a spyware checker".

      --
      Patriotism is a virtue of the vicious
    54. Re:Typical Microsoft by totya · · Score: 1

      I don't think they could charge for it. They are always keen to repeat that hotfixes are free (as beer) for Windows. And since this stuff sounds like a placeholder until the next hotfix arrives...

    55. Re:Typical Microsoft by LocoMan · · Score: 1

      I'll admit I've never ran linux so far (no practical use for it since all the apps I use are mostly windows), but I don't see how not running admin as defauly would help in that particular case. Let's say some ignorant linux user decides to install kazaa for linux, he must runs as admin (or input his admin password) as it's installing, so that would leave the installer free to install whatever it wants with a "do you not want for we to not spam you?" checkbox. At least in my personal experience, most of spyware friends and family get (before we have a long talk) is by installing "free screensavers" "keep you clock in time" and the like.

    56. Re:Typical Microsoft by afidel · · Score: 1

      No you can't because there have been literally dozens of exploits which take advantage of holes in the IE security model to get around trusted vs internet zones. AFAIK there is no way for a piece of ActiveX code to modify the NTFS ACL's to change the permissions on that folder, basically I trust the work done by the guys from DEC a lot more than the work of MS's IE code monkeys.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    57. Re:Typical Microsoft by StormReaver · · Score: 1

      "I think it's probably only a matter of time before linux viruses and spyware become more prevalent."

      You have half a point here, but mainly in regards to spyware. As Linux becomes more popular on the desktop, the possibility of spyware on Linux increases. After all, spyware can be easily embedded in trojan binaries which clueless users will happily install and run. There is little that can be done to protect completely clueless uses, regardless of how hard we try. Probably the only real protection that can be offered to the non-technical Linux desktop user is to firewall off most outgoing ports at install time.

      Viruses, however, are a completely different issue. Linux provides near absolute protection for the clueless user against automatically propagating viruses. Writing a Linux (or any other system) virus is a trivial matter. Getting it to automatically spread is damn near impossible -- and that's the necessary key for a successful virus.

      Linux distributions provide the mechanism to combat even trojans. All RPMs can be digitally signed by their distributors to prove their authenticity. This has been the case for years, and is highly effective. The only problem here is the need to make the use of Linux cryptographic tools seamless for the user.

      This has progressed noticably over the last couple years, and is already quite good for the above average user (who knows how to acquire and verify keys).

      All the mechanisms are available in Linux to protect users from all forms of malware. Unlike Windows, the possible infection vectors have not been integrated into the kernel by intent and design.

      When Windows gets automatically infected by viruses, the system is working as intended. Microsoft has stated more than once that these problems are not bugs, and will not be fixed.

      When Linux gets compromised (which is rare), it is a result of a manual attack against a specific implementation error that is not working as designed and intended. These are embarassments that get fixed.

      Trojans are the only real threat to desktop Linux systems since the user could, with some work, explicitly disable the protections available and make himself vulnerable. Viruses are a non-issue since they can't automatically propagate under Linux.

    58. Re:Typical Microsoft by xtracto · · Score: 0

      ...as far as I and anyone I have ever met knows, only on windows can software trivially install itself without somebody specifically requesting for some kind of software to be installed.

      Well, you have said a great truth here, it is even not possible for a NORMAL USER to trivially install a program on Linux. =oD

      --
      Ubuntu is an African word meaning 'I can't configure Debian'
    59. Re:Typical Microsoft by Anonymous Coward · · Score: 0

      I have to administer mac's at my college, and every one of them has anti spyware anti virus on them. Why would this be?

      whoever is in charge of them is a moron? just my first guess.

      there is less mac viruses and spyware then there is linux viruses and spyware.

      Oh, there are NO linux spyware programs that exist yet.

      so there are -1 mac spyware programs.

      i strongly suggest that your college hire competent people to work on their computer eqipment.

    60. Re:Typical Microsoft by xtracto · · Score: 0

      Well, I have come with a GREAT IDEA!!

      1. Copy a shitty Text Based OS and license to a big company.
      2. ???
      3. Proffit.

      --
      Ubuntu is an African word meaning 'I can't configure Debian'
    61. Re:Typical Microsoft by dr_d_19 · · Score: 1

      1) create buggy and insecure operating system
      2) have people PAY for securing said OS
      3) PROFIT!!

    62. Re:Typical Microsoft by slapout · · Score: 1

      Ok then. Here's what we need to do. Someone start a sourceforge project to create a spyware program for linux. Of course, since it'll be open source, it'll be a better quality spyware program than what is available for windows. Then companies will start moving to linux.

      Course, then someone will have to start a sourceforge project to create an anti-spyware program...

      --
      Coder's Stone: The programming language quick ref for iPad
    63. Re:Typical Microsoft by PetoskeyGuy · · Score: 1

      Don't Forget the MCSE crowd.

      People who find that something like...

      Start/Programs/Click/Click/Right Click/Properties/Tab/Advanced button/options/Apply

      is easier then editing text files.

    64. Re:Typical Microsoft by JaffaKREE · · Score: 1

      This comment was stolen from a previous article word-for-word. Thanks AC.

    65. Re:Typical Microsoft by penix1 · · Score: 1

      "Well, you have said a great truth here, it is even not possible for a NORMAL USER to trivially install a program on Linux."

      This is untrue. ANY user can install any program to an area they have permission (like their /home directory) and run it from there. It is USUALLY only root that can modify system files. So the most damage a NORMAL USER can do is destroy their /home. Hell, I even have run differing versions of X from my /home directory (mostly for development reasons).

      B.

      --
      This is a sig. This is only a sig. Had this been an actual sig you would have been informed where to tune for more sigs.
    66. Re:Typical Microsoft by AvantLegion · · Score: 1
      Apparently the help desks for other offices are totally swamped. So the head IT guy asks me if switching has affected malware infection rate, so I told him the same thing I mentioned above. The room was totally silent; these guys were shocked

      Maybe I'm just a naive grad student.... but HOW are these people being hired as IT guys? Equations like "IE + ActiveX = Spyware!!LOL!!11" should not be a news flash to anyone working in an IT department.

    67. Re:Typical Microsoft by penix1 · · Score: 1

      "If at your college all macs have anti-virus and anti-spyware programs running that only means a realy good salesman sold them or the guy that ordered them got a free iPod with it."

      Or the IT dept. are all MSCE and feel naked without them...;-)

      B.

      --
      This is a sig. This is only a sig. Had this been an actual sig you would have been informed where to tune for more sigs.
    68. Re:Typical Microsoft by xtracto · · Score: 0

      Sorry, I think I didnt make the emphasis where it must have been done in my previous message, I wanted to say that it is not a TRIVIAL task.

      I thing that is why Linux does not ends catching up in the broad desktop market. I am sorry for being offtopic here, but when I go to sf.net, I would expect to get into a proyect's homepage, and then just clicking to download it, or better yet, open it. After that, the program should let me install it (if I am no root, in my own ~ dir), and that's all, on RPM - deps, no apt-get console writing. Just a simple click and a YES NO HELP option asking if I really want to install it. And yes, also maybe the "YOU MUST ENTER ROOT PASSWORD" is not good for the average user, so the system should install it by defaut in its ~ .

      Well, I am not shure if any disto do this now (maybe Lindows or Xandros or any other comercial is doing something similar). But that would be good, so my point in my previous post was that if it is not "widely" possible for trivialy install a program in Linux, well, it must be a hard task (somtimes I have spent several hours hunting for RPM deps in rpmfind only to end with a cycled dep.) to make a virus or spam that installs itself.

      Just to go farther with a little joke... imagine a virus that enters into Linux, and then you see an error message "Sorry, the app 1inuxVirII was unable to be started because the function get_system_root() in module kernel.2.4.6 was not found, please install the required library 'kernel.2.1.0'".

      Lol, now that i think about that, it is kind of funny. I know my karma will go down (It does not matters, I am BAAAAAAD GUY right now) but I think we as Linux enthusiasts (yep, I am one) should open our eyes to some of the problems in Linux.

      --
      Ubuntu is an African word meaning 'I can't configure Debian'
    69. Re:Typical Microsoft by ClubStew · · Score: 1

      Spyware also gets installed through other software, some of which even state it in their EULAs that no one reads. There are perfectly legit reasons (from a legal standpoint) of installing spyware.

    70. Re:Typical Microsoft by Keeper · · Score: 1

      The exploits I've seen depend on url parsing bugs; the exploiter must have some knowledge of the sites in the trusted zone in order to succeed. If you only place a site in the trusted zone long enough to download the control you're interested in, add it to the approved list, then remove that site from the trusted zone there shouldn't be any risk.

      The other ways to bypass the security zones involve viewing non-html file types (ex: .chm, .hta); viewing those types of files ignores any settings you may have set in IE all together, and restricting access to a single directory does not limit the damage they can do.

      I haven't seen "dozens" of alerts about these though, nor have I seen many exploits as they are rather difficult to take advantage of. There are lots of problems where "trusted" is listed in the description which has nothing to do with zone settings (most are related to cross site scripting and spoofing).

      Of course, if I'm not looking in the right place I'd be interested in reading the information you found.

    71. Re:Typical Microsoft by themysteryman73 · · Score: 1

      Microsoft, don't you just love 'em? *rolls eyes*

    72. Re:Typical Microsoft by ScrewMaster · · Score: 1

      No, it isn't. Drop the elitist mentality: you may know what you're doing but a lot of people that use computers can barely find the power switch. Enticing people like that to buy a computer and find it useful has been the Holy Grail of personal computing for the past quarter of a century. They were sold, by the hundreds of millions, on the idea that a computer should be simple to operate and not require too much thinking, if any. You can thank Steve Jobs & Co. for that particular misconception. And it worked great until we connected millions of machines that were designed solely for convenience with no particular thought of security to a global Internet. Now suddenly we're asking all these same users to learn a lot more about their computers than they ever wanted to, and many of them just don't see why they should. And they're right. What they bought was a computer, a tool, an appliance, and they shouldn't need a course in network security just to use it safely.

      Watch what happens you take one of the aforementioned users and give him a piece of software to install. He'll do fine inserting the CD and clicking on the Setup program. But as soon as that little window pops up saying "You don't have sufficient access to install software: please enter your Administrator password" the whole process grinds to a halt. "Admini ... what?"

      Look, what you're talking about are installation defaults and Microsoft will change those when the marketplace demands it (hopefully they will ... they've not been real responsive so far but at least they turned off the Windows Messaging System.) And when they do tighten up the whole security routine, systems will become a lot less convenient for the majority of users. Many will have real problems being productive with their machines.

      What really has to happen is that the whole operating system just has to be a tough nut to crack, regardless of your access level, and regardless of the operating system. People made the same complaint about Lindows (i.e., root by default) and it is a valid complaint, but you have to look at the whole picture. I know a lot of people that can barely remember one password much less two. Eventually, I suspect that hardware/biometric authentication will help with these kinds of issues (if a user wants to install software, and the computer knows the person using it is authorized to do so, it would confirm the install but not require a password.)

      But that's irrelevant in terms of your average spyware application: a program that simply takes whatever you type or do with it and sends it back to papa is spyware, and doesn't require root privileges to do that ... just Internet access. And there's tons of that kind of crap out there and it doesn't all come in from a browser.

      --
      The higher the technology, the sharper that two-edged sword.
    73. Re:Typical Microsoft by obeythefist · · Score: 1

      Of course, like Windows, Linux users need to keep their systems up to date and patched (Probably easier than Windows once it's all set up, but to an extent it depends on the distro). Advantage Linux - Linux issues are rectified much faster than Windows ones.

      Of course the other issue is Spyware, however again this is going to be less of an issue with Linux. For starters, Linux distros generally contain *more* bundled software than Windows does and this software is of course all Spyware free. Since the Linux user gets more software (Windows doesn't include an IRC client AFAIK, for example) they won't need to go out and download new software. Any time you download and use software from the internet, chances are it's because it does something you need your PC to do. Also, I would hazard a guess and suggest that the vast majority of software available for Linux is Open Source and therefore unlikely to contain Spyware. The vast majority of software available for Windows is closed source... so who knows?

      --
      I am government man, come from the government. The government has sent me. -- G.I.R.
    74. Re:Typical Microsoft by obeythefist · · Score: 1

      That should be easy, it only has one article of spyware to remove.

      --
      I am government man, come from the government. The government has sent me. -- G.I.R.
  3. Buying a company... by Eggplant62 · · Score: 4, Insightful

    Does not a turn-around make. Just because MS sees a possible investment opportunity doesn't mean that this is them taking steps to fix their broken software. Ever think this might just be an attempt to cash in on their problems??

    1. Re:Buying a company... by Anonymous Coward · · Score: 0

      I'm afraid that I can't agree. I'm sure they will make the software free, like other accquired products. Definitely a positive move.

    2. Re:Buying a company... by sjrstory · · Score: 1

      We are the Microsoft! Your biological and technological distinctiveness will be added to our own!

    3. Re:Buying a company... by mattdev121 · · Score: 0

      Considering the millions they make selling SDK's and Development suites to those developers who make the spyware, you have to wonder where their loyalties lie.

      --
      mattdev@server$ touch /dev/genitals
      cannot touch `/dev/genitals': Permission denied
    4. Re:Buying a company... by evilviper · · Score: 1
      Ever think this might just be an attempt to cash in on their problems??

      Kinda like when they bought stock in Apple...
      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    5. Re:Buying a company... by x_codingmonkey_x · · Score: 1
      What scares me the most is that M$ will try to solve it's problems with money. One of those problems is spyware, so they purchase a company to battle it. Another problem is competition (a growing one in the browser world) and thus they might try to pay for their problems to go away, thus the Mozilla company will become Winzilla, and Opera Wopera and so forth.

      An M$ future lies ahead...

    6. Re:Buying a company... by Anonymous Coward · · Score: 0

      Why do I see stupid shit like this on slashdot all the time?

      If your phone breaks, and you need a new one, do you buy one or do you build one from fucking scratch?

      Dumbass.

    7. Re:Buying a company... by AnalogDiehard · · Score: 1
      Does not a turn-around make.

      But it is innovation in MS's eyes :)

      --
      Eternity: will that be smoking, or non-smoking? I Corinthians 6:9-10
  4. Microsoft Branded Spyware by Awol411 · · Score: 0

    Now microsoft will know how to plant spyware so Microsoft Branded removal tools designed to not get rid of it

    1. Re:Microsoft Branded Spyware by aldoman · · Score: 1

      Sorry, but that's utter insanity.

      Why on earth would MS risk tarnishing their image by trying to make a few million dollars (this is a company that racks in trillions over years) by making spyware?

    2. Re:Microsoft Branded Spyware by Anonymous Coward · · Score: 0

      i seriously hope that "trillions" is said in sarcasm. otherwise you are a complete tool.

    3. Re:Microsoft Branded Spyware by Starsmore · · Score: 1
      Because Microsoft wants as much money as possible.

      I think what the grandparent poster was trying to say though is that Microsoft will put spyware out there that is is invunerable to anything but an Officially Licensed Microsoft Spyware Remover.

      Hell, I'd do it. They have unfettered access to Windows, so they could ensure that the spyware is unremovable through any other means than their own program.

      --
      "If Common Sense was so common, it wouldn't be such a valued trait."
    4. Re:Microsoft Branded Spyware by aldoman · · Score: 0, Troll

      Microsoft has made over $1 trillion in the last 5 years (in revenue).

      In profit it's probably more like half a trillion, but either way, this is an immense company.

    5. Re:Microsoft Branded Spyware by grepistan · · Score: 1

      Do you have a source for that at all? Without one, you're sounding more than a little Twittery, if you know what I mean...

      --
      Real stupidity beats artificial intelligence every time.
      -- Terry Pratchett, Hogfather
  5. SpyBot still better by astebbin · · Score: 5, Insightful

    Even so, I still prefer my (free) SpyBot S&D which runs on Windows and Linux.

    1. Re:SpyBot still better by l810c · · Score: 1
      What kind of spyware runs on Linux?

      I use XP for my desktop for many reasons so am unaware of things that may affect KDE/Gnome systems.

      I do have a RH Ent. VPS server, a RH 9 fileserver wiht Samba at home and use HPUX at work, just really don't pay that much attention to the Linux desktop world too much besides installing one a couple times a year or trying a Live CD.

    2. Re:SpyBot still better by Qamelian · · Score: 1

      Not according to their website.
      Spybot S & D is Windows only. It's still a great tool though.

    3. Re:SpyBot still better by astebbin · · Score: 1

      Hmmm... I couldn't remeber whether or not SpyBot ran on Linux or not, I thought it did when I made first post but after a quick visit to SB:S&D site I am no longer so sure...


      In either case, I know of little to no spyware that runs on Linux so it really is a moot point anyway.

    4. Re:SpyBot still better by JeremyALogan · · Score: 1

      According to their website(www.spybot.info) it requires Windows. Even if it DID run on Linux what would be the point? Name one spyware app that's Linux based. It'd be kinda like a virus scanner... useless.

      Socre:-1, Disinformation

    5. Re:SpyBot still better by ticktockticktock · · Score: 2, Insightful

      Maybe some spyware can run in wine?

    6. Re:SpyBot still better by Anonymous Coward · · Score: 0

      Virus *mail* scanners for Linux can be useful if the mail might end up on a Windows machine...

    7. Re:SpyBot still better by AnotherFreakboy · · Score: 1

      I would consider most root kits to be spyware, and there's a few of those around. Admittedly most root kits would probably be able to know when you are detecting them and take evasive or retaliatory action, but hey.

      --
      Why not get the real ultimate power?
    8. Re:SpyBot still better by Chairboy · · Score: 5, Insightful

      I ran Giant anti-spyware a few weeks ago on a system I had just used Ad-Aware and Spybot on, and it found more stuff. Real stuff too, not just cookies from doubleclick. The system was really deeply infested, and Giant got lots of stuff the others didn't.

      Have you tried it? Or was your generalization based on assumption?

    9. Re:SpyBot still better by Anonymous Coward · · Score: 0

      its true man, internet explorer can get infested, and wine will do it's best to pop up windows and run annoying things behind your back.

      It's simpler to reformat your fake_windows directory than a real windows install though.

    10. Re:SpyBot still better by kesuki · · Score: 1

      i thought maybe you had tested it under WINE and meant that it woked in linux under wine, but you were apparently not referencing it working in wine. so now we need someone to go try to run it in wine.

    11. Re:SpyBot still better by kesuki · · Score: 1

      Isn't it interesting how so many linux users consider an 'anti-virus' so unimportant to linux, while other are striving to make 'linux so easy even yoru grandma could use it!' Grandma could surely use a virus scanner on her linux box, because after all she does get e-mail and she's old, she might not realize that just because the e-mail came from so and so that it might still be a virus... And hey if that virus is written in a code portable language like java, it could maybe even be written to infect cross platform, windows to linux, to Free BSD to solaris! Viruses don't have to be exclusive to windows you know...
      and if linux ever managed to have a large desktop market share, say 25% or so, there would be plenty of virus authors for linux.

    12. Re:SpyBot still better by JeremyALogan · · Score: 2, Interesting

      You are wrong in so many ways.

      Viruses are exclusive (almost) to Windows because it's possible for them to spread. Linux enforces user permissions so (unless you, stupidly, run as root) there's not too much havok the can wreck. Sure you may loose the stuff in your home directory (~) or other files you own, but that's not that big of a problem (most viruses try and damage systems, not files). Viruses also, traditionally speaking, make use of security holes, or other such things. If these don't exist then there's no real threat.

      Antivirus software IS useless under Linux. There are no (to my knowelege) viruses for the platform, so there's nothing to detect. The only advantage I can see to there being scanning software is to clean up Windows partitions. As soon as the first Linux virus manifests then it will make sense to have it, but if there's nothing to detect then why have software to detect "it".

      To touch on your cross-platform email virus. I don't know about you, but what mail clients do you know of that automatically run code from email attachments? Not only that, but they'd also have to recognize the format and call up the interpreter for that specific format. I know, for a fact, that none of the email clients I've ever used (at all... under any platform), save Outlook, DO execute untrusted code. Your version of a cross-platform virus would have to be built in either a scripting language (which can even be quite powerful. eg Python) or an interpreted language (eg Java or .Net). Name one (for any platform) email client that will recognize an attachment as Java, locate the executable, and automate the execution of the untrusted code. Also, just for good measure, name one cross-platform virus (doesn't have to be email-borne) of ANY type.

      Either you don't know enough about the subject matter or your logic is that "you never know... someone might be able to figure out how to code a virus for a system that's proven resistant." That's kind of like wearing a little white surgical mask all the time because "you never know... them terrorists might figure out how to dust my city with anthrax." Possibility does not equal probability.

    13. Re:SpyBot still better by Anonymous Coward · · Score: 0

      A virus written in java? Since when is Java powerful enough to write actual destructive viruses?

    14. Re:SpyBot still better by Anonymous Coward · · Score: 0

      My coworker found Giant and tried it out because he STILL had spyware running on his box after running Ad Aware and Spybot. It found 5 malware programs and a keylogger.

      So... I tried Giant as well and it found a keylogger and several other programs.

      It's a solid app and is the best around in my opinion.

    15. Re:SpyBot still better by Brian_Confucius · · Score: 1

      You do realize that Giant is the program that's being bought out by MS, right?

    16. Re:SpyBot still better by Anonymous Coward · · Score: 0

      Makes one wonder... if you were an unscrupulous businessman running a spyware removal company, wouldn't you try to make sure that the first time the user runs your program, lots of nasty stuff is found? Say, by installing a random spyware app along with the removal software?

    17. Re:SpyBot still better by Anonymous Coward · · Score: 0

      Maybe you should look up Linspire. The user is logged in as root. If average joe was switching from Windows to Linux, he'd use the simplest and easiest to use form which right now is Linspire. Linux antivirus will be needed if markert share is increased.

      Your point of there being no security holes in linux is a completely arrogant and incorrect.

      Also losing files in your home directory is a big deal if you expect people to actually use/work on a Linux system. Your logic makes no sense, I think you need to wake up and look at the big picture.

    18. Re:SpyBot still better by af4oo · · Score: 1

      SpyBot is not perfect. I just spent all morning trying to remove Adware using the combinations or SpyBot and Adaware. I finally gave up after many reboots and Googled for the infringing Adwares, then it was several hours of registry editing.

      Funny thing is, I was running Firefox and have been since I got this computer, and I still ended up with Malware. They were some real nasty ones too!

      I use only linux at home, I just wish I could convince my office to switch.

    19. Re:SpyBot still better by kesuki · · Score: 1

      Java is powerful enough to write peer-to-peer file sharing applications in it... (lime wire is the one I think was java, I know there is one written in java)
      I think maybe you're thinking of javascript, which is not the same as java. Java is a full featured programming language, Corel wrote it's entire office suite in java at one point in time. They moved away from it however, but the point is Java is powerful enough to write a virus in. To write a successful virus you need only 3 basic abilities, the abilitie to read/write files, the ability to create internet connections and the ability to execute new processes... java can do all three.

    20. Re:SpyBot still better by kesuki · · Score: 1

      I know why linux is 'less prone' to viruses sir, but what you do not understand is the fact that if peoples grandma's etc are using linux in mass, even if you make it 'extra hard' to execute an e-mail attachment, grandma will still at some point 'learn' how to run e-mail attachments by herself, without having to call up her computer whiz grandson, and when that day comes, linux will have plenty of social engineered viruses.
      And you think only in terms of doing damage to her computer, what if the point of the virus is not to damage grandma's computer, but rather to empty out her savings account, by keylogging* all her firefox activity to any known online banking sites, and then calling home when her personal information and bank account is acquired.
      What if the point of the virus to to enable 'identity theft' same approach only grandma just needs to log into some news site that 'requires registration' and all the data she entered into forms is all there for the program to 'steal' and dial home the info so someone can make a 'new' credit card in your grandmas name and 'steal' as much stuff as they can buy.

      I didn't say sophisticated linux users need 'anti-virus' software, but when everyone's grandma is using linux, then my friend the need will be very real, no matter how protected you make linux, you cannot make it fool proof.

      Yes, windows design invites more viruses to be written for it, but human nature invites the writing of viruses no matter how 'good' your system is.
      My logic is not flawed, yours is yours is the same as the register's You assume that if the system is designed as secure as it can be, that that will somehow break human nature to cause mischief and trouble. Your line of thinking is the same as that of the man who marketed the bank vault 'your bank will never be robbed again once you install our state of the arc vault!' Bank robberies still happen, they're nowhere near as prevalent, but they happen. the damage that can be done, has been greatly limited. most bank robbers are caught, due to the countermeasures deployed. BANKS are STILL ROBBED. You cannot end the writing of viruses by making everyone use a 'bank vault' of an operating system. You can make Most people who write viruses now stop writing viruse, you can make the people who write viruses have generally unsuccesful viruses. But you Will never make peopl stop writing viruses. It is not in the power of the operating system writes to rewite human nature. Would the world be better off if everyone ran a 'secure' operating system, Yes it would be, would it eliminate the need for anti-virus software? No. That would be like saying bank vaults eliminate the need for security guards. All bank vaults have done for security gaurds is make their jobs easier.

      *=even if you try to protect it, at some point her browser needs to get the data, it's just a matter of the virus writer to figure out a way to capture the data because at some point that data will enter a vulnerable phase, where it can be read.

  6. Discussion @ BBR/DSLR's security forum... by antdude · · Score: 3, Informative

    There is a discussion in Broadband Reports/DSL Reports' security forum about this.

    --
    Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    1. Re:Discussion @ BBR/DSLR's security forum... by Anonymous Coward · · Score: 1, Funny

      Discussion also at Slashdot.org.

  7. No way by AdamTheBastard · · Score: 4, Insightful

    You have got to be kidding me. Rather than make their OS and apps secure and PREVENT spyware... they would rather make money selling another product to CURE the spyware.

    How can this be a good thing?

    Prevention is always better than cure.

    1. Re:No way by PocketPick · · Score: 2, Insightful

      Having secure software does prevent spyware (though it goes a long way towards helping it). No doubt, Microsoft will tout this as an application that removes spyware that became present "due to human error" (or at least they would like you to believe that).

    2. Re:No way by the+pickle · · Score: 4, Insightful

      they would rather make money...How can this be a good thing?

      I think you just answered your own question.

      p

    3. Re:No way by Anonymous Coward · · Score: 0

      The "loose weight quickly eating pills" industry is bigger than the entire gym/exercise industry. People would rather get rid of problems than try to prevent them.

    4. Re:No way by AdamTheBastard · · Score: 1

      This situation is more similar to say all the fast food companies getting together and selling weight loss pills so they can continue to shove fatty food down our throughts.

    5. Re:No way by stratjakt · · Score: 1

      MS wont sell this, or their new antivirus. Both will ship with Windows.

      A spyware/adware/virus scanner is prevention.

      How can this be a bad thing?

      --
      I don't need no instructions to know how to rock!!!!
    6. Re:No way by AdamTheBastard · · Score: 1

      True a lot of spyware is installed by the user but the OS makes it so easy to highjack this that and the other. The OS also makes it an absolute pain in the arse to get rid of spyware.

      Software shouldn't be able to intergrate with my broweser without me knowing about it. Software shouldn't be able to startup a network connection without me knowing about it.

    7. Re:No way by darkmeridian · · Score: 1

      As long as you let users install programs that can do meaningful things, people will have spyware. It does not matter how secure your software is.

      --
      A NYC lawyer blogs. http://www.chuangblog.com/
    8. Re:No way by Spykk · · Score: 1

      Prevent spyware? Spyware is generally legitimate code. It has malicious intent, but to expect the operating system to actively detect all malicious code is ludicrous. Linux does not prevent spyware, unless being looked over by deployers of such software because it is the minority is considered prevention.

    9. Re:No way by AdamTheBastard · · Score: 1

      But spyware is useless if it can't get private information out of secure programs.

    10. Re:No way by AdamTheBastard · · Score: 1

      Okay so MS decides to bundle. Two words (or is it one?) anti-competative

    11. Re:No way by aldoman · · Score: 4, Insightful

      You might want to see how most spyware gets onto the system.

      The vast majority is either installed via 'yes' on spyware dialogs (XP SP2 declines this automatically so they are trying to prevent it) or via apps like Kazaa and 'Weather in your system tray!!!' programs. I suspect the majority will comes from the latter in future.

      Please explain to me how you prevent spyware like this getting onto the system via an-administrator authorized account pressing 'next' and installing a bunch of spyware via an installer?

      The only way I can see to prevent this is either not running as administrator, which is clumsy as most people want to install software, printers, games without having to log in and out, or by digitally signing every file that is allowed to be transfered onto the filesystem and executed. Gee, that sounds like Trusted Computing which the Slashdot crowd hated (rightly so, it is a horrible idea).

      The fact remains that getting rid of spyware is very, very hard. It's like a car maker trying to prevent people flooring it and driving off a cliff - they are telling the machine to basically, jump off a cliff in terms of performance and security. There is very little that you can do without being very extreme in stopping people doing things that you want to do on the computer.

    12. Re:No way by Hatechall · · Score: 2, Insightful

      Prevention is always better than cure.

      True. But telling this to somewone who already has AIDS doesn't help alot, either.

      And although I am a minority voice here on Slashdot, I seriously think that they are looking to prevent future security breaches. Of course they are not doing it to feel all warm and fuzzy or whatever, but I do believe it is being done. Call me an unreasonable optimist if you must.
      And yes, this isn't an easy issue to deal with. Maybe it should have been delt with better by now, but that is a seperate issue.

    13. Re:No way by AdamTheBastard · · Score: 1

      1. "an-administrator authorized account " - fix this bug
      2. whenever something needs admin access pop up that little runas dialog.
      3. don't allow programs to get information they don't need.

      No third party app should need to know which website I'm at or what I just entered into that credit card feild.

      Stoping spyware from being installed is one thing. Stoping spyware from being usefull is something completely different.

      Making it so hard to get rid of is another thing MS should look at. Why is it so damn hard to delete files you KNOW you don't want on your machine?

    14. Re:No way by aldoman · · Score: 1

      As I said, administrator accounts are mainly caused by the huge amount of software which isn't complying to Microsoft's standards (too much software still requires admin access to install, even on one users account). Microsoft has published specifications to stop this from happening before 1999 but people are still doing it the old and clunky way.

      The runas dialog can be easily forged. Hell, you could probably do it on a webpage using Javascript.

      What do you mean 'dont allow programs to get information they don't need?'

      You are suggesting some sort of 'file access' layer inbetween the filesystem and the programs. Programs would have to be signed and authorised to access only specific files. This would require.. guess what.. trusted computing.

      I don't really see Linux faring much better if users start typing 'sudo apt-get install kazaa' after adding a kazaa apt source to their sources.list, because that's basically what they are doing on Windows. They are authorizing installation programs to install spyware everywhere.

    15. Re:No way by IO+ERROR · · Score: 1

      Keep in mind that MS's new anti-spyware product isn't going to remove anything that they want to remain on your machine. All current anti-spyware products have this problem, which is why most people need more than one.

      --
      How am I supposed to fit a pithy, relevant quote into 120 characters?
    16. Re:No way by truesaer · · Score: 1

      You can't completely prevent spyware. Half of that stuff comes through the browser, but the other half comes though users who install the happy jumping monkey screensaver that has spyware bundled with it. Anytime you install a program, you're subject to installing spyware. The only defense there is to trust the source.

    17. Re:No way by bob65 · · Score: 1
      Prevention is always better than cure. True. But telling this to somewone who already has AIDS doesn't help alot, either.

      But, so what? Telling it to someone who already has a cold *does* help (well at least it could help). Isn't that more analogous to spyware?

    18. Re:No way by AdamTheBastard · · Score: 1

      Installers wouldn't use their admin rights if windows didn't presume people would run as admin. It's a catch 22.

      You are right about the forging which is a pain cos I can't think of a way to solve it.

      I mean that it's too easy for a program too get/set the homepage/current page in IE. It's too easy to find out what was entered into html forms and so on. Only the broweser should have that kind of information.

      I'm thinking file permissions that are set right by default. The hosts file is writable by any admin which is the user by default that's just the start. I'm still coming back to the fact that if the spyware can not get profitable information it wont be writen.

    19. Re:No way by AstroDrabb · · Score: 1
      MS wont sell this
      Oh no? Did you read the MS press release?
      Details of the Microsoft solution beyond the planned beta, including product plans, pricing and a timeline for delivery, are not yet available.
      MS will sell this (just like they charge you if you want to buy some extra themes from them), even if it is only $20-$30 bucks. Another way to generate money by making your customers pay extra to fix problems with your software. What a great business plan!
      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    20. Re:No way by AstroDrabb · · Score: 1
      Why is it so damn hard to delete files you KNOW you don't want on your machine?
      That is because of a _very_ bad design choice made by MS. The spyware makes itself auto-run at startup and just respawns if it is forced to close through taskmgr. For some unknown reason, MS loves to lock files. Running files get locked and MS won't let you delete them while they are running. I have no clue why MS won't let you delete a running program. There is no real technical reason to why you cannot since _all_ programs have to be executed from RAM.

      Under Linux I can run an application and delete it while it is running. The program will just keep running since as I stated, all programs have to execute from RAM. Obviously once I closed that program, it will be gone since I deleted it from disk. But there is no reason to need the program be on disk once it is executing in RAM.

      If MS allowed you to delete a running program from disk, spyware removal would be _soo_ much easier and not require tons of reboots. Heck software install under MS Windows would not require tons of reboots either.

      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    21. Re:No way by diegocgteleline.es · · Score: 1

      Worms/Viruses != spyware. You can't "fix your OS to prevent spyware". Kazaa for example contains a sh*tload of spyware, and it's a normal program. It doesn't use any vulnerability, they just make you to press a OK button in a license.

      Id they'd port kazaa to linux, bsd, plan9, whatever, you'd get exactly the same spyware. You can't "fix your OS" for that.

      (Yes, lot of spyware uses vulnerabilities to enter your computer. Nobody cares, the point is that spyware does not depend on "the OS")

    22. Re:No way by AstroDrabb · · Score: 1
      Microsoft has published specifications to stop this from happening before 1999 but people are still doing it the old and clunky way.
      A spec that they don't follow for all of their user applications? MS Project needs local admin for some unknown reason.
      They are authorizing installation programs to install spyware everywhere.
      Some spyware does get on by end users not knowing what they are doing, however there are a lot that get on without any user intervention. The first scenario cannot really be stopped while the second one is easy to stop if MS didn't default to giving users local admin. For example, spyware would not be able to automatically install itself under Linux. The only place it would be able to install would be the users home directory. It wouldn't be able to have itself start up on boot in a runlevel since that requires root access.

      Also, under Linux you can delete a running program from disk which you cannot do under MS Windows. Under Linux you could delete the spyware from disk while it is running and just reboot and it is gone. That is not the case under MS Windows. It can take tons of reboots to remove some of the more clever spyware.

      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    23. Re:No way by Foolhardy · · Score: 1

      Yeah, the inability to delete a filename but leave the underlying inode (like UNIX does) is annoying.

      To work around this, the session manager (smss.exe: it's like the init process) provides a nice feature. In the registry key HKLM\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations there is a list of files to be moved or deleted the next time the OS starts. The value name is the source file and the value data is the destination. An empty destination means delete. This happens before any other processes are started, before Win32 starts, and even before the pagefile is created.

      Sysinternals has a couple of command line tools that can be used with this: movefile which adds new move operations and pendmoves which lists existing ones.
      See also the MOVEFILE_DELAY_UNTIL_REBOOT flag of MoveFileEx, which does the same thing from a program.

    24. Re:No way by AstroDrabb · · Score: 1
      Yeah, the inability to delete a filename but leave the underlying inode (like UNIX does) is annoying.
      But to the OS the file is gone. Just as MS windows doesn't wipe the free space, but just updates the file allocation table. The biggest problem I have using MS Windows on a day-to-day basis if file locking. Explorer.exe locks just about everything it touches. I have to kill explorer.exe at least twice a day to when moving files and directories around.
      This happens before any other processes are started, before Win32 starts, and even before the pagefile is created.
      The problem with that is you get some spyware like vx2(I think that is the name), that monitors the registry. Every time you change it, it just updates the registryt. So now your stuck with no real way to put that entry into to the regisitry because the spyware just deletes any entry it sees its name in. It also made sure it was a startup item. I know what MoveFileEX is, it didn't work with VX2 and neither did any of sysinternals tool. To handle more clever spyware, you need to be in a Window pre-execution environment like Partition Magic does to do filesystem operations.
      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    25. Re:No way by FortyTwoFish · · Score: 1

      Prevention is always better than cure.

      But rarely as profitable.

      --
      Grandmaster of the Revolutionary Order of the Forty-Two Fish
    26. Re:No way by grcumb · · Score: 1

      "True. But telling this to somewone who already has AIDS doesn't help alot, either."

      That's not the point at all. We're talking about the vector, not the victim. MS buying an anti-spyware company is a little bit like a mid-price prostitute saying, "Sure, I've got the clap, but the first 5 condoms are free!"

      --
      Crumb's Corollary: Never bring a knife to a bun fight.
    27. Re:No way by bratmobile · · Score: 1

      Tell me how you are going to prevent an unknowledgable user from running a program he or she doesn't know is spyware?

      Until we are running ALL code in rights-controlled sandboxes (think Java security applied to everything), there will ALWAYS be an opening for spyware. The general population of computer users are just that -- USERS, not geeks, not administrators, not programmers. Software like this protects these people, and it is a Good Thing.

    28. Re:No way by Foolhardy · · Score: 1
      But to the OS the file is gone.
      The file is still there, taking up space, it just doesn't have an entry in that directoy anymore. Once the refcount reaches 0, i.e. no longer listed in any directories and not opened by anything, the space is de-allocated.
      Just as MS windows doesn't wipe the free space, but just updates the file allocation table.
      UNIX doesn't either; you have to use shred on it to clear the free space. Both OSes prevent you from reading old data from previously deallocated sectors (unless you resort to direct disk access). The OS just makes a write operation of all zeros to newly allocated space, usually cached. It would take forever to delete large files otherwise.
      The problem with that is you get some spyware like vx2(I think that is the name), that monitors the registry.
      Registry keys have ACLs. Take whatever user the malware process is running as and add a full deny, or at least a deny-write, entry for that user to the FileRenameOperations key. Add the delete ops with a different admin user. This should work unless the kernel is infected, in which case only booting from trusted media will work.

      Also you might try if the spyware is monitoring stuff and can restart itself upon death is to suspend instead of kill the process; the death code won't be executed but the process will be just as useless. Process Explorer can suspend processes.

      Still, cleaning up an infected system is a poor substitute for preventing infection in the first place. It is entirely possible; I've been able to do it on all of my own computers. The fist step is not running everything as admin all the time.
    29. Re:No way by MightyMartian · · Score: 0

      >The only way I can see to prevent this is either not running as administrator,
      >which is clumsy as most people want to install software, printers, games
      >without having to log in and out,

      Well there's a problem. Microsoft produced a generation of lazy users. This is the underlying problem, and it's too late to fix it. Being able to install major components without even a second thought is a bad thing.

      > or by digitally signing every file that is allowed to be transfered
      > onto the filesystem and executed. Gee, that sounds like Trusted Computing
      > which the Slashdot crowd hated (rightly so, it is a horrible idea).

      Indeed.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    30. Re:No way by shawb · · Score: 1

      Or have the ability to scan/test an installer for spyware. This could even be done automatically with an on-access scanner. But then at that point you might as well do an antivirus check on that file...

      --
      I'll never make that mistake again, reading the experts' opinions. - Feynman
    31. Re:No way by shawb · · Score: 1

      The spyware could be _INSTALLED_ per say, but would only affect that one user, and potentially is not able to run at boot-up unless the user took a specific action such as running sudo (and had admin privileges in the first place.)

      Also *nix and other OSes don't have nearly the problem with file locking (I.E. the ability to delete a running file) that Windows does.

      So, it would be possible to create spyware for linux or whatever, it just would not be nearly as profitable.

      --
      I'll never make that mistake again, reading the experts' opinions. - Feynman
    32. Re:No way by Anonymous Coward · · Score: 0

      I mean that it's too easy for a program too get/set the homepage/current page in IE. It's too easy to find out what was entered into html forms and so on. Only the broweser should have that kind of information.

      Any program you run on Linux can set your homepage as well. It's in some config file in your home directory with your permissions.

      It's idea, but it's beyond the technology of any OS on the market today. If Microsoft could do this they'd be a generation beyond the *nix world.

    33. Re:No way by IchBinEinPenguin · · Score: 2, Interesting

      The fact remains that getting rid of spyware is very, very hard.

      Agreed. However, installing spyware in the first place shouldn't be as ridiculously easy as it is!

      The design tradeoffs between security/usability have in IE have created a wonderful inTRAnet explorer. It's great for filling in the company timesheet using some custom ActiveX applet, but it should _NEVER_ be allowed on the inTERnet.

      To follow your analogy, a dune-buggy is fantastic at messing around on dunes, but you wouldn't want to be driving one on the highway.

      [ shameless plug ]
      See "Examination of PC security: How we got where we are and how to fix it"
      [ /shameless plug ]

    34. Re:No way by Taladar · · Score: 1

      It is human error...or isn't greed human error?

    35. Re:No way by truesaer · · Score: 1
      Or have the ability to scan/test an installer for spyware. This could even be done automatically with an on-access scanner. But then at that point you might as well do an antivirus check on that file...


      Yep...actually, I find all of the spyware products to be only somewhat effective. Adaware and Spybot S&D seem to be the best, but they each pick up lots of stuff that the other doesn't. And then if you run something like HijackThis you'll find even more stuff that neither catch. So really, you can take steps to protect yourself...but spyware is not a problem that you can completely protect yourself from. You just have to be vigilant and minimize the damage.

    36. Re:No way by Anne+Thwacks · · Score: 1
      Prevention is always better than cure.

      Not if you're a snake-oil salesman

      --
      Sent from my ASR33 using ASCII
    37. Re:No way by aldoman · · Score: 1

      All that would happen on Linux is that they'd type their root password and install Kazaa or whatever anyway.

      Even if they didn't, the home directory is more than adequate for spyware to live. As long as it's executable, it can be ran from there.

      As for your comment about deleting spyware, you can do the exact same one windows. Kill the process in the process list, delete the files on the filesystem and remove the various registry keys to stop it booting it up on startup. Just because the 'uninstaller' says that you need to reboot, doesn't mean you have to.

    38. Re:No way by diegocgteleline.es · · Score: 1

      "The spyware could be _INSTALLED_ per say, but would only affect that one user"

      Well..how is that different on Windows XP? a unprivileged account can not damage the whole system. Of course 99% of windows users run with Administrator privileges, but you're not that stupid, are you?

    39. Re:No way by fitten · · Score: 1

      Yeah, I laugh at folks who complain about Microsoft Admin account and who also are proud of the fact they use sudo and open it up. It's easy to just write a trojan that does 'sudo' to install whatever it wanted.

    40. Re:No way by stryder22204 · · Score: 1

      Good point. Which makes the whole thing rather comical. People install apps like Kazaa and Weather, then pay MS for a program to remove them. Sounds like easy money to me.

      --
      Stryder22204
    41. Re:No way by AstroDrabb · · Score: 1
      you can do the exact same one windows. Kill the process in the process list, delete the files on the file system and remove the various registry keys to stop it booting it up on startup
      For some trivial spyware yes. But not all. I ran into one on a friends computer. It would not let you delete it off disk because it was locked. If you killed it in taskmgr, it would just respawn a new process. It _watched_ all important registry keys so that if you deleted them, it would put them right back in. If you put in a key to have it deleted at the next reboot, it would delete that key. If you deleted startup keys, it would put those back in.

      It was a real pain to remove this due to the fact that MS windows has all users as local admin by default is what allowed this spyware to do that.

      Under Linux, it would not be able keep adding itself to a startup runlevel without constantly prompting for a password. I think even the dumbest user would get suspicious with something like that.

      Again, my point was how much easier it would be to deal with this type of thing under Linux. Just delete the spyware off disk while it is running and _then_ kill it. If the spyware tries to respaw, there is no longer a program to respaw. This is not the case with MS windows since it won't let you delete a file from disk that is being executed. This one problem is what makes clever viruses and spyware very hard to remove.

      Here is a list of a few simple steps any virus or spyware can follow to make it a _royal_ pain to remove to MS Windows.

      Respawn a process if it is killed

      Lock its executable so you cannot delete it

      Monitor a few registry keys to prevent you from removing it from startup or putting in a key to delete it at startup (like MoveFileEx).
      Bam, you now have one really hard spyware virus to remove. Again, a scenario like this on Linux is just not possible do to the separation of user files/directories and system files/directories.

      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    42. Re:No way by AstroDrabb · · Score: 1
      The file is still there, taking up space, it just doesn't have an entry in that directoy anymore
      True. But try this little experiment. Write a simple little C program that just goes into an infinite loop and sleeps. Have the program respawn right before it exits. Compile this on Linux and MS Windows.

      Run it on Linux and then delete it while it is running. Kill the app. Notice that nothing is respawned? Because even though it was physically on disk, there is no directory entry for it and nothing to spawn.

      Now run the same program under MS Windows. While it is running delete it. This is as far as we can go because you cannot delete it.

      Registry keys have ACLs
      True. Does Win98/ME have ACL's for the registry? If not, this won't help those users. There is also the big problem that most home users are running as local admin. So spyware and viruses are running as local admin. This means you would have to deny administrator to those keys wich would probably kill MS Windows during shutdown/startup.
      cleaning up an infected system is a poor substitute for preventing infection in the first place
      I agree. However you have _tons_ of dumb home users who fall for some fancy cursors or desktop weather app. They install those and now they have spyware. There isn't much MS or anyone can do about that other then be reactive and try to remove the junk.
      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    43. Re:No way by drew · · Score: 1

      oh, i don't know... maybe they could provide an easy to access information about what a program soes, and when it makes network connections the user may not know about. or they could remove any means for a program to set itself up to automatically start up at boot without user intervention. perhaps make it easy for users to find out what everything is that is starting up at boot instead of having to dig through the registry. don't allow programs to tamper with network or system settings in order to make removal difficult or risky.

      that's four things i can think of off the top of my head, three of which could be done without having to make any significant architectual changes.

      personally i wouldn't trust any virus or spyware removal utility from microsoft, as it was their glaring shortcomings that have caused viruses and spyware to be problems in the first place. if they can't figure out the cause of the problem, even though they, unlike any of the other anti-virus and anti-spyware vendors, are in position to actually do something about it, why should i trust them to fix the problem after the fact?

      --
      If I don't put anything here, will anyone recognize me anymore?
    44. Re:No way by Foolhardy · · Score: 1
      Because even though it was physically on disk, there is no directory entry for it and nothing to spawn.
      True. I wonder if you can spawn a new process based on just the inode... If that is possible and it respanwed itself from a inode file reference, this wouldn't work.
      It looks like all forms of exec() require a filename. Still, what would prevent the malware from creating a new copy of itself, based on an image of itself loaded into memory when it started, in its death code?
      Does Win98/ME have ACL's for the registry?
      Nope. In fact, 9x/ME has zero user level security. You either have to be really careful or move to a more secure OS.
      This means you would have to deny administrator to those keys wich would probably kill MS Windows during shutdown/startup.
      Windows doesn't need or use the Administrator account to start, or even the Administrators group. All of the critical startup processes run as SYSTEM; a token manufactured by the kernel and not from LSA like the others. (Any process with the SE_TCB privilege (or the kernel) can construct a security token with whatever local credentials)
      So spyware and viruses are running as local admin.
      There is another problem stemming from this: local admins (by default) get the SE_TAKE_OWNERSHIP privilege; this means that malware running as admin could forcefully take ownership of any object it is denied access to and since the owner can set the ACL, give itself full access. That is, if it is programmed to do that. A workaround would be to take this privilege away from the admins group. I guess it shows that once your machine is owned, it may be too late.

      I don't know what to do about ignorant/incompetent users either.
    45. Re:No way by Anonymous Coward · · Score: 0

      Incidentally, a good way to stop these programs (that worked for me anyway) that keep spawning extra copies of themselves is:
      1. Reinstall the OS completely.
      (OK, just joking, but you don't know what else it was doing)
      2. Use the built-in debugger ntsd.exe to freeze both processes, then kill them. Debugging is more powerful because it stops the app and the second process doesn't see the triiger (the 'death' of the first process).
      Something like "ntsd -p 456 -c q & ntsd -p 455 -c q", where 455 and 456 are the process IDs of the suspect processes.

    46. Re:No way by aldoman · · Score: 1

      I can think of a good few ways round that.

      Run multiple proceses, watch if another is deleted and rewrite the file and respawn it. It would be an absolute nightmare to stop.

      Not to mention if it was running as root it could stop you from issuing rm commands, perhaps altering the rm command itself?

    47. Re:No way by AstroDrabb · · Score: 1
      Run multiple proceses, watch if another is deleted and rewrite the file and respawn it. It would be an absolute nightmare to stop.
      Nah, that would be _very_ easy to stop. Linux lets you mount your partitions READ_ONLY, something MS Windows does not. Just do a quick remount as READ_ONLY and the sypware can no longer write a copy of itself to disk, problem solved.
      Not to mention if it was running as root
      If it was running as root, it means that you were running as root, a big no-no, and these are the type of things that can happen from doing stupid things. If the spyware got root from an exploit, then you have more problems then spyware : )

      The point is, is that these types of things are far easier to prevent and remove under Linux where the norm is to _not_ run as root. While the norm under MS Windows is to always be administrator/root.

      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
  8. Stop using IE! by CypherXero · · Score: 5, Funny

    Firefox. That's how you stop spyware from getting on your machine. Good god, Microsoft just spent a shit load of money, when they could have just downloaded Firefox. Tsk tsk.

    1. Re:Stop using IE! by freitasm · · Score: 5, Informative

      Spyware and adware infections will not stop by simply using Firefox... How many users are still going to download the cute p2p program full of dialers, spyware and adware, regardless of using Firefox, Mozilla, Internet Explorer or even Mosaic?

      A lot of people still download and install programs manually...

    2. Re:Stop using IE! by superpulpsicle · · Score: 1

      Don't give them any ideas. We all know M$ would have never discovered spyware to be a problem until they come read at slashdot.

    3. Re:Stop using IE! by Eggplant62 · · Score: 1

      Yeppers. I recommend it everywhere I go. Even confronted the software company that hooked my present boss on his stupid MS/.NET/IIS solution about MS abandoning further development on IE other than plugging the holes, dutch boy style, and what their plans were as to provide support for alternate browsers. His answer, of course, was that we could pay for that type of development if we really wanted it. I'll keep pushing the boss that after the six month trial is up, we abandon this one and find someone who's got an Open Source solution, or let me roll my own.

    4. Re:Stop using IE! by sploo22 · · Score: 5, Funny
      A lot of people still download and install programs manually...

      *gasp* Those poor people! They really ought to switch to Linux and find out how much simpler everything is!
      $ apt-get install bonzi-buddy gator smileycentral
      --
      Karma: Segmentation fault (tried to dereference a null post)
    5. Re:Stop using IE! by jangobongo · · Score: 1

      Next announcement from M$:
      • Microsoft Acquires Firefox
      If you can't beat 'em, buy 'em!
      --

      Sig cancelled due to lack of interest
    6. Re:Stop using IE! by IchBinEinPenguin · · Score: 1

      A lot of people still download and install programs manually...

      Which is better than IE doing it for them automatically.....

    7. Re:Stop using IE! by master_p · · Score: 1

      Are you kidding? with command line installation, most users will never install anything. That's bulletproof anti-spyware! Linux is, again, ahead of times...

    8. Re:Stop using IE! by Anonymous Coward · · Score: 0

      Reading Package Lists... Done
      Building Dependency Tree... Done
      E: Couldn't find package bonzi-buddy

      Linux just isn't ready for prime time...

    9. Re:Stop using IE! by reflexreaction · · Score: 1
      Spyware and adware infections will not stop by simply using Firefox
      While it won't stop users from installing spyware and adware, it will stop a majority of the pop-up that advertise these "useful" tools that people seem to love to have on their computer. It's because people constantly see the Bonzi Buddy on webpages, that people become interested and install the software. Firfox fixes some of those problems by blocking pop-ups. With Adblock (or Proxomitron which I love) the exposure and thus the temptation to install this crap is reduced.
      --

      We had to destroy the sig to save the sig.
    10. Re:Stop using IE! by Anonymous Coward · · Score: 0

      "Spyware and adware infections will not stop by simply using Firefox."

      Ssssch! You're ruining the only (almost) good point it has.

  9. forward thinkers by fearanddread · · Score: 5, Funny

    It's good they are looking ahead before this kind of stuff really becomes a problem!

  10. Bad track record by confusion · · Score: 5, Interesting
    At first, I thought this was going to spell the end of a lot of anti-spyware companies, but then I realized that MS has bought a lot of companies and done next to nothing with them (what was the name of the A/V company they bought again?)

    On the upside, if they are serious about it, I think this is going to be a huge boon for corporate IT. Spyware has become one of the biggest headaches for IT these days. I believe about 50% of our support tickets are related to spyware.

    Jerry
    http://www.syslog.org/

    1. Re:Bad track record by LiquidCoooled · · Score: 2, Insightful

      I believe about 50% of our support tickets are related to spyware.

      Redundencies?

      Don't need to worry about outsourcing if there no job to do in the first place.

      --
      liqbase :: faster than paper
    2. Re:Bad track record by aardwolf204 · · Score: 2, Interesting

      From the article:

      "Microsoft plans to make available to Windows customers a beta version of a spyware protection, detection and removal tool, based on the GIANT AntiSpyware product, within one month"

      "This announcement and the release of the free beta will help consumers regain control over their PCs."

      (emphasis mine)

      I think that spells it out pretty clearly, at least for the beta. As others have pointed out, yes its a conflict of interests. However considering how bad the spyware problem is, FTA:"A November 2004 IDC study estimated that 67 percent of consumer PCs are infected with some form of spyware.", I believe Microsoft will continue to make security improvements to the operating system, the problem in the first place.

      No matter how much you want to blame the "stupid (l)users", Microsoft is still responsible for the insecure code that let some of the spyware install in the first place. I read over the Microsoft spyware website and I think its great that they're trying to get people aware of the dangers and even suggesting solutions like limited user accounts, and ad-aware and spybot S&D.

      I'm hoping that the anti-spyware program Microsoft releases will:

      1. continue to be free after beta
      2. be free for corporate use
      3. prevent spyware installations through blacklists or other means
      4. evolve into a more manageable solution like Microsoft's Software Update Service which is a must for any Windows network.

      --
      Im dreaming ofa big bndwdth, That can resist the /.crowd.May ur days b merry & bright & may al
    3. Re:Bad track record by Anonymous Coward · · Score: 0

      M$ never brought ANY antivirus company. It did, however, licensed Central Point Anti-virus for M$AV back in DOS days, and it have never caught up with CPAV updates.

    4. Re:Bad track record by bushidocoder · · Score: 2, Interesting
      They bought at least two - GeCad and Pelican.

      That said, Microsoft hasn't released an antivirus product yet for legal reasons. Although they purchased antivirus resources (in fact, they purchased full applications, which Microsoft historically can rebrand and turn around in months) in 2003, they elected to delay releasing a product until 2006 soas to give the existing antivirus companies a reasonable amount of time to respond to the change in their market. A Microsoft antivirus suite would have an incredible edge over existing systems, particularly in the home market.

      Don't be mistake - they didn't do it out of the kindness of their hearts. They're just trying to limit the number of concurrent anticompetitive lawsuits they're involved in to double digit numbers.

    5. Re:Bad track record by mr_rizla · · Score: 1
      Microsoft is definitely thinking about bundling AV software with Windows now... In the UK they have started to offer Computer Associates AV software as a bundle with OEM for System Integrators.

      Apparently though, in Israel (WTF?) it is proving harder to get Win XP OEM withOUT McAfee bundled then it is WITH...

      Imagine a world where every copy of Windows comes with AV - like bundling antidote and poison into the same pill! Perhaps Symantec purchasing Veritas is giving them more branches to follow then just the security arena that M$ is moving into...

  11. Anyone else read this as .... by swimin · · Score: 1

    Anyone else read this as Microsoft acquires spyware company?

    1. Re:Anyone else read this as .... by confusion · · Score: 1
      They're going to replace windows update?

      Jerry
      http://www.syslog.org/

    2. Re:Anyone else read this as .... by michaeldot · · Score: 1

      Anyone else read this as Microsoft acquires spyware company?

      Yes, I did too.

      The thing is, I wasn't surprised in the least. I assumed they wanted to capitalize on their product activation dialogs or something.

    3. Re:Anyone else read this as .... by HermanAB · · Score: 1

      Ever heard of Alexa? It is distributed free with Internet Explorer. I bet this program won't remove it...

      --
      Oh well, what the hell...
    4. Re:Anyone else read this as .... by Secrity · · Score: 1

      They already own one.

  12. Conflict of interest by Mr.Zuka · · Score: 2, Interesting

    Isnt this a conflict of interest making the software that has the bugs and also selling the software that covers over those bugs. (I know Microsoft...)
    I think this really shows how Micky Mouse the code is that they are taking this route instead of getting the protocols right from the start.

  13. Say what? Poster is retarded? by FuzzzyLogik · · Score: 0, Redundant

    "I must say that it is very refreshing to see Microsoft finally start to take some serious action to help combat this rampant problem."

    You're kidding right? Why don't they plug the holes and create a secure product instead of spending money on funding yet another product that doesn't NEED to exist. For christ's sake, fix IE and fix windows, why waste your money, and people's time of having to actually remove it? Stop it from getting on the computer in the first place. Sheesh, makes me glad I use OS X now, I don't deal with this bullshit spyware anymore on at least one machine now.

  14. Irony by theycallmerenda · · Score: 5, Interesting

    The first post after the spoofing vulnerabilitiy in IE is MSFT buying their way out of their own self-created problems...

  15. Anti-competitive by HockeyPuck · · Score: 1

    So will this cause adaward and spybot to get eliminated b/c MSFT will just ship (for free) malware removal software?

    1. Re:Anti-competitive by MyOrangeJulius · · Score: 0

      as long as the products keep up the good work and thus their reputations, they shouldn't have a problem standing up to the free anti-mal apps MS releases.

    2. Re:Anti-competitive by Anonymous Coward · · Score: 0

      Yeah right. Who the hell buys Diskkeeper anymore, since Win2K includes defragmenting? Or who buys Winzip, since XP includes unzipping? And what happened to Netscape when Windows 98 started coming with IE. Sure, the power user might, but the average schmuck will no longer have a need.

  16. Something brewing? by bigbigbison · · Score: 2, Insightful

    In 2003, they bought GeCAD , makers of RAV-AntiVirus . So is Microsoft going to release their own anti-virus too?

    --
    http://www.popularculturegaming.com -- my blog about the culture of videogame players
    1. Re:Something brewing? by robyannetta · · Score: 2, Interesting
      In 2003, they bought GeCAD, makers of RAV-AntiVirus.

      What I always thought was interesting was the RAV guys were very pro-Linux and sunk a lot of money into AV for Linux. The next day when every heard this (After advertising it Ad Nauseum in Linux Journal), M$ bought them out almost immediately. I was always suspicious that RAV was a "prime buy-out material" just for that reason.

      As always, add your own conspiracy theory below by clicking on the [reply to this] button.

      --
      - Just my $0.02, take with a grain of salt, your mileage may vary.
  17. Thanks again, Microsoft! by goon+america · · Score: 4, Funny

    Thank you Microsoft, for valiently saving us from the dangers you created!

    Microsoft: Acting more and more like a government every day.

    1. Re:Thanks again, Microsoft! by Anonymous Coward · · Score: 0

      Makes me think of the wave of broken automobile windows in my town a while back. The spree finally ended when they caught some local auto glass installers red-handed breaking the windows.

  18. Embedded Windows spyware by astebbin · · Score: 2, Interesting

    If created, would this Microsoft anit-spyware tool remove all of the spyware and adware that comes pre-loaded with Windows? A friend of mine ran Spybot S&D on a clean, out-of-the-box Windows machine, and SpyBot picked up several insatnces of propreitary malware before the machine even hooked up to the web... And if this tool doesn't remove all of the aforementiond preloaded spyware, how can it possbily be effective at removing the non-Microsoft versions accquired over the course of normal Internet travel? I go to MSN Groups and SpyBot tells me it has blocked the download of Adware Inc... Just my thoughts on this as it develops.

    1. Re:Embedded Windows spyware by KenBot_314 · · Score: 1

      Hmm... preloaded malware... couldn't have anything to do with the fact that HP or Dell installed Windows for your friend, could it?

    2. Re:Embedded Windows spyware by Anonymous Coward · · Score: 0

      i am sure msft will fix it so windoze users will run only msft approved spyware...

    3. Re:Embedded Windows spyware by Exatron · · Score: 2, Insightful

      It has potential to be worse than that. For the right price Microsoft will probably have their anti-spyware program "miss" a company's spyware and adware.

      --
      "I think so, Brain, but 'instant karma' always gets so lumpy." - Pinky
      "Decepticons FOREVER!!!" - Ravage
    4. Re:Embedded Windows spyware by BCW2 · · Score: 2, Informative

      Not quite. A fresh install of Win XP will have between 11 and 13 instances of Alexa on Ad-Aware, followed by one more and 5 DSO exploits on SpyBot. Installing and running Ad-Aware and SpyBot is the next thing I do at the whitebox store I work at, for a format re-install or a brand new machine. No they are never hooked into the network for the first boot.

      --
      Professional Politicians are not the solution, they ARE the problem.
    5. Re:Embedded Windows spyware by astebbin · · Score: 1

      This was an install on a home-built computer with a re-formatted hard disc using a fresh Win2K disc right out of the box... no Dell or HP influences whatsoever.

  19. They need to by pair-a-noyd · · Score: 1

    concentrate on fixing the system so that crap like that can't happen in the first place.

  20. Whoa, misread that... by powerlinekid · · Score: 5, Funny

    I thought that said "Microsoft acquires spyware company" at which point my coworker responded "Makes sense, they try to integrate everything else".

    --

    can't sleep slashdot will eat me
    1. Re:Whoa, misread that... by noidentity · · Score: 1

      I thought that said "Microsoft acquires spyware company" at which point my coworker responded "Makes sense, they try to integrate everything else".

      Well, it does! That way there is only one spyware program that all the spying companies can use. Microsoft could test it well so there aren't any security holes that could be exploited to cause a loss of the one's privacy. Er, wait...

  21. You missed a step in the first logical step... by vwjeff · · Score: 1

    So i'm going to assume the first logical step is that the software uninstalls/disables IE?

    and then installs Firefox.

    1. Re:You missed a step in the first logical step... by Anonymous Coward · · Score: 0

      Where was that picture taken on the front page of giantcompany.com? It looks interesting.

  22. Can't wait for the bad precident by QuantumG · · Score: 4, Interesting

    Ya know, as soon as they release a Microsoft branded spyware removal tool will be the day they draw the line in the sand defining exactly what apps are welcome on the Microsoft platform and what apps are not. If Microsoft gets the final say of what runs on your machine, what makes you think they're only going to be removing spyware?

    --
    How we know is more important than what we know.
  23. Devil's Advocate by out+of+control · · Score: 1, Interesting

    So Microsoft is finally admitting that they need external help to deal with the runaway train that they call security?

    Just to play devil's advocate -- is there any chance that MS has purchased GIANT in an attempt to quell the complaints of spyware that come from MS users?

    What if Microsoft purchased GIANT just to assuage users through the use of a Spyware removal tool that said: "You are okay now! (Congratulations!)".

    MS is still the borg. They are losing considerable market share to Mozilla based browers at this point and they need to fight back with their typical FUD -- even if it means buying anti-spyware companies.

    Why not just create a browser that is not as heavily infected with spyware vulnerabilities?

    I will take my software GPL'd please. Thanks for coming out!

  24. Protection Racket by Shag · · Score: 1

    "See, it'd be a real shame, ya know, if something were, say - now I'm just saying if here, don't get me wrong - if something bad were to happen and your PC wound up with so much spyware on it that it didn't even have enough CPU cycles left over to display the log-in screen for you. Ain't that right, Ape? Ya see, Ape agrees with me. So any-hoo, we was thinkin' you might want to protect your PC against those bad things happening to it... and we have just the service to do it, and I'm sure you'll agree our prices are very reasonable. So, why don'tcha just sign here on the line... or if ya wanna t'ink about it, Ape here would be more than happy to go over the details. He can be very persuasive, right, Ape?"

    --
    Village idiot in some extremely smart villages.
    1. Re:Protection Racket by bob+beta · · Score: 1

      I take it you and Ape are the only people in your small town who know how to admin a Red Hat server. Hmmm. Clever business model you have there...

  25. its funny cuz its true by viva_fourier · · Score: 4, Insightful

    Irregardless of the quality of the anti-spyware, isn't it just damned *ironic* when a company can make a huge profit on a product, and then make *another* goatload of cash by fixing it.

    So I ask you, why would Microsoft *ever* wish to produce flawless software???

    --
    and now back to the fallout shelter...
    1. Re:its funny cuz its true by Anonymous Coward · · Score: 0

      Explain to me the fundamental difference between regardless and irregardless. Hint: One is an actual word while the other has sadly worked its way into the common vernacular but is not in fact a word.

    2. Re:its funny cuz its true by Chemical · · Score: 2, Interesting

      What makes you think they're going to charge for it? Microsoft has taken a hit on OS utilities before. They spent millions developing IE, which they then gave away. IIS is included with Windows for free. Tools like SFU can be downloaded for free. They included a disk defragmenter in W2K and newer. My guess is they'll include it in the next release of the OS, or maybe next XP service pack.

    3. Re:its funny cuz its true by Anonymous Coward · · Score: 0

      It is a word. Being used commonly is how something becomes a word in the first place. Language is not static.

    4. Re:its funny cuz its true by Anonymous Coward · · Score: 0

      Irregardless isn't a word, moron.

    5. Re:its funny cuz its true by Anonymous Coward · · Score: 0

      "irregardless: Regardless.
      [Probably blend of irrespective, and regardless.]

      Usage Note: Irregardless is a word that many mistakenly believe to be correct usage in formal style, when in fact it is used chiefly in nonstandard speech or casual writing. Coined in the United States in the early 20th century, it has met with a blizzard of condemnation for being an improper yoking of irrespective and regardless and for the logical absurdity of combining the negative ir- prefix and -less suffix in a single term. Although one might reasonably argue that it is no different from words with redundant affixes like debone and unravel, it has been considered a blunder for decades and will probably continue to be so."

      Apparently it is a word... just like "strategery"

    6. Re:its funny cuz its true by AstroDrabb · · Score: 1
      What makes you think they're going to charge for it?
      The Microsoft press release.
      Details of the Microsoft solution beyond the planned beta, including product plans, pricing and a timeline for delivery, are not yet available.
      Granted, they could still turn around and offer it for free. However I think they are going to bundle this with the anti-virus stuff they bought and sell it as an "XP Add-On" like the stupid add-on with pinball and a few lame themes.
      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    7. Re:its funny cuz its true by Anonymous Coward · · Score: 0

      The funniest part is that people use "irregardless" in place of "regardless" because they think it makes them sound smart.

    8. Re:its funny cuz its true by Sicnarf · · Score: 1

      Erm IIS is only included in the "Pro" Edition of Winxp, NOT the "Home" Edition (maybe has changed in recent versions). I was trying out Visual Studio .NET with it's glamorized "Web Services with ASP.NET, only to find out to launch an ASP.NET script, you need IIS. So after spending money for Visual Studio, you have to upgrade your Windows.

  26. Damned if they do, damned if they don't... by ThePatrioticFuck · · Score: 1

    If MS does nothing about spyware and crap, people bitch about MS not caring. If they do something like this, people complain they're anti-competitive.

    1. Re:Damned if they do, damned if they don't... by idlemachine · · Score: 1
      C'mon, don't be so disingenuous...what people want is for Microsoft to produce a secure OS that doesn't require them to (at some future point) pay for an additional "optional" security update.

      Spyware removers like Giants' product are bandaids at best; this isn't a solution to the Windows OS' security issues, it's a blatant attempt to cash in on a growth market their negligence is responsible for.

  27. Why? by Anonymous Coward · · Score: 0

    Why would MS need to do this? Who knows the internals of Windows better then the people who wrote it in the first place? Shouldn't they already have the best tools available in order to build the best spyware removal tool anyway?

    1. Re:Why? by MmmDee · · Score: 2, Interesting

      You know, it could be that MS purchased Giant so they don't have to do their own research into the intricacies of how some spyware is installed, avoids detection, and re-inserts itself after "removal". Sometimes an hour with the book beats a week in the lab. If they'd only hired the expertise (who probably currently work for A/V companies), they might have been sued for IP theft.

      --
      No man's an island, unless he's had too much to drink and wets the bed.
    2. Re:Why? by bulliver · · Score: 1
      You know, it could be that MS purchased Giant so they don't have to do their own research into the intricacies of how some spyware is installed, avoids detection, and re-inserts itself after "removal"

      You of course refer to the "intricacies" of how spyware exploits the weak security model of MS code. I wouldn't bother if I was them either...

      --
      Support the mob or mysteriously disappear.
  28. Windows 2000 by Anonymous Coward · · Score: 0

    running Windows 2000 and later, of course

    Of course? What about the rest?

    1. Re:Windows 2000 by spac3manspiff · · Score: 1

      Nah really?
      Blast I thought they would port it for Linux too.

  29. Alexa by HermanAB · · Score: 1

    So, MS now has Alexa - a spyware program distributed free with Internet Explorer, the world's premier spyware platform and a removal tool...

    --
    Oh well, what the hell...
  30. I'm guessing... by dew4au · · Score: 1

    This will be a free program on the basis that you allow it to check all of your MS product keys. :)

  31. "Microsoft Acquires Spyware Removal Company" by bulliver · · Score: 1

    I see that famous "Microsoft Innovation" is still hard at work. Why write your own code when you can buy a company, and bastardize theirs...

    --
    Support the mob or mysteriously disappear.
    1. Re:"Microsoft Acquires Spyware Removal Company" by Anonymous Coward · · Score: 0

      why buy steel when you can produce your own? why buy gas when you can produce your own? why use linux/bsd/windows when you can write your own OS?

      despite how rich you think MS is, the laws of economics still apply to them.

    2. Re:"Microsoft Acquires Spyware Removal Company" by bulliver · · Score: 1

      Yeah, If you want to buy steel instead of fabricating it go nuts, just don't market yourself as a great innovator in steel technology ;) PS it was a joke...

      --
      Support the mob or mysteriously disappear.
  32. Consumer acquires Microsoft-removal Company by Hao+Wu · · Score: 0, Troll
    --
    I suggest you read Slashdot
    1. Re:Consumer acquires Microsoft-removal Company by michaeldot · · Score: 1

      No, that isn't new, that happened in 1997. Even Slashdot isn't that slow in reporting news!

      The historical irony is, however, that as part of the $150 million deal, Apple agreed to make IE to default browser...

  33. Re:No way -- it's funny: laugh by viva_fourier · · Score: 1

    Welcome to Bizarro World.

    I'm going to start a company that produces Wingding-intertubes for floating down neighboring Stromboli Stream. A by-product of the Wingding manufacturing process happens to be Toxic Chemicals A,B, and C. I figure, what the hell, I'll go dump them into Stromboli Stream and not have to pay a red cent for disposal!!

    Woohoo! Wingding sales are skyrocketing -- but wait, people are getting sick in Stromboli Stream, and their Wingdings aren't floating! What should I do?!

    I know, I'll buy an environmental cleanup company, and charge the county a goat-load to clean the stream! Time to go buy another golden caviar-filled rumpus room!

    We now return to your previously scheduled slashdot article.

    --
    and now back to the fallout shelter...
  34. 0+i, Redundant by bersl2 · · Score: 1

    It's sad that this solution is probably more cost effective (in the short term) than fixing the existing code base.

  35. wait just one minute... by the_non_geek · · Score: 1

    Wouldn't it be possible that Microsoft just wants to get into all the cash that people are getting off of their lazy coding? I mean, why not just make a million bugs, and then make a $50 program that gets rid of some. Thats a lot of cash faster than you can say conflict of interest.

  36. This is just another case... by Gorffy · · Score: 1

    .. of Microsoft buying software instead of making their own/fixing their code. Another brilliant "innovation".

  37. Re:just the facts ma'am by Anonymous Coward · · Score: 0

    I'm not sure what "proprietary" means in this case- Is Open Source Malware OK? SpyBot alerts the user to a lot of software which has the potential to comprimise privacy. Much of the same software can also be helpful in diagnosing problems and keeping track of preference settings. This is not MALWARE or even Spyware. Please don't give the other side ammunition by being hysterical

  38. three real steps. by twitter · · Score: 1, Informative
    Serious steps to eliminate malware/spyware:
    1. Use and expand users so that you don't have to browse the web or read your email as root. Others should not be able to write your system files without asking you.
    2. Obliterate the registry and separate binary from configuration files. It should not be easy for baddies to hide in a file that will keep your computer from booting if modified.

    These are first steps, but they are not enough and you should not expect M$ to fix their problems. The only way to keep malware/spyware off your system is to own it and only get your software from trusted sources, such as Debian. Microsoft is so keen on DRM and pleasing others that they will never give you real ownership of any computer you put their software on. The ability to read your files and add/remove "components" without your permission is part of their EULA. If they can do it, so can others and the story will never end. It's not a bug, it's a feature.

    --

    Friends don't help friends install M$ junk.

    1. Re:three real steps. by Anonymous Coward · · Score: 0, Informative
      Moderators: Please note that "twitter" is a known fanatical sycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

      I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or Mepis or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

      If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

      To get an idea of what I'm talking about, check this post out. This is an article about email disclaimers. The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx, because "is teh free".

      Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

      Here's that drive-by advocacy and FUD in motion: twitter goes on about some topic and then drops the usual "oh and M$ is teh evil" because "WMP phones home" or some such. Called on his FUD, he then claims that WMP stores every song and movie you've ever played in a file, somewhere. Pressed further, he just sort of slithers out of sight, his FUD-spreading complete. This is not about some Microsoft technology that nobody likes anyway; it's about lying for the sake of lying. Way too many of his posts are exactly like this one.

      More? Just read though this post and the subsequent replies. I guess this stands on its own. Or these two. Or this one. Or this one.

      Still not convinced? This is what twitter considers "humour" while going about his daily "M$" routine.

      M

    2. Re:three real steps. by Anonymous Coward · · Score: 0

      So don't read his posts you fucking retard...

    3. Re:three real steps. by Anonymous Coward · · Score: 0

      Twitter, you've said some crazy things, but to pretend that the registry is more obscured than System V Init is over the fucking top.

    4. Re:three real steps. by laughingcoyote · · Score: 1

      It looks more to me like you're crapflooding. How about, if you disagree with the person, maybe, somewhere in your disagreement, you should REFUTE THEIR POINT???

      Or, of course, you could always post a load of crap bout people's previous posts while failing to have anything on-topic to say about the current one.

      Oh, and for godsakes, when you're going to attack someone, if you want it to have a bit of credibility, please have the balls to put your name to it. AC doesn't impress anyone.

      --
      To fight the war on terror, stop being afraid.
    5. Re:three real steps. by Anonymous Coward · · Score: 0
      You try and "refute" someone who posts things like these and we'll talk.

      And spare me the AC bit, as if it would make you feel better if I was logged in as "laughingcoyote".

    6. Re:three real steps. by Porn+Whitelist · · Score: 1
      No matter what you think of "twitter", his point about getting rid of the registry is valid.

      It's the biggest headache in terms of trying to clean out stuff.

      Think about it - you can spot a modified config or ini file just by looking at its' "modified date" (Windows) or MTIME (linux). Suspicious that spyware/adware has modified some files - just search for files modified by date. You can't do that with the registry.

      How many programs, even after removal, leave junk in the registry? It was a bad idea to begin with, and it's just gotten worse with time.

      Spyware companies LOVE the registry. System administrators HATE it. That alone should tell you something.

    7. Re:three real steps. by Anonymous Coward · · Score: 0

      holy shit

    8. Re:three real steps. by laughingcoyote · · Score: 1

      The post you cited looks...ridiculously easy to refute to me.

      --
      To fight the war on terror, stop being afraid.
    9. Re:three real steps. by Lotunggim+Ginsawat · · Score: 2, Informative

      My recipe for spyware-free computer with IE.

      IE + Spybot Search and Destroy BHO + SpywareBlaster + Proxomitron = spyware-free computer.

      Doesn't even have to switch to Firefox. And all websites works fine with this config.

    10. Re:three real steps. by b00stA · · Score: 1

      IE + Spybot Search and Destroy BHO + SpywareBlaster + Proxomitron = spyware-free computer.
      Doesn't even have to switch to Firefox. And all websites works fine with this config.


      Amazing. You only need to run three programs just to keep your computer clean? Wouldn't it be a lot more effective to use another browser?
      "Why install something better if I can just fix it with bubble gum?"

      --
      Stop making that big face!
    11. Re:three real steps. by Lotunggim+Ginsawat · · Score: 1

      You doesn't have to run Spybot or Spyware Blaster, just like when you doesn't need to run Acrobat Reader when you view PDF files within IE. Just set those software up and you will be OK. Only Proxomitron need to be started up.

      You never heard of BHO? Browser Helper Objects?

      BTW, BHO is not necessarily evil.

      I bet you never see SpywareBlaster, for example, on action huh? It's fire, configure, close and forget, doesn't take any resources at all.

    12. Re:three real steps. by penix1 · · Score: 1

      "How many programs, even after removal, leave junk in the registry? It was a bad idea to begin with, and it's just gotten worse with time."

      This was intentional to appease the shareware and trialware folks. Pre-registry shareware was easy to get around the "time bomb" effect by simply removing then reinstalling the shareware. With the registry it is a royal pain in the rubber parts to remove it. Of course, adware / malware simply loved the registry idea.

      It wasn't helped along any by MS support of the e-machines where adware is how you paid for it. The idea expanded from there.

      B.

      --
      This is a sig. This is only a sig. Had this been an actual sig you would have been informed where to tune for more sigs.
    13. Re:three real steps. by Porn+Whitelist · · Score: 1
      It's still easy to defeat the registry (for all programs, not just trialware and shareware) by copying it, installing the software, then copying it again, and doing a diff.

      You can also isolate all the files needed for any install by copying the partition (dd if=/dev/hda1 of=original.partition), installing, then copying the partition again (dd if=/dev/hda1 of=new_partition), and again doing a diff.

      Once you have the list of files modified/installed, it's no big deal to make your own install proggy (or make an installshield for it if you want to look really professional)

    14. Re:three real steps. by penix1 · · Score: 1

      And you honestly think the average windows user is going to do all that?!?!?

      RRRRIIIIGGGGTTTT!

      B.

      --
      This is a sig. This is only a sig. Had this been an actual sig you would have been informed where to tune for more sigs.
    15. Re:three real steps. by Porn+Whitelist · · Score: 1
      I call you on your straw-man argument.

      I never mentioned "average Windows user". Last I looked, Windows users don't have access to commands like "dd" or the ability to mount devices as "/dev/hda1", etc.

      Also, it only takes a "friend of a friend" to do it, and make a batch file available for anyone to be able to copy the relevant files from an installed copy to a new install directory, and another batch file to copy those files from the install directory to the appropriate directories on another machine, and run regsrv32 on any ocx, etc.

      Then it's a simple matter to post the 2 batch files on the net. The batch files themselves are perfectly legal (especially since they have a legit use as being able to make working bakups of legitimately obtained software).

    16. Re:three real steps. by Winkhorst · · Score: 1

      Actually, it sounds pretty rational to me. I don't necessarily agree with his slant on Bill Clinton, but I don't see anything at all trollish about him. I have said things in a similar vein myself and I certainly don't consider myself a troll. Apparently, being consistent in ones dislike of a particular group of individuals is considered trolling, though this only seems to be applied selectively. Gee, freedom really is a pain in the butt, isn't it?

      --
      "Is this Winkhorst a nova criminal?" "No just a technical sergeant wanted for interrogation."
    17. Re:three real steps. by penix1 · · Score: 1

      "I call you on your straw-man argument.
      I never mentioned "average Windows user". Last I looked, Windows users don't have access to commands like "dd" or the ability to mount devices as "/dev/hda1", etc."

      It's not my strawman argument when it was you who brought Linux into a windows topic...

      "Also, it only takes a "friend of a friend" to do it, and make a batch file available for anyone to be able to copy the relevant files from an installed copy to a new install directory, and another batch file to copy those files from the install directory to the appropriate directories on another machine, and run regsrv32 on any ocx, etc."

      But that does nothing for registry entries (the topic in this thread)...

      "Then it's a simple matter to post the 2 batch files on the net. The batch files themselves are perfectly legal (especially since they have a legit use as being able to make working bakups of legitimately obtained software)."

      Again, how does this change the registry entries required for a given program? It is more likely that Windows will crash with this method.

      Most windows programs add huge modifications to the registry and some even add checksums (autodesk anyone) that verifies the copy running is the one installed. The checksum is generated during install and is different for every install (even from the same install disk). Remember, we are dealing here with proprietary companies that see pirates behind every corner.

      B.

      --
      This is a sig. This is only a sig. Had this been an actual sig you would have been informed where to tune for more sigs.
    18. Re:three real steps. by Anonymous Coward · · Score: 0
      No, no. You're missing the point. Look at the context of what 'twitter' is saying. He's making some argument about how yet again "M$ is evil". Then he goes off and calls the person he replied to "dumbass". Then he's called "naive". Then he writes this:

      I'll ignore the personal insults. I'm used to that kind of thing and worse from M$ apologists. Name calling is integral to enslavement, so those who wish to enslave will always have offensive mouths.

      This is pathological behavior. I can insult you, but you can't insult me. The topic is really about something political, yet the person trying to make a point is a "M$ apologist". "Name calling is slavery". Not his calling someone "dumbass", of course. "offensive mouths"?? I can show you a hundred examples of this same thing, and then some.

      twitter has issues. He's not a troll, he's worse than a troll. He's a jihadist that gets modded up way too often. As a member of the open source community, I refuse to be classified along with him and all the other retards. That's it.

    19. Re:three real steps. by Porn+Whitelist · · Score: 1
      right - I keep forgetting that Windows users think theirs is the only OS ... sheesh.
      But that does nothing for registry entries (the topic in this thread)...
      sure it does, you look at the differences in the registry file, and duplcate them. Been there, done that, no big deal.
    20. Re:three real steps. by Ash-Fox · · Score: 1

      My recipe for spyware-free computer with IE:

      - No users who don't even know how to understand simple things like the process list

      - install firefox.

      --
      Change is certain; progress is not obligatory.
  39. Just Remember: by dteichman · · Score: 1

    Microsoft will now be making the anti-spyware product. Steer clear. It's probably susceptible to spyware.

  40. Or, as the Vercotti Brothers said by lheal · · Score: 1

    Dino: Good morning, colonel.

    Colonel: Good morning gentlemen. Now what can I do for you.

    Luigi: You've ... you've got a nice army base here, colonel.

    Colonel: Yes.

    Luigi: We wouldn't want anything to happen to it.

    (see http://www.ibras.dk/montypython/episode08.htm)

    --
    Raise your children as if you were teaching them to raise your grandchildren, because you are.
  41. "Removes deceptive software"? by Anonymous Coward · · Score: 0

    So it deletes Windows, then?

  42. Nice Name. by Fussen · · Score: 1

    Micro Soft
    Giant Company

    And I thought Corvettes were used to "compensate".

  43. Hope it doesn't affect Giant's service by Mordak_Foo · · Score: 2, Interesting

    I've just recently started Giant's AntiSpyware program and found it to be excellent at cleaning up the VX2 remanents and anything else left over after running Spybot S&D and Lavasoft's Ad-Aware. I sure hope that M$'s take-over doesn't make a worth-while antispyware tool worthless.

    1. Re:Hope it doesn't affect Giant's service by Blitzenn · · Score: 1

      Even Giant does not clean everything. The experts say that you HAVE TO run two to three different packages in order to clean 90% of the spyware applications that are out there. So regardless of the order that you run them in, they will all find instances of spyware the others have missed. That doesn't make Giant anybetter than the others because you ran it last.

    2. Re:Hope it doesn't affect Giant's service by Mordak_Foo · · Score: 1

      In my experience, it actually does matter in which order you run spyware removal tools. Some tools fix problems more gracefully than others. For instance, Spybot tends to fix some spyware that infect winsock in a less destructful manner than Ad-aware, so I run Spybot first so that I don't have to repair the networking in Windows afterwards. I agree. Giant isn't any better than the others...it just fill another gap...a gap I hope M$ doesn't neglect after this investment.

  44. Does this mean... by jangobongo · · Score: 1


    ...that Gates and/or Ballmer read /.?
    • Failing Grades For Most Anti-Spyware Tools

      ...only 3 ASW programs had a 'batting average' of better than .500 when it came to eradicating the broad range of spyware in the test... The top three? Giant Anti-Spyware, Spy Sweeper, and Ad-Aware....
    Maybe someone at M$ read that article and said, "Hmmmm, that might be just what we need. Buy 'em!"
    --

    Sig cancelled due to lack of interest
  45. How long until... by jrutley · · Score: 1

    anti-spyware companies start suing Microsoft for taking away their business after MS squeezes them out?

  46. from the first. by twitter · · Score: 0, Troll
    Isnt this a conflict of interest making the software that has the bugs and also selling the software that covers over those bugs.

    Yes.

    If you read this carefully, you might conclude that Bill Gates has been fixing the things he breaks since he was in high school. He and his buddies broke the first computer they were allowed to use and then hired themselves out to fix it:

    Bill Gates, Paul Allen and, two other hackers from Lakeside formed the Lakeside Programmers Group in late 1968. They were determined to find a way to apply their computer skills in the real world. The first opportunity to do this was a direct result of their mischievous activity with the school's computer time. The Computer Center Corporation's business was beginning to suffer due to the systems weak security and the frequency that it crashed. Impressed with Gates and the other Lakeside computer addicts' previous assaults on their computer, the Computer Center Corporation decided to hire the students to find bugs and expose weaknesses in the computer system.

    This was Bill Gates answer to the shortage of computing resources that existed when he was growing up. He made himself root so that he could have all the resources he wanted, essentially a robbery. The overall model applies to the software he sells to this day, there will always be something wrong with it so that you want to buy the new one. I like the answer RMS came up with better: make your own toys.

    --

    Friends don't help friends install M$ junk.

    1. Re:from the first. by Anonymous Coward · · Score: 1, Interesting
      Moderators: Please note that "twitter" is a known fanatical sycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

      I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or Mepis or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

      If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

      To get an idea of what I'm talking about, check this post out. This is an article about email disclaimers. The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx, because "is teh free".

      Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

      Here's that drive-by advocacy and FUD in motion: twitter goes on about some topic and then drops the usual "oh and M$ is teh evil" because "WMP phones home" or some such. Called on his FUD, he then claims that WMP stores every song and movie you've ever played in a file, somewhere. Pressed further, he just sort of slithers out of sight, his FUD-spreading complete. This is not about some Microsoft technology that nobody likes anyway; it's about lying for the sake of lying. Way too many of his posts are exactly like this one.

      More? Just read though this post and the subsequent replies. I guess this stands on its own. Or these two. Or this one. Or this one.

      Still not convinced? This is what twitter considers "humour" while going about his daily "M$" routine.

      M

    2. Re:from the first. by bob+beta · · Score: 1

      I like the answer RMS came up with better: make your own toys.

      I wasn't aware that Richard Stallman had ever made his own computer hardware. Nor how it pertains to the arguement you were making.

  47. Finally, a REAL "Profit!" plan.... by flinxmeister · · Score: 4, Funny

    1. Write buggy OS with no security model
    2. Acquire company that bolts on a bandaid
    3. Profit!

    What next?

    "Microsoft to buy Large antivirus firm."

    "Microsoft announces acquisition of blue-screen-B-gone Inc."

    "Microsoft acquires company that removes the freakin' paperclip"

    1. Re:Finally, a REAL "Profit!" plan.... by Man+in+Spandex · · Score: 1

      God I wish that last one could one day be real

    2. Re:Finally, a REAL "Profit!" plan.... by DocSavage64109 · · Score: 1

      I don't know which is worse. The paperclip, or those who actually like the paperclip.

    3. Re:Finally, a REAL "Profit!" plan.... by Osty · · Score: 2, Insightful

      God I wish that last one could one day be real

      It has been real since Office 97 (which also coincides with the introduction of the paperclip in Office -- I believe he existed before in Bob, like the dog and cat). Don't want the paperclip? Don't install the paperclip (Office Assistant) when you install Office. Simple. Done. Oh, yeah, and IIRC Office XP Office Assistants do not install by default (they're marked as "install on 1st use" or something like that, though if you don't even want that you can change it to "Not Available" -- see below).

      If the paperclip is already installed and you want it gone, follow these simple steps (targetted to Office 2003, since that's what I have installed here, but the approach is similar for all recent versions of Office):

      1. Open Add/Remove Programs from the Control Panel
      2. Find the Microsoft Office entry in the list, and click the "Change" button
      3. Select "Add or Remove Features" if it's not already selected and click Next
      4. Check "Choose advanced customization of applications" and click Next
      5. Expand "Office Shared Features" in the tree view
      6. Find "Office Assistant" in the newly expanded portion of the tree
      7. Click the down-arrow, and select Not Available
      8. Click Update and finish out the wizard
      Voila (not "viola"), no more paperclip.
    4. Re:Finally, a REAL "Profit!" plan.... by AstroDrabb · · Score: 1
      What next?

      "Microsoft to buy Large antivirus firm."
      Well, this one has alrady come true. Microsoft moves into antivirus realm.
      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    5. Re:Finally, a REAL "Profit!" plan.... by shri · · Score: 1

      Simple steps? "Advanced customization of applications" is a simple step?

    6. Re:Finally, a REAL "Profit!" plan.... by Anonymous Coward · · Score: 0

      "Advanced customization of applications"? Deselecting an optional component in a wizard is advanced customisation? Have you ever used Linux??

    7. Re:Finally, a REAL "Profit!" plan.... by hkb · · Score: 1

      1. Write buggy OS with no security model

      Uhm, the OS itself has quite an advanced security model, actually. It's arguably more advanced than UNIX. It's just that most programmers, including Microsoft's own middleware drones, don't bother to use it or integrate it well. Many UNIX middleware authors are similarly ignorant.

      Pick up a copy of Inside Windows 2000 so that you don't continue to make such ignorant comments.

      --
      /* Moderating all non-anonymous trolls up since 2004 */
    8. Re:Finally, a REAL "Profit!" plan.... by Anonymous Coward · · Score: 0

      So, because you find editing a file, making a change, stoping and starting a service sooooo hard, that makes it okey-dokey to click-n-drool through a god awful number of dialog boxes?

  48. Re:Why Ask ? Linux+ClamAV is safe. by xtermin8 · · Score: 3, Insightful

    Spybot doesn't really run on linux, and I doubt spyware runs on linux desktops, either. There are cookies you may want to be aware of, but most linux web-browsers make this easy. There are some linux viruses, but also cross-platform antivirus programs. Clam Anti-Virus is a free, open-source app which runs on Windows, Linux and Mac OS X.

  49. Ridiculous, isn't it? by Maljin+Jolt · · Score: 1

    Checking for updates on my new favorite spyware removal company

    I am afraid there is something wrong with the mindset of ack154. He is so often checking for spyware removal tools, so he has a favourite one??? If I had a spyware problem for the second time, I would seek immediately an option to drop such a platform completely.

    --
    There you are, staring at me again.
  50. And in other news by aardwolf204 · · Score: 4, Funny

    In other news, Philip Morris acquires Pfizer's Nicotrol divison.

    Story at eleven.

    --
    Im dreaming ofa big bndwdth, That can resist the /.crowd.May ur days b merry & bright & may al
    1. Re:And in other news by Stevyn · · Score: 1

      Mods, give this guy a boost. This is exactly what's going on here. They're hedging. They either create a secure OS with no exploits for unintended spyware installations and make money or buy a company that temporarily solves the problem and make money.

    2. Re:And in other news by Anonymous Coward · · Score: 0

      and he's informative too, just wish i had points

    3. Re:And in other news by Anonymous Coward · · Score: 0

      and wish i could edit my post, link: http://slashdot.org/comments.pl?sid=133058&cid=111 12671

  51. No more Linux version??? by wandazulu · · Score: 1

    Just like those M$ bastards to buy a company like this and then say they're going to stop making a Mac and a Linux version.

    Oh, wait...nevermind...

  52. The bloat of the beast by cente · · Score: 1

    You know, you can say all you want about the other browsers, but IE is the most laden with crap-you-don't-need out of all of em.
    How big was it last time I downloaded it? 25 meg?
    You'd think it'd come with all sorts of stuff to make your internet experience a little better. But all it seems to do is bloat and take longer to load.
    You guys might be buying a company, but in the end it's going to add to more and more bloat. And your "free" browser isn't going to seem so appealing to the masses of sheep.
    *sigh*
    Bill, get your head out of the clouds. At one point in your long lived company, you were actually a decent programmer. Where are you now?

  53. missing the point by Dipster · · Score: 4, Interesting
    Why would Microsoft fix their bugs? It doesnt matter how many holes Windows/IE have, people will still buy it. You can see that every day as new windows exploits come out and yet we dont have a mass migration to Linux and/or Unix.

    Microsoft makes money based on upgrades. New versions of Windows, new versions of Office, new versions of whatever. People blindly upgrade in the hopes that the new version will fix the bugs of the old one. But all these new versions are just as buggy as the first. Not the same bugs, but all new ones...

    Now if Microsoft were to make a product that performed wonderfully the first time around, why would you have any incentive to upgrade? They can tout new features and bells and whistles, but if the product you have is working fine for you, then why spend the money?

    As long as they hold a monopoly, they can continue to create buggy software with no real risk of losing customers.

    Now what if they could sweeten the deal even more. What if they "forced" people to buy software that had a giant problem, and they also sold the cure. Then they get to charge you twice. They could fix the problem, but then they would lose money. That doesn't make much sense. As long as there are no real alternatives to the average user, Microsoft has free reign to run their stratagy.

    Microsoft isn't dumb. There's a reason they are where they are today. They've found a damn good buisness stratagy that works.

    1. Re:missing the point by QuantumG · · Score: 1

      Which is why the upgrade cycle is not a smart way to buy software. If you really truely want to spend money on software and get everything you want, just hire a developer to tune open source software to your particular needs. If what you want is more expensive than you personally can afford to pay a developer then find the 1000 other people out there who want that same thing and split the costs. Microsoft isn't dumb, but their business strategy is, and the only reason they're still making money with it is because people don't know that they are getting ripped off.

      --
      How we know is more important than what we know.
  54. In Japan, it goes like this...., by djupedal · · Score: 1

    In Japan, the same companies that produce and sell cigarettes also produce and sell the cancer drugs used to fight the maladies brought on by smoking.

    MS can now control the spam, yes, meaning they can charge the spammers to learn how to avoid the barriers (you paid? ok, here's the key...next in line! keep it moving!), while also charging the users - similar to how the phone compnay sells your number to marketers, while charging you a fee for a device that will block them - nice work if you can get it.

    Remember, investing in MS is risking having your own money used against you in the marketplace.

    1. Re:In Japan, it goes like this...., by Gel214th · · Score: 1

      This is just a ridiculous speculation. You're saying that Microsoft will charge Spammers for the method to defeat the Spyware software they produce. I'd file this under propaganda at best. If you have proof or even vague knowledge of them doing this, bring it out into the mainstream media and I'm sure you can seriously damage the M$ machine in cost of PR and maybe even a lawsuit or two. ...So do you have any proof? Or just specious statements trying to compare the Microsoft software company to cigarette and pharmaceutical companies in Japan??

      --
      -Gel214th
  55. THEY uniquely are the problem, not the solution. by puppetluva · · Score: 1

    I think this is a way for them to make money on (or get credit for) selling you a shoddy product and then selling you an expensive bandaid.

    As I try to remind people. There are almost no "email" viruses. There are "Outlook viruses." Outlook wasn't always the number one email client, but it has always been the number one email client with security problems.

    There is almost no general "spyware". There is almost only "IE spyware". IE wasn't always the premier browser, but it has always had the biggest/most security holes.

    If it weren't for Microsoft's shoddy programming and lack of concern for security, we wouldn't have nearly the problems we do in IT security. This is a great example where cut-throat marketing and vicious anti-competitive practices are enough to dominate a technology market. . . at the expense of a society at large.

  56. Addware Counter Terrorism - Homeland Security by CaffeinatedLizard · · Score: 1

    Couldn't spyware, addware, etc be considered a terrorist attack on American citizens? Imagine the potential threats of a spyware group monitoring military personnel or employees of three letter organizations... It is common knowledge in the security community that you do not necessarily need to know details of communications traffic to determine intelligence. Changes in behavior are enough to inform those who want to know that something is going on.

    I propose that the United States government target these individuals (makers and users of spyware and addware) as a threat to national security. They should be targeted and destroyed with extreme prejudice.

  57. So you work in ... by bob670 · · Score: 1
    murders and executions? I mean mergers and aquisitions...

    Between Symantec buying Veritas today, MS snatching up anti-spyware tools and Oracle eating up PeopleSoft I have to wonder if all this limiting of choice, won't in the long run be helpful to Linux? I have heard a lot of client backlash lately about vendor lock in, especially in regards to Symantec (I think most PHBs have adjusted to MS lock in by now) and now that they are pretty much mopping up the utility arena what will this mean?

    I like some CA products but they are too inconsistent across their whole spectrum, some of the smaller vendors offer decent tools but don't have full page ads in PC Magazine for the PHBs to read in the executive rest rooms, so can a case for having the source code be a serious marketing point now? In regards to corporate computing I would assume that IBM would jump all over this, and Sun with their "sorta' OSS" stance as well.

    1. Re:So you work in ... by Gel214th · · Score: 1

      There are dozens of Anti Spyware tools on the market today. How does MS buying one of them to make the technology widely available to everyone that uses Windows, necessarily imply a loss of Choice??? I really don't see how the impact of MS buying Giant, relates to Oracle purchasing Peoplesoft. There are far far more competitors for Anti-Spyware than CRMs.It's two completely different markets . I honestly don't see why this is a bad move for Windows users. The more people, the average users, that start using AntiSpyware tools, the less spyware gets installed and used.

      --
      -Gel214th
    2. Re:So you work in ... by bob670 · · Score: 1
      You do miss the point then, MS will basically kill off the other anti-spyware vendors, limiting choice. Mergers by a handful of companies limit choice.

      But to the issue at hand, the real problem is that MS needs to fix the leaky software, not offer my removal tools. Removal tools, as you noted, are plentiful, I want prevention within the OS.

    3. Re:So you work in ... by Gel214th · · Score: 1

      You're talking about an ideal situation.

      Realistically until the next iteration of Windows, which is Longhorn, we can't hope for any major revamp of the Windows Operating System.

      Time will tell if Longhorn addresses security concerns, since all I can see of it is a continuous scaling back of features to meet a ship date and the promise of a 'Patch As You Go' future.But I could be wrong, and it may be the rock solid, secure OS we all want from M$.

      Until then, we have a problem:Spyware.

      The realistic and practical solution is to offer better and more robust removal and prevention tools to combat the problem now and to educate the 'Average Joe' about the dangers presented by SpyWare and Trojans.

      --
      -Gel214th
  58. Firefox competition? by izomiac · · Score: 1

    Perhaps they plan to do something to IE or Windows to combat spyware. After all, I doubt if they want network administrators to start requiring Firefox on all networked computers just to reduce the time removing spyware. A automated network tool that removed certain programs remotely would be much easier to deploy than installing Firefox on every machine and teaching users to use it instead.

  59. where does it stop by Anonymous Coward · · Score: 0

    Just the other day I was looking at the settings for a spyware removal tool I have. It was set to remove all sorts of things, not just spyware, but dialers, trojans, p2p apps, anarchy documents, scocialism docs, bomb making docs. Made me a bit concerned. I mean these guys are telling me what documents I can read. Now I dont know who they are marketing for I got a copy from my uncle who does computer repair and he said it was good. Now if they want to support a corprate enviroment yes I can see removing some documents but really I just whish they would leave my stuff alone unless it is active executable code intentionaly out to harm my system.

  60. HEY! Wait a sec.. by Prophetic_Truth · · Score: 1

    I have a job thanks to spyware/malware! Seriously, if it wasn't for bad crap ppl get installed on thier computer (usually from porn or kazaa), I wouldn't have a job. Where I work we get at least 4 computers PER DAY that are useless do to the HUNDREDS of malware installed. $35 diagnostic plus $30 clean up fee for each box ensures I get a paycheck each week. Its a cash cow for repair shops.

    While some spyware is installed via remote exploits, most require a stupid user to get duped into running an executable or ActiveX dll. As I pointed out earlier it generally comes through when someone thinks they're getting free porn or free software. So I dont have much sympathy for them. I know plenty of windows users who have no problem using IE without infecting themselves with such apps

    --
    time is a perception of a being's consciousness
    time is your 6th sense, the wierd ones are 7+
  61. Anti spyware removal?? by bataras · · Score: 1

    As in Anti spyware-removal?

    1. Re:Anti spyware removal?? by codeconfused · · Score: 1

      yes I know....it's an oxymoron kinda statement

      --
      Danger Will Robinson! You are now entering a condescending Unix user zone!
  62. Re:THEY uniquely are the problem, not the solution by TheSpoom · · Score: 1

    There is almost no general "spyware". Sorry, this is just plain incorrect. There is a lot of general spyware. It runs as another process and doesn't depend on IE at all. Take GAIN (Gator) for example... it brings up its own windows with ads in them, IE not necessary at all. Often this software is bundled with stuff like Kazaa or other P2P software and installed silently.

    --
    It's better to vote for what you want and not get it than to vote for what you don't want and get it.
    - E. Debs
  63. FINALLY by shadowsurfr1 · · Score: 1

    It's taken them years and millions of attacks (i don't think that's to high) and they're FINALLY doing something about it. Way to keep up with the game M$.

  64. stupid waste of shareholder monies by Anonymous Coward · · Score: 0

    - freaking boneheads at M$ create crappy software, then spend $billions in acquiring companies marketing products to fix M$'s bad software in the first place?

    - what the h-e-double-hockey-sticks is going on in the software industry?

    - have people lost their minds?

  65. i'm still using NT you insensitive clod! by Anonymous Coward · · Score: 0

    ...(running Windows 2000 and later, of course)."

    of course. because goodness knows spyware doesn't affect windows nt (or 95 for that matter), and no one uses them anymore anyway.

    right?

  66. Good practice.. by t_allardyce · · Score: 1

    Well I guess if you can't fix your own bugs, just buy someone who can eh?

    --
    This comment does not represent the views or opinions of the user.
  67. Windows98 clean install results in 8 spyware... by 3seas · · Score: 2, Insightful

    ...items....

    Now think again why MS would want such a anti-spyware product.

  68. Good move. Just not the whole solution by Timbotronic · · Score: 2, Insightful
    All the posts about prevention being better than cure miss the point. There are already millions of compromised systems out there. Sorry to break the /. code of compulsory MS bashing, but any initiative that could help reduce the number of spam bots out there is a good thing.

    MS needs to fix and upgrade IE as part of any attempt to fix the problem. No question. But the need for spyware removal tools is still there.

    --

    One of these days I'm moving to Theory - everything works there

  69. Open Letter to MSFT by Anonymous Coward · · Score: 0

    Dear Microsoft,

    Why don't you just fucking fix IE?

    Regards,
    The Rest of the Internet

  70. Prediction: they wrap it into MSN by Anonymous Coward · · Score: 0

    I think they'll wrap it into the MSN product, rather than using the acquisition to improve Windows as a whole.

    It would be a natural response to AOL 9.0.

  71. SpamInspector by delus10n0 · · Score: 2, Informative

    GIANT Software makes a product called Spam Inspector, and up until about 6 months ago, it was one of the best anti-spam products for Outlook. Then they started to demand yearly fees to use the program (when they originally sold it as a one-time payment.)

    So yeah, I ditched the program and found Spambayes, and I haven't had a complaint. I'm bummed I wasted money on SpamInspector, though.

    --
    Not All Who Wander Are Lost
  72. My personal opinion.... by hawkes · · Score: 3, Funny

    ...is that it was a move to generate the worlds most ironic headline :

    "Microsoft acquires Giant Company"

  73. RE: this is a good thing? by King_TJ · · Score: 4, Insightful

    IMHO, it's only a "good thing" from a relative standpoint. Sure, it's "good" that MS realizes spyware is enough of a problem that they decide to buy out someone who has already been working hard to solve the problem. (From a few recent comments I read over on ArsTechnica after they posted a spyware-testing article, Giant's product is supposedly quite good. In fact, arguably the best available right now, of the non-freeware spyware removers.)

    As the parent poster pointed out though, this stuff isn't even an issue for non-Windows users. I'm using my PowerMac G5 tower right now, and it's rather nice not to have to wait while my anti-virus package loads up (further cluttering up a crowded system tray), and then having to wait while the thing does its automatic updates every day or two. No spyware/malware worries either. Just boot up and go....

    I do PC on-site service calls for a living (Mac too, on the odd occasion we get them), and I can honestly say that virus/spyware issues generate the vast majority of my income right now. From that angle, I guess I should be happy there's such a big problem. But somehow I'm not... I often tell my customers about the Macintosh alternative (both the good and the bad), and at least 40% of the time or so, they decide it really sounds like it's "right up their alley" and they consider one for their next system purchase.

    Call me crazy or whatever... but after 14 years of working with computers, I just feel like it should be as enjoyable an experience for people as possible. Using as much as 30% of your CPU time running background tasks like firewalls, virus scanners and anti-spyware packages seems so unnecessary....

  74. Totally Unbelievable by Anonymous Coward · · Score: 0

    According to this article, M$ hasn't ruled out the possibility of charging for security applications.

    http://www.securityfocus.com/news/10146

    So, let me see if I understand this, M$ produces security lax software and then is going to charge money to make it secure.

    Kinda sounds like, "You should pay us money to protect you so something terrible doesn't happen to you..."

  75. Same old Microsoft by OmegaBlac · · Score: 2, Insightful

    1. Develop crappy exploitable browser and distribute browser for free.
    2. Refuse to seriously fix free browser.
    3. Buy anti-virus and anti-spyware companies.
    4. Sell anti-virus product to clean up after your free crappy exploitable brower.
    5. Use monopoly desktop OS position to drive-out the competition.
    6. Profit.

    Typical Microsoft.

  76. Same M$ Sh*t as before by Anonymous Coward · · Score: 0

    M$-lacky 1: Hey, we need a web authoring tool, who's out there?

    M$-lacky 2: Some company has this product called Frontpage.

    M$-lacky 1: BUY IT!

    M$-lacky 1: Hey, we need a spyware tool thingy, who's the best out there?

    M$-lacky 2: Uh, Giant was rated the best in recent online reviews.

    M$-lacky 1: BUY IT!

    . . . and THEN, they sit on it, with no development work or innovation, or. . . So, what has M$ just done?

    They've Killed Kenny!!!

    For crying out loud, the product is ALREADY out there. It ALREADY works on Windows. WTF do they mean by a new beta that will work on Windows. The DAMN THING ALREADY WORKS ON WINDOWS. They are going to f**K it up BIG TIME.

    So much for the best anti-spyware tool available for Windows (at a price)

    Guess I'm back to using -only- Spybot S&D

    --who, me angry? hmm, why YES, considering I just moved to Giant because it works GREAT! along with Spybot; keeps itself updated better, great interface, stops more crap, etc. Damn Microsoft--

  77. blame microsoft by Anonymous Coward · · Score: 0

    if someone can explain how spyware get into your system?

    Looking for porn? Looking for free software? Cracks? p2p file sharing?

    I think those people really deserve that crap and I am amazed they complain about the product they are damaging with their immoral behaviour.

    1. Re:blame microsoft by Anonymous Coward · · Score: 0

      How about just bieng online? My gf checked her email (no attachments) and got a virus on my Dell/Windows XP notebook (burn!). Heck, i had it on for a few minutes and did a virus scan and it found several. Just for being online for a few minutes. Windows is not an OS, it's a marketing tool for Hotmail, MSN, and Office.

  78. Why would they have to do this? by Game+Genie · · Score: 2, Insightful

    Microsoft bought a company that produces software designed to uninstall malware from it's operating system. Shouldn't Microsoft have enough mastery of it's own OS to do this internally? Sad, sad, sad.

    1. Re:Why would they have to do this? by Anonymous Coward · · Score: 0

      Mastery? They can barely code and debug it now. Don't you know Windows is just a marketing tool for Hotmail, MSN, and Office?

  79. Which Free? by Anonymous Coward · · Score: 0

    Free as in "free admission, two drink minimum"?

  80. more bs by twitter · · Score: 1
    Twitter, you've said some crazy things, but to pretend that the registry is more obscured than System V Init is over the fucking top.

    Debian's system of human readable files and symlinks is a model of simplicity and transparency. Nothing could be easier than understanding exactly what is started and starting or stopping programs. Nothing is particularly difficult about reading the /etc/rc directories or typing, "/etc/init.d/program_name start|stop|restart" but there are plenty of runlevel editors and other GUI programs to help you out.

    The registry has no set structure, so any vendor can add any mixed binary or text they want. It must be accessed though GUI tools or a hex editor. A single byte wrong will blue screen your whole computer, so it's not only obscure it's dangerous.

    --

    Friends don't help friends install M$ junk.

    1. Re:more bs by Anonymous Coward · · Score: 0
      Debian's system of human readable files and symlinks is a model of simplicity and transparency.

      Debian didn't invent anything, you do realize that, yes? I mean, geez, "Debian" is a distro for sakes. Everything in Linux is a copy of Unix operating systems, sometimes done right and sometimes done wrong. Your ignorance aside, System V was the Unix that introduced the init system currently in use in Linux and BSD.

      I fail to see what this has to do with your "advice" on the registry - you obviously have absolutely no idea what it is or how it works.

      In short, you're all wrong. Please think before posting again next time.

    2. Re:more bs by Zorilla · · Score: 1

      I'm about to switch to Debian, but one of my criticisms is that the startup is really sloppy-looking compared to other distros. The init.d scripts are probably no different compared to other distros, just the startup text is unreadable if you're in a pinch. Ubuntu seems to have recognized this and cleaned it up quite a bit.

      --

      It would be cool if it didn't suck.
  81. Larger problems to address. by rice_burners_suck · · Score: 1
    I must say that it is very refreshing to see Microsoft finally start to take some serious action to help combat this rampant problem.

    Let's look at past trends. Whenever Microsoft buys a company, they take its product, and over time, make it increasingly worse, or decreasingly better, depending on your point of view. Take speedisk, for example. Microsoft bought that and turned it into defrag... And it promptly turned into a piece of junk, in my opinion. (Well, this whole post is my opinion, but the last sentence was more so.)

    The question I pose is this: Will this anti-spyware actually be effective anymore, or will it lose its effectiveness due to various reasons, such as:

    • Since this is Microsoft we're talking about, it will probably be integrated into the OS kernel, or some other place where it doesn't belong. This means that it will be included with every copy of Windows. All the spyware makers have to do is figure out its weaknesses, and find ways to work around it. Voila... spyware will continue to get through.
    • Due to the above, Microsoft will release patches. But knowing Microsoft, these will be few and far between.
    • Since this spyware engine will be included with Windows, other spyware removal makers will simply go out of business, a la Netscape... Oh, wait.
    • Even if Microsoft releases patches to stay ahead of the spyware makers, the latter parties will probably be more agile than Microsoft, to borrow a treasured piece of marketroidspeak. This means that they will release new spyware faster than Microsoft can release patches, a la virus authors being faster than McAfee and the like.
    Oh well... I have to give 'em credit for trying. But I really think that the key to solving these problems begins with making better software in the first place. I'm not even talking about completely auditing and fixing every bug in Windows, a la OpenBSD... But there are literally thousands of settings, some great in their scope, and some small and obscure. Many are scattered throughout the registry; others are scattered in the 2GB+ that make up the Windows directory in the "default install" (as if there's any other install). Microsoft does not provide a coherent interface to modify these settings, and for a company with some $60+BILLION(USD) to throw around, I think I am entitled to ask for something better.

    Therefore, the scope of this post greatly exceeds the specific problem of spyware, though it be a big problem, and addresses some of the larger issues surrounding the misconfiguration of Windows in its default install and the difficulty of reconfiguring it with saner settings.

    But hey, I give 'em credit for trying.

  82. the other issue by zogger · · Score: 1

    The most telling thing to me about the story is (I am speculating now but it's at least marginally logical) that they had to outsource the anti spyware remedy programming expertise all the way to purchasing a specialty company (its developers). That says to me they actually hadn't a clue of how to go about it in-house, but you know they probably tried, and therefore probably failed at it..not really awe inspiring consider the rep and cred they constantly try to maintain as the worlds premier software company. I see it as an embarassment for them, but they will spin it to look like a "shrewd business move" or something and legions of PHB will go along with that.

    It's still needed though, that I will grant. About time and stuff. Seems like some time back they also bought an antivir company which they will be charging for IIRC.

  83. Re: I like using Windows and developing for it by Trepalium · · Score: 2, Interesting

    Many of Microsoft's security flaws are self imposed. ActiveX and security zones in IE, for example. Eager to make the web another Windows application zone, they introduced ActiveX. Wanting to crush Netscape because they could possibly make Microsoft Windows irrelavent in the future, they integrated IE into Windows, and that required security zones. I won't lay the blame entirely on Microsoft for the viruses and worms, but I will lay it on them for the drive-by install of spyware that every IE user has to beware of. In their efforts to destroy competition, they opened their customers up to this.

    --
    I used up all my sick days, so I'm calling in dead.
  84. Download? by DaFallus · · Score: 1

    Has anyone tried to download this program since Microsoft has acquired Giant Company? Every single link I have found to any pre-Microsoft versions have been taken down.

    --
    No one cares what your captcha was

    Houston TX, USA
  85. Spyware clear by Anonymous Coward · · Score: 0

    Microsoft..make sure that the spyware doesn't delete and remove window$ itself.

  86. False dichotomy alert! by khasim · · Score: 5, Interesting
    As far as I'm concerned, Microsoft makes good products.
    I'm sure that's true. For suitably broad definitions of "good".
    Sure there are security holes, but you hypocrites fail to remember (when its convenient) that no large scale software application is 100% bug free.
    #1. Learn what "hypocrites" actually means.

    #2. There are far more options than
    a. "riddled with spyware"
    and
    b. "100% bug free"

    Linux is not "100% bug free" but its security model is far better than Microsoft's and, as a result, it is far less likely to be infected.
    Knowledgeable users know this and make use of hardware and software firewalls, antivirus apps and spyware detection apps.
    I'm sure they do, for a suitable definition of "Knowledgeable".

    Or, to put it another way, there are lots and Lots and LOTS of infected Windows machines out there so maybe the requirements to be considered "Knowledgeable" are a little too extreme?
    Security will always be a problem.
    But there is a continuum there, not a binary state.

    Sure, security might be a "problem", right below hard drive crashes and CPU fan failures.

    The idea is to remove/reduce the potential threats so that your system is not cracked within 10 minutes of going online.
    There is no single magic bullet solution and Microsoft realizes this.
    That is correct. But there are LOTS of bullets available that Microsoft is ignoring.

    The biggest is to change IE from an "allow everything except what is specifically denied" security model to one such as Firefox's "deny everything except what is specifically allowed".

    Sure, a "knowledgeable user" could configure both systems to have the same, effective security, but as I've stated before, there doesn't seem to be a lot of those "knowledgeable" users around.

    The second biggest thing is to TURN OFF UN-NECESSARY SERVICES. Look at a stock Win2000 or WinXP machine and see all the services that are on by default.
    With so many millions of people running Windows there are always going to be alot of targets for the unscupulous to prey upon. -Mike
    Yep. But the least Microsoft can do is to make their system as secure as possible.

    Cracking is all about access.

    If the bad guys cannot get access to your system (no ports open), then they lose an entire avenue of attack.
    1. Re:False dichotomy alert! by Anonymous Coward · · Score: 0

      Ok, this is what really bothers me. People confuse security model with implementation. From a model point of view, the NT security model is actually really good, quite arguably better than Linux. However, its implementation has been flawed. Not that buffer overruns and what not really have much to do with a security model . . .

      Being more secure doesn't mean you have a better model. It just means you implemented yours better.

    2. Re:False dichotomy alert! by buraianto · · Score: 1

      I think this is completely true. Take a look at Code Access Security.

      My only concern is that rwx is so simple and therefore used widely, while windows security, while powerful, is too complex for developers to want to use effectively.

    3. Re:False dichotomy alert! by Anonymous Coward · · Score: 0

      "Linux is not "100% bug free" but its security model is far better than Microsoft's and, as a result, it is far less likely to be infected."

      Because nobody cares about it.
      Except people that masturbate to bootlogs instead of actually using their computer.

  87. Support and dependency are not the same. by jbn-o · · Score: 1

    But in the free software world, the user gets the freedom to share and modify the programs, any time they want and for any purpose, without ever having to reveal to anyone what they did or why. This freedom allows the user to decide where they want to buy their support or to learn the program enough to provide their own support. Neither of those options are possible with proprietary software. Hence, it is quite different from what any proprietor (not just Microsoft) is offering.

    What proprietors do is a time-honored social problem of creating a problem and (eventually) providing a "solution". You don't get the freedom to break out of that dependency until you get away from proprietary software.

  88. Here's another problem. by khasim · · Score: 1

    http://www.pchell.com/support/aboutblank.shtml

    I hate cool web search and others like that. But mostly, I hate Microsoft for allowing an app to hide a file from me when I'm running as local administrator.

    And why the hell does only RegLite show the file? What is it with Microsoft's continuing desire to hide files (and extensions) from me?

    1. Re:Here's another problem. by Foolhardy · · Score: 1
      But mostly, I hate Microsoft for allowing an app to hide a file from me when I'm running as local administrator.
      When the system is infected under the authority of an administrator (or equivalent), it's too late. Every operating system is vulnerable to this. Microsoft isn't doing anything to 'let' applications hide files. Once the operating system itself is infected, the malware is in control and can do whatever it likes.
      And why the hell does only RegLite show the file?
      Wihtout having About:Blank in front of me, I can only speculate on its behavior, but it sounds like the Windows regedit can see the entry but regedit is apparently monitored by the malware while RegLite, being more obscure, is not.
  89. A band-aid is not a cure. by khasim · · Score: 1

    Great. So now I'll have another reason to hit Windows Update on a daily basis.

    This is a band-aid to the real problem which is Microsoft's flawed security model.

    If they would fix that, then I wouldn't be dependent upon so many daily signature updates.

    1. Re:A band-aid is not a cure. by Anonymous Coward · · Score: 0

      Tell us: what, as specifically as possible, the flaws are in Microsoft's security model. Not any little implementation bugs like buffer overflows, but in the model itself.

  90. Social Diseases by Anonymous Coward · · Score: 0

    ...and even better when it turns out the prostitute has crabs too.

  91. Not damn likely to be integrated into Windows! by shoolz · · Score: 1

    The number one reason people buy new PCs (usually with a bundled version of Windows) is because 'the old one is so slow'. They don't realize that a wipe and re-install of their current OS will solve this 95% of the time. (I know this, as my side-business is 'mr friendly computer fixer guy' - I have people asking me if they should upgrade their 900MHz email/web-browsing machines)

    Now, are you going to tell me that M$ is going to release a piece of software that prevents or delays the above scenario? I think not.

    The AV and spyware products will NOT make it into any incarnation of Windows (EVER) and they will all be shelved permanently.

    When M$ buys a company that produces software that reduces the requirement to 'upgrade', it is merely for the purposes of making that software 'go away'.

  92. It's a question of how to treat other people. by jbn-o · · Score: 1

    Microsoft does something to help shore up a weakness in their OS products, and somehow its still evil.

    Microsoft distributes a buggy OS and withholds the freedom for users to inspect how it works, modify it to work better, and distribute the improved version. Users need these freedoms to make their computers work for them, even if they're not programmers themselves (in which case they can benefit from software freedom by running software others inspected, improved, and distributed).

    From the perspective of software freedom, Microsoft isn't evil, but they are denying users their freedoms users deserve, and they employ obstructionist policies instead of competing, and that is anti-social behavior.

    It's important not to judge them purely on the basis of features because this ignores a far more socially important issue of how people ought to treat each other. Placing people in positions of dependency where nobody can provide their own support or help their community by distributing improved versions of the software is something we should not overlook.

  93. Defrag in Win2K is crippled Diskeeper by khasim · · Score: 1

    http://techupdate.zdnet.com/techupdate/stories/mai n/0,14179,2654011,00.html

    I don't have a problem with Microsoft bundling apps, particularly good apps. As long as I can remove them and replace them with ones I like.

    But putting in intentionally cripped software?

  94. So MS Can Spy... by Anonymous Coward · · Score: 0

    What better way to spy on your customers than to own the spyware they use?! Conveniently designed to prevent others from spying, but to allow MS to spy!

  95. Re: I like using Windows and developing for it by EnronHaliburton2004 · · Score: 2, Insightful

    Knowledgeable users know this and make use of hardware and software firewalls, antivirus apps and spyware detection apps.

    "Sure, I leave the front door to my house unlocked, but I keep the bedroom door locked".

    You should stop the problem before it reaches the OS, not apply bandaid solutions after the fact.

  96. Re:Why Ask ? Linux+ClamAV is safe. by Anonymous Coward · · Score: 0

    I've used Clam, and it doesn't really seem to be antivirus, more virus detection. It really feels like the only reason it's available on Linux is to run in various scripts to do server based virus checking on incoming email.

    Not gunning against open source with this... I think this just proves that Linux really has almost no need for antivirus software.

  97. so let me get this straight... by Anonymous Coward · · Score: 0

    First we create a vehicle to allow malware in, now instead of closing those holes, we purchase a software company that cleans 60% or so of the malware/spyware and we ... charge for it?

  98. Check again by Anonymous Coward · · Score: 0

    They aren't buying it because they want to take security seriously. Look at the projections of what the antispyware industry will be up to in just a few years.

  99. Firefox by ZeroExistenZ · · Score: 1

    Wait... So there are still people running IE?

    --
    I think we can keep recursing like this until someone returns 1
  100. Nice move, Microsoft! by dadman · · Score: 1

    Now you have one less opponent to worry about taking out your own spywares in your furture OSes.

    As usual, history repeats itself:
    1. Accquire your opponents (strategically speaking)
    2. Let it dies or sitting there doing nothing useful
    3. Start offering your own (crappy) spyware removal solution
    4. Start incorporating your own spyware
    5. The crappy solution will NOT remove your own spyware, however, and people (Dell?) complains.
    6. Make the spyware part of your OS and claim it an integrated feature that must not be removed
    7. DOJ, Dell, us users can't do a damn thing about it, aside from whining in /.

    QED

  101. Another blow to Linux!! by Anonymous Coward · · Score: 0

    Another blow to Linux!!
    You Linux backers don't WANT Microsoft to improve security in Windows, just as you didn't WANT them to improve stability, because it hurts your crusade (just as Firefox does, but you're to blind to see that). LOL

  102. The history of ActiveX by jonwil · · Score: 2, Informative

    It started when microsoft created Visual Basic way back when.
    They invented this new thing called a VBX.
    a VBX was basicly a custom control in a DLL file and had hooks where VB could talk to the control and where the control could talk to VB.
    The VBX evolved along with Visual Basic through versions 2,3 and 4 on the 16 bit platform.
    Also, some other programs (including 16 bit versions of Visual C++) were able to embed VBX files.

    Next we have OLE. This started out with OLE 1.0 and advanced to OLE 2.0 and to COM. The OCX (as it was known) developed from a merger between the VBX and OLE. It started out as a way to embed controls into an app just like a VBX. There was a 16 bit version of the OCX (that never took off) and the 32 bit version.
    The ActiveX control is the evolution of the OCX.

    ActiveX controls are NOT bad, they are a good idea.
    What was a bad idea was implementing support into Internet Explorer for embedding ActiveX controls. And for implementing VBScript to talk to those controls.
    I have yet to see one use of ActiveX on the internet that could not be done some other way.

    Thankfully, I seem to be able to avoid ActiveX controls in my own use, the only place I have seen them lately is on some Microsoft sites.

    As for those who say that some banks and such use ActiveX, well if I found a secure site that required IE to function, I would take my business elsewhere.

  103. How 2 update my Redhat?? by ski2die · · Score: 0

    I'm a Linux newbie, just installed Redhat 8.0 (that's what I had media for). Now how do I update it without manually resolving dependencies, and without paying Redhat or Novell to do it for me? I want an OS that is free, as in beer and as in don't waste my time. This is pretty easy to do with Windows, but it seems kind of convoluted with Linux.

  104. off topic by Anonymous Coward · · Score: 0

    Many, many years ago, I picked up a casette tape that claimed it would (subliminaly) help you to quit smoking. I bought it for sport, and found that after 2 days I had cut down to 3-4 smokes a day, from 3-4 packs a day (I was running a resteraunt). After 6 days the very idea of a smoke just seemed idiotic and repulsive (thank god I'm over that now). After 6 weeks or so, I stopped listening to the tape and gave it to an employee who said she wanted to quit. I moved on in life and started smoking again. Over a period of about 8 years I tried intermittently to find another copy of the tape as I am now spending close to $400/mo on the evil weed. The last year that I searched I found on the web (it had finally been invented) a series of links that convince me that the terminoligy used in the subliminals, title, claims, etc, had been bought out, patent wise, by a legal firm that made it's lions share of profits by representing, among 2 other clients, the largest tobacco company in Canada. They also had a sub in America (that big piece of dirt under us) and 2 in the U.K. I've never seen that tape again, although I constantly keep an eye out, but damn! I've probably sent two houses up in smoke (American dollars) since.

    Jeez, what made me think of this?

    Good, M$ is finaly getting seriouse about ....

  105. Never heard of these by NeedleSurfer · · Score: 0, Troll

    Giant AntiSpyware? Who the fuck are they? Never heard of those nowhere, are you working for Microsoft and trying to pose as a Slashdot Geek so that the message gets by?

  106. Linux? by antdude · · Score: 1

    Linux port? AFAIK, there isn't one.

    I use both Ad-Aware and Spy-Bot S&D.

    --
    Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
  107. How is this 'typical' Microsoft? by JaF893 · · Score: 1

    How long has their 'security first' initative been going on? They must not be getting anywhere, because they now have to aquire their security apps.

    First of all SP2 has introduced a lot of new security features such as the Windows security centre. This includes a built in firewall which is turned on by default.

    I also think its a good thing that Microsoft has aquired this company and it says to me that Microsoft is really serious about security. Perhaps this is part of a long term strategy to introduce auto spyware removal into the Windows security centre? - now that really would be progress.

  108. Good news? by TangoCharlie · · Score: 1

    I have the feeling that this is very bad news... unless you're a SpyWare manufacturer. Basically, if Microsoft bundles an Anti-spyware package with Windows, then after a few years there will be no third-party market for Anti-spyware apps and all the others will disappear leaving only Microsoft's product. The same is likely to happen to Anti-virus software. Don't believe me? How many commercial alternatives to Internet Explorer are there? Not many! Fortunately, we do have people who are dedicated enough to create FOSS competitors to many commercial products, so all is not lost.

    --
    return 0; }
    1. Re:Good news? by Gel214th · · Score: 1

      It took FireFox several years to get where it's at today. Firefox proves that alternatives to IE can be successful if done right, and marketed properly. Microsoft has included Firewall software in the OS, does this mean all third party firewall solutions are going to disappear? I hardly think so. Giant AntiSpyware was rated as one of the best tools for discovering SpyWare by a recent indpendent review, I've been using it for about three months now and really like it. My only problem with the Microsoft Acquisition is that I already paid a subscription for Giant Antispyware ^_^

      --
      -Gel214th
  109. Re:Who cares by nick+korma · · Score: 0

    you run a legit copy of xp on your dell from your mums basement you idiot

  110. Block 'other software' ? by thrill12 · · Score: 1

    From the article: The tool will be configurable to block known spyware and other unwanted software from being installed on the computer.

    I guess this 'unwanted software' includes Firefox, Mozilla, Thunderbird et al ?

    --
    Slashdot: stuff for news, nerds that matter, matter for news, stuff that nerd
  111. But the problem is by Sycraft-fu · · Score: 1

    The reason the Mac lacks spyware is security due to obscurity. Macs make up a very small percentage of the desktop market. Hell, everything except Windows makes up a small percentage, given that Windows is above 90% marketshare.

    Well the crapware authors are out to target the most people they can, after all it's a quick buck that drives them to do what they do. So targeting the big dog is the way to go. However if MacOS becomes large, then ther'll go after it as well.

    I think that some people have a little skewed view of spyware in that they seem to confuse it with viruses/trojans. They think that the only reason it gets on a system is sneaking on through security holes. No, that's not how it works at all. Most spyware comes in the front door, not the back. It piggybacks on programs that users want. Could be some silly program to grab pictures off the net for backgrounds, could be a file sharing program, etc.

    The thing is, no OS can offer a defense against this. If the person running the computer has root/admin access, they can do whatever they like, including fuck up the computer. You can't have an OS that protects users against themselves while still allowing them access to do whatever they like. You can put up superficial barriers, like not running as root and asking for a password when privledge elevation is needed, but again the user must be responsible for security. They have to check out an app and make sure that it's kosher, since it'll want to elevate to install either way.

    So if you choose to run on a minority platform as a means of prevention, that's a fine method. However recognise that the reason it provides prevention is the fact it's a minority.

    Also if you have a system that needs 30% CPU to run a firewall/AV program, you either need a drastic upgrade, or you need to nto screw things up. Currently, my computer has been on for about 32 hours. In that time, the AV program (AVG) has used 4 seconds of CPU time (0.00003%) and the firewall (Kerio) has used 27 seconds of CPU time (0.00023%). This is on a P4 2.4ghz, so nothing even approaching the fastest available. The GUI on a Mac (Aqua) uses far more. AV/FWs simply aren't heavy hitters given the power of a modern processor.

    1. Re:But the problem is by Anonymous Coward · · Score: 0

      some spyware installs with "legit" apps MOST seems to come in through the browser through one of the following:

      1: users clicking yes blindly
      2: users clicking yes becuase the system makes it extremely hard for them not to by overlapping windows or by reloading the page when they click cancel (yes i have seen this done)
      3: security holes

      while the spyware companies themselves may officially frown on the latter two there is no doubt that they are being used by less scrupulous sites on commission per install.

      another problem is that the antivirus companies won't treat spyware like trojans (possiblly because they are scared of legal issues). a good on access scanner should be able to prevent any known shitware (viruses trojans spyware etc) from being run in the first place.

    2. Re:But the problem is by tb3 · · Score: 1

      The reason the Mac lacks spyware is security due to obscurity. Macs make up a very small percentage of the desktop market. Hell, everything except Windows makes up a small percentage, given that Windows is above 90% marketshare.
      I am so fucking sick and tired of this bullshit argument! OS X is inherently more secure than Windows because of the BSD underpinnings, segregating user modes, and locked-by-default ports. If your moronic 'security by obscurity' theory held any water at all then Apache would be the most-hacked webserver out there, because it has the lion's share of the server market. But it isn't. Guess what, Microsoft's IIS is.

      --

      www.lucernesys.comHorizon: Calendar-based personal finance

    3. Re:But the problem is by Sycraft-fu · · Score: 1
      I am so fucking sick and tired of dumbass Mac users that don't understand the difference between security holes, viruses and spyware. Spyware does not sneak on your system through a security hole like a worm. Spyware comes on with a program you want, or sometimes on it's own.

      Most of it piggybacks on popular software. Kazaa is a huge source of it. You install Kazaa, you get like 6 different spyware programs with it, some of which you can't remove or Kazaa stops working. Some of it does somthing people like, while spying at the same time. Comet Cursor is like that, it changes your cursor into different things on websites that use it, and spys on your browsing habits. Some of it just asks to install when you visit a page, hoping you'll click yes. Firefox is so popular now they are starting to have detectors that will send you an ActiveX control in IE, and XPI in Firefox. Both block it by default, but many people turn the blocking off.

      So that's why there is no preventing spyware by design. Your OS can be as secure as you like, and spyware is still a problem because people WANT to install it, or the programs that carry it. Unless you lock users out from administering their own system, you can't do a thing about it.

      So try being a little less excitable and defensive and try learning a little about the kinds of malware out there.

      Also, you need to learn a little more about OSes before you crow on about BSD. Seperate user modes is nothing unique to BSD, in fact Windows has a far more powerful version of it. Windows secuiryt is derived from VMS security and is very fine grained. You can have as many levels of users as you like (there are 5 normal ones by default) and each can have very fine grained access control. BSD has only two levels, user and root, and the only furhter access control is via groups and sudo access. There is also nothing locked by default about BSD's ports, OS-X simply doesn't have a bunch of services running that open ports up. There is nothing special about the OS that prevents you from running programs that do.

    4. Re:But the problem is by tb3 · · Score: 1

      Typical. Nowhere did I say I was a mac user, you just jumped to that conclusion. As you jumped to a bunch of other conclusions. As you ignored my major point, which was that security by obscurity doesn't work!
      And I won't even begin to correct your vision of Windows 'security'. I don't know were to start.

      --

      www.lucernesys.comHorizon: Calendar-based personal finance

    5. Re:But the problem is by Sycraft-fu · · Score: 1

      Of course I jumped to the conclusion, you came out with a profanity laced defence of MacOS, combined with a lack of technical knowledge while using technical terms. Fits the profile of a Mac zealot pretty well.

      As for the Windows security model, go look it up. Users can have anywhere from administrator access, which is essentially the same as root (admin actually has some restrictions that root doesn't as root is literally the system account) down to next to no acces, not even the ability to log on to the system. Access to any given file or function can be set as wide as all users on the system or as narrow as a signle user. Like I said, if you've ever played with VMS, you see where they got it.

      The thing is that most people elect to run Windows as an administrator full time. They don't have to do this, you can run as a user, and just switch to admin when you need the rights, most just don't because they don't care to. As a normal user, you cannot mess with system or application files, install software, change system setting, etc. It's similar to the rights of users in UNIX land, though not pricisely the same. You can also run a less restricted account if you like, but still not full admin (power users is a default group that is like this, but you can adjust it or make your own).

      If you think security through obsucirty doesn't work, you are kidding yourself. It works great. VMS is a great example. We have a few VMS systems kicking around campus and they never get hacked. Why? Because nobody knows shit about them. You could give the average person a system account and they couldn't do any harm since they jsut wouldn't know how to operate it.

      In the case of spyware, you needn't be that obscure. Spyware is motivated by greed, not malice. The people that write it want to make easy money by either spying on people's habits and selling the data or by using people's computers for their own ends (like selling the processing power). Thus, it makes sense to target Windows. Same reason most games are for Windows, if you are only going to code for one platform, make it the biggest.

      So using a Mac, or Linux, keeps you safe from most spyware, for the moment. There isn't yet intrest in developing spyware for other platforms as there aren't enough users. Now if the crackdown on spyware in Windows gets tougher and if Linux continues to grow in home user marketshare, the intrest will grow.

      Even so, there is low level cross-platform spyware in the form of tracking cookies. They aren't problematic like the programs, but they do track your movement on the web. Those work well on any browser that supports cookies, regardless of platform.

  112. Out of business by Anonymous Coward · · Score: 0

    It is quite apparent that MS security initiative is not going as planned. They have to actually acquire other companies to combat their design flaws with in their software. I have a question, why don't they fix the problem instead of paying for work-arounds.

    In the mean time, what does this mean: We have Symantec buying Veritas so that they can diversify their product offerings. Wall street might have a hissy fit because, quite frankly, they have no clue about the technology sector, PERIOD. Now, lets analyze history. In close to 30 years of doing business with MS, I have see companies bought, technologies integrated and competition go out of business. Yes, Wall Street you bunch of fucktards!! MS has bought a virus company (RAV) and a Sypware Removal company. These compete with some of the basic offerings of Symantec and McAfee. One of these major Giants (no pun intended) is going to hit the hard times if they don't evolve.

    MS hasn't learned a damn thing. They will keep buying companies that have niche markets created by their products. Its funny, when you have 90 percent of the market, a niche market becomes an industry. Look at:
    1) Virus
    2) Spyware / AdWare

    Wall street hasn't learned because Symantec's stock price should have gone up not down. Well, historically, the buying companies stock prices have gone up. With the trend over the last 10-15 years, it has been reversed. This is a smart move from Symantec and those wacky financial bastards are too stupid to realize it.

    Customers haven't learned because:
    1) They keep downloading and installing junk.
    2) They use various virus sponges (Windows, Internet Explorer).

    The prices of OS' are going on its way up. Put on your seatbelts it's going to be an interesting ride.

  113. Was probably cheaper by gilesjuk · · Score: 2, Funny

    They probably bought the company since it was cheaper than buying licenses for all of their machines at Redmond :)

    1. Re:Was probably cheaper by chawly · · Score: 1

      This would be my guess. Wonder what antivirus they're using ? Clamav for Windows ?

      --
      How many beans make five, anyhow ? ... Charles Walmsley
  114. if you can't compete with it, ... by n0dez · · Score: 1

    ...buy it!

  115. Re:IE, Outlook, WMP, MSN, ... by n0dez · · Score: 2, Funny

    first, it disables IE, then Outlook Express and Outlook 2003, then Windows Media Player, then MSN Messenger, then... Windows XP! Error 0x30a8 r93x038 Windows can't boot properly due to a missing file: msspy.exe in folder system32 Please call Microsoft or re-install Windows XP.

  116. Coincidence? by Anonymous Coward · · Score: 0

    Just after the glowing review of Giant spyware remover (http://spywarewarrior.com/asw-test-guide.htm), it's announced MS is buying it. With all the FUD, propaganda, and fake TCO studies regularly spewed from Redmond and its minions, this makes me wonder about that review a bit. How objective is that reviewer? Was the story a plant?

  117. The astroturfers are out in force by Anonymous Coward · · Score: 0

    Wow, the guys at Giant must have spent some time signing up for all these slashDot accounts, to say how great the product was. I've never even HEARD of giant before this announcement, and now it turns out it's always been the best product since sliced bread? I doubt.

  118. Re:Only after Firefox ad. on NYT by Fire+Dragon · · Score: 1

    It seem to me that people at MS were reading the ad about Firefox being a good alternative as a browser.

    Why else would this happen just a day after the ad?

    Now they can say that things are also going to be working(mayby 2k7, no need to install Firefox at this moment) with their products.

  119. Linspire? by cerberusss · · Score: 1

    I wonder how long Linspire (formerly known as Lindows) is asked by customers to include a spyware removal tool. After all, they included VirusSafe in their Linux distribution. While totally unnecessary, customers just wanted anti-virus protection.

    --
    8 of 13 people found this answer helpful. Did you?
  120. OT: About your sig by Anonymous Coward · · Score: 0

    "If Common Sense was so common, it wouldn't be such a valued trait."

    Common sense has been replaced by television!

  121. typcial bill and steve by suezz · · Score: 1

    let's not fix the source of the problem but lets just sell more stuff so we can line our pockets. who cares about the consumer and giving them a better product just make them buy more and give us their money. and active X should be outlawed. it is nothing but a piece of shit.

  122. That would not be typical by Blitzenn · · Score: 1

    Typically Microsoft buys a company so that they can take the technology and add it to their existing products. I would guess the at some point in the future we would see some anti-spyware tools as a part of the Windows OS family. That would be a typical MS move.

  123. Another Program Breaking Effort by Microsoft by gadlaw · · Score: 1

    As I recall, anytime I foolishly have tried to use one of the many microsoft programs it will do it's very best to try to take over my computer until I come to my senses and spend the huge effort of removing it from my computer. Music or video software that tries to kill winamp and other programs. Software that drms things I rip off of my own CD's. Their browser breaking netscape (back in the day). This program, after Microsoft finishes 'improving' it will kill or disable Ad Aware, Spybot, or anything else you might have on your computer to battle all that spyware that comes onboard through those defective Microsoft programs in the first place. Don't think I'll be trying this one anytime soon. Fool me once shame on you, fool me twice shame on me.

    --
    Enjoy your Karma, after all you earned it. Feel your Karma Joe, feel it burn.
  124. That isnt a viable scenario by Blitzenn · · Score: 1

    You forgot one thing, MS doesn't sell the hardware you suggest that they have an interest in you buying. They don't have anything to gain by you purchasing a new PC. They have a lot more to gain by addingthis to their existing OS's and reaping the public gratitude for it as the ONLY OS manufacturer to do so. How could anyone possibly bash them for providing a solution that everyone else wants you to buy? I am sure some people will find some way to complain about it, but the reality is that it cannot hurt the situation with respect to the spyware problem, it can only help.

    1. Re:That isnt a viable scenario by Anonymous Coward · · Score: 0

      I think it may be a viable scenario. I think you skipped the part in my note about the fact that for Joe Consumer, when they buy a new PC, they are also paying for the bundled copy of Windows, and therefore, M$ benifits (So do the hardware manufacturers/vendors that have chummy relationships with M$)

      Also, how horrifying is it to think of yet another critical application begin integrated into Windows? Look what integrating IE got us.

    2. Re:That isnt a viable scenario by Blitzenn · · Score: 1

      You can't have it both ways. You want to complain if they bundle it and you want to complain if the sell it seperately. Which will it be? It is pretty obvious to me that you are simply out to bash MS without any merit to your arguement.

      Personally I dislike MS, but I will no lower myself to making stupid arguements regarding their business practices, that only makes anything else I say much less believable. You can only cry wolf so many times before people stop listening to you. Don't fall into that trap of something so silly as this.

      Giant sells the software on their own, and you evidently thought is was good enough to purchase. How does that change under the ownership of MS? It simply doesn't. If anything, you will benefit by not having to pay extra for the software that is bundled in the windows package. They are making their product better. Should they not be allowed to do that? If they shouldn't, then should not those same rules apply to other software like LInux? Let us not suggest a double standard should be in place just because we don't like someone. That opens the door to an unfair standard being placed against us in the future. We need to fight for equality, fairness and justice and not just when it suits us.

  125. Thats a fraudualent claim by Blitzenn · · Score: 2, Insightful

    First off, Spyware didn't even exist at the time that Windows 98 was made. I would suggest that if you are being infected on a clean install, that you trash your stolen copy of the OS and go buy a real one. ISO downloads are quite often infected by spyware, trojans and such. So I wouldn't be surprised if you were having that problem.

  126. An ounce of prevention... by C_Kode · · Score: 2, Insightful

    As they say, An ounce of prevention is more valuable than a pound of cure. Why don't they fix the hole in Internet Explorer rather than implement software to remove exploits? Oh thats right! It's not a security hole, it's a feature.

  127. Death of an Industry by krgallagher · · Score: 1

    I wonder if this marks the beginning of the end of the anti-spyware industry. In the past when microsoft has entered a software industry, it has meant the end of the competition. I can see it now, the next patch of Windows will have hidden routines that only Microsofts spyware removal software can access that makes it the most efficient software available at removing syware. At the same time, other routines will cause the OS to lock up or crash when running a competitors software. I no time Microsoft will own the market.

    --

    Insert Generic Sig Here:

  128. Re: this is a good thing? by Anonymous Coward · · Score: 0

    30%!? What are you running, an apple IIe?

    On a PIII with 512MB ram, which is very modest by today's standards:

    SpybotSD.exe(Spybot) - Max 3% cpu, 3.8MB ram

    Avg Antivirus Processes (5 processes)- Max 0% cpu, 31MB ram

    Sygate Personal Firewall (SPF.exe) - Max 4% cpu, 10MB ram, with a saturated network connection (Bittorent) 325KB/S Down and 35KB/S Up

    Totals: 7% cpu usage, 44.8MB ram

    The antivirus and spybot update themselves and scan at midnight, every night, while im asleep, so they don't interfere with my usage. Plus I bought this machine for $100 WITH a warranty from ACER. Show me a Mac that I can get for that and you can have this computer!

  129. Re:Why Ask ? Linux+ClamAV is safe. by StormReaver · · Score: 1

    "There are some linux viruses...."

    But none that spread without the user's active participation. Every single Linux virus that has ever been written requires:

    1) The user to be root.
    2) The user to explicitly download and save the file.
    3) The user to explicitly set the execute attribute on the downloaded file.
    4) The user to explicitly run the downloaded file after performing steps 1-3 above.

    There have been precisely zero successful Linux viruses -- ever. They have all been lab experiments that have all failed without the above four steps being taken.

  130. Same old same old by Caiwyn · · Score: 2, Insightful

    You find it "refreshing" to see Microsoft try to capitalize on a problem they themselves caused? You don't pay very much attention, do you?

  131. Conflict of interest? by spectasaurus · · Score: 2, Insightful

    Don't you think it's a little fishy that a company like Microsoft releases software with all sorts of holes, then sells you the software to fix it? I'm not sure what this business practice is called, but it's very much akin to a pharmaceutical company selling the cure for a disease they created in the first place.

  132. that's not entirely true by Ender+Ryan · · Score: 1
    Here at the office, we don't allow folks to install any of that sort of junk. We didn't police it in the past, but now that it's a problem, we don't allow it.

    But malware still gets installed, or did, rather, until we mandated the use of FireFox and disallow using IE.

    While many holes are fixed in XP SP2, our windows users are running 2000, and there are still many known holes. Allowing IE leads to malware infection. Disallowing IE prevents it. You do the math.

    Another thing... "Trusted Computing" is NOT necessary to prevent the user from installing software that cannot be removed. This would really only require two things. Installation of packages via a Windows packaging system, so Windows could keep track of _everything_ that gets installed on the system. Disallow the execution of any executables not installed via the packaging system. Prevent the alteration of executable files, via permissions of some sort.

    It would also help to have a single place for startup programs.

    That software can be installed that the user can't remove is simply ridiculous.

    --
    Sticking feathers up your butt does not make you a chicken - Tyler Durden
  133. No program is the "best" (Re:SpyBot still better) by Techguy666 · · Score: 1

    I actually just ran a head-to-head test of Ad-Aware and GIANT-AS for my school.

    I had two laptops infected from the self-loading spyware websites and loaded a bunch of manually installed spyware (the ones usually packaged with P2P programs and such) and then ran the two anti-spyware programs.

    GIANT-AS
    Files: 51
    Registry: 279
    Cookies: 7
    Total: 337 pieces of spyware

    Lavasoft
    Files: 87 (including cookies)
    Registry: 79
    Total: 166 pieces of spyware

    Lavasoft Ad-Aware found 53 objects GIANT missed. GIANT found 171 objects Lavasoft missed.

    Ad-Aware appears to just clean enough components out of spyware to disable them while GIANT seems a little more obsessive. On the other hand, each antispyware program seems to have areas of specialty that the other doesn't. From my test, it seems that Ad-Aware picked up files (and not just cookies) that GIANT doesn't and GIANT picks up registry snippets that Ad-Aware ignores. Both programs have a hard time with trojans that make a point of hiding or overwhelming the CPU during anti-spyware scans. Incidentally, Spybot is a decent concept with a lot of cool free features but it's not updated often enough to be considered a legitimate contender.

    Regardless, one should use a combination of passive and active products. On Windows XP machines, I like a combination of SP2, Zone-Alarm, Proxomitron, Spyware Blaster, and Ad-Aware. I've gone for months without anything worse than a few cookies.

  134. Too little, too late . . . by harley_frog · · Score: 1

    I've already implemented my own antispyware software: Linux.

    --
    It's all fun and games until someone loses the key to the handcuffs.
  135. I'll worry about it ... by OhHellWithIt · · Score: 1

    ... when they acquire Gator or someone like that.

    --
    "Who controls the past controls the future. Who controls the present controls the past." -- George Orwell
  136. What's the big deal? by Whumpsnatz · · Score: 1

    I have had very little in the way of spyware, viruses, etc. But then, I don't use XP. I have simple ways I avoid these problems.

    1. On a PC:
    - firewall in the DSL router (amazing how much crap that stops)
    - Zone Alarm
    - don't use Outlook. The only time I used the laptop for mail was out of town, and for that I was getting my mail via Webmail through my ISP.
    - use Mozilla
    - run Windows Me! Believe it or not, XP has had far more security problems. Yeah, I know it's supposed to be the worst ever, but it works for me.
    - don't be stupid. Remember, always, that an executable can do ANYTHING. Be suspicious. No, be paranoid.
    2. On a Mac (my main machine):
    - um, what was the problem again? Yeah, the DSL firewall is there, but it doesn't seem to be needed, as I've done email and browsing at hotspots. I use Safari and Mail, along with OpenOffice. Oh yeah, and never apply Apple updates as soon as they come out. It's gotten ugly.

    Interesting thing with the PC. I went on a consulting job with an old laptop running Windows Me. I was told I'd need to use my laptop on their network, but when I got there, they wanted to check it for viruses. So some guy loaded up a virus checker, which ran for 3 hours. It found NOTHING. Of course, then they didn't like the old Windows version I was running.

    The only virus that laptop ever had was the virus checker. It took me an hour to clean that crap off my machine.

  137. Proprietary software devs are people too by EvilAlien · · Score: 1
    Microsoft distributes compiled software. It has bugs. Linux has bugs. MacOS has bugs. Everything humans make will have flaws. Possibility of a flaw being present increases as complexity increases. Such is life. Microsoft is not an anomoly other than that they dominate the desktop market, therefore provide a very high target surface area, and therefore get more of the attention from attempts to exploit vulnerabilities. If Microsoft compares poorly with other options in terms of merit (software quality, useability, features, price, etc) then they will be corrected out of their dominant position. Merit is what matters, it is objective. Ideology is subjective, and cannot form the basis for evaluation beyond a personal assessment. Unless users start making choices based on ideology, Linux, *BSD, Mac OS, etc, will have to compete without relying on ideology. The big fat part of the bell curve does not comprehend (or maybe they just don't care about) ideology or source code. They just want to read their email, and they want someone to call when something fails. It sucks, but thats life (it is also why Linux vendors like Red Hat and Novell SUSE are becoming more and more enterprised flavored... big businesses want somebody to call, not source code).

    If its a question of how to treat people, then try this on for size: I have no rights, nor do I deserve, to access any work product, schematics, or source code that was used to build a product made and owned by somebody else. Unless I purchase that right or they extend it freely, that is. Since Microsoft has done neither, they retain property rights over their source. Just because it is software doesn't mean that basic property rights do not apply. In other words, I don't agree with the GNU Project's argument. Users do no have rights to software they didn't make. If they want those rights, they should use Linux and play an active role. They have right to choose, and an overwhelming majority choose software that is provided contrary to the GNU ethic. We have neither the right to someone else's property (or to dictate the terms under which they will make it available, nor do we have the right to force users to choose according to any ideology other than a shallow assessment of whether a product does what they need and is affordable.

    I choose to use Linux for the majority of what I do in computing because I *want* to have access, freedom, etc. I choose to use distributions that give me the features I need, and I really couldn't care less if they mix proprietary apps in with the GPLed stuff.

    As for placing people in positions of dependency, some of the onus must lie with users who refuse to learn new skills or attempt to treat complex technology as if it was a simple appliance. Human beings are reliant on each other, and those who do not know and either refuse or do not have time to know must rely on those who do. This applies to all technology, specialized knowledge, and other aspects of social interaction. For example, I don't think you would argue that the requirement for translators when conducting business internationally is somehow wrong, even though domestic CEO A may be forced to rely on an interpreter to communicate with foreign CEO B.

    --
    perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
  138. Where are the tinfoil hats? by lilmouse · · Score: 1

    Are you guys missing this?

    This really is "typical Microsoft" - they buy an anti-spyware company, integrate it into the operating system, and release it for free. No one bother with real spyware companies, because their computers already have one, and anything that MS "misses" or (heaven forbid) allows through will still be on their machines...

    Then sit back, and hope the issue goes away "because I've already got anti-spyware, why should I have to download something else? And of course the computer is protected from spyware, see, I've got this program..."

    Step 6, Profit! - no, wait, that's the wrong post.

    In the end, more people will be using a MS product and the monopoly expands.

    --LWM

  139. Nobody Axed Me, But... by LifesABeach · · Score: 1

    Wouldn't the money spent be more wisely used it if went for software engineers tasked to fix the 150,000+ bugs in windows?

    Just a thought.

  140. Oh and thats not all... by Anonymous Coward · · Score: 0

    Look at this link:
    http://www.nwfusion.com/news/2004/1216legal quest.h tml
    "Legal questions dog Microsoft anti-spyware buy"

  141. Don't read too much into it by borud · · Score: 1
    I must say that it is very refreshing to see Microsoft finally start to take some serious action to help combat this rampant problem.

    I would have preferred them focusing on making Windows less of a fertile breeding ground for malware rather than turning this into a game of whack-a-mole.

    Also, this is reality. In the short term the acquisition means nothing at all to the consumer. What this means in the longer run remains to be seen.

  142. Another wonderful feature of Longhorn by thegnu · · Score: 0

    Not to mention Giant Anti-spyware's integrated reporting feature (SpyNet). It'll make it easier to enforce DRM to have a program that could potentially find questionable items and report back to MS. Considering Longhorn's proposed already mighty strict treatment concerning DRM.

    And people will run this software because it's GOOD for them. Ah, yes. How easily we submit to a courteous request to ass-rape us (presented with much romance and hullaballoo, of course).

    --
    Please stop stalking me, bro.
  143. M$ spyware by codeconfused · · Score: 1

    Bet you it will let Microsloth's adware get thru and any other goodies it can make $$$$ on. The best spyware removal will come from outside of Microsloth's company. Like spybot search and destroy which is free. Not to mention it is the best removal tool according to most major PC magazines

    --
    Danger Will Robinson! You are now entering a condescending Unix user zone!
  144. The Boardroom discussion? by SnarfQuest · · Score: 1

    Can you imagine the boardroom discussion on how this took place?

    VP: Man, there are sure a lot of anti-spyware companies out there.

    BillG: Spyware?

    VP: You know, those virus that get installed because of the lax security in IE and OE.

    BillG: You mean you want us to spend money to fix the holes? We can't afford to lose that much revenue; my gold-plated toilet paper alone costs me nearly $3 million a month.

    VP: No. I guess not. But those anti-spyware companies sure make a lot of money retro-actively plugging the holes.

    BillG: MONEY! They are making MONEY! We need to get in there quick! It will take too long to write our own code, so go out there and buy one of those companies.

    VP: But with that firefox thing becomming popular, spyware may become much rarer.

    BillG: Don't worry about that, we can always add something in the next version of windows we sell to those sheep, and then they will have to buy a new version of our anti-spyware software. Double income, you gotta love it!

    VP: Isn't that a little unethical?

    BillG: Ethics? Your fired!

    --
    Who would win this election: Andrew Weiner vs Andrew Weiner's weiner.
  145. Re:Why Ask ? Linux+ClamAV is safe. by drew · · Score: 1

    ever heard of lion?
    ok, technically a worm, not a virus, but still a malignant program that spread through linux systems without any user intervention. there have been others, too.

    --
    If I don't put anything here, will anyone recognize me anymore?
  146. In entirely unrelated news... by Anonymous Coward · · Score: 0

    banks announced plans to charge security fees.

    "Current banking fees only allow you to place your money in the bank; they do not cover anything else. For extra peace of mind, we will offer customers a security package that protects the money they wish to keep in our bank. Initially this package will be free...

  147. This is not progress by Anonymous Coward · · Score: 0

    Microsoft has a history of creating categories of software because the security of their system is so horrendous to start with. Two entire industries have grown up around MS software that are mostly irrelevant for other platforms - antivirus software and spyware software. Of course, such software exists on other systems, but it's hardly the neccessity that it is on Windows.

    The fact that they are buying a solution to patch the current problem, INSTEAD of going back and examining what they did that lead up to it and correcting that in future versions of Windows, is just proof that they STILL don't take security seriously.

  148. Re:Why Ask ? Linux+ClamAV is safe. by StormReaver · · Score: 1

    "ever heard of lion? ok, technically a worm, not a virus...."

    Hence my statement that there has never been a successful virus written for Linux is still correct.

    Lion and Ramen exploited a very specific flaw in very specific server software in very specific versions of Red Hat Linux, and managed to ever compromise only a handful of machines. Contrast this with most Windows infections where Windows is working exactly as Microsoft intended.

    Worms won't be of concern to non-technical Linux desktop users since they won't have any server processes running. Explicit user action is still required for a Linux desktop to be harmed by malicious programs.

  149. ms camel joe by minus_273 · · Score: 1

    hey this reminds me of the cigarette manufacturers who sell the nicottine patches and gum!

    --
    The war with islam is a war on the beast
    The war on terror is a war for peace
  150. Re:Why Ask ? Linux+ClamAV is safe. by drew · · Score: 1

    you are technically correct, but most people don't define virus that narrowly anymore. these days pretty much everyone considers any malware to be a virus.

    a better example would be the buffer overflow in mutt that allowed a milicious email message to execute an arbitrary attachment. no it was not widely exploited, because at the time not many people used mutt or even linux in general. however, it is possible to write a viable virus for linux, or at the least would be if the user community was large enough.

    linux is not completely immune to virii, even if its better design makes itmuch more immune than windows. people who believe that their operating system is immune are living with a false sense of secuirty.

    --
    If I don't put anything here, will anyone recognize me anymore?
  151. What a waste of time by TractorBarry · · Score: 1

    What a pointless move. All these spyware/trojan/virues problems are entirely down to one thing. Microsofts brain dead design.

    Throwing spyware apps at Windows is a perfect example of "shutting the stable door after the horse has bolted". My questions for Redmond:

    1 Why is the web browser integrated so tightly into the O/S ?

    2 In fact why is everything so tightly integrated with everyhing else ? Why on earth does installing a user land app mean I have to reboot the machine ? It's a user level app not a kernel upgrade !

    3 Why do the majority of processes run as administrator ?

    4 In fact exactly what are all those those services doing running by default ? Especially the ones waiting to accept any old remote connections from the internet ?

    5 Why can a unknown third party websites automatically install software (Active-X etc.) on a Windows machine ?

    Windows needs to be redesigned. Full stop. Microsoft buying an anti-spyware company is simply a joke.

    Having been running Linux on another machine for over a year I really do see how crap Windows really is. (not that Linux is perfect but the basic principles are sound !)

    How stupid does MS think it's customers are ? Oh wait... time to go back under my rock...

    --
    Sky subscribers are morons. They pay to be advertised at !
  152. real first steps by twitter · · Score: 1
    Serious steps to eliminate malware/spyware:
    1. Use and expand users so that you don't have to browse the web or read your email as root. Others should not be able to write your system files without asking you.
    2. Obliterate the registry and separate binary from configuration files. It should not be easy for baddies to hide in a file that will keep your computer from booting if modified.

    These are first steps, but they are not enough and you should not expect M$ to fix their problems. The only way to keep malware/spyware off your system is to own it and only get your software from trusted sources, such as Debian. Microsoft is so keen on DRM and pleasing others that they will never give you real ownership of any computer you put their software on. The ability to read your files and add/remove "components" without your permission is part of their EULA. If they can do it, so can others and the story will never end. It's not a bug, it's a feature.

    --

    Friends don't help friends install M$ junk.

    1. Re:real first steps by Anonymous Coward · · Score: 0
      Moderators: Please note that "twitter" is a known fanatical sycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

      I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or Mepis or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

      If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

      To get an idea of what I'm talking about, check this post out. This is an article about email disclaimers. The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx, because "is teh free".

      Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

      Here's that drive-by advocacy and FUD in motion: twitter goes on about some topic and then drops the usual "oh and M$ is teh evil" because "WMP phones home" or some such. Called on his FUD, he then claims that WMP stores every song and movie you've ever played in a file, somewhere. Pressed further, he just sort of slithers out of sight, his FUD-spreading complete. This is not about some Microsoft technology that nobody likes anyway; it's about lying for the sake of lying. Way too many of his posts are exactly like this one.

      More? Just read though this post and the subsequent replies. I guess this stands on its own. Or these two. Or this one. Or this one.

      Still not convinced? This is what twitter considers "humour" while going about his daily "M$" routine.

      M

  153. yes, from the start. by twitter · · Score: 1
    Isn't this a conflict of interest making the software that has the bugs and also selling the software that covers over those bugs

    Yes it is a conflict of interest. It's typical.

    If you read this carefully, you might conclude that Bill Gates has been fixing the things he breaks since he was in high school. He and his buddies broke the first computer they were allowed to use and then hired themselves out to fix it:

    Bill Gates, Paul Allen and, two other hackers from Lakeside formed the Lakeside Programmers Group in late 1968. They were determined to find a way to apply their computer skills in the real world. The first opportunity to do this was a direct result of their mischievous activity with the school's computer time. The Computer Center Corporation's business was beginning to suffer due to the systems weak security and the frequency that it crashed. Impressed with Gates and the other Lakeside computer addicts' previous assaults on their computer, the Computer Center Corporation decided to hire the students to find bugs and expose weaknesses in the computer system.

    This was Bill Gates answer to the shortage of computing resources that existed when he was growing up. He made himself root so that he could have all the resources he wanted, essentially a robbery. The overall model applies to the software he sells to this day, there will always be something wrong with it so that you want to buy the new one. I like the answer RMS came up with better: make your own toys.

    --

    Friends don't help friends install M$ junk.

    1. Re:yes, from the start. by Anonymous Coward · · Score: 0
      Moderators: Please note that "twitter" is a known fanatical sycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

      I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or Mepis or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

      If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

      To get an idea of what I'm talking about, check this post out. This is an article about email disclaimers. The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx, because "is teh free".

      Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

      Here's that drive-by advocacy and FUD in motion: twitter goes on about some topic and then drops the usual "oh and M$ is teh evil" because "WMP phones home" or some such. Called on his FUD, he then claims that WMP stores every song and movie you've ever played in a file, somewhere. Pressed further, he just sort of slithers out of sight, his FUD-spreading complete. This is not about some Microsoft technology that nobody likes anyway; it's about lying for the sake of lying. Way too many of his posts are exactly like this one.

      More? Just read though this post and the subsequent replies. I guess this stands on its own. Or these two. Or this one. Or this one.

      Still not convinced? This is what twitter considers "humour" while going about his daily "M$" routine.

      M

  154. RE: If I may reply to a few points..... by King_TJ · · Score: 1

    First off, I agree with your basic premise that "most people have a skewed perspective" of how spyware gets on their PC. Like you said, much of it *does* get in when it comes attached to "freeware" programs people elect to download and install. Unfortunately, I think it's advancing past that point as virus developers get more sophisticated. I can't absolutely prove it, but I'm seeing strong evidence that some of these "trojan horse viruses" that *do* get in via Windows security holes start downloading/installing as much spyware/malware as they can once they get in. (Basically, the virus writers figured out they can do more damage and cause more frustration by installing spyware on the box than by directly causing havock themselves!)

    As for your comment on the Windows security model: The main reason "most users elect to run with Administrator rights all the time" in Windows is because it's inherently designed to encourage that behavior! When you create a new user account in XP, you're initially only given *2* choices; either be an "administrator with access to install/remove programs" or a "limited user" who can't. When you present things that way, why is it surprising MOST people opt to be "administrators"? We do, after all, usually want to be able to install software on our own PC.

    When I worked in corporate I.T., we ran into BIG headaches trying to force a Windows NT environment to comply with our wishes to restrict user access. In the end, it became clear the only way to administer the NT environment in a practical manner was to give all of the users administrator rights to the local workstations. Sure, the MS technical references pay "lip service" to the idea of doing things differently - but there are simply too many "gotchas" that come up as you deploy more applications on your LAN/WAN. Windows was originally based on a single-user model where the user always had full control of the machine, and it shows....

  155. Very Refreshed huh? by prtsoft · · Score: 0
    I must say that it is very refreshing to see Microsoft finally start to take some serious action to help combat this rampant problem.
    Refresed huh? It looks to me like MS is just expanding their Monopoly.
  156. 30% CPU usage by King_TJ · · Score: 1

    Actually, there are still a LOT of people out there trying to make use of a system with much lower specs than 512MB of RAM and a PIII processor.

    I regularly do service work for people using Pentium 2 systems, often in the 266Mhz to 333Mhz range or so, and only 64MB or 128MB in most cases.

    Even when people get their shiny new P4 or AMD Athlon tower, they often decide "the old machine is still good enough to use for Internet stuff" and hang onto it.

    AVG Anti-Virus happens to be one of my personal favorites, largely because it doesn't take many system resource to run. Try a copy of Norton SystemWorks 2004 or 2005, by comparison! (And frankly, most people do - simply because every office supply superstore in the country wants to sell you Norton, but you can't even buy AVG retail anyplace in the U.S.)