Slashdot Mirror


Microsoft May Charge for Security Tools

rscrawford writes "CNN reports that Microsoft may charge extra for security software. So first they edge their competition out of the browser market, then they tie IE into the OS so tightly that a crash in IE can crash the computer, and then they make IE so vulnerable that just using it is hazardous to the typical computer's health, and now they want to CHARGE users to fix it?"

642 comments

  1. duh! by greywar · · Score: 0

    Step 1: write buggy software
    Step 2: Sell fixs
    Step 3: Profit!

    1. Re:duh! by Mad_Rain · · Score: 1

      Heh. Nice timing. (The very next post after yours makes the same bad joke).

      --
      "What do you think?" "I think 'What, do you think?!'"
    2. Re:duh! by doorbender · · Score: 1

      Wag the Dog

      --
      "He's a real midnight golfer"
    3. Re:duh! by Anonymous Coward · · Score: 0

      Step 1: write buggy software
      Step 2: Sell fixs
      Step 3: Profit


      Step 4: Drop pants and moon loyal vict^h^h^h^h customers!

    4. Re:duh! by empaler · · Score: 1

      The other one is more discrete (and properly spelled)

    5. Re:duh! by ZhuLien · · Score: 1

      with absolutely no intention to make their buggy software less buggy (me shakes my head)

    6. Re:duh! by ZhuLien · · Score: 1

      on another note, I have several computers, running 4 different Operating Systems. I have *only* ever run security software or a virus killer on *one* of the operating systems (Windows) and I have *never* in the last 15 years had a virus on the other platforms, *ever* or any other type of security problem for that matter.

  2. oblig... by Mad_Rain · · Score: 5, Funny

    So THAT'S what Step two is. =P

    --
    "What do you think?" "I think 'What, do you think?!'"
    1. Re:oblig... by Trailwalker · · Score: 3, Funny

      Step two is to issue a patch for a critical vulnerability in the new MS-AntiSpyware app.

      Six months after it is discovered.

    2. Re:oblig... by Anonymous Coward · · Score: 0

      What exactly in Linux or MacOS prevents an user clicking on "yes I want to install this P2P file sharing application and everything it contains"?

    3. Re:oblig... by Dwonis · · Score: 1

      In some cases, nothing. However, stupid kernel/libc bugs aside, if a user isn't running as root, the user can't infect the entire system. For home users, this is great, because they can set up one user account for web browsing and other dangerous stuff, and another user account for stuff like onlike banking, OpenPGP signing, etc.

  3. Obligatory... by Anonymous Coward · · Score: 0

    5. Profit!

  4. Windows isn't the problem by Anonymous Coward · · Score: 0

    Windows isn't the problem. the problem is you.

    1. Re:Windows isn't the problem by glib909 · · Score: 0, Redundant

      Damn me and my fundamental security wantin' ways!

      *punches self*

      Wow, thanks, now I feel a bit better.

      --
      Suudsu, that stuff is G-E-W-D.
    2. Re:Windows isn't the problem by Vengie · · Score: 2, Funny

      *sigh*

      You meant....

      In Soviet Redmond, the problem is You!

      -b

      --
      When in doubt, parenthesize. At the very least it will let some poor schmuck bounce on the % key in vi. (Larry Wall)
    3. Re:Windows isn't the problem by Anonymous Coward · · Score: 0

      In America Windows is problem, in Soviet Russia problem is YOU!

  5. Good advertisement. by Anonymous Coward · · Score: 5, Funny

    If Microsoft were to hire on the Verizon Wireless guy, they could have him walking across the country asking "Can I screw you now?"

    1. Re:Good advertisement. by glib909 · · Score: 2, Funny

      In other news, Microsoft hires Ron Jeremy in new ad campaign ...

      --
      Suudsu, that stuff is G-E-W-D.
    2. Re:Good advertisement. by Anonymous Coward · · Score: 0

      If Microsoft were to hire on the Verizon Wireless guy, they could have him walking across the country asking "Can I screw you now?"

      Dude, if you're going to make fun of that commercial, you've got to try a little harder than that:

      • Can you beer me now, woman? Good!
      • Can I leer at you now? Good!
      • Do you fear me now? Good!
      • Can I jeer you know? Good!
      • Can I peer in on you now? Good!
      • Can you queer me out now? Good!

      I'm surprised no one has made a porno named "Can I eat your rear now? Good!"

    3. Re:Good advertisement. by Anonymous Coward · · Score: 0

      Good.

    4. Re:Good advertisement. by Olix · · Score: 1

      Grrr... You americans, stop refering to wierd American adverts... It just confuses all the people from imortant contries, like Britan. (118118)

    5. Re:Good advertisement. by Anonymous Coward · · Score: 1, Funny

      If Microsoft were to hire on the Verizon Wireless guy, they could have him walking across the country asking "Can I screw you now?"

      After all these years they would start asking for permission?

    6. Re:Good advertisement. by Anonymous Coward · · Score: 1, Funny
      Grrr... You americans, stop refering to wierd American adverts... It just confuses all the people from imortant contries, like Britan. (118118)

      Wow. Six spelling mistakes in 19 words.

    7. Re:Good advertisement. by Anonymous Coward · · Score: 1, Funny

      He was probably trying to communicate in the american style. He forgot the "yo" and the inane references to pop culture, unfortunately. Heh... rookies.

    8. Re:Good advertisement. by Moofie · · Score: 3, Funny

      And here, I thought that our British forebears could spell.

      Guess you're not all that civilized after all...

      --
      Why yes, I AM a rocket scientist!
    9. Re:Good advertisement. by Anonymous Coward · · Score: 0

      He's not from Britain, he's from "Britan".

    10. Re:Good advertisement. by Moofie · · Score: 1

      RIGHT! Thanks for pointing that out. My bad.

      --
      Why yes, I AM a rocket scientist!
    11. Re:Good advertisement. by BlakeLupa · · Score: 1

      At MicroSoft we don't just make the holes. We make the holes bigger. Then we make you pay us to fixed them!

      Come to think of it... shouldn't MicroSoft be buying Zone Labs for Zone Alarm?

      I heard this on Charlie Rose. I just dont remember who said it or even the year :-) "If the price of operating systems had droppped as much as the cost of PC's the average OS would cost $5." So moderate me to almost informatice :-O

    12. Re:Good advertisement. by Steve+Franklin · · Score: 2, Funny

      I absolutely refuse to believe that a real Britisher would spell it "Britan," even in haste. I think he may be referring to Britain as an example. He never actually says he's British, though the term "advert" puts him somewhere in the Commonwealth.

      Personally, I think it's quite a humorous little series of ads, at least it was when I stopped watching TV a year ago. From what I've seen on the web, ads are pretty consistent throughout the Euro-centric world. "Buy our stuff, it's better, faster, stronger, newer, costs less, and gives you 50% more Ubik for your money. Safe when used as directed."

      --
      Hic iacet Arthurus, rex quondam rexque futurus.
    13. Re:Good advertisement. by mollymoo · · Score: 1
      If Microsoft were to hire on the Verizon Wireless guy, they could have him walking across the country asking "Can I screw you now?"

      After all these years they would start asking for permission?

      They pre-authorise signed ass-screwers to ensure compatibility. The quality of the screwing, its adherance to accepted best-practice and its Micros~1-calculated compatibility with your system are ignored. Instead the price paid for the Trusted Windows Certified Ass-Screwer Certification and the relevance of the ass-screwing to helping Micros~1 to expand their monopo~1 are pecisely calculated to make Micros~1 as rich as freaking possible.

      --
      Chernobyl 'not a wildlife haven' - BBC News
    14. Re:Good advertisement. by Anonymous Coward · · Score: 0

      "can i screw you now?"

      "uhh....."

      "Good!"

    15. Re:Good advertisement. by empaler · · Score: 1

      He'd only ask those who had not ever installed a Microsoft OS... You know, the ones that didn't accept the EULA that noone reads...

      35
      If you breach this EULA, inadvertetly or with malice, or if MS execs feel the necessity, or if nothing's on cable, MS can at any time send ass-raping ninjas to silently but violently give you the royal lubricated slip up the inner tube.

    16. Re:Good advertisement. by Anonymous Coward · · Score: 0

      The Israelis beat Microsoft to the point...

      Good thing they'd never *abuse* having control of software installed on thousands of machines...

    17. Re:Good advertisement. by mjh49746 · · Score: 1

      And before you can say either yes or no, he'll just say with a dirty grin, "Good!"

    18. Re:Good advertisement. by Anonymous Coward · · Score: 0

      Maybe even to the punch. I think it's naptime.

    19. Re:Good advertisement. by Anonymous Coward · · Score: 0

      You should be down on your knees thanking what ever deity you'd hole dear, that you dont have to watch those commercials!

    20. Re:Good advertisement. by Anonymous Coward · · Score: 0

      "Olix (812847) "

      Are you familiar with what region .co.uk covers?

    21. Re:Good advertisement. by Scott7477 · · Score: 1

      I'd mod you up but they haven't given me any mod points in quite a while. That Charlie Rose comment is dead on and the fact is obviously Linux is the OS that meets his criteria.

      --
      "Lack of technical competence coupled with the arrogance of power, as usual, leads to no good end."
    22. Re:Good advertisement. by metlin · · Score: 1

      Ukraine?

    23. Re:Good advertisement. by jlaxson · · Score: 1

      Ukraine?

      Almost, but not quite. While most country-code domains are generally tied to a certain point in 3-dimensional space (the country), .co.uk localizes all the way to the 4th dimension, that being the time when the space that is now Ukraine was under .COmmunist (.commie pun not intended) rule.

      --
      On Apple Input Peripherals: They're okay, I guess, but I was really hoping for a one-key keyboard and a 109-button mouse
    24. Re:Good advertisement. by WIAKywbfatw · · Score: 1

      Uh, most of can spell perfectly well, thank you very much, it's the 16 year-old kids who've got by using "leet" speak that have difficulty spelling the simplest of words.

      By the way, not being American, we prefer being "civilised" to being "civilized".

      --

      "Accept that some days you are the pigeon, and some days you are the statue." - David Brent, Wernham Hogg
    25. Re:Good advertisement. by aminorex · · Score: 1

      forebearers. i've got a forehead, and forearms,
      and i've read about goldilocks and the three bears,
      but unless your anatomy is very different from my
      own, you don't have forebears.

      --
      -I like my women like I like my tea: green-
    26. Re:Good advertisement. by Moofie · · Score: 2, Informative

      Doesn't it just suck to be totally wrong?

      --
      Why yes, I AM a rocket scientist!
    27. Re:Good advertisement. by aminorex · · Score: 1

      Actually, I love it. It's by being wrong that I learn to be correct. I won't make that lexical
      error again.

      --
      -I like my women like I like my tea: green-
    28. Re:Good advertisement. by Moofie · · Score: 1

      You might also consider checking your facts before criticizing others' word choices.

      It's awfully rude.

      --
      Why yes, I AM a rocket scientist!
  6. Once again, Microsoft blames the users. by IO+ERROR · · Score: 5, Insightful
    Some experts blame Microsoft for Windows vulnerabilities that help spread spyware. Microsoft and some others, meanwhile, said blame should be directed instead at spyware manufacturers.

    "Spyware usually gets on your computer through human error," said Marc Maiffret of eEye Digital Security Inc., which regularly discovers serious Windows flaws.

    Yeah, sure, if starting the computer is human error. It takes what, five minutes or less, for an XP box to get riddled with viruses, Trojans, etc.? The error is Microsoft didn't ship an operating system that could remotely be considered secure. You can't connect to the network to download SP2 without risking the computer. Where's the sense in this? Where's the user error?

    --
    How am I supposed to fit a pithy, relevant quote into 120 characters?
    1. Re:Once again, Microsoft blames the users. by yelvington · · Score: 4, Funny

      When Microsoft activates Skynet, the error-prone users will no longer be an issue.

    2. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 5, Insightful

      You can't connect to the network to download SP2 without
      risking the computer. Where's the sense in this? Where's the user error?


      This is how people think after so much time with viruses. They are used to performing workarounds for Windows that lead to acceptance of viruses (just buy an antivirus) that lead to acceptance of spyware (just buy an antispyware) and that lead to acceptance of systems so bogged down by combinations of the above (just reinstall every 6 months).

      It's a bit like living in a really bad neighbourhood and denying it's a problem. "Oh we're OK, we live in a safe area. As long as you put bars on all your windows, don't leave the house when it's dark, put up bullet proof windows, and don't make eye contact with the neighbours you're perfectly safe"

      Apart from how it's broken, it works perfectly.

      MS is fucked, but they don't mind. The consumer state of society today means MS can just tell people they need to buy something, and people will do what they're told to.

    3. Re:Once again, Microsoft blames the users. by nite_warrior · · Score: 1

      the error is the human who installed windows... you could give'em a point on that...

    4. Re:Once again, Microsoft blames the users. by rackhamh · · Score: 2, Insightful

      I've loaded Windows (various versions) onto machines, then downloaded service packs, with no firewall, MANY times, and never gotten a single trojan or spyware.

      Perhaps the 20 minute figure that people like to bandy about has more to do with common user behaviors -- namely, the fact that most people don't even know what a service pack IS?

      I imagine the average user's behavior to be something like this:

      1. Turn on computer.
      2. Install AOL.
      3. Check email. Oh look, there's an email from Aunt Marge! And it has an attachment! Aunt Marge has a great sense of humor -- I bet it's a funny picture or something!
      4. Open attachment.
      5. Congratulations, your computer is infected.

      Please note that in this process, the thought of patching the machine never crossed the user's mind. Microsoft (and computer manufacturers) may be failing to properly inform the users of the importance of patching, but c'mon, face it -- even Linux has to be patched to be secure... and the burden is ultimately on THE USER to do so.

    5. Re:Once again, Microsoft blames the users. by Tony+Hoyle · · Score: 1

      You're lucky.

      I've had an image of XP SP2 from the MSDN CD installed on a machine, browsed to a couple of pages to find a driver and *without doing anything* got a trojan on the machine.

      In under 10 minutes.

      Users have no chance, really.

    6. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0


      Yeah, sure, if starting the computer is human error. It takes what, five minutes or less, for an XP box to get riddled with viruses, Trojans, etc.? The error is Microsoft didn't ship an operating system that could remotely be considered secure. You can't connect to the network to download SP2 without risking the computer. Where's the sense in this? Where's the user error?

      Oh get a new argument already as this one is getting old! If you have to repeat the same tired old argument you don't have a point. It's quie easy to update Windows XP without getting infected. Give it up...you're looking desperate as hell.

    7. Re:Once again, Microsoft blames the users. by christopher240240 · · Score: 2, Informative

      Thank God somebody recognizes the problem. I would add one additional caveat, however. I believe the 20 minute figure was arrived at by hooking up a fresh copy of XP (with no service packs that you can't even buy anymore)to an unprotected broadband network and then surfing the net without downloading any security updates. No Linux user in their right mind would do this, I don't know why they would expect otherwise from an informed Windows user. Now that the firewall is turned on by default, MS has corrected it's most aggrevious error, and a new copy of XP is firewalled and has the user turn on automatic updates after install. If they would only force the user on to Windows Update after install, I think that is what you can reasonably expect. Also, I think it's high time that some manufacturer tells the truth about where 90% of trojans, spyware, etc. come from. The truth is that people are going to some pretty nefarious places on the net to pick this stuff up, and that is the majority of the problem. They then pass it on to their contacts, and you have the massive infestation problem we have today.

    8. Re:Once again, Microsoft blames the users. by rackhamh · · Score: 1

      I hope you informed the site of their security breach. I have yet to encounter a trojan from any legitimate site.

    9. Re:Once again, Microsoft blames the users. by Tim+Browse · · Score: 1

      Not true. I installed Win2k Server on a PC on ADSL with no firewall, installed the ADSL modem drivers, downloaded the latest SP, installed it, and installed Norton AntiVirus which promptly told me I was already infected with a virus. I certainly wasn't faffing about logging on to AOL or reading email.

    10. Re:Once again, Microsoft blames the users. by IO+ERROR · · Score: 1
      I believe the 20 minute figure was arrived at by hooking up a fresh copy of XP (with no service packs that you can't even buy anymore)to an unprotected broadband network and then surfing the net without downloading any security updates.

      In the test, they installed it, plugged in the Ethernet, and let it sit there idle. The XP box got its first trojan in under five minutes.

      --
      How am I supposed to fit a pithy, relevant quote into 120 characters?
    11. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 2, Informative

      I had to troubleshoot a DSL install yesterday. For that I had an XP box connected directly into a DSL modem and used XP's pppoe software to get onto the net. This is about as common a setup as you'll see except for those who just ending using the usb port for networking. This box had SP2 and Kerio running. Withing seconds of making the connection I was bombarded with attacks and requests to connect to the machine. Yes Seconds. This is much the same experience that others have reported.

      "I've loaded Windows (various versions) onto machines, then downloaded service packs, with no firewall, MANY times, and never gotten a single trojan or spyware."

      It's obviously all relative but IMO your very very lucky. Unless your network has a firewall which drops everything coming in NEVER get on the net with a naked Xp install. Have SPwhatever locally on a flash drive etc and install it that way. If you don't have it tell the person its not safe to get on the net without a firewall and then come back once you can do it via flash drive or cdrom.

    12. Re:Once again, Microsoft blames the users. by tiltmodearmy · · Score: 2, Interesting

      My windows box is up nearly 24/7 and I haven't had a single problem with spyware or viruses. I am, of course behind a FreeBSD NAT/ipfw gateway and Firefox is my web browser of choise... Even when I used IE though, I had few problems if any. I also have 3 room mates with windows boxen behind the same NAT/ipfw. Out of those 3 the one irresponsible user is the only one that has spyware problems. My situation tells me human error is to blame. You hate Microsoft just a little too much, me thinks.

    13. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Hey... anyone else getting Deja Vu?

    14. Re:Once again, Microsoft blames the users. by TCM · · Score: 2, Informative

      What are you talking about? Just because rackhamh referred to a trojan in an e-mail attachement doesn't mean that there are no completely automatic ways to catch a worm with an _unpatched_ Windows system without a firewall.

      There was at least some RPC issue that worms used to spread completely automatically. The topic never was about a legitimate site spreading trojans.

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
    15. Re:Once again, Microsoft blames the users. by Jace+of+Fuse! · · Score: 4, Insightful

      They are used to performing workarounds for Windows that lead to acceptance of viruses (just buy an antivirus) that lead to acceptance of spyware (just buy an antispyware) and that lead to acceptance of systems so bogged down by combinations of the above (just reinstall every 6 months).

      There are small, efficient, safe, and free programs that perform these tasks without bogging the system down.

      But your points do to some degree stand. Though even if the virus/worm/spyware problem weren't as bad today as it is, I probably would STILL run a software firewall and a good antivirus just as a matter of precaution. I also have all of my systems behind the network firewall but not everyone has that option.

      The point is, that just because things are worse now on Windows than they have ever been, doesn't mean that good precautions wouldn't be paying off.

      It's only a matter of time before MacOS X gains enough popularity that it's own security holes (though admittingly less serious than many of those in Windows) are mass exploited causing many Mac users some grief.

      As it stands right now MOST Linux users can fend for themselves. How true do you think that would be if there was a huge wave of new Linux users converting from Windows? The clueless masses would show people that even a Linux box in the wrong hands can exploited, and I would dare say that an arm compromised *nix boxes is a far greater threat to the internet as a whole than the army of zombie Dialup AOL connected budget PCs running XP home that we currently have to dela with.

      Security IS a problem right now, but Windows is only PART of the problem. The clueless human side of the equation isn't going to go away no matter how many people ditch Windows.

      --

      "Everything you know is wrong. (And stupid.)"

      Moderation Totals: Wrong=2, Stupid=3, Total=5.
    16. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 1, Funny


      You're lucky.

      I've had an image of XP SP2 from the MSDN CD installed on a machine, browsed to a couple of pages to find a driver and *without doing anything* got a trojan on the machine.

      In under 10 minutes.

      Users have no chance, really.

      Thanks for admitting that *YOU* were the problem. You've demonstrated that you're not qualified to use a computer.

    17. Re:Once again, Microsoft blames the users. by Sancho · · Score: 1

      You don't even have to browse to get infected if you aren't patched up (i.e. you just installed XP with no service packs integrated). Connect the broadband, start downloading the service pack (to get patched up) and you get infected before you've finished the download, much less than the install. Of course, the proper way to prevent this is to turn on the XP firewall before connecting the ethernet, but if you have the ethernet connected during the install of XP, you can get infected before you even have a chance to log in to your machine. It's crazy.

    18. Re:Once again, Microsoft blames the users. by TCM · · Score: 1

      Sorry, didn't notice you (rackhamh) replied. The post may sound a bit weird, but still the point remains.

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
    19. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      I disbelieve the illusion.

      A recent article here cited unpatched systems being compromised four minutes after being connected to the internet. Even 5 years ago, I had a friend who had his new computer infected within 20 min of connecting over dial up (and before he even had his email configured). When I was running Zone Alarm with no router I was detecting constant worm activity (20 min between attempts). Any effort to bring a new system up under those conditions (without using extraordinary measures such as slipstream) would have almost certainly failed regardless of competence.

    20. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0


      So go ahead and blame vulns on human error.

      Duh!

      Windows is a human error!

    21. Re:Once again, Microsoft blames the users. by drsmithy · · Score: 2, Interesting
      Yeah, sure, if starting the computer is human error. It takes what, five minutes or less, for an XP box to get riddled with viruses, Trojans, etc.?

      If you don't follow basic computer security procedures, yes.

      You can't connect to the network to download SP2 without risking the computer.

      Sure you can.

      Where's the user error?

      Not turning the firewall on before connecting to an untrusted network.

      Running untrusted code as an Administrator.

      Using buggy software like IE.

      Same user errors you get on _any_ platform.

    22. Re:Once again, Microsoft blames the users. by RehabDJ · · Score: 0

      In the purchase of Windoze. ;)

    23. Re:Once again, Microsoft blames the users. by fade-in · · Score: 1

      I'm sure that the bulk of spyware can be completely avoided by not ever firing up IE out of the box. The problem with that is the fact that as soon as you power your system on, it jumps on there asking you if you want to go online and read your "welcome to windows" formletter spam from microsoft. "I see that Internet Explorer is not configured to be your default web browser. Would you like to set it to be your default?" And has anybody ever tried to delete the iexplore.exe binary? Like dawn of the dead, it keeps comming back for more! Internet Exploerer is more ridiculous and annoying than that stupid dog that tries to help me find my files.

      --
      This sig is inappropriate in a post-9/11 world.
    24. Re:Once again, Microsoft blames the users. by wastingtape · · Score: 5, Funny

      Yes. I noticed the glitch in the Matrix as well.

    25. Re:Once again, Microsoft blames the users. by Frostalicious · · Score: 1

      It takes what, five minutes or less, for an XP box to get riddled with viruses, Trojans, etc.?

      While I know that MS has big security problems, it just blows me away that technically astute slashdotters still connect to the internet without even as much as a NAT router. I mean come on you can get a Linksys for 50 bucks. Assume personal responsibility and the problem dissapears.

    26. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      I just installed RedHat 3 and got exploited within 5 minutes. This is a ridiculous argument. If you put ANY unpatched operating system on the internet expect to get hacked.

    27. Re:Once again, Microsoft blames the users. by saider · · Score: 1

      Running untrusted code as an Administrator.

      Unfortuneately, for most people to be able to do their work (install programs, move files around, etc) you need to have Admin priviledges. This is a fault of both the applications (for being unable to operate in a restricted envirnoment) and the OS (for not providing adequate methods for doing real work in a restricted environment ).

      Until you can install and run the typical program as a user without Admin rights, this problem will persist because the default user will need to have admin rights (to prevent a flurry of tech support calls to Redmond).

      --


      Remember, You are unique...just like everyone else.
    28. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Just before reading your post I was wondering: "Where tha hell did I read this before?".

    29. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 5, Interesting

      I work at an educational institute. Connect a Windows machine to our network and you WILL get Welchia in under a minute (assuming you aren't patched). I have done this several times.

      The scenario you describe -- plugging into the internet without getting a worm -- is only the case because the chances are lower that you will get a worm. Basically, you are defending Microsoft on the grounds that the chances are not good that you will get a worm. But decrease the number of computers to that of a medium-sized college campus, and suddenly the chances become very good indeed. Your argument is not particularly good.

      And this is not user error, unless you count not enabling a firewall before you plug into the network as a user error. But then, how do you enable a firewall on a built-in wireles card as you are installing Windows?

      (Note that there are solutions around this problem -- and I use a few of them. I'm just pointing out that the argument, "I don't immediately get a worm on an unpatched Windows machine, so no one does," doesn't hold any water.)

    30. Re:Once again, Microsoft blames the users. by the+angry+liberal · · Score: 1

      Yeah, sure, if starting the computer is human error. It takes what, five minutes or less, for an XP box to get riddled with viruses, Trojans, etc.? The error is Microsoft didn't ship an operating system that could remotely be considered secure. You can't connect to the network to download SP2 without risking the computer. Where's the sense in this? Where's the user error?

      Exactly the same way you would update an old Linux box from 2001, you do it from behind a FW with strict rules.

      First you complain that Microsoft didn't ship XP totally secure, then you complain about having to go online to update. Sure, it is not the best product, but where does it end and what does it accomplish?

    31. Re:Once again, Microsoft blames the users. by DrSkwid · · Score: 1


      Sounds like are vulnerable because you aren't firewalled from your friend, clever trousers.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    32. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 1, Interesting


      I work at an educational institute. Connect a Windows machine to our network and you WILL get Welchia in under a minute (assuming you aren't patched). I have done this several times.

      I bet you $1,000.00 that I can install an upatched Windows XP system on your network and not get infected by Welchia in under a minute or evern a month. Game? Didn't think so you because you're making it up.

    33. Re:Once again, Microsoft blames the users. by Winkhorst · · Score: 1

      The answer, of course, is a eugenics virus.

      --
      "Is this Winkhorst a nova criminal?" "No just a technical sergeant wanted for interrogation."
    34. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0


      Unfortuneately, for most people to be able to do their work (install programs, move files around, etc) you need to have Admin priviledges. This is a fault of both the applications (for being unable to operate in a restricted envirnoment) and the OS (for not providing adequate methods for doing real work in a restricted environment ).

      How is this an OS problem?

    35. Re:Once again, Microsoft blames the users. by Nintendork · · Score: 1
      Microsoft is initially releasing an anti-spyware program for free and may charge for it in the future. Reverse FUD people here make a big stink about it. *sigh*

      This is a SPYWARE removal tool. Not ANTIVIRUS software. Spyware gets onto computers by users who choose to install them. Even if these programs are hidden in a long EULA for a program that effectively acts as trojan horse, it's currently legal. Microsoft cannot do anything about it until it's illegal. The sites that use illegal tactics to install spyware such as exploiting vulnerabilities are legally hacking your computer. These sites are typically shady as hell and most offen are related to illegal activities such as cracks.am, used for downloading program cracks and serial numbers. If you browse to a site that is obviously shady as hell and get spyware put on through a vulnerability and proceed to blame Microsoft, you're an idiot. If I made a pr0n site and used a known vulnerability in Firefox to load malware onto your computer, running under your credentials (Most likely root or equivelant access), would you blame the pr0n site creaters for being sneaky bastards or the developers of your software for being human and making a mistake? It doesn't matter how much money Microsoft has. No amount of money in the world is going to guarantee vulnerability free software. As a business, it is their responsibility to make a reasonable best effort and compared to 99.9% of the software vendors out there, they're top notch. If you gasped at that statement, then maybe you haven't tried to deal with as many companies as I have. Hell, I reported a major security vulnerability (Bug 224692, search for it on bugzilla.mozilla.org) that affects Mozilla and Firefox on the win32 platform over a year ago. It's still not fixed.

      I believe a smart move on Microsoft's part would be to partner with Symantec and release a limited antivirus package. The definition files only get updated to handle viruses that get onto the computer via a vulnerability in Microsoft software. The user is made abundantly aware of this fact during the install process. All OSes and revisions that have the security center like XP SP2 still nag the user to get a full anti-virus software solution. Put this package on Windows Update for all versions of Windows that are still in product lifecycle and snail mail free CDs to anyone that calls an 800 number. Advertise the fuck out of it. Symantec makes the product and does the definition updates. The amount of extra development time it would cost them to do this is minimal. In exchange, they get highlighted bling-bling in all of Microsoft's listings of Antivirus vendors. At that point, virus writers will move on to target another operating system or product and Slashdotters will STFU and get back to making Linux, Mozilla, and hopefully a replacement for Outlook/Exchange.

      What about the Spyware problem, you ask? This is not Microsoft's problem just like spam is not their problem. If they can profit by making a solution, I don't see any reason to have a problem with that.

      -Lucas

    36. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0
      1. Insert linux live cd containing vmware
      2. Configure vmware to use primary drive as drive
      3. Install windows, download service packs with livecd using windowsupdate catalogue
      4. (optional) backup resulting disk image, possibly image to other computers on network, etc.
      5. Reboot into actual windows
    37. Re:Once again, Microsoft blames the users. by Moofie · · Score: 5, Interesting

      "It's only a matter of time before MacOS X gains enough popularity that it's own security holes (though admittingly less serious than many of those in Windows) are mass exploited causing many Mac users some grief."

      It's a matter of proper security design that those exploits will be limited in scope and number.

      Windows doesn't get exploited just because it's popular. It gets exploited because it was designed wrong.

      --
      Why yes, I AM a rocket scientist!
    38. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      I bet you $1,000.00 that I can install an upatched Windows XP system on your network and not get infected by Welchia in under a minute or evern a month. Game? Didn't think so you because you're making it up.

      You had better have an external firewall, or a spare $1,000.00. Otherwise, you're the one who is talking out of his ass.

    39. Re:Once again, Microsoft blames the users. by dosius · · Score: 1

      I once tried (from a public terminal where I had choice of only IE 4.01 or NS 4.79) accessing a site through cjb.net redirection, and cjb tried to install Xupiter (a known spyware). This was a couple years ago, I think.

      Moll.

      --
      What you hear in the ear, preach from the rooftop Matthew 10.27b
    40. Re:Once again, Microsoft blames the users. by IdleTime · · Score: 1

      The user error?

      Buying a computer with MS Windows on it was the user error.

      --
      If you mod me down, I *will* introduce you to my sister!
    41. Re:Once again, Microsoft blames the users. by ozbird · · Score: 1

      Where's the user error?

      Installing Windows is the error.

    42. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      It's possible to use Knoppix linux to download windows patches. Then reboot into Windows, and while
      disconnected from the network, apply the patches.
      Page 235, "Knoppix Hacks", O'Reilly.
      I have not tried it, but I have remastered Knoppix 3.4 to include Mozilla Firefox, and am using it now.
      Also I put Emelfm and Scite in there, so I can use it to work on the remaster. I have a custom logo.16,
      modified the minirt24.gz, and use Icewm instead of KDE. I have lots of little changes, all make the
      result fun and secure to use. I'll have to admit that I do have a Windows 98 partition on the box, and use CD-burning software there. I don't connect to the internet at all with '98, and don't even use MSIE, or run the Internet Connection Wizard.
      I'm sticking with my remaster for now...

    43. Re:Once again, Microsoft blames the users. by Martin+Blank · · Score: 1

      That's Windows File Protection putting back critical files. If you really want to get rid of it, you can delete it, and then change the permissions on the folder to Deny access to all accounts. This should work (it does with Outlook Express), though it may break things.

      --
      You can never go home again... but I guess you can shop there.
    44. Re:Once again, Microsoft blames the users. by deaddeng · · Score: 1

      In all likelihood, the previous poster's computer wasn't infected by the site-- he was infected by worms that take advantage of unpatched windows vulnerabilities such as the RPC exploit over port 445/tcp&udp which has the windows messaging service running and listening by default, or the well-known WinBIOS port 135-137/tcp exploit. Unless your ISP is blocking those ports on their entire network--Comcast does, for instance--you don't need to browse any sites. Just connect an unpatched Win2k, WinXP, or WinXPSP1 box to the internet and come back in between five to thirty minutes.

      Next time you get some spam, look at the email with full headers. The URLs in the message are typically sites in Russia, China, Ukraine, etc., but the box that sent it in the USA (especially Shaw internet), part of the Zombie Spambot army brought to you with assistance from Microsoft.

      Microsoft buying Giant Antispyware this week to cover the inherent deficiencis in their security model is like putting a bandaid on a shotgun wound to the guts.

      --
      --- .085 as cool; proving that a little knowledge is dangerous
    45. Re:Once again, Microsoft blames the users. by figgypower · · Score: 1
      Using buggy software like IE.
      Well, unless you know every single, goddamn patch to look up on Microsoft's site you'd HAVE to use IE to patch your system. And don't tell me to just go to SP2 and it'll be all good, because there's been even newer security patches. Oh, and as a single user, I don't have an IT department to cover me.
    46. Re:Once again, Microsoft blames the users. by hvatum · · Score: 0

      "...Using buggy software like IE. Same user errors you get on _any_ platform." Actually IE 6.0 is only available for windows. So these errors only affect windows.

      --
      Netbooks, they come with Linux or a $3 copy of Windows. Either way, Microsoft loses.
    47. Re:Once again, Microsoft blames the users. by Mr.Progressive · · Score: 2, Informative

      Last year, while at school, I decided to reinstall XP a few times. My school has a policy of automatically disconnecting any infected computer. Before reinstalling, my network access was fine (i.e. no infection). But shortly after reinstalling each time, I found that my network access had been disabled due to infection. This happened at least twice. If having my ethernet cable plugged in while installing an OS is 'user error' then something is seriously wrong.

      --
      Okay, so a philosopher, a philologist, and a philatelist walk into a bar...
    48. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0


      You had better have an external firewall, or a spare $1,000.00. Otherwise, you're the one who is talking out of his ass.

      I'll do it without an external firewall. And I'll be happy to take your money in the process.

    49. Re:Once again, Microsoft blames the users. by burns210 · · Score: 1

      You were probably behind a firewall, or atleast a NAT or similar.

      Setup a standard 2000 or XP system in the DMZ anywhere, and you will be hacked within minutes, not hours.

    50. Re:Once again, Microsoft blames the users. by mjh49746 · · Score: 1

      Except that with the way they way these guys sell computers to the public, they think it's another simple appliance like a TV or a toaster, and they'll treat it like such. Now us nerds may know better, but if I try to explain getting security patches to these people, they look at me like I'm on crack or something. After all, they don't get their toasters or TVs patched for security problems, why patch the PC? It's not the user's fault that the PCs are marketed like toasters and TV sets so it's not IMO the user's fault that they get infected with worms as soon as they go online. After all, it's an appliance to them, and they buy them in good faith expecting them to be reliable as toasters and TV sets. So I say "Blame the damned marketdroids and manufacturers for selling them like appliances!"

    51. Re:Once again, Microsoft blames the users. by muffdivr · · Score: 1

      Quick question - I installed W2K server a few days ago, but could not find a suitable Norton product for it. Can you please tell me which version you used? Thanks.

    52. Re:Once again, Microsoft blames the users. by zulux · · Score: 4, Informative

      You can't connect to the network to download SP2 without risking the computer.

      Sure you can.


      No you can't - in SP1 and below, the firewall gets put in place after the network interface is brought up. In face, the firewall is almost the last thing to initialize during the XP boot process.

      Depending on your boot time, there can be few minutes where your computer is vulnerable.

      Enjoy!

      --

      Moneyed corporations, non-working 'poor' and criminal prisoners are turning productive citizens into tax-slaves.

    53. Re:Once again, Microsoft blames the users. by mjh49746 · · Score: 1
      You can't connect to the network to download SP2 without risking the computer.

      Sure you can.

      Bullshit! You cannot connect to Windows Update and download SP2 on an unpatched system without getting 0wned in seconds. Not unless you're either behind a router, already have a third party software firewall, or that you have SP2 already in your hands and plan to install it before you first go online. And, you can't count on everybody to have any one of those things, either.

      Here's an example....

      Mr. Newbie buys his first PC. It has XP Home and it's the gold version. We can already safely assume that he doesn't have something like Zone Alarm, he doesn't have a router, and that he doesn't have SP2 yet, either. Mr. Newbie doesn't know it yet, but he's already going to get fucked when he goes online for the first time. That's because his firewall is OFF by default and he doesn't even know what the icons are yet, let alone how to turn on the firewall.

      You see, it's easy to blame Mr. Newbie for his utterly grievous faults, but it seems hard for me to understand why we all choose not to remember that we were ALL once like Mr. Newbie at one point in our lives. So I say 'Remember your roots' and give Mr. Newbie a helping hand instead of being so quick to rip him a new ass. After all, today's newbies may become tomorrow's nerds by the time we become old farts.

    54. Re:Once again, Microsoft blames the users. by BradleyUffner · · Score: 1

      Yes you can, unplug the damn network cable.

    55. Re:Once again, Microsoft blames the users. by Billly+Gates · · Score: 1

      IF your pc is behind a hardware firewall you should be fine. I believe the 5 minutes or less study was done with pc's with no firewall to the internet.

      I would not visit any other websites with IE which could infect a pc besides Windows update.

    56. Re:Once again, Microsoft blames the users. by DownloadTHIS · · Score: 4, Funny

      I actually agree with Microsoft here. These problems are caused by human error. Running Windows definitely falls under that catagory.

    57. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 1, Interesting

      Not turning the firewall on before connecting to an untrusted network.

      Which firewall would that be?

      Running untrusted code as an Administrator.
      Using buggy software like IE.


      I'm not quite sure how you propose to access Windows Update without doing both of these.

      So we are back to square one:
      You can't connect to the network to download SP2 without risking the computer.

    58. Re:Once again, Microsoft blames the users. by nolife · · Score: 1

      Human error makes spyware sound like the good guy. What about once it is on the system? I've come across more and more spyware that create two processes that monitor each other so when one is killed, the other restarts it. On top of that, these two processes also monitor the HKLM/Software/Micosoft/Windows/Run portion of the registry and if you delete the offending application from there thinking it will not start on next bootup you are mistaken because the running spyware processes put it right back in registry within seconds. You also can not delete the offending process exe files because they are in use. This method I described above is common and more and more spyware is working this way. Far from human error.

      Getting off topic here..
      I'm sure there are other methods to recover from this but I've used a bat file that deletes the two spyware exe files. I place a reference to the bat file in the runonce section of the registry which runs the bat file before Windows gets to the run section. It deletes the files on the next bootup. At that point you can continue the cleanup effort.

      --
      Bad boys rape our young girls but Violet gives willingly.
    59. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 3, Funny

      If Microsoft is running Skynet, we have nothing to fear.

    60. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Duh !

      If you really want to *contribute*, make sure you read what people "in the know" say about it : You can enable what you want, but any "real" security (in the form of a plethora of "patches") can only be obtained by way of a download (by way of the same connection that tries to infect you).

      Have you heard of that film-title "gone in 60 seconds" ? Your computer is gone (in a very real sense) in less than that time ...

      And yes, You can use another connection to download the patches (if you can find out how to do that), and transfer those patches by way of CD to the system you have installed and want to ptotect.

      But I ask you : is that any acceptable (for the default user) method ?

      If you answer "yes" to that question what about this one : would you accept to buy a car, only to know that, if you would be so bold as to really put it on the road, could be exploding in your face when you but touch the actual road (yes, installed malware could put content on your computer that could be incriminating, and therefore destroy your, and your families life but good) ?

      Would you accept to be forced to call the repair-persons from their service-station to your just bought car to "repair" it (just to make it usable for the road) ?

      If you are really think you would answer these questions with "yes", you're an MS groupie (and quite gullible (a better word would be : stupid) to boot).

      And yes, I'm using MS-products, But I'm no fool. :-)

    61. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      I'm working on it. But, I can't guarantee you'll live. Do the females in your family have big boobs? You better hope so, because that factors high in the discriminations of my soon-to-be-hatched nanobots.

    62. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      The main human error is to buy and use MS Windows!
      Nobody else to blame. :-(

    63. Re:Once again, Microsoft blames the users. by mjh49746 · · Score: 1
      "As a business, it is their responsibility to make a reasonable best effort and compared to 99.9% of the software vendors out there, they're top notch"

      Top notch? Is that supposed to be funny? I'm more likely to believe that they spent more man hours on writing and perfecting the Windows Product Activation code than they did doing QA on Windows XP, 2000, Me, and 98 combined.

      So begone ye cursed shill. I can smell your horseshit from a mile away.

    64. Re:Once again, Microsoft blames the users. by nolife · · Score: 1

      Are you trying to imply that browsing the web with IE is the only way to get hacked?
      Link1
      Link2

      --
      Bad boys rape our young girls but Violet gives willingly.
    65. Re:Once again, Microsoft blames the users. by radish · · Score: 1

      Boot computer. Connect network.

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    66. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      A $50 Linksys router will keep you 100 percent spyware free to go online and download SP2 and every remaining windows update.

      You'll be able to go download your Antivirus software of choice and Ad-protection suite.

      If your genius-self plugs any computer directly into the internet without a firewall, unpatched I might add, it will be rooted/backdoored regardless of the OS it's running. Use a little *common* sense.

    67. Re:Once again, Microsoft blames the users. by radish · · Score: 2, Informative

      Then your admins need to sort their shit out. The company I work for has over 40,000 XP workstations and I can't remember the last time we had any internal infections - it may have been ILOVEYOU. Sure Windows has it's problems, but it is perfectly possible to secure an XP network if you know what you're doing.

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    68. Re:Once again, Microsoft blames the users. by dourk · · Score: 1

      Try turning on the firewall before plugging the net cable in.

      --
      Wake up.
    69. Re:Once again, Microsoft blames the users. by Izago909 · · Score: 1
      It takes what, five minutes or less, for an XP box to get riddled with viruses, Trojans, etc.? The error is Microsoft didn't ship an operating system that could remotely be considered secure. You can't connect to the network to download SP2 without risking the computer. Where's the sense in this? Where's the user error?


      While this is true most of my experience is user error. When I work in the shop, I spend the majority of my day running adaware, spybot, and moosoft. I'd say over 90% of the problems described are a result of spy/ad ware, trojins, and viruses. In terms of file numbers, people who have p2p apps installed tend to be much worse off, as do people who visit porn and gambling sites. If it's really bad, we refuse to warranty our work unless they let us do a backup, format, and restore.

      Some new variants are highly defensive. One I was dealing with the other day had seveal libraries, virtual device drivers, and programs hid all over the system and multiple active modules that would fix restore deleted registry and files. It still managed to get loaded in safe mode and repaired its damage. It also blocked the installation or use of norton antivirus, caused malfunction of spybots repair engine, and wasn't even detected by adaware.

      I was actually told to quit telling people about firefox because all of this is such a large portion of our work. By the time they mentioned something I had already given up due to constantly explaining the the difference between an ISP and a web browser. I have told people to use macs though. We sell refurbs for cheap. An extra $250 brings a 12' powerbook for about the educational price of a new one, but it includes full coverage for parts and service and even a full data recovery service. I can't tell you how many times I've pulled the platers out of a coffee soaked drive to get to some office documents or media.
    70. Re:Once again, Microsoft blames the users. by duffahtolla · · Score: 1
      If what you say is true then MS needs to have this as a disclaimer:
      This product not intended for internet use without prior installation of properly configured FreeBSD NAT/ipfw gateway.
      From your situation, The most you can say is "Even with a properly configured firewall/nat an irresponsible user can still get infected."

      Then you would have a point.

      But the majority of most Windows users are naked on the internet and using IE. Try it with their shoes and see if you still think users are to blame instead of MS.

    71. Re:Once again, Microsoft blames the users. by mjh49746 · · Score: 1
      Well by gum, all I got is this here slowpoke v.90 modem with the pretty blinkenlights on top, cuz out here in da sticks, nobody offers that newfangled high speed interweb thingy! ;-)

      Well actually, there is a company that does offer wireless broadband at a good price, but without an outdoor TV antenna tower, I'll never have 'line-of-sight' with the transmitter. Now, why am I going to bother with putting up a TV tower when I already have DirecTV? I can't justify the expense.

    72. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Cute, let the user unplug things to solve the problems caused by a bad product...

    73. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0
      This is how people think after so much time with viruses. They are used to performing workarounds for Windows that lead to acceptance of viruses (just buy an antivirus) that lead to acceptance of spyware (just buy an antispyware) and that lead to acceptance of systems so bogged down by combinations of the above (just reinstall every 6 months).

      Some people don't use condoms and go get the day-after pills on the next day. Why does Windows have to be safe *before*? It's ok to take preventive steps *after* for other things, so why not computer?

    74. Re:Once again, Microsoft blames the users. by 99BottlesOfBeerInMyF · · Score: 1

      If you don't follow basic computer security procedures, yes.

      Well lets see, we can take 4 boxes, connect them to the internet and start them up. Lets take a Windows XP SP1 box (as described, a Linux-Redhat box, a Mac OS X box, and a Mac OS 9 box. Lets assume we are an average clueless user. what happens? Well, the windows box is probably compromised and all the others are fine. Did we follow basic security procedure? Sure, we plugged them in to a network and turned them on. If your system does not start in a basically secure state, obviously it is broken. Now I know some idiot is reading this post and thinking "but but but windows is the biggest target, if other computers were as popular they would be in the same situation. " To which I say, "bullcrap." Windows XP SP1 starts out with no firewall, and with lots of random services turned on. Windows XP SP2 starts with the firewall turned on, and lots of services turned on. This is a big part of the problem. There was a pile of PHP exploits announced earlier today. Fair enough, it is a big target, just like Apache. So I'm sure everyone running Redhat and OS X is completely screwed right? Nope, because they don't run either PHP or Apache until the user decides they actually need them. So sure, some people have a possible vulnerability, but those people are the people who are actually running web servers utilizing PHP (a small subset of users). Those people also, should know to pay attention for vulnerabilities since they are running extra services.

      I think other users have covered the problems with SP1's firewall pretty thoroughly by now. As far as running a firewall, that is fine as an extra layer of protection, but it should not be needed on the average desktop, because the average desktop should not have any exposed services. Other OS's do not basically require you to run as an administrator to get your software to run (as Windows does). Windows is a security disaster and I don't think adding another conflict of interest to the mix is going to help.

    75. Re:Once again, Microsoft blames the users. by SoSueMe · · Score: 1

      If your company has "40,000 XP workstations", I would expect that you are firewalled up the wazoo anyway. No problem there.

    76. Re:Once again, Microsoft blames the users. by DM9290 · · Score: 2, Interesting

      Perhaps the 20 minute figure that people like to bandy about has more to do with common user behaviors -- namely, the fact that most people don't even know what a service pack IS?

      I've personally had an XP pro machine infected by a worm wirelessly over a GPRS connection. I wanted to test the claims.

      It took about 4 hours of total online time, I didn't download any software or email.

      For most of those 4 hours, the built in firewall was on. But I turned it off for about 10 minutes and the machine was infected.

      A worm found that port 445 was open on my machine and took over the machine. Thereafter my machine attempted to connect to random ip addresses on port 445 and no other internet connectivity worked at all.

      The scary thing is that I saw my machine successfully connect to a few of those random IP addresses.

      A virus checker found 5 infected executables. Executable programs I had never heard of. Including a batch file.

      I also personally witnessed a windows 2000 machine suffer the same fate (but different worm) in less than 1 hour. Remember, this is OVER 56kbps GPRS.

      Believe me. From personal experience I can attest that you dont have time to download the latest service pack before your machine is infected.

      You may get lucky, but is all it is. LUCK.

      If you are using a DSL connection and your machine is using a 192.x.x.x private IP address that could explain why you aren't getting an infection. Your DSL modem is essentially firewalling you.

      Fortunately antivirus software cleaned up the mess with no loss of any data. (as far as I know).

      --
      No one has a right to their *own* opinion. They have a right to the TRUTH.
    77. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Name a dist or unix flavor that isn't prone to the same vulnerability through a generic FULL INSTALL that was made over 2 years ago. Please oh wise one, just try and name ONE.

      I can't wait to see what an even bigger ass you make out of yourself!

      I can't stand it when people toss in their two cents when they have absolutely no idea wtf they are talking about. Since I'm such a nice guy I'll even fill you in on a secret.. Zombies don't only attack windows boxes jerky. Wake up.

    78. Re:Once again, Microsoft blames the users. by Aeiri · · Score: 1

      I installed Windows XP Pro on my brother's computer about 4 months ago.

      I installed antivirus, firewall, spyware, firefox, etc, on it BEFORE PLUGGING IN THE LAN CORD, and 2 seconds after it was plugged in, antivirus went crazy and after a mass updating of spyware/antivirus/security patches (about 3-4 minutes total), I unplugged the box and ran a full system scan with everything, came up with 30-50 viruses and 5 trojans, countless spyware stuff,

      For some reason, our network is highly targetted by attackers. Sitting here on my Linux only PC, "tail -f /var/log/syslog" will crash a terminal in about 10 seconds, that's WITH a limit on the logs!

      It seriously bogs down my network speed, and it's really annoying. I envy you.

    79. Re:Once again, Microsoft blames the users. by thogard · · Score: 3, Interesting

      Once OSx gets hacked in a big way, I expect that Apple will get sued for engineering negligence. I've made it clear to Microsoft that the next time their buggy software nails my server (which runs freebsd), they will have to answer in court. The last time they managed to pay off my hosting provider after their tech support people tried to talk me into installing anti virus software on the server. It wasn't a virus on the server, it was millions of machines trying to talk to my news server. That was Sep of 2003 and the thing is still going wild.

      If you sell a modern operating system and the install disks aren't safe to use (meaning no innocent third party suffers damage) then the product must be recalled. I've had enough of this crud that the next time I'm in the cross hairs, I'm going after whoever dropped the ball and I don't care if its MS, Apple or Sun. There is no excuse for not recalling a CD since its small and cost so little. In past court cases involving cars, that has made a huge difference in payouts. If sun is shipping hackable software with their cheapest v100 which cost $1000 and the fix of sending everyone a new CD which cost $3 or .3% of the product cost, there isn't a judge in the US that won't give the damaged party most of what they are asking for.

      The same goes for Apple. They have teamed up with an Antivirus software company with imac when they could have just included that feature in the OS. I have recently found a copy of an old check from an anti-virus company to a student which proves that the student was paid to write viruses to help improve the bottom line. Thats racketeering and the resulting class action suit could kill a company.

    80. Re:Once again, Microsoft blames the users. by drsmithy · · Score: 1
      Unfortuneately, for most people to be able to do their work (install programs, move files around, etc) you need to have Admin priviledges.

      So use Run As whenever you need to.

      I've been running Windows as a desktop with a regular user account since NT4, way back in 1996. Don't give me any of this "it's not possible" bullshit.

      This is a fault of both the applications (for being unable to operate in a restricted envirnoment) and the OS (for not providing adequate methods for doing real work in a restricted environment ).

      No, it's the fault of the applications. The OS *does* provide adequate methods.

      Until you can install and run the typical program as a user without Admin rights, this problem will persist because the default user will need to have admin rights (to prevent a flurry of tech support calls to Redmond).

      You'll never be able to install system-wide applications without Admin rights any more than you can do the same thing without root in unix.

      The OS provides the necessary facilities to temporarily raise user rights during installations. That developers don't use them is the fault of neither Windows nor Microsoft.

    81. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Then your admins need to sort their shit out. The company I work for has over 40,000 XP workstations and I can't remember the last time we had any internal infections

      I bet your company doesn't have first year students hooking up whatever computer daddy bought them in the dorm.

    82. Re:Once again, Microsoft blames the users. by drsmithy · · Score: 2, Informative
      No you can't - in SP1 and below, the firewall gets put in place after the network interface is brought up. In face, the firewall is almost the last thing to initialize during the XP boot process.

      There's a difficult concept to grasp here. You actually have to wait until the OS is booted and the firewall is enabled and _then_ plug the cable in.

    83. Re:Once again, Microsoft blames the users. by drsmithy · · Score: 1
      Bullshit! You cannot connect to Windows Update and download SP2 on an unpatched system without getting 0wned in seconds.

      Yes you can.

      Power on system. Enable firewall. Plug in cable. Download SP2.

    84. Re:Once again, Microsoft blames the users. by drsmithy · · Score: 2
      Which firewall would that be?

      The one that article notes has been patched to fix that vulnerability.

      I'm not quite sure how you propose to access Windows Update without doing both of these.

      Use IE _only_ for Windows Update. I figured that would have been clear. Don't browse the web in general with it.

      You can't connect to the network to download SP2 without risking the computer.

      Of course you can.

    85. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 1, Interesting

      The problem is all OS are designed wrong. Take Linux for example. First, written in C means buffer overflow and several other mistakes that are caught at compile time with other languages. Second, UGO is totally not up to the task. Mandatory fine-grained ACL are a minimum. A secure system means I logon as root, run every email binaries that I receive, and the worst that could happen is the OS saying that application X tried to do an unauthorized access to some ressource. Third,the system must be designed as a whole. Not some guys writing a kernel, some writing a GUI and some other writing a file system.

      So... Can you name an OS that was well designed?

    86. Re:Once again, Microsoft blames the users. by sageman · · Score: 1

      I'm not exactly sure how your second link is at all relevant to your point. As for the first link, I have some issues with the author of the article.

      It is interesting to note that even if you look at it percentage-wise, with 90% market share for Windows, it recieved far more than 90% of the exploits and issues. Additionally, the article references Linspire, which is hardly a representative of Linux at all.

      I particularly like this part: "During the experiment's run, both the PC running XP SP1 and the Mac saw about 340 attacks per hour. However, none of the attacks against the Mac amounted to anything, while the PC was successfully compromised nine times during the two-week experiment". I mean, that is the same amount of attacks! But the winbox was comprismised, the Mac not. I think (with the same number of attacks) that it clearly shows a big security advantage for Mac OS X over Windows. For the winbox, "Ten hours after the experiment began, the machine was screwed". This didn't happen with the others.

      His statement about how the firewalled boxes and Linspire box recieved less than 4 hits per hour just shows that crackers don't attack them. This is not conclusive evidence that Windows is less secure simply because it has more users. It is merely circumstantial, since the winboxes with firewalls weren't hit either. Just shows that more-secured boxes have less of a chance to be hit.

      I believe the author (of the article) does not really offer a convincing conclusion that "What does this prove? Well, having an OS with over 90 percent market share (along with some of its design decisions) makes you a great target for miscreants. Conversely, having a relative miniscule market share means your platform is less likely to be targeted, especially when making a quick buck is a major part of the motivation." It certainly doesn't prove it, and since the Mac and winbox had the same amount of attacks, I fail to see how it even shows any evidence to support his claim.

      At least that's my take on it.

      --
      --- "To iterate is human, to recurse divine." -- Robert Heller
    87. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Which is exactly why you don't rely on the software firewall and spend the money to get a hardware solution. Is saving yourself $40-100 really worth all the hassle?

    88. Re:Once again, Microsoft blames the users. by MrJay · · Score: 1

      I've been running Windows as a desktop with a regular user account since NT4, way back in 1996. Don't give me any of this "it's not possible" bullshit.

      If you want to run Cakewalk Sonar, then you must have administrator rights. There is professional-quality software that requires you to be an Admin, for reasons due to the intense requirements on the hardware.

    89. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Then how come, I never got a trojan when I installed Windows (including on computers using 56k)? Oh, yes... It's because I always install a firewall BEFORE I connect the computer to the internet. OMG! I'm a real genius!

      Anyway... Now, every copy of XP come with SP2. This mean that unless the (clueless) user actually do something, no trojan will be installed. Of course, since he's a clueless user, he will login as an administrator and execute every cool screen saver he'll receive...

    90. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      It's a user error to connect to the internet without installing first a firewall. So yes, it's a user error.

    91. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Seriously... Do you really think someone will believe you?

    92. Re:Once again, Microsoft blames the users. by nolife · · Score: 1

      maybe you did not get my point..
      Parent of my original post seemed to think the only reason someone was hacked because they went to some rogue website. My point was you do not have to be browsing the internet at all to get hacked, simply plugged in with an IP address is enough if you are not prepared. I referenced some honeypot stats to try to give some rough ideas of how often a typical home computer gets probed by something looking to get in.

      --
      Bad boys rape our young girls but Violet gives willingly.
    93. Re:Once again, Microsoft blames the users. by Moofie · · Score: 1

      "Not some guys writing a kernel, some writing a GUI and some other writing a file system"

      Not possible. Any engineering task of any substantial size requires many teams working together, often with very limited knowledge of the other teams' work.

      I think OS X is plenty well-designed enough.

      --
      Why yes, I AM a rocket scientist!
    94. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      "Setup a standard 2000 or XP system in the DMZ anywhere, and you will be hacked within minutes, not hours."

      This is simply due to the popularity of Windows. There are tons of Linux distributions that need to be updated heavily before they are considered secure. It's just that Windows has such dominance in the market share that it's the targeted OS. Furthermore, I would think most Linux users are not stupid enough to be installing the OS with the system in the DMZ.

    95. Re:Once again, Microsoft blames the users. by drsmithy · · Score: 1
      If you want to run Cakewalk Sonar, then you must have administrator rights. There is professional-quality software that requires you to be an Admin, for reasons due to the intense requirements on the hardware.

      Right click shortcut -> Run As. No need to run as an admin all the time for one application.

    96. Re:Once again, Microsoft blames the users. by owenb · · Score: 2, Insightful
      I have recently found a copy of an old check from an anti-virus company to a student which proves that the student was paid to write viruses to help improve the bottom line.


      OK, I'm going to call you on that. Can you provide some data? A scan of the check online? The name of the student? The name of the anti-virus company? The virus that the student wrote? Otherwise, I'm highly skeptical

    97. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      You my friend are an idiot. You should be glad you live in a country with enough freedom for you to be such a fool. I am just glad you are not in the position of making major critical IT decisions for my organization. It's funny how you can't seem to notice that you can request the SP2 CD from MS for no charge. Of course, living in your mom's basement running Linux can afford you such luxuries. Me, I'm travelling the world implementing MS IT solutions.

    98. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      "Unfortuneately, for most people to be able to do their work (install programs, move files around, etc) you need to have Admin priviledges. This is a fault of both the applications (for being unable to operate in a restricted envirnoment) and the OS (for not providing adequate methods for doing real work in a restricted environment )."

      This is nonsense. I am a Linux user who only uses Windows at work and even I notice that Windows can easily be ran without admin privileges if adequately setup. Furthermore, the run as command is very similar to su or sudo in Linux. It's just simply most Windows users don't want to have to deal with the user issue so they ignorantly use the administrator account for everything. Linux users just aren't this dumb with computers and understand that running as the administrator all the time is not a good security practice.

    99. Re:Once again, Microsoft blames the users. by BigWhiteGuy_27 · · Score: 2, Informative

      Or you could boot Knoppix, download SP2 or any necessary security updates to the local partition, unplug the network cable, reboot, install the service pack or update, plug the network cable back in, and be done. Linux saving Windows once again!

    100. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      "If you want to run Cakewalk Sonar, then you must have administrator rights. There is professional-quality software that requires you to be an Admin, for reasons due to the intense requirements on the hardware."

      Please explain how this is not a problem with the application? What requirements on the hardware could cause this? What hardware is the administrator allowed to use that cannot be used by other users?

    101. Re:Once again, Microsoft blames the users. by toddestan · · Score: 1

      There's a difficult concept to grasp here. You actually have to wait until the OS is booted and the firewall is enabled and _then_ plug the cable in.

      Can you even comprehend how stupid it is of Microsoft to bring up the network, and leave the OS unprotected for a considerable period of time before loading the firewall? Or do you think unplugging the network cable is a natural thing to do everytime you reboot?

      To Microsoft's credit, they did fix this problem in SP2.

    102. Re:Once again, Microsoft blames the users. by Ballresin · · Score: 1

      If only you'd open your eyes you would find that you are completely wrong. People are the problem. But the true problem is who these people are and what they do.

      Microsoft is the beginning: They have shitty code that can be taken advantage of. Much like GM making cars that have bad chassis... you can't do anything to patch the problem other than literally tearing the car apart and re-strengthening the chassis. Ideally they'd make a good chassis.

      Virus-writers are the middleman: They realize the code is shitty and take advantage of it, motivation aside. Much like some jackass placing potholes in the road that you can run over and bend the chassis to your GM vehicle and eventually break it.

      Users are at the end of the chain: They buy what they're told (for the most part) and some do their best to keep the computer free of viruses and spyware and avoid using the dark sides of the internet. Much like avoiding potholes and trying in vain to make the car stronger by applying braces to the frame. It will help, but ultimately you're still driving a car with a weak chassis.

      What's the solution to this problem? Well, there's one simple way to fix this issue: Don't use shitty software. If there's CONSTANT alerts and warnings on the net and on the local news and papers about such-and-such software being vulnerable to such a large number of security threats, then don't buy it and don't use it.

      People like you make my stomach turn. You think that the other OSes are just as vulnerable because you don't know the first thing about why Windows is not secure. Get your head out of your ass. Yeah, the other OSes have their problems, but it's really easy to break something that is already damaged than to break something that is built to take a beating.

      Just my 3 cents.

      --
      I got nothin'.
    103. Re:Once again, Microsoft blames the users. by Ballresin · · Score: 1

      OS X won't get hacked in any big way. And even Microsoft hasn't been sued for engineering negligence, let alone Apple.

      Do you really think these companies are afraid of you?

      Do you realize that the OS you run on your server is a direct relative to OS X?

      --
      I got nothin'.
    104. Re:Once again, Microsoft blames the users. by Dark+Coder · · Score: 1
      In under 10 minutes.

      Users have no chance, really.

      Thanks for admitting that *YOU* were the problem. You've demonstrated that you're not qualified to use a computer.

      Yeah, and along with some 90,000,000+ other users. Microsoft, just fix the damn thing once and for all.

    105. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      "Bullshit! You cannot connect......"

      This is another perfect example of a clueless user. If you can't figure out how to connect your Windows XP computer to Windows Update without getting infected you shouldn't be allowed to touch a computer. Come on man, you're reading Slashdot and you still can't figure it out. *sigh*

    106. Re:Once again, Microsoft blames the users. by Jace+of+Fuse! · · Score: 1

      I have recently found a copy of an old check from an anti-virus company to a student which proves that the student was paid to write viruses to help improve the bottom line.

      Just a check? Woah! I agree! It must have been a pay-off for a virus! There is absolutely no way it could have been a refund, rebate, promotion, or other legit payout of some kind!

      Heh. Everyone knows that Norton and McAffee are not only evil, their software sucks, too.

      AVG from GriSoft is by far simply the best AntiVirus I have personally seen for a Windows machine. Their newest free version is even easier to get (no registration, free, small, efficient, functional) and on top of all that it actually WORKS without bogging down the system.

      The only thing that disgusts me more than the unethical racketeering of the big antivirus makers, is the fact that people still BUY that shit. (Heh, some people say that about Microsoft, too.)

      --

      "Everything you know is wrong. (And stupid.)"

      Moderation Totals: Wrong=2, Stupid=3, Total=5.
    107. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0
      I can't tell you how many times I've pulled the platers out of a coffee soaked drive to get to some office documents or media.

      Don't you need special facilities to handle that type of work? I can't imagine the data lasting more than a few minutes in an unprotected environment (not that being soaked with coffee is much better).

    108. Re:Once again, Microsoft blames the users. by mindriot · · Score: 2, Insightful
      There's a difficult concept to grasp here. You actually have to wait until the OS is booted and the firewall is enabled and _then_ plug the cable in.

      Hmm. Seems that my DHCP request has to be sent using IP-over-Magic then...

      If your interface is DHCP'd and you don't have the cable in, does the firewall still come up if the initial DHCP fails??

      And, in any case, that's another workaround people get used to and learn to live with... it should not be like that. Microsoft claims that their operating system's usability is so good that you don't need much experience in using Windows. But the usability approaches zero with all these workarounds you have to know about just to get the system to a state where you can actually concentrate on what you really wanted to work on.

      That adds a whole new perspective to the Linux-on-the-desktop discussion. Maybe Linux isn't as straightforward. Windows might be. But with all the crap you have to deal with in Windows (and it seems to just get more and more), it seems that in the end, Linux ends up being a MUCH better Desktop OS, even in its current state of relatively worse usability.

    109. Re:Once again, Microsoft blames the users. by arminw · · Score: 1

      ...It's only a matter of time before MacOS X gains enough popularity that it's own security holes...

      What security holes in OSX? Undoubtedly the security sellers of this world are working overtime to find holes so they can sell their expensive wares to Mac users as well. So far they have not had much luck because OSX is unusually secure for the average user.

      Windows is insecure by its design and Linux can be made as secure as any computer can be, but it is up to the user to do so. Unfortunately to use Linux it takes quite a bit more computer expertise to do this than most non-/. type users have. This is a shame, but the fact is that Linux is made by geeks for geeks.

      To my knowledge, not even the most expert security mavens have EVER found a way to infect a Mac running OSX or even OS9, as it comes out of the box, by simply connecting the computer to the Internet. Any computer can be subject to social engineering an ignorant user into doing something he/she should not, so that sort of thing doesn't qualify as a security hole in my mind.

      In OSX, not running as an administrator can make the social engineering attack considerably harder to do, especially if the user does NOT know the admin password. Not running as an admin under Windows will break a number of programs, so the user is forced to run that way, making the whole computer less secure. I know of NO program on OSX where the user has to be an admin, unless the program is designed to do some system modifications.

      Still, a firewall is a good idea just to keep the local network from having to carry a lot of probes for holes in its attached computers.

      --
      All theory is gray
    110. Re:Once again, Microsoft blames the users. by Eil · · Score: 1

      It's only a matter of time before MacOS X gains enough popularity that it's own security holes (though admittingly less serious than many of those in Windows) are mass exploited causing many Mac users some grief.

      People have been saying that about Linux for 5 years now. And they can't use the excuse that it's only because Linux isn't widely used because about 15% of web servers are using it and that's plenty large enough to get a virus rolling.

    111. Re:Once again, Microsoft blames the users. by arminw · · Score: 1

      ...they will have to answer in court...

      I hope you have plenty of $$$ to pay an army of lawyers. MS is not responsible for *anything*, according to their EULA which you presumeably clicked when you installed their bug infested, insecure software.

      It might be a good thing if ALL computerdom were held to the same product liability standards most other manufactured products are. However, since even the might of the US Government was insufficient to more than slap MS's wrists, I suspect that any private entity taking them to court will be considered by them a pest, similar to what most of us consider flies and mosquitoes. There is no way to eliminate those, just control them to a tolerable level. Lawsuits to MS is just another business expense they pass on to the customer.

      --
      All theory is gray
    112. Re:Once again, Microsoft blames the users. by drsmithy · · Score: 1
      Can you even comprehend how stupid it is of Microsoft to bring up the network, and leave the OS unprotected for a considerable period of time before loading the firewall?

      Yes.

      To Microsoft's credit, they did fix this problem in SP2.

      Exactly, and my reply was targeted at the person who said it was impossible to boot the system and be protected long enough to update.

    113. Re:Once again, Microsoft blames the users. by drsmithy · · Score: 2, Interesting
      Hmm. Seems that my DHCP request has to be sent using IP-over-Magic then...

      Your DHCP request will be triggered when the cable is plugged in.

      If your interface is DHCP'd and you don't have the cable in, does the firewall still come up if the initial DHCP fails??

      Yes.

      And, in any case, that's another workaround people get used to and learn to live with... it should not be like that.

      It certainly shouldn't, which is why it was fixed.

      Microsoft claims that their operating system's usability is so good that you don't need much experience in using Windows. But the usability approaches zero with all these workarounds you have to know about just to get the system to a state where you can actually concentrate on what you really wanted to work on.

      It's a "workaround" you only need to use long enough to install SP2.

      That adds a whole new perspective to the Linux-on-the-desktop discussion. Maybe Linux isn't as straightforward. Windows might be. But with all the crap you have to deal with in Windows (and it seems to just get more and more), it seems that in the end, Linux ends up being a MUCH better Desktop OS, even in its current state of relatively worse usability.

      Not really, because this annoying little workaround only has to be used _once_, rather than being always present.

    114. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Yeah, sure, if starting the computer is human error. It takes what, five minutes or less, for an XP box to get riddled with viruses, Trojans, etc.?

      Dipshit, this article is about spyware, which is software that is WILLINGLY loaded onto a machine via another program (eg. Kazaa) and is really hard to remove. A virus is something that gets onto your machine UNWILLINGLY.

    115. Re:Once again, Microsoft blames the users. by burns210 · · Score: 1

      Popularity is part of it, but far from all of it. Windows ships open, with services on. Mac OS X, on the other hand, even though it supports SMB and what not for networking, has ONLY SSH running on a standard install, not other network services are on.

      Now, in this case, Apple only has 1 real fear in remote outbreaks, not multiple. If SSH get exploited, they have bigger problems, in all honesty. Microsoft ships with services on, which, if they weren't would make the system much less susceptible out of the box. Linux is similar in having a firewall and few/no network services on in a default install.

    116. Re:Once again, Microsoft blames the users. by arminw · · Score: 1

      ...No Linux user in their right mind would do this...

      A Mac OSX user would do this and nothing bad would happen because OSX is safe out of the box. Linux, unfortunately, requires quite a bit more computer savy than most ordinary users have. A computer should be at least safe enough so it CANNOT get infected by merely connecting it to the Internet. Browsing to bad sites or opening unknown attachments is equivalent to taking a walk in a bad neighborhood in the dark.

      --
      All theory is gray
    117. Re:Once again, Microsoft blames the users. by arminw · · Score: 1

      ...for selling them like appliances!...

      Lets face it, computers ARE appliances. Most /.ers will of course disagree with that. Some computers such as all Mac OSX and some Linux computers will be safe when connected to the Internet. Computers, to most people are appliances that allow them to get and manipulate information from the Internet. If the Internet did not exist, there would be far fewer computers in use by ordinary users.

      Why a huge company like MS can get away with selling software that allows a computer to get damaged so easily is beyond me.

      --
      All theory is gray
    118. Re:Once again, Microsoft blames the users. by Zebidiah · · Score: 1
      I think that is what you can reasonably expect. Also, I think it's high time that some manufacturer tells the truth about where 90% of trojans, spyware, etc. come from. The truth is that people are going to some pretty nefarious places on the net to pick this stuff up, and that is the majority of the problem. They then pass it on to their contacts, and you have the massive infestation problem we have today.

      I'm not too sure if I'm reading too much into this, but if by nefarious you mean porn sites and such, a lot of PCs which I clean up, are administered by children who install anything shiny on to their PC. The sites these children are visiting have a much more aproachable and acceptable (at least visually) image.

      If by the use of "nefarious", you meant these sites as well, then your point stands.

    119. Re:Once again, Microsoft blames the users. by hazem · · Score: 1

      MS is not responsible for *anything*, according to their EULA which you presumeably clicked when you installed their bug infested, insecure software.

      Actually, he said he's running BSD.. that MS is selling a defective product to many people, whose computers, in turn, cause him economic damage due to those defects.

      He is claiming that MS owes him compensation for damages because they knowingly sell a defective product and do not recall it.

      In meat-space, let's suppose there's a contract item when you buy a Ford Explorer that claims to absolve Ford of any liablities. The driver then flips the thing over (pre-firestone-recall) due to whatever defect, and it rolls onto you, a pedestrian on the sidewalk.

      You should have a case for damages against Ford because they had sold a defective product that caused you harm, even though you were not the purchaser.

    120. Re:Once again, Microsoft blames the users. by identity0 · · Score: 1

      Why not just save some steps?

      Boot Knoppix, then type knx-hdinstall at the command prompt : )

    121. Re:Once again, Microsoft blames the users. by dodobh · · Score: 1

      Do all your company users have administrator access on their boxes? Does the company expect the users to patch and keep their own boxes updated?

      That is roughly the case on a university network. Think ISP, not company.

      --
      I can throw myself at the ground, and miss.
    122. Re:Once again, Microsoft blames the users. by the+angry+liberal · · Score: 1

      there isn't a judge in the US that won't give the damaged party most of what they are asking for.

      You aren't a law student, are you? No.. Wait.. Don't answer!

    123. Re:Once again, Microsoft blames the users. by marafa · · Score: 1

      interesting how nobody learns from history. i remember (dont know the link.. not bothered to google for it) how a previous ceo of volkswagen said that all those accidents in vw automatics were from user errors (they hit the accelerator instead of the brakes) and not a defect in the car as all those users were saying. the effect was that vw sales went down and that ceo lost his job. while in the case of vw it was true, in the case of microsoft. try telling a customer who has a million trojans, virus, spyware, zombies, proxies, malware, etc. etc. etc. programs loaded on to his computer. "oh its your fault!" ---- user calls ms support: i got a virus ms support: ITS YOUR FAULT !! ITS YOUR FAULT !! ITS YOUR FAULT !!
      mod me as a troll!

      --
      _ In Egypt Networks: Network Solutions with a Twist
    124. Re:Once again, Microsoft blames the users. by TrancePhreak · · Score: 1

      The problem here is that Ford does not ask you to install upgrades on your explorer, for free. Your idea is interesting, but does not apply.

      --

      -]Phreak Out[-
    125. Re:Once again, Microsoft blames the users. by TrancePhreak · · Score: 1

      I can install Windows XP without getting bitten too. It's not that hard. You obviously don't keep your machines in check. Perhaps it's time you were replaced.

      --

      -]Phreak Out[-
    126. Re:Once again, Microsoft blames the users. by Jedi+Alec · · Score: 1

      I call BS. the 20 minutes is a fact. If I hooked this pc up directly to the web instead of through a firewall, with a clean install of winxp and let it running for 20 minutes, I can practically guarantuee it'll get hit by something.

      --

      People replying to my sig annoy me. That's why I change it all the time.
    127. Re:Once again, Microsoft blames the users. by HuguesT · · Score: 1

      Yes, coward, you are a real genius. Most users, by far, don't know or don't want to know what a firewall is.

    128. Re:Once again, Microsoft blames the users. by doofusclam · · Score: 1

      If you need admin rights to run Cakewalk then complain to them, not MS. It's their badly written software at fault.

      I'd suspect the real issue is something to do with asio drivers by the way.

    129. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      OSX

      It's not "OSX", it's "OS X". The whitespace is significant.

    130. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Where is user error?

      Heh... User made an error when he/she bought MS Windows... ;-)

    131. Re:Once again, Microsoft blames the users. by Adrilla · · Score: 1
      I have recently found a copy of an old check from an anti-virus company to a student which proves that the student was paid to write viruses to help improve the bottom line


      How do you know they weren't paying the student to build viruses to build up the database and make the software stronger, making them more ready should a similar attack be released. Sure, my argument is speculative, but isn't yours as well?
      --

      "Plans are for fools! Oglethorpe, the plutonian (Aqua Teen Hunger Force)
    132. Re:Once again, Microsoft blames the users. by ravenlock · · Score: 1

      My former ISP had blocked out all incoming requests to ports <1024. Hence, we never really had that problem. However, after moving to another city and changing ISP, my girlfriend's WinXP machine was down in minutes.

      Lucky I'm running linux.

      Anyway, the reason some people don't experience attacks could be that incoming traffic is blocked.

    133. Re:Once again, Microsoft blames the users. by rseuhs · · Score: 1
      There's a difficult concept to grasp here. You actually have to wait until the OS is booted and the firewall is enabled and _then_ plug the cable in.

      The real tragedy is that you never see these horrible workarounds in Microsoft's TCO studies.

      And BTW, I haven't seen "please put the ethernet cable not into the computer unless it's fully booted" anywhere in Windows XP's documentation, so where are you supposed to know this kind of stuff?

    134. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      ... and the mother ship appeared in the sky and took us to a land far far away. On wait !!! This is slashdot, not the wierdest rumor speading contest. This GUY is way way out there.

    135. Re:Once again, Microsoft blames the users. by thogard · · Score: 1

      Providing those details in public would violate the privacy laws of a number of countries I like to visit and I'm not about to weaken a future argument to prove to you that I've got the bit of paper. The anti-virus company was around since at least 1987 and there are a few examples on google that point out that many of the released viruses of that time were there because the virus companies were in effect paying students to write them. This is why most of them officially claim they will not pay for turning in new viruses.

    136. Re:Once again, Microsoft blames the users. by thogard · · Score: 1

      Yes, but the check is a paper trail that opens many doors in discovery and the resulting cascade of evidence will push the argument past just speculation.

      The point isn't to win in court. The point is to convince Apple that they need to build their own antivirus stuff and include it with the OS (current and past ones).

      Sun is doing this with Solaris 10 but that doesn't go far enough. I should be able to log into any sun box and type something like ' find /usr/*bin -type f -perm +0111 -exec md5likehashprog {} \; | mail checkup@sun.com' and get a report back of any security issues. This is just like taking a 1984 ford into the dealer and asking if there are any outstanding recalls. They are required by existing law to do it but they don't.

      I've been stacking my cards in my favor for a while and I've given up just collecting cards against MS. I'm collecting them all, Apple, MS, Sun, IBM, SCO or whatever.

    137. Re:Once again, Microsoft blames the users. by tarnin · · Score: 1

      Whats scary is you are correct. Kids software itself is PACKED with spyware. This is software you buy mind you. Once they start downloading stuff from kids sites (read: nick.com, nickjr.com, disney.com, etc...) those free downloads are riddled with it.

      It's really sad to see these companies taking advantage of kids now because some adult users are getting a clue.

    138. Re:Once again, Microsoft blames the users. by Jerry · · Score: 2, Interesting

      I wouldn't be skeptical if I were you.

      A couple of years ago, in response to a claim that Linux had 'as many' viruses as Windows does, I researched ALL the real and putative viruses posted on Symantec and other such sites. At that time I found a total of 47 viruses and worms, of which only three did actually infect some computers. The slapper worm was the most recent and the worst, it infected about 14,000 computers in Eastern Europe in a two week period before it died out. Since slapper required the user to assist, running as root, it had no real chance of infecting millions of computers like CodeRed, released around the same time, did.

      What stunned me most wasn't the fact that there were less than 1/2 a dozen viable but now defunct Linux viruses, it was the fact that Symantec reported finding 3/4ths of the 47 viruses on less than 3 PCs or saying that they were "proof of concept" viruses!!! What are the odds that a virus company could encounter three dozen viruses "in the wild" but on fewer than 3 PCs. My interpretation of that data is that Symantec was experimenting with Linux viruses. Were they developing Linux anti-virus stratagies, or were they developing Linux viruses?

      About a month ago, again in response to the same "Linux has thousands of viruses" claim, I went looking for the same list, but found it missing. What I found in its place was a list of over 5,000 supposed Linux viruses.
      http://search.symantec.com/custom/us/que ry.html
      Following the first listed 'virus' leads to:
      http://securityresponse.symantec.com/avcenter /venc /data/life.is.beautiful.hoax.html
      a windows hoax email.
      The three known wild Linux viruses were on the list, even though they hadn't been active for over two years and modern Linux OSs are immune to them. Multiple listings abound. And many of the supposed Linux viruses were actually windows viruses (w32*) with the world 'linux' in their name. Digging deeper I noticed that many were for the putative JPEG viruses which supposedly can infect both Windows and Linux. Following the embedded links of hundreds of them in search of the original security notice I found instead a Symantec "Policy Statement", but no virus information!!! Why would Symantec "pad the books" on Linux virus counts? To sell unneeded software?

      My conclusion after my latest review of Linux viruses is that there are none. In fact, if another slapper were to appear and infect even as few as it did the last time it would be front page news, or MS would pay for an NYT full page ad to be sure everyone noticed.

      The fact is that while my KMail is hit with a dozen WinXX viruses each day, like bugs hitting the windshield of my car, I have yet to see any sort of Linux bug arrive at my mailbox in seven years of using Linux, four of those years being online 24/7 with a broadband connection.

      --

      Running with Linux for over 20 years!

    139. Re:Once again, Microsoft blames the users. by ColdWetDog · · Score: 1

      That's exactly correct. Most home Windows users DO think their computer as a cross between their TV and a toaster. Not like a "car" that needs to be maintained (although that's what mechanics are for). Not like a tool that needs to be mastered before it's used correctly.

      That's why Apple has it exactly right. You can use a Mac like a toaster or TV.

      That's why Linux will never take over the world (needs too much work to setup and use).

      --
      Faster! Faster! Faster would be better!
    140. Re:Once again, Microsoft blames the users. by Jerry · · Score: 1
      People have been saying that about Linux for 5 years now. And they can't use the excuse that it's only because Linux isn't widely used because about 15% of web servers are using it and that's plenty large enough to get a virus rolling.


      Exactly, but the case for Linux is even stronger.
      Over 70% of the internet is powered by Apache and about 43% of those servers are Linux, which makes the Linux share of Internet servers more than the Windows share of Internet servers. So, even though there are more Linux boxes powering the Internet, the VAST MAJORITY of server outages are due to Windows servers going down, many due to virus and trojan attacks, and many because Windows just falls over under load. It's so bad that even Microsoft uses Linux when they want security and stability on their critical servers.

      --

      Running with Linux for over 20 years!

    141. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      and we all know that all old unpatched Linux distros are still completely safe out of the box

    142. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      So how is life a Georgetown these days? But I think you are wrong. It is usaly more than Welchia at educational institions. Last time I made the mistake a building a machine on the network at Georgetown it was infected by several worms by the time the os finished installing.

    143. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0


      Yeah, and along with some 90,000,000+ other users. Microsoft, just fix the damn thing once and for all.

      They're trying (SP2). But then people are bitching when those fixes break things. Damned if they do, damned if they don't.

    144. Re:Once again, Microsoft blames the users. by Cycloid+Torus · · Score: 0
      Now, this was MEANT to be funny - and I hope I don't get karmatized like last time - but it is an intriguing question:

      "how do you enable a firewall on a built-in wireless card as you are installing Windows?"

      1. cover your wireless router with firebricks (common bricks will not suffice)

      2. borrow a well armored tank from your local National Guard unit, enter and close hatch - do not engage fire control - that is for another purpose

      3. relocate to West Virginia and put your office in a mine shaft (economic enticement package is available)

      I hope someone has some even better ideas. My humor is a little sour these days, since one of my best clients (and very good friend) got spywared, wormed and trojaned to the point of total system failure - causing him significant financial damage - at a time that his aging mother was hospitalized (intensive care type).

      When the outlook is bleak, a little more dark humor is called for...

      ps The solution, of course, is to pre-order SP2 on CD and disable ports & peripherals in BIOS. This begs the issue of whether this will be actually done by the thousands of technologically unsophisticated home users and college kids.

      --
      Lost in space at an early age. Survived the vacuum. Now rebuilding castle in air.
    145. Re:Once again, Microsoft blames the users. by canuck57 · · Score: 1

      Yeah, sure, if starting the computer is human error. It takes what, five minutes or less, for an XP box to get riddled with viruses, Trojans, etc.? The error is Microsoft didn't ship an operating system that could remotely be considered secure. You can't connect to the network to download SP2 without risking the computer. Where's the sense in this? Where's the user error?

      That simple piece of rational logic is why users should forget a Microsoft security solutions outright. The best choices are a Linksys, Netgrear, SMC or some other hardware based router that costs some $49. The best part about the hardware is if your next PC is a Mac or runs Linux it still works. And these devices require little maintenance compared to Windows. It also protects other devices that might plug into the network like a media center.

    146. Re:Once again, Microsoft blames the users. by TrancePhreak · · Score: 1

      How about the old stand-by, the tin foil hat?

      --

      -]Phreak Out[-
    147. Re:Once again, Microsoft blames the users. by Moonpie+Madness · · Score: 1

      Can you just not plug in the ethernet cable until the firewall is up? The cable connecting the router to the modem.

    148. Re:Once again, Microsoft blames the users. by pinkocommie · · Score: 1

      If there's a clip of Balmer or some other recognizable MS guy saying that, it could make a great ad ;).

    149. Re:Once again, Microsoft blames the users. by someone1234 · · Score: 1

      Users are responsible for their computer. Nowadays it is quite simple to remove dangerous software and replace it with something safer. Before connecting a machine to the internet, remove Windows.

      --
      Patents Drive Free Software as Hurricanes Drive Construction Industry
    150. Re:Once again, Microsoft blames the users. by IamTheRealMike · · Score: 2, Informative
      OS X won't get hacked in any big way. And even Microsoft hasn't been sued for engineering negligence, let alone Apple.

      Erm, OS X is the operating system that automatically extracts code and links it to protocol handlers when the user clicks an internet enabled DMG link. That sort of security is basically ActiveX level but without, you know, those annoying and unfriendly security certificate things.

      If the rest of MacOS X is designed with that sort of mentality then I'd say actually OS X has a more insecure design than Windows does. Sure, BSD may be secure, but there's a huge amount of code in there that isn't BSD.

    151. Re:Once again, Microsoft blames the users. by A+Naughty+Moose · · Score: 1
      Connect the broadband, start downloading the service pack (to get patched up) and you get infected before you've finished the download, much less than the install. Of course, the proper way to prevent this is to turn on the XP firewall before connecting the ethernet,


      No, the proper way to prevent this is to not have the PC plugged into the ethernet when windows is installed. Then install the latest service pack and patches from CD. Then install the anti-virus software. Then install the latest anti-virus updates from CD, reboot once more for good measure and THEN plug the PC into the ethernet and go run Windows Update.

      That may be to much for a casual end-user to grok, but if your knowledgeable enough to install Windows from an "real" CD (as opposed to a "rescue" CD), and go get the updates, then you should at least know better to install an insecure OS onto a PC with a live network connection. (On a LAN with no hardware firewall to boot)
    152. Re:Once again, Microsoft blames the users. by MicroBerto · · Score: 1
      Man, there must be something that Firefox does to make my family REALLY smart then... because when they use it instead of IE, they become super-users that just don't get their computers screwed up!

      Firefox needs to release their smart chemical to the rest of the world then...

      --
      Berto
    153. Re:Once again, Microsoft blames the users. by SuperKendall · · Score: 1

      But your points do to some degree stand. Though even if the virus/worm/spyware problem weren't as bad today as it is, I probably would STILL run a software firewall and a good antivirus just as a matter of precaution. I also have all of my systems behind the network firewall but not everyone has that option........It's only a matter of time before MacOS X gains enough popularity that it's own security holes (though admittingly less serious than many of those in Windows) are mass exploited causing many Mac users some grief.


      I know where you are coming from, but I run OSX at home and do not run the software firewall or any kind of virus scanner.

      Why? Because of the limited extent to which a virus could invade the system or backups of the system.

      In Windows, when you back up the system you usually back up the registry and other system files - especially if you don't want to go through the pain of reinstalling apps again.

      But on the Mac, where most apps are simply placed where you like and config files reside independently under the Library directory, I don't have to worry about needing to restore the system from backup in a pinch - I can just reinstall from scratch, restore my home directory from backup and drag the apps back into place. Then I am done.

      Furthermore, as others have noted you need to give the system an admin password to do many things to system files. So even if some spyware did mange to work its way on the computer through a browser, it would have a rough time placing itself somewhere that would be automatically restarted after a reboot.

      Another point to system stability is that Apple patching process is much nicer and less obtrusive - and generally left on. So if there was a vulnerability in an app (like Safari) generally it would patched across the whole user community within a week (software update is set to run weekly). And because it's an update that would also mean cleaning out the problem from user computers who were not running virus scanners. You could argue that potentially a virus or malware might try to disrupt Software Update - but that requires the admin password, and so some active intervention by the user to make that happen. Apple apps (the ones that ship with the system by default) are exactly the ones a virus writer would target, to reach the largest segment of the market.

      One last point about the software firewall - most Mac users would never need to run this anyway, as the Mac ships with no services running by default. For those that wish to be more cautious the .Mac service has a free virus scanner, but again as of yet there's nothing to scan for!

      I think the original poster had a great point about how people grow to accept the hellish situation they are in. The whole spyware/malware thing is the classic boiling frog scenario where the danger from Malware slowly grew until people are used to running adaware every week and leaving virus scanners on all the time to suck performance from your system. While the point about OSX potentially having some kind of virus is valid, I don't understand why people would want to live in PC world when the reality right now is that they have a valid and wonderful alternative with few downsides.

      --
      "There is more worth loving than we have strength to love." - Brian Jay Stanley
    154. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      > Yeah, sure, if starting the computer is human error

      Well, I've always said running Microsoft software was an error. They do make decent mice and keyboards though, if you can't afford Logitech.

    155. Re:Once again, Microsoft blames the users. by f0rt0r · · Score: 1

      Good points all around. A secure OS is reasonable secure by default from the time the OS starts until the time it is stopped. Having to do things such as patch the OS, unplug network cables, etc from a brand new, default installation marks the OS as 'insecure' from the get-go. A company I *used* to work for, I would build Windows XP computers from a Symantec Ghost image, then take the computer offline to install the antivirus software and virus definitions, then install some various MS security patches, and then finally plug it back into the company network to rename it and join it to an Active Directory domain, and finally load applications and configure it for the user/job position the computer was for. A ton of work, most of which would not have been necessary if the OS had been secure out of the box. Perhaps the easiest fix would be for the OS not to access unsolicited network connections by default, and only accept RPC/other requests that it had initiated by request of the operator.

      --
      I can't afford a sig!
    156. Re:Once again, Microsoft blames the users. by AstroDrabb · · Score: 0, Troll
      That's why Apple has it exactly right. You can use a Mac like a toaster or TV.
      Yup, Apple did it exactly right that no more then 3% of the population agrees with their exactly right. I can think of no point in the past 5-10 years that more then 3% or so of the population has thought that Apple did their hardware/software exactly right. I would think that if Apple did it exactly right and the population agreed, then it would be Apple and not MS that had the massive desktop market share.
      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    157. Re:Once again, Microsoft blames the users. by hazem · · Score: 1

      The problem here is that Ford does not ask you to install upgrades on your explorer, for free. Your idea is interesting, but does not apply.

      Actually, most car companies will do free service on a car if there is a recall item. Often, a recall item is not critical or even safety related. You will often get a letter telling you about it, or the techs will tell you when next take the car for servicing.

      In any case, my previous response was about liability when a product injures a 3rd party. The poster said he would sue Microsoft/Sun/Whoever the next time there is an exploit that causes their customers' computers to attack his server.

      Someone replied that the EULA absolved the software vendor. I simply stated that this guy is a 3rd party, and suffered damages from what he claims is a faulty product. The agreements between the vendor and the customer do not necessarily protect the vendor when their product leads to damage to a 3rd party.

      Ultimately, it would be up to a jury to decide if:
      1) the product was defective
      2) the vendor knew it was defective and was negligent
      3) the 3rd party suffered damages

    158. Re:Once again, Microsoft blames the users. by owenb · · Score: 1

      Well, that's convenient, isn't it? You've got a big conspiracy to talk about, but can't prove anything because it would 'weaken' a future argument. Where are the examples on google, then? Do any of them have hard data rather than just gossip-mongering?

    159. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Erm, OS X is the operating system that automatically extracts code and links it to protocol handlers when the user clicks an internet enabled DMG link.

      Wow, that sentence right there indicates that you don't have the first clue what you're talking about. An "internet enabled DMG link"?!? Do you even know what a .dmg file is?

    160. Re:Once again, Microsoft blames the users. by TrancePhreak · · Score: 1

      Microsoft's product does not actively seek to destroy your network. A third party hijacks the OS and does that.

      I think it is more similar to the situation with the old Honda Civics. Thieves loved this car because breaking in was so easy. As far as I could tell they have not been recalled, but the damage is still being done today.

      --

      -]Phreak Out[-
    161. Re:Once again, Microsoft blames the users. by thogard · · Score: 1

      Since you can't seem to use google yourself here are some hints:
      Research the story behind this:
      http://vil.nai.com/vil/content/v_221.htm. One of the authors did admit to spreading it because they were getting paid to do so. It was key to the start of Mcafee antivirus software.
      Also read the discussion of the Com-Shar hacking reward.
      Look for some of the discussion about a publication called "Big Guns Take Aim at Virus" involving DARPA.

      There is plenty of evidence out there that many of the viruses in the the wild today exist only because an anti-virus vendor paid someone to write them.

    162. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      It makes perfect sense that a FOR PROFIT AV sofware company would do this. They exist to make money, they don't exist to help people. You think symantec is your buddy? "they like me! they would never do that to me!" The burden of proof is on you or them to prove they aren't doing it. To what extent this is happening is another question.

    163. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      the memo field on the check says, "For writing viruses"

    164. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      A way exists to get rid of the IEXPLORE.EXE; however, the method remains convoluted in the least. You must change the default "Program Files" and "Common Files" directories in the registry. Then, you can delete it forever. Nothing bad happens, unless, of course, you haven't installed a browser for Windows to use.

    165. Re:Once again, Microsoft blames the users. by goMac2500 · · Score: 1

      "The same goes for Apple. They have teamed up with an Antivirus software company with imac when they could have just included that feature in the OS." huh?

    166. Re:Once again, Microsoft blames the users. by BasharTeg · · Score: 1

      John Connor actually turns out to be a script kiddie with some mad 0-day sploits for Skynet, which is based on IIS. When SkynetISAPI32.dll causes a general protection fault, all of the terminators will blue screen with IRQL NOT LESS OR EQUAL, and mankind will be saved!

    167. Re:Once again, Microsoft blames the users. by squiggleslash · · Score: 2, Informative
      Despite the garbled English, the intent of the grandparent is perfectly clear, and he is correct.

      Indeed, the situation is worse than that. If you download a .sit or .zip using Safari in its default settings, the archive will, just as a disk image is automatically mounted, be automatically extracted. The design of OS X means that any applications within that archive will be automatically registered with the system the moment they're unpacked. (By "registered", not a Mac term BTW, I mean the application, normally, will be runnable from whereever it is, and will be associated with any file types it describes itself as supporting, including, in some circumstances, immediately becoming the default for that file type.)

      Still think OS X is more secure by design than Windows? It isn't. In every way, it either is as bad as, or worse, than Windows is, in design terms. Right now the only reasons Mac users aren't being hammered are that there aren't enough Macs out there to make a viable email/etc virus or worm, and that nobody's made the effort.

      Please, for fuck's sake, quit it with the "OS X is more secure by design". The more people repeat this, the more likely it is that someone will exploit it's weaknesses, and the less likely it is that Apple will fix them before such exploits occur.

      --
      You are not alone. This is not normal. None of this is normal.
    168. Re:Once again, Microsoft blames the users. by AcornWeb · · Score: 1

      Agreed. I was just reading up on the XmlHttpRequest stuff that is used in Google Sense on Apple's site here and was trying to get Safari to read a remote iTunes feed on the Internet. It wouldn't work. Turns out that further down that linked article under Security Issues, they specifically address this problem.

      They say that you can't link outside of your domain and you CAN'T read files off the user's hard drive (you can using Internet Explorer on Windows, although it will prompt you first).

      Guess which one was designed insecurely? Why, Apple developers have even gone to the trouble of diagnosing potential Microsoft vulnerabilities and then made sure they don't have them on the Mac.

      I'd like to see Apple get a larger market share, if only to see ./ers try to explain why Macs still aren't getting hacked. :-)

      --
      Your Windows PC is my other computer.
    169. Re:Once again, Microsoft blames the users. by Eil · · Score: 1


      Out of curiosity only, where did you get those number? Mine came from recent Netcraft stats, but maybe they have some weird statistic metric... they showed Solaris and Windows 2000 as being the leading web server OSes with Solaris having a huge lead over everyone else.

    170. Re:Once again, Microsoft blames the users. by Anonymous Coward · · Score: 0

      Where exactly is the cable to be unplugged for my wireless ethernet? Maybe I should go and shutdown the entire wireless network so I can start-up the firewall on the one machine.....

      Then again maybe if enough people beat on MS for having the firewall come up after everything else they may think it's important enough to fix.

    171. Re:Once again, Microsoft blames the users. by sageman · · Score: 1

      Fair enough.

      --
      --- "To iterate is human, to recurse divine." -- Robert Heller
    172. Re:Once again, Microsoft blames the users. by eneville · · Score: 1

      If Linux will become as riddled as Windows it will be with kernel 41.7.9 or something. But until that day, I think its safer to be using BSD/Linux. May I add, OpenBSD has been many years without a remote exploit!

      I can't say I've ever been hacked using a Unix based system. Nor can I say I've had a virus.

      I think the virus count on Linux is 100 or something in that region, there's probably > 100 viruses being produced for Windows each day!

      Lets think about it though... With Linux/Unix the author does not even know the architecure. This principle is commonly known as the Cathedral and the Bazzar. Cathedral being priest lecturing worshipers, and bazzar being a mass of people exchanging ideas. This may not be news to some, but when you find a whole in the holy book you may have a religous war on your hands.

      The only thing the OpenSource community need worry any deal about is a virus in the CVS which can add a new int main( int argc, char **argv ) {} to source files, but then each developer has to look over it and compile it before something becomes a package...

      "If it doesn't have a Makefile with ./configure, make, I don't run it."

  7. ack! by nizo · · Score: 4, Insightful
    Microsoft's disclosure that it may eventually charge extra for Windows protection reflects a recognition inside the company that it could collect significant profits by helping to protect its customers.

    And they don't see a conflict of interest here? Exactly what incentive would they have to fix security holes which are allowing malware into the machine in the first place if they are selling other products to "block" these kinds of attacks, or are they planning on charging for patches?

    1. Re:ack! by moexu · · Score: 2, Insightful

      "[H]elping to protect its customers" seems awfully euphemistic to me. Wouldn't it help their customers more to release software without the security holes that allow malware in the first place?

      --
      "Seek first to understand." - Socrates
    2. Re:ack! by Vspiritas · · Score: 0

      Brilliant coining here.

      None the less very interesting.

      The police and their counterparts are two seperate entities(though some will beg to differ some times), MS does it again and will get away with it.

      Hows their product portfolio shaping up?

      1. security express
      2. security professional 2010

      uhmm.. and the second will probably provide just as obscure security as the profesional email client.

      until secure, if you do not upgrade, you yourself are to blame

      ok burn me, for I am out drinking beer noe.

    3. Re:ack! by Lord_Dweomer · · Score: 2, Interesting
      Reminds me of the spammers who send out spam for spam blockers.

      --
      Buy Steampunk Clothing Online!
    4. Re:ack! by nizo · · Score: 1

      You know, I just realized something: if you buy a product from Microsoft that they are selling solely as a security product, does that mean you can sue them up the wazoo (and win) if it fails to protect your computer? I seem to recall Microsoft essentially denying their culpability regarding windows security, but now they will have no excuse if their product fails, since the only function of it will be to protect your machine.

    5. Re:ack! by JJahn · · Score: 1
      "And they don't see a conflict of interest here? Exactly what incentive would they have to fix security holes which are allowing malware into the machine in the first place if they are selling other products to "block" these kinds of attacks, or are they planning on charging for patches?"

      Nope, none at all. I'm off to buy some stock and get in on some of these significant profits.

    6. Re:ack! by Anonymous Coward · · Score: 0

      Kind of like the phone company selling you caller ID and selling telemarketers the technology to dodge it. Arm both sides and pocket the $.

    7. Re:ack! by Lisandro · · Score: 1

      I thought of the very same. It's kinda shooting themselves in the foot, because they wouldn't be able to deattach themselves from security problems as easily as before. It wouldn't surprise me to see a major company using this product suing them for this very reason...

    8. Re:ack! by Anonymous Coward · · Score: 0

      You fuckin' stupid morons, you have no common sense and like sheep, you're just following the crowd with idiotic comments that have no basis in reality. Grow up a bit before you feel you're qualified to contribute to the /. community.

    9. Re:ack! by Anonymous Coward · · Score: 0

      Have read the EULA recently? Well, they will have one similar to it for this "great new innovative product". Surprised?

    10. Re:ack! by timeOday · · Score: 1
      You know, I just realized something: if you buy a product from Microsoft that they are selling solely as a security product, does that mean you can sue them up the wazoo (and win) if it fails to protect your computer?
      Why, no, it means they'll sell you another layer of security programs to protect the security programs that were supposed to protect the OS that was supposed to protect your computer in the first place! Remember the Gary Busey helmet protector protector protector?
    11. Re:ack! by Anonymous Coward · · Score: 0

      I believe UPS (or some other shipping company) was forced to stop acting as the insurer of packages for this same reason. Essentially it's extortion.

    12. Re:ack! by GryphonTech · · Score: 1

      Ahhh. but they are planning to release patches and fixes for it.

      That will be in the MS Security patch kit on sale for only $150, but if you buy it with SP3 ($75) and Office ($500) it's only $99....

  8. Seems unusually blatant by bigberk · · Score: 4, Insightful

    I mean, they were buying up security competitors as recently as Wednesday! Wouldn't that be a bit too blatant? Are they really trying to monopolize the desktop security market, or are they just trying to help cover costs in what is going to prove to be a very, very expensive area (once they start getting sued for having such a shoddy, insecure product)

    1. Re:Seems unusually blatant by kosmosik · · Score: 1

      > Are they really trying to monopolize the desktop
      > security market
      (?...)
      They have created it. So natural way is to monopolize it. ;)

  9. newsflash by bugbeak · · Score: 1

    Newsflash: Now all consumers are going to lose a peety weety bitty amount of greenback over security...say....$999? ... what else is new?

  10. Just one thing to say: by sgant · · Score: 5, Funny

    What balls!

    What a huge, big, heavy set of balls this company has.

    Hey, let's kick them!

    --

    "Leo Fender was in a 'state of grace' when he designed the Stratocaster." -- Paul Reed Smith
    1. Re:Just one thing to say: by Anonymous Coward · · Score: 0

      Might as well kick them, we've already licked them enough.

    2. Re:Just one thing to say: by EnronHaliburton2004 · · Score: 3, Funny

      Hey, let's kick them!

      You ever kick the balls of an 800 pound gorilla?

    3. Re:Just one thing to say: by Anonymous+Crowbar · · Score: 1

      Taste's like chicken. Bad salty chicken but I digress...

    4. Re:Just one thing to say: by Peter+Danenberg · · Score: 1
      What balls!
      That's not testicles, man, that's chutzpah; and chutzpah is an emasculate virtue.
    5. Re:Just one thing to say: by northcat · · Score: 1

      Mod parent insightful. I said the same thing when I read the summary. I was damn serious.

  11. That's the plan.... by Cycline3 · · Score: 1

    That's the plan.... what's the problem? :^)

    1. Re:That's the plan.... by DataPath · · Score: 1

      Just this:
      Microsoft has incentive to write insecure software in the first place, if they can sell people on their security package.

      --
      Inconceivable!
  12. Make money money money! by Man+in+Spandex · · Score: 2, Interesting

    If they can make a shitload of money out of any marketting strategy, Microsoft will do anything in their power to sell the most of anything and make profit.

    Yes it is stupid. Users/companies pay for licenses of Windows which is somewhat costly when you compare what other solutions can do for a fraction of a price (Linux?!) and on top of that, they want to potentially sell you crap so their crap can be more secure using the previous crap. What a load of crap.

    1. Re:Make money money money! by Anonymous Coward · · Score: 0

      Fuck, you use the word crap a lot.

      What I fucking hate most about this is that I only buy windows for fucking playing games, linux and winex doesn't fucking solve that problem for me. What other fucking additions do I have to make to windows just to play a few fucking video games.

      Here is what I have to say, fuck this shit.

    2. Re:Make money money money! by kosmosik · · Score: 1

      > Yes it is stupid. Users/companies pay for licenses
      > of Windows which is somewhat costly when you
      > compare what other solutions can do for a fraction
      > of a price (Linux?!)

      I love Linux, I am using it as primary and obly system everyday... But please consider that: in my work we are running office consisting of 17 employees. Few of them need to use Corel - they don't have this on Linux, sorry - they *need* to do it since we put all of our DTP work outside, and Linux has no option for that. Also I have (name it three) workers that *need* MS Office - they do decent job of making shit-stupid PR stuff in Office, and only thing they know is MS Office (OpenOffice.org is somewhat limited in stuff like data analysis and presentation). So at our scale it makes Linux on desktop more expensive than Windows - people are trained and used/tied to Windows. So OK for me Linux is great in lowend network stuff (DNS, mail, www, routing etc.) which does not face users but on desktop it is *very* hard to judge which is cheaper... Keep in mind that always man harbour (sorry for my poor english ;)) is always the main cost. You can specify *few* areas where Linux has awful cost advantages (name it data entry centers, call centers, operating home made applications) but when it comes to small offices you just cannot implement Linux right now. It (Linux) costs *more* here.

    3. Re:Make money money money! by Anonymous Coward · · Score: 0

      If you have 5 people that need and use Photoshop, would you buy it for all 100 people in the company? Why is Windows any different? Buy what you need to get the job done.

    4. Re:Make money money money! by Anonymous Coward · · Score: 0

      If they can make a shitload of money out of any marketting strategy, Microsoft will do anything in their power to sell the most of anything and make profit.

      Umm... isn't that the whole point of a company?

  13. Software sales - marketing by Ogrez · · Score: 5, Insightful

    The only thing in this world I have found to be sleazier than lawyers are software salesmen. This isnt isnt a new idea from Microsoft... IBM did it for years with mainframe releases. You have to have a service contract to get the updates to fix the bugs.

    This problem of releasing buggy software and charging for fixes is inherent in the software world.

    --


    Fire in the hands of the village idiot is no tool, but a weapon of mass destruction
    1. Re:Software sales - marketing by ZeeExSixAre · · Score: 1

      Joe Blow doesn't have $10,000 to spend with Microsoft just for Microsoft to provide service for its own product. Corporations do.

    2. Re:Software sales - marketing by eddy+the+lip · · Score: 1

      I agree that this kind of thing - charging for bug fix releases - is sleazy. But it's not an easy problem (*Disclaimer: I don't think this excuses MS, whom I think are incredibly slimy, or anyone else).

      There are two options:

      1. charge a stupid amount of money for a product that's behind the feature curve
      2. charge a (mostly) reasonable amount of money for a rushed product, with all the flaws that implies
      The problems with 1) are obvious, from a company-health standpoint. The problem with 2) is that all those bug fixes cost money. Otherwise 1) would be cheap. You have to pay for that quality somehow.

      MS have themselves in a bind - they've made their money on getting "good enough" products out, and having shiny features to sell. They've been really pushing the "reasonable price" envelope for a while, but they're still way lower than what a bug free product would cost. Now people are realizing that "good enough", wasn't. Frankly, I think they've been cutting too many corners for too long, and I hope they choke on this.

      But for Joe Schmoe software developer, this is much more difficult to balance. How do you pay for bug-fixing while still remaining competitive? Bug fixing is expensive.

      Eventually, hopefully, the software market will settle enough that quality and security become major selling points. The market has to reach the point where it's willing to accept fewer shiny things, and where it's open enough to welcome a product that comes out six months later. Until then, we're going to be getting shafted on this.

      --

      This is the voice of World Control. I bring you Peace.

    3. Re:Software sales - marketing by aflat362 · · Score: 1
      Microsoft - Make crappy insecure software and sell it. Make security software to make crappy software slightly more secure and sell it.

      IBM - Make crappy software and sell it. (Exceptions to the crappy rule - DB2, AIX) Sell support for your software.

      They sound pretty similar except that IBM sells support along with its software. It would be better for IBM to try to make better products so they would have to support them less. Where with the new Microsoft model it would do them better to make more insecure software so they can sell more security software.

      --

      Conserve Oil, Recycle, Boycott Walmart

    4. Re:Software sales - marketing by f0rt0r · · Score: 1

      Agreed. The company has a budget for developing/markets/distributing/etc the software, and will most often go over-budget just getting the application to a releaseable state. Great, your selling your Business application to businesses, and start making back your costs when - bam! - a bug shows up. Darn, fixing that wasn't in the budget, and you still haven't made back the cost of developing the software. Who's going to pay for this? I know, since large software used in a wide array of software environments, the 'code maintenance' and 'support' phases will almost always be necessary( actually if you subscripe to ITIL or MOF, these phases are always there ). To keep these items from swallowing the profit, lets introduce the idea of a maintenance/support contract, and lets have the fees be per-license so that large customers pay more than smaller ones!

      Now, I am conflicted with this myself. Because yes, software does almost always have unforseen bugs because there are so many different ways it can be used in so many different software environments ( and hardware, too! ), that either your application will stomp on itself, stomp on another application they use, or get stomped on by another application ( include security patches, firmware upgrades, other upgrades ). On the other hand, it is easy to see where a company could intentionally allow for or put bugs in their application just to ensure users buy these contracts.

      Does anyone see a way to remove the conflict of interest that is evident here? If an application is blatantly buggy from release then you can be assured they were counting on support contracts for the opportunity to charge for fixes. On the other hand, even an honest, do-gooder company's software will need fixes and need someway to fund them.
      A third party would be the answer if they could have access to and an intimate knowledge of the original developer's application, but then, since the changes and development of the third party should be inline with and available to the original developer''s plan for the app, who is going to objectively manage that relationship?

      Ok, I am in a quandry, back to the simplicity of doing my laundry. :)

      --
      I can't afford a sig!
    5. Re:Software sales - marketing by myov · · Score: 1

      One of the bond movies had a line something like "As requested, the software is full of bugs. Consumers will be forced to upgrade for years". People laughed, but I don't think they got it.

      Also, don't forget about MS patching a bug in IE for Mac a few years ago, and reintroducing THE SAME BUG in a later update.

      Just while we're on the topic...
      I remember cleaning up a residential computer with XP (plugged in behind my firewall). One of the last things was to install SP1. As soon as I finished installing, I lost internet on the entire network. The machine was sending so much traffic that my switch lights were on solid (it took the load though), and P75 firewall completely gave up routing. My theory was that a virus was still on the machine, waiting for SP1 to be installed before striking.

      --
      I use Macs to up my productivity, so up yours Microsoft!
    6. Re:Software sales - marketing by Anonymous Coward · · Score: 0

      IBM did it for years with mainframe releases. You have to have a service contract to get the updates to fix the bugs.

      Did you actually pay IBM for the software in the first place, or was it provided as part of the service? If it's the latter, then that's completely understandable.

  14. Step 4 by Anonymous Coward · · Score: 0

    Step 4: Post a dupe to Slashdot

  15. That's not quite what they said. by Anonymous Coward · · Score: 2, Insightful

    Security fixes are going to be free.

    The question is whether or not the AV and/or AS tools are going to be free.

    Think of it as a choice - you can put them in the OS (so they'll be "free") at the cost of adding more bloatware (important bloatware, but bloatware) to the OS.

    Or they can fix the @#$@#$ security holes that the spyware vendors are using to install their software and sell anti-spyware software to the dumb users who are stupid enough to download kazaa.

    It's not like giant's antispyware software was EVER free...

    1. Re:That's not quite what they said. by Anonymous Coward · · Score: 0
      Right, but Giant will have an insider relationship with MS and have better access internals for detection and removal of spyware - massive built in advantage vs. other spyware removal software. MS finally realized that there was big money to be made with a particular software product again and once again is going to screw over the trailblazers and take the entire market for themselves.

      I just can't believe people keep founding companies on developing for MS Windows.

  16. In Microsoft language... by gmuslera · · Score: 2, Insightful
    as all problems are user generated, then is coherent that users must pay for solutions. After all, who click on attachments? (well, when the mail reader dont load the attachments by itself) Who not install firewalls when connecting to internet? who chooses to use a faulty browser?

    See? is end-user fault all those security problems, they must pay!

    1. Re:In Microsoft language... by X0563511 · · Score: 0, Offtopic

      "Coherant" isn't the best word for that situation. "obvious" would work a lot better.
      Also, try to work on adding in things like "the" and "it", and ownership.

      Like this: "Do you see? It is the end-user's fault that all of those security problems exist, so they must pay!" Is the correct way of wording that last line.

      What is your native language? I am trying to learn to see what language somebody uses by the mistakes made in their English.

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    2. Re:In Microsoft language... by TheGavster · · Score: 1

      Actually, in Outlook you don't need to manually click on the attachments to cause problems. The preview pane, unless otherwise configured, is basically a fully functional web browser capable of running just about any script you can think of (why you need that in email, I do not know ...). Of course, configuring your software in a secure manner is a user responsibility (though, I would consider not running problematic software would be a user responsibility to; unfortunately that means not actually turning the machine on!)

      --
      "Because Science" is one step from "Because old book". Try "Because of my experiment testing my falsifiable assertion".
  17. ...and this is surprising because? by rjch · · Score: 2, Interesting
    and now they want to CHARGE users to fix it?
    I don't know why this surprises anyone. Micro$oft is a company like any other who for all intents and purposes has a monopoly.
    It's no different to the toll road operator where I live that puts their tolls up by the maximum permitted year after year without any explanation at all - the same one who quite frequently refuses to explain their actions for unusual lane closures (usually during rush hour) with no readily apparent reason, who only pays refunds for their mistakes when the media gets hold of the story. Quite simply, if you want to get through my city quickly and easily, you have no choice.
    (free "well done" to whomever identifies the city I live in and the toll operator I'm referring to)
    1. Re:...and this is surprising because? by dsci · · Score: 2, Interesting

      I don't know why this surprises anyone.

      It actually is not surprising that MS will seek a new revenue stream. What may be, well rather sad, is that so many people will pay for it.

      Somebody at MS has to realize this will strengthen OSS alternatives even more.

      Next week, we'll have a statement released that this fee won't really increase the TCO of MS based systems.

      --
      Computational Chemistry products and services.
    2. Re:...and this is surprising because? by Eggplant62 · · Score: 3, Funny

      Really, this is just MS's Xmas gift to the Open Source Software movement. They've shot themselves in the toes too many times to count so far. Now they've shot themselves in the kneecap; next shot will be to the head.

    3. Re:...and this is surprising because? by Anonymous Coward · · Score: 0

      I wanted to waste 5 minutes.

      I had no clue what you referred to, and I quickly cancelled out most US cities that I have been in.

      Thus I desided to reverse you dns... Which indicated you are in australia, in the melbourne region.

      Google search provided that the city has a chain of toll highways that is called citylink (more specifically the Mitchton-Frankston expressway), which was recently deprivitized, giving ownership (or partial ownership to macquarie's bank, and something referred to as connecteast, which is probably a consortium, which the bank is the head off...I could be wrong), which seemed to be set to making a huge profit off the road.

      Everyone else seems a bit concerned, especially the melbourne's local government operator of transport.

      My guess is the citylink would be the only one ripping people off in the region, as one is expected to do when the deprivatization took place within past 7 years or so.

      So how many brownie points do I get considering I have never been to australia, and the only think I knew about melbourne before this was that it is in the SE of Australia.

      BTW. Photo of citylink looked cool. The one with the circular beam 'roof'.

    4. Re:...and this is surprising because? by Anonymous Coward · · Score: 0

      Microsoft don't have a torso?
      Interesting...

    5. Re:...and this is surprising because? by Eggplant62 · · Score: 1
      Microsoft don't have a torso?
      Interesting...


      Well, knowing how spineless they really are, no... at least not in my world they don't.

    6. Re:...and this is surprising because? by Anonymous Coward · · Score: 0

      Sounds like the 407 highway in Toronto. I know its not, though. The thing was built with public money under one government and then sold by a conservative government later on for pennies.

      It's strange... in Canada the liberals stand for public corporations and so called "big government" despite the fact that liberalism is essentially the opposite, whereas the conservatives stand for small government, but traditonally conservatism does not mean this! Agh.

    7. Re:...and this is surprising because? by Anonymous Coward · · Score: 0

      thank you for being mr. overdramatic

    8. Re:...and this is surprising because? by Anonymous Coward · · Score: 0

      "I'll form the head!" "I'll form the kneecap!" "I'll form the toes!" "Togther, we are... V-P-TRON!"

  18. Re:Google sucks by Anonymous Coward · · Score: 0

    I did buy stock, and it's gone up 50% since I bought it. Thank you.

  19. Or.... by killermookie · · Score: 2, Informative

    You can continue to use free applications to do the work for you.

  20. According to /. they will lose either way... by C.+Mattix · · Score: 5, Insightful

    Look at it this way. They bought an adware company because the see that this is a problem. If they suddenly "bundled" an adware solution, the zealots would say they are trying to drive adaware and spybot out of the market. But since they are selling the solution and hence giving the customers choice, they are trying to screw the customers. No matter how secure they make the OS, there WILL be people who will run as admins and click "yes" to everything. These are the solutions that they are going to sell.

    It isn't the first time they've had security software either. Anyone remember MSAV.exe?

    1. Re:According to /. they will lose either way... by nizo · · Score: 2, Funny
      No matter how secure they make the OS, there WILL be people who will run as admins and click "yes" to everything. These are the solutions that they are going to sell.

      In this case I am thinking their solution will be a 2x4 labelled "Clue-by-four" with a little attached sheet that says, 'If you always run everything as admin and/or click YES on dialog boxes without thinking, hit yourself in the head with the Clue-by-four. Repeat as needed'. Cost: $380 plus shipping.

    2. Re:According to /. they will lose either way... by wuice · · Score: 1

      If only following those instructions would keep your machine from getting compromised...

    3. Re:According to /. they will lose either way... by C.+Mattix · · Score: 1

      I could not agree more, but unfortunatly, with that solution you have an unconscience body you have to work around to de-hack the machine.

    4. Re:According to /. they will lose either way... by Anonymous Coward · · Score: 0

      they are trying to screw the customers

      Micro$oft! Trying to screw the customers??? NEVER!!!!

      ** Was anyone able to pick up pn my sarcasm? :p **

    5. Re:According to /. they will lose either way... by Spoing · · Score: 1
      1. Look at it this way. They bought an adware company because the see that this is a problem. If they suddenly "bundled" an adware solution, the zealots would say they are trying to drive adaware and spybot out of the market. But since they are selling the solution and hence giving the customers choice, they are trying to screw the customers. No matter how secure they make the OS, there WILL be people who will run as admins and click "yes" to everything. These are the solutions that they are going to sell.

      Adding software to deal with these problems isn't a fix -- it just adds complexity. Unfortunately, the third party developers can't reduce complexity on Microsoft's Windows very easily. What they usually do is layer another chunk of software on top of what is provided in an effort to disable or hide some parts.

      Microsoft, as the developers of the OS, is in the unique position of being able to fix the problems without increasing complexity. That they intentionally are not fixing the problems is damn frustrating. That they now want to profit off of this inaction is laughable.

      --
      A firewall can not protect you from yourself. Turn off what you do not need. Do not use the firewall to do your work.
    6. Re:According to /. they will lose either way... by Nikker · · Score: 1

      Bzzzt....wakeup call

      Lets step back a bit and look at the problem. The malware/spyware does not have to be "installed" in many cases because of expoits. There will always be times when people will click an install link out of mistake or being plain gulible.

      To break it down further you being the software developer know that if a signal (packet) or series of, gets intrepeted by your program it cant handle it and passes it off to the CPU with out dieing.

      This has been discovered by a programmer and used to install programs that were written more poorly than the hack.

      On top of it all these programmers are selling the exploits so evreyone has a back door to your computer. Oh ya and all of these problems are related back to explorer and the OS takes some of the credit.

      If I was a business major I would almost begin to think they were making it both ways, as it seems that these 'holes' are left open for a long time and even when they are closed computers continue to be infected.

      So my question to parent is if this is the case would you really want to give that company more monney to sell you a program that is not intended to fix the holes just 'try' to catch them as they attempt.

      The people on this blog see this and that is why there is all this griping...

      --
      A loop, by its nature, continues. If that didn't make sense, start reading this sentence again.
  21. so what is new by tmbailey123 · · Score: 1

    I don't know why anyone is surprised or complaining. Doesn't the public pay for virus protection ? All the same arguments apply. Except M$oft doesn't own a virus protection company (or do they ?)

  22. User error, eh? by kryptkpr · · Score: 5, Interesting

    Something from the article rubbed me the wrong way:

    "Spyware usually gets on your computer through human error," said Marc Maiffret of eEye Digital Security Inc., which regularly discovers serious Windows flaws.

    First.. a confession: My name is kRYPT, and I used to use Internet Explorer. I used to keep it patched, and updated. I browsed on High Security. I ran Spybot S&D and Adaware regularly, and TeaTimer always.

    Spyware STILL got in. Every Spybot scan would regularly reveal something nasty (normally DSO or other IE Exploits).

    Perhaps it's true that most Spyware is the result of user action (such as installing shady "free" smiley-enhancing software), but _lots_ of the Spyware out there is simply a direct result of using IE.

    PS: I see the spyware people are trying to attack Firefox too.. see cracks.am for an example. However, in Firefox, a nice dialog pops up, makes it perfectly clear the code that's being requested to run is unsigned and unvalidated, and makes you wait for 2 seconds before you have the chance to accept or deny installing it.

    --
    DJ kRYPT's Free MP3s!
    1. Re:User error, eh? by Flamesplash · · Score: 1

      Where do you get your spyware from anyway? I've never had a piece of spyware I wasn't responsible for, read AIM and it's back end game thing that watches you. I've been running IE for 4+ years and nothing that was IEs fault.

      --
      "Not knowing when the dawn will come, I open every door." - Emily Dickinson
    2. Re:User error, eh? by rackhamh · · Score: 4, Funny

      Spyware STILL got in. Every Spybot scan would regularly reveal something nasty (normally DSO or other IE Exploits).

      Moral of the story: pick your porn sites wisely.

    3. Re:User error, eh? by Tony+Hoyle · · Score: 1

      The DSO thing is a bug in spybot not an IE exploit.

      It *always* says there are DSO exploits found and deletes them. Just ignore them.

    4. Re:User error, eh? by Anonymous Coward · · Score: 0

      Pretty ironic that your music is hosted on a site that IE 6 SP2 blocked a pop-up on.

    5. Re:User error, eh? by ad0gg · · Score: 1

      IE high protection level disables javascripts,activex, embedded objects(flash,etc), active content. There's no way to install anything on your computer with IE at high level. Lot of pages won't even work at highlevel since they require javascript or have flash menus. Exploits usually took place with activex or some javascript exploits for drag drop or local security spoofing.

      --

      Have you ever been to a turkish prison?

    6. Re:User error, eh? by dynamo · · Score: 1

      Smiley enhancing software?!!???!

      I'd hope it's free.

    7. Re:User error, eh? by drsmithy · · Score: 1
      First.. a confession: My name is kRYPT, and I used to use Internet Explorer. I used to keep it patched, and updated. I browsed on High Security. I ran Spybot S&D and Adaware regularly, and TeaTimer always.

      Were you running as Administrator ?

    8. Re:User error, eh? by Trepalium · · Score: 1

      Well, several people became infected just by visiting The Register. You can read about it here. It wasn't even The Register's fault, but rather their advertising provider that was responsible for infecting computers with the Bofra exploit.

      --
      I used up all my sick days, so I'm calling in dead.
    9. Re:User error, eh? by Anonymous Coward · · Score: 0

      I know on my mess around install of xp, I tried going to some links posted in a chat room, didn't load on firefox, I was bored and didn't care about spyware on that install, and tried it with IE, sites still didn't work (more than one I tried). After using IE, I was riddled with spyware. My fault? I suppose, I knew it would happen, and it did.

      But really, I think users have a reasonable expectation that this would not be the case. MS shouldn't charge extra to fix it. But hey, that's not how the corporations who are running everything want to do business. All I can suggest is don't use IE, and do whatever you can to abandon MS, but this is /. so the people reading reasonably know how to run a secure Win32 system, so I guess it's pointless beyond that. But I see it as a greedy corporation full of heartless bastards lying screwing over millions of users that were way too trusting when they entered into a business agreement with MS and now they are going to be made to pay dearly for it. Either way I think what MS is doing is wrong. They should admit to critical flaws and work in good faith to fix them. Making the users pay for this mess is absolutely wrong.

    10. Re:User error, eh? by Anonymous Coward · · Score: 0

      Hi, my name is anonymous and I use IE. I keep my system patched and up to date. I don't browse on High Security. I have ActiveX and Javascript turned on.

      I used to run Spybot S&D and Adaware regularly. Except they only found one item -- after I had installed Kazaa.

      If you keep away from the warez and pr0n sites you aren't going to have a problem.

      You can get the same effect in IE as you see in Firefox by telling it to prompt you before downloading an ActiveX control.

    11. Re:User error, eh? by madprof · · Score: 1

      The moral of that particular story is "Don't read The Register" - which comes with a whole host of other benefits too.

    12. Re:User error, eh? by Anonymous Coward · · Score: 0

      Yes, he had to be, from the sounds of it he was using windows.

    13. Re:User error, eh? by Anonymous Coward · · Score: 0

      This is true, and can easily be confirmed by checking the Spybot Forums. Although it doesn't exactly delete the DSO exploit. It's supposed to change a registry setting, but IIRC it changes it to the wrong value. The underlying vulnerability was patched by MS long ago anyway, so it doesn't matter much.

      Anyway, I used to be the same as the grandparent post, using IE with patches and running Spybot and Adaware. I don't recall them ever finding anything other than tracking cookies. I'd like to believe that IE lets all kinds of crap in even at high security with all patches, but I've never seen any good evidence of this. Of course there are vulnerabilities that don't get patched right away, and it's possible spyware could install this way, but I don't think I've ever heard of it actually using an unpatched vulnerability.

    14. Re:User error, eh? by qwp · · Score: 1

      jerk, My computer name is KRYPT! That creeped me out. Time for more coffee

    15. Re:User error, eh? by Anonymous Coward · · Score: 0
      Moral of the story: pick your porn sites wisely.
      Jane's Guide is a big help.
  23. Wonder what the effects will be by KneepadsOfAllure · · Score: 3, Interesting


    There are already good anti-spyware solutions available for home-users (ie Ad-aware, etc.), and I can't imagine home users shelling out a lot of money when they can get a personal version of Ad-aware for free. I suppose Microsoft is going to be targetting corporate users, but if their solutions aren't much better than companies like Ad-Aware (hopefully) corporations will go with competitors. But then again, they might just choose Microsoft because it seems like the "right thing to do" (that is, MS makes the OS, so OBVIOUSLY they should go with MS because it'll "work better" together).

    Then again, if the MS anti-spyware is moderately priced and a lot of home-users do buy it, it may serve to drive the gap between richer vs poorer computer users (home users who shell out big bucks for a loaded Windows box vs users who pay a couple hundred for one of those Linux PCs that Walmart and others are selling).

  24. Run, don't walk by warnerms · · Score: 1

    Put Linux or FreeBSD on that machine right NOW!

  25. Good lord... by Anonymous Coward · · Score: 0

    Given there XP firewall goof (Windows Firewall in Windows XP SP2 can sometimes interpret the whole Internet to be a local subnet for dial up users.), who here is eager to use, much less buy MS Security Software?

    Once MS starts writing actual security software that works, then and only then should they consider charging for it.

  26. The Push to Linux by Nom+du+Keyboard · · Score: 2, Insightful
    now they want to CHARGE users to fix it

    More than anyone or anything else, Microsoft will become the major force pushing users to Linux.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
    1. Re:The Push to Linux by nizo · · Score: 2, Funny

      I always wondered if maybe they see the writing on the wall, and they are planning on milking their cash cow for all its worth while they can, even if blood starts coming out instead of milk. Eww I think I just grossed myself out.

    2. Re:The Push to Linux by Anonymous Coward · · Score: 0

      It already is. I don't think Linux would recieve nearly as much attention if there were several major commercial OS's competing.

    3. Re:The Push to Linux by tyman · · Score: 1

      But does average Joe who buys a computer for a few hundred dollars at Best Buy with XP installed realise that there are alternatives to the Windows operating system, that they are free and where to get them? No of course not, he would just assume paying for security and repair tools are all part of owning a computer.

    4. Re:The Push to Linux by rseuhs · · Score: 1

      Your comment is not just funny, it's also pretty insightful. Their recent moves (for example Licensing6.0) all point to a short-term strategy to get as much money as possible out of Windows before it gets marginalized by Linux.

  27. I R N IDIOT by Anonymous Coward · · Score: 0

    I overrode the user agent string which was must have caused Google to serve pages using a western coding.

    Never mind about the character encoding thing. Google groups still sucks, though.

  28. "Click" by CleverNickedName · · Score: 1

    "CNN reports that Microsoft may charge extra for security software. So first they edge their competition out of the browser market, then they tie IE into the OS so tightly that a crash in IE can crash the computer, and then they make IE so vulnerable that just using it is hazardous to the typical computer's health, and now they want to CHARGE users to fix it?"

    News posts are becoming more and more like trolls...

    That "click" is the sound of my slashdot bookmark moving from my news folder into my entertainment folder.

    --


    Unfortunately, I am not Wil Wheaton
    1. Re:"Click" by EduardoFonseca · · Score: 1

      And this click is the sound of my Wil Wheaton bookmark moving from my Picard folder into my Jar Jar Binks Folder :P

      Just kidding! ;)

    2. Re:"Click" by Zork+the+Almighty · · Score: 1

      It's just Michael. He's the biggest troll of all.

      --

      In Soviet America the banks rob you!
  29. Damned if they don't by Anonymous Coward · · Score: 0

    If it was for free, this very same front-page article would be accompanied with some conspiratorial anti-trust spin. There is no way MS can win on this.

  30. Wow! by Murphy+Murph · · Score: 1

    This story summary takes the cake.

    Are we, as Slashdot readers, supposed to be upset when Microsoft incorporates programs into Windows, or are we supposed to be upset when Microsoft sells additional programs?

    Isn't this just the kind of action we have been asking for? Instead of abusing their monopoly by giving away products (i.e. IE) it looks like Microsoft is actually selling a product.
    How dare they!

    Before someone replies with a line like "It's funny that M$ is selling an additional product to fix their own broken software." I want to mention that many many spyware programs do not exploit Windows, but rather exploit gullible users..

    --
    I dub thee... Sir Phobos, Knight of Mars, Beater of Ass.
    1. Re:Wow! by MoneyMan · · Score: 1

      No... what we've been asking for is for Microsoft to fix the OS internally, so that spyware / adware / virii have a more difficult time of getting ahold of a machine.

      Put a Win box on the internet. Wait 15 min.

      BAM! "You've got spywware!"

      This is what we've been screaming about.

      Besides, releasing a fix to a broken system for free is not abusing a monopoly.
      And yes, I do consider allowing other programs (spyware, virii) to auto-install / auto-forward themselves to be a broken system.

      Imagine Ford or GM releasing a vehicle that just randomly swerves left /right. Now they want to sell you a fix for it.

      Doesn't seem right.

    2. Re:Wow! by llvllatrix · · Score: 1

      Ford and GM release vehicles with some problems because settling the problems out of court is cheaper than fixing the problems ... M$ does this more often but instead you settle for $0 and instead of loosing your life you loose your sanity... Besides, you spelled gulible wrong...

    3. Re:Wow! by Anonymous Coward · · Score: 0

      "Put a Win box on the internet. Wait 15 min."

      This is getting old. I am on a Windows box right now that's on constantly and have never had a problem. It's only the clueless users that get infected in 15 minutes. Get a clue and think about how to install it and get patched without getting infected. It's quite easy. Plenty of Linux distributions need to be updated before they are considered Internet ready too.

      "And yes, I do consider allowing other programs (spyware, virii) to auto-install / auto-forward themselves to be a broken system."

      Alright, so it's clear you have no idea how to configure your system.

      "Imagine Ford or GM releasing a vehicle that just randomly swerves left /right. Now they want to sell you a fix for it."

      Cars are not software and the analogy doesn't equate.

      Also, you will still get your base OS updates for free; it's just the clueless users that want more protection that will have to pay extra. Oooh the horror........

  31. MS doing the right thing - cause they have to by falltime · · Score: 1

    Trust me MS would love to give it away free, but they cant or they'll run into even more anti-trust action, especially if their anti-virus, etc.. is as buggy as ie. No by charging they'll have to compete on a quasi-level playing field. Therefore if their code stinks they will suffer, if its good it will sell and force the industry to improve - this is how competition is SUPPOSSED to work.

    1. Re:MS doing the right thing - cause they have to by Anonymous Coward · · Score: 0

      this is how competition is SUPPOSSED to work; but not spelling.

    2. Re:MS doing the right thing - cause they have to by Anonymous Coward · · Score: 0

      no -- Microsoft will charge because they have already cornered the market on Windows exploits. You wont hear them crying "freedom to innovate" here because nobody could challenge their dominance.

    3. Re:MS doing the right thing - cause they have to by SpecBear · · Score: 1

      There are a couple problems with your reasoning.

      First, you assume Microsoft has any fear whatsoever that the government will be willing and able to effectively bring anti-trust law to bear to restrain its practices. I have yet to see any evidence that Microsoft has pro-actively adjusted its business practices to avoid anti-trust actions. History has shown it's more profitable for them to settle things in the courts.

      Second, they would have a monetary motivation to make windows only as secure as it absolutely has to be (which isn't very secure; Microsoft holds a monopoly) in order to increase the incentives for people to buy additional security software. And competing security software will always be behind because MS' team will have direct access to the code and forewarning of any changes to Windows.

    4. Re:MS doing the right thing - cause they have to by DerWulf · · Score: 1

      how can you tell? Seriously, didn't they have the 'market cornered' (what ever the fuck that means) for browsers and media players, too? Why aren't they charging for those as well? You guys need to decide what pisses you off, if you want to convince people that the OSS crowd is not hypocritical and fanatic.

      --

      ___
      No power in the 'verse can stop me
    5. Re:MS doing the right thing - cause they have to by Anonymous Coward · · Score: 0

      Ok, imagine this:

      You're running a program you just bought for 200 dollars. After you use it for awhile, a dialog box pops up:

      "Warning: Buffer Overflow Exploit Detected. Would you like to repair this software for $20 or continue unrepaired?"

      Now, I would say, "Wait a minute, it's not -my- fault they didn't code it properly, why the hell should I buy something that should have already been fixed? I'd be complaining to the company I bought the software from. This isn't like paying $20 for an add-on feature or something, this is paying extra to have people fix the problems they shouldn't have made in the first place.

      The ONLY way this would make any sort of sense would be if the software were free to begin with. Linux, anyone?

    6. Re:MS doing the right thing - cause they have to by Anonymous Coward · · Score: 0

      Sorry - I'll go slowly so you catch it this time.

      Browsers:
      Microsoft launches its "freedom to innovate" campaign to attempt to gain public support for its wanting to combine its own browser with the operating system. Other browsers are competitive prior to this.

      Protection From Windows Exploits:
      Microsoft is not begging to combine this protection with the operating system. Nobody can rival their dominance because MS can fix the problem at the source (its browser). Since nobody can compete, there is no need to give it away. So they sell it.

      Seriously - if MS has a for an exploit, where would you expect them to put it? In the Operating System so that thier tools provide no benefit??? or in the tools (for a short time) first, so that they can sell some tools and later integrate into their pathetic operating system?

      Your call ...

    7. Re:MS doing the right thing - cause they have to by falltime · · Score: 1

      The Europeans dont seem to be rolling over regarding anti-trust. Additionally you ignore the Millions (if not billions) spent in legal fees. You also ignore that security is a whole new area. MS may not have any liability to users when selling an OS with tons of holes. But with security software they will, especially if you drive all the other companies out of biz by leveraging your monopoly and giving it away free.

    8. Re:MS doing the right thing - cause they have to by Anonymous Coward · · Score: 0

      This argument is insane ... if microsoft integrated security into its product, it would just be a more secure operating system. Security is not some component you bolt on ... the only reason we've been using bolt-on security is because this particular company has been more beholden to third parties than its customers. By this I mean that a web-site developer should never have more control over my machine than I have.

      In any case, I am certain that integrating better security features into the OS will NOT raise antitrust issues.

    9. Re:MS doing the right thing - cause they have to by DerWulf · · Score: 1

      it's not even about browser security holes. Not even micheal-the-nut advocated that they'd charge for security fixes. It's about spyware and viruses which are always a possibility when a gullible userbase and an OS that actually does stuff (you know, services, networking, file IO etc) meet.

      --

      ___
      No power in the 'verse can stop me
    10. Re:MS doing the right thing - cause they have to by Anonymous Coward · · Score: 0

      This is true - much of the malware can exploit services and components other than the browser. But wouldn't you agree that the place to start should be the operating system itself?

      The userbase is gullible and ultimately things will get in. However I still think that hardening the OS and giving it more self-repair functionality would make more (technical, not business) sense than selling a bolt-on to do the same thing.

    11. Re:MS doing the right thing - cause they have to by DerWulf · · Score: 1

      Yes, MS could be more secure. Less networking services on by default come to mind. But this is not what they are trying to sell.

      --

      ___
      No power in the 'verse can stop me
  32. Short answer by Phibrizo · · Score: 2, Insightful
    So first they edge their competition out of the browser market, then they tie IE into the OS so tightly that a crash in IE can crash the computer, and then they make IE so vulnerable that just using it is hazardous to the typical computer's health, and now they want to CHARGE users to fix it?
    Yes.
    --
    Sorry, english is not my mother tongue
  33. Subscription model by Anonymous Coward · · Score: 0

    Microsoft eventually wants all customers on a subscription model. With the way things are currently, they have to provide free security updates to keep worms from spreading. If they forced you to pay every 2 years, with windows ceasing to work altogether after these 2 years were up, they would keep getting paid.

    Besides, all businesses in today's world want subscription models, not one time purchases. Managers like quarterly profits, which are accomplished very nicely by lots of regularly purchasing customers. It's also the way almost all business software is - so it only makes sense to push it into the consumer market. It's not just MS doing this in the business market... think novell, red hat... you're paying for updates and support. The bad thing about MS is their monopoly, not necessarily their business model.

    --
    Don't change your browser, make IE secure

  34. Guessing from your post... by Anonymous Coward · · Score: 0

    Guessing from your post... you don't use Windows.... so: What do you care?

  35. Purge by Mark_MF-WN · · Score: 1
    This is why commercial software companies need to have their taint wiped from the earth. Software is just too important to pay for.

    Microsoft's message is clear -- buy our software, and we'll hold you hostage with it. Thank god for Gnu, Linux, and BSD.

    1. Re:Purge by Anonymous Coward · · Score: 0

      Don't thank God. Thank the programmers :P

    2. Re:Purge by DerWulf · · Score: 1

      Yes! The socialists are coming out with hate rethoric. It's funny how you are so nice and bleeding hearted and then *bam* 'OFF YOU GO TO THE CONCENTRATION CAMP'.

      Seriously, I think grain is more important then software and I'm sure you'll agree. Now, what happened in every country that 'decommercialized' farming? Oh, why, famine wiping out millions, thats what.

      And besides, why do you hate so much? Why not use your Linux or BSD flavor and be done with it. I'm a paying MS customer and I like it that way. Let me have mine and I'll let you have yours, that way you, me and bill gates can live. Wouldn't that be civilised?

      --

      ___
      No power in the 'verse can stop me
    3. Re:Purge by Mark_MF-WN · · Score: 1
      I DO just use Gnu/Linux. But that doesn't mean I can't feel contempt for people who waste money on inferior products.

      I feel the same way about people who buy designer clothes or six different versions of the Star Wars DVD. Sure, it's their right to waste their money. But it's MY right to look down my nose at them for wasting their money.

    4. Re:Purge by Anonymous Coward · · Score: 0

      Civilized ?
      Journalist to Ghandi: "What do you think about Western Civilization ?". Ghandi : "I think that's an excellent idea!"

      Personally i think it's a sin to be or stay a clueless billionaire with so many starving people on this planet, Bill Gates being one of them.
      I'm all for social justice! Greedy billionairs,
      start sharing your money!

    5. Re:Purge by DerWulf · · Score: 1

      so you'll refrain from actions that might lead to MS being wiped from the face of the planet? Fine, we are in agreement then.

      PS: of course, I'm not asking you to relinguish your right to abstain from doing business with MS or your right to free speech as concerns criticizing them.

      --

      ___
      No power in the 'verse can stop me
    6. Re:Purge by DerWulf · · Score: 1

      sometimes I just don't know when people are kidding .. maybe its harder to figure out speech subtilities in a second language ...

      --

      ___
      No power in the 'verse can stop me
    7. Re:Purge by Anonymous Coward · · Score: 0

      Ehmmmmm. Is there actually any reason to support B.G. financially ?

    8. Re:Purge by DerWulf · · Score: 1

      yes, I want his software. Is the idea of trade really such a square peg that it doesn't fit in your minds round hole?

      --

      ___
      No power in the 'verse can stop me
  36. Well... by rewt66 · · Score: 5, Insightful
    As an employee of a security company, I don't have a problem with this. I would have more of a problem with Microsoft giving it away for free. (And, I hope, the toothless antitrust enforcement might have a problem with it, too, but I wouldn't bet on it.)

    But really, we cry "unfair" over what they did to Netscape. Rightly so; it was unfair. If they had sold IE as a separate product, it wouldn't have been unfair. So now they sell this stuff as a separate product. They're not bundling. So what's the problem?

    And there's another way this is good: TCO studies. The more extra charges you have to have from Microsoft to have a working product, the better TCO Linux has by comparison. (That is, if it's an honest comparison. But instead, what we'll probably see is bogus TCO "studies" where Microsoft looks good, but it omits the security stuff. Then when you go to actually buy it, there's these extra costs, like the auto dealers do with "dealer prep".)

    1. Re:Well... by Ann+Elk · · Score: 1
      But really, we cry "unfair" over what they did to Netscape. Rightly so; it was unfair.

      In other words, Microsoft abused their monopoly position and freely gave away their browser, and this somehow competed unfairly with Netscape's plan to freely give away its browser?

    2. Re:Well... by calbanese · · Score: 1

      Yup. Violation of the Clayton Act. If it was for a loud-mouthed District Court judge, IE would be made by a completely seperate entity.

    3. Re:Well... by rewt66 · · Score: 1
      Microsoft abused their monopoly position in the operating system to make IE the default browser. If they had just offered IE as a free download, that also would have been fair. Shipping it in the Windows install, so that it's already on all the hard drives when the customers buy the machines, is a bit different. Paying web sites to build pages that use IE-only extensions is a lot different.

      Read the findings of fact from the anti-trust trial; it's all there.

    4. Re:Well... by DerWulf · · Score: 1

      I love you!

      --

      ___
      No power in the 'verse can stop me
    5. Re:Well... by kosmosik · · Score: 1

      > As an employee of a security company, I don't
      > have a problem with this.

      Of course you do not. :) This move will cause even more sec related problems so you will have more work to do -> more profit for you.

      This move (note that it is completely hipotetical) will create some differences - networks/companies that pay will get somewhat (secure by obscure) tighter systems, but also loads of companies that will not go in this program will get even less secure...

      (...)

      > It really, we cry "unfair" over what they did to
      > Netscape. Rightly so; it was unfair. If they had
      > sold IE as a separate product, it wouldn't have
      > been unfair. So now they sell this stuff as a
      > separate product. They're not bundling. So
      > what's the problem?

      These are like two completely different issues :). Netscape vs. Internet Explorer was about *features*, browsing experience divided by costs and so on... Here we are speaking of such fundamental things like your OS (which you have already payed for, a lot) working (free of crap), nearly working (loaded with shit) or dead. So once you pay for operating system license, then you pay for this system to be able to work for your users... Why not to pay it all in one package? Like:

      Windows (cheaper but broken)
      Windows SE (secured edition)

      So buy the most expensive Windows version it wil surely (bawhahah) save you from viri and stupid users...

      This is absurd. Cant you see it?

    6. Re:Well... by caz_pa · · Score: 1

      I don't believe that this is the same situation as with Netscape. In this case, adware companies are making a living off the piss-poor security of the MS operating system. Their program is not one that would normally be necessary if MS were going their job correctly. If MS were to step up to the plate and fix their OS so that adware was not an issue, would the adware companies be able to cry foul? My point is that as a company selling adware, you must know that you may well be living on borrowed time. Then again, maybe some things never do change!

    7. Re:Well... by rewt66 · · Score: 1
      I think what you are saying is: This is kind of like a car company having two versions of a car, the base version and a version where the wheels don't fall off. Obviously, only the "wheels don't fall off" version should even be on the market; it shouldn't be an extra cost item.

      So far, I agree with what you are saying. But the problem is that I don't believe that Microsoft can actually produce the "wheels don't fall off" version - certainly not without re-writing the whole thing from the ground up with a sane architecture. What they are offering instead is, "after the wheels fall off, our wrecker will come by and help clean up the mess" - but only if you buy the wrecker policy.

      Now, they shouldn't be selling a car where the wheels regularly fall off. But given their inability to fix the fundamental security issues, all they are selling is cleanup tools. So you are right in what you are saying, that they should just sell you a package that works, but Microsoft isn't offering to do that (at any price).

    8. Re:Well... by kosmosik · · Score: 1

      Yes but I have mean this to be completely different from Netscape vs. MSIE case... Or maybe not. :) Netscape was not able to deliver "free" (as in beer) browsing experience and was killed by MS. But it is different now. Then you could choose browser (well till Netscape died - but now you can also choose). Now to get "security enhancements" (I am sysadmin Windows is a PITA for me, and I don't blame the users) I don't want these - I want secure system in first place - since they (MS) can not deliver it, I can't believe them on this (hipotetical) additional offer on being secure...

    9. Re:Well... by happyhangone · · Score: 1

      Right on... if microsoft give it away for free... the world is going to be pissed because anticompetitive practices... if it charges... the world is pissed off because it should be free... hmmmm

    10. Re:Well... by luther349 · · Score: 1

      hey i work for a car dealer lol. for one thing dealer prep is what we have to do to the cars couse normaly any used car you get is trashed so we have to clean wash and wax it and if thers something wrong with it you need to repair it couse noones going to buy a broken car. however the lot i work for doesent charge for those things but like you said some do.

    11. Re:Well... by Spoing · · Score: 1
      1. But really, we cry "unfair" over what they did to Netscape. Rightly so; it was unfair. If they had sold IE as a separate product, it wouldn't have been unfair. So now they sell this stuff as a separate product. They're not bundling. So what's the problem?

      Prediction: Microsoft will offer OEMs a cheap bundle if they ship all Microsoft products including any of the security tools they intend to sell. Ask your OEM sales group if this will impact the volumes of what they sell if my prediction turns out to be true.

      --
      A firewall can not protect you from yourself. Turn off what you do not need. Do not use the firewall to do your work.
    12. Re:Well... by Anonymous Coward · · Score: 0

      Did you even read the article? How does Microsoft selling a spyware removal tool affect you? If they bundled it with the OS you would all be screaming about anti-trust issues. The security patches are still free it's just the new spyware removal tool that's not. If you don't want it don't buy it, there are also plenty of alternatives. Furthermore, why do OS X idiots feel the need to come out and call MS 'fuckers'? A little jealous that you aren't number one (or even 2 or 3)? It really doesn't affect you and nobody really gives a shit why you use OS X. Only at Slashdot could a guy get modded up for calling MS fuckers and proclaiming they use OS X......

    13. Re:Well... by Anonymous Coward · · Score: 0

      Money can't buy security, and MS is not selling it.

      It is shameful that a cheap Taiwanese router does a better job than the mob of monkeys that bashed out SP2, who could have lifted BDS PF or the like.

      True, people paid for a 98' upgrade and got what exactly - this is on top AV, Spyware, and secret interactive installs.

      The other mob, the windows punters, really need to take a good look around - because their expenditure is not being spent on security.

      So much for drive away, no more to pay, its back to the days of radio and steering wheel optional extras racket - unless you get SUSE.

    14. Re:Well... by SiO2 · · Score: 1

      If IE wasn't so full of holes, MS wouldn't need a malware removal tool. Maybe they should fix the problem instead of selling to the world a fix for the problem they created in the first place. This is like somebody giving you the flu and then offering to sell you a flu vaccine.

      SiO2

  37. I, for one, welcome our new Microsoft overlords... by homeobocks · · Score: 1

    and I remind them that, as a trusted geek, I will be useful in recruiting others to toil in their underground spyware mines.

    --
    MOUNT TAPE U1439 ON B3, NO RING
  38. Gee, no bias on this website by rd_syringe · · Score: 1, Insightful

    After reading such a thoughtful, nonbiased, objective article submission, I'm left at a loss as to how to respond with my own subjective opinion without ruining the objectivity laid down by this stunning example of research and fact.

  39. Re: thpt! by Tackhead · · Score: 3, Funny
    > "[H]elping to protect its customers" seems awfully euphemistic to me. Wouldn't it help their customers more to release software without the security holes that allow malware in the first place?

    Not at all. The word "help" is used in the sense of "Hi. We're from Microsoft and we're here to help... ourselves."

  40. It's enough to piss a guy off by jjwahl · · Score: 2, Interesting

    Even a longtime MS user like myself...

    I've been an advocate for MS software and OS's for some time now, but the prospect of charging to fix something that is a result of many of the flaws in their software just pisses me off!
    It's really unfortunate that Linux isn't viable on the desktop yet because this would likely be the straw that breaks this camel's back.

    Unfortunately, Linux is not ready for the desktop yet, and please, save your fingers from typing because I have been evaluating distros for the desktop for many years now, the most recent being Mandrake 10.0 and Fedora Core 3. Although there is slow and steady progress, Linux for the desktop still sucks compared to WinXP.

    For now, for me and my clients, a firewalled network behind which lives a well patched XP machine (preferrably kept up to date with SUS) with Firefox, Spybot S&D (with Tea Timer), Ad Aware, Symantec AV corporate and (for my clients), the daily use account does not have administrator privileges.
    This will keep most any PC free from spyware and cruft and keep users happy.

    --

    You need people like me so you can point your fucking fingers, and say "that's the bad guy."
    1. Re:It's enough to piss a guy off by Anonymous Coward · · Score: 0

      "many.. flaws in their software.

      "still sucks compared to WinXP."

      Congrats, Mr. Windows User, for endorsing Linux...

      Perhaps you should review your criteria. At my house 'lack of applications' is NOT worse than 'destroys your data.' I'll take your sucky linux any day over your darling XP.

    2. Re:It's enough to piss a guy off by Anonymous Coward · · Score: 0

      I've been an advocate for MS software and OS's for some time now

      And yet you still post to /.?

    3. Re:It's enough to piss a guy off by linguae · · Score: 1

      Exactly! I feel sorry for the state of the average home computer user. Windows is plagued with its malware problems and it is getting worse each year. Users have accepted viruses, worms, and spyware as part of the normal computer experience, and they don't mind paying $$$ per year for anti-malware applications and protection. I have to agree with you with Linux on the desktop; it's ready for my desktop, but I don't think it can handle Joe Average yet. Windows XP surely isn't perfect; I can rant for hours about its problems (security especially) and I definately would never call it a model operating system, but let's look at its strengths: it is easy to use, has a lot of support for many software packages (doesn't matter whether you want MS Office and Photoshop or OpenOffice and the GIMP, it's all there), and actually ain't too shabby (when firewalled and Firefoxed, of course). Most users don't give a darn about the OS, they just want to check their mail, browse some sites, type a few letters or reports, and listen to their music. Unfortunately, most computers are sold with XP, and users don't like change unless it is compelling; Linux must have a must-have feature it if expects to really start cutting Windows's marketshare.

      The thing about Windows is that on the surface, it isn't that bad of an operating system. It is easy to use, has support for thousands of apps (from commercial to open source), support is readily available (since almost everyone uses it), and, when running any version of Windows from 2000 and beyond, is remarkably stable compared to Windows 95 and 98 (BSOD every day, I remember those days....). However, as we dig deeper into the structure of the OS, we see tons of structural problems. A web browser integrated into the shell, combined with insecure technologies such as ActiveX, means a new vulnerability every week. The OS has so much backwards-compatibility cruft that is also insecure.

      Windows has become the Microsoft version of the classic Mac OS; no innovation, more rehashments of old stuff, and growing internal problems with the OS. However, unlike Apple's situation with the old Mac OS, Windows is used by nearly everyone. Unlike Apple, which had a small user base and was almost moribund, Microsoft isn't currently in danger of dying. I would love to see Windows get fixed or Linux finally reach Joe Average's desktop. We'll wait and see....

  41. Terminology is the root of the problem by Killer+Eye · · Score: 3, Interesting

    Let's not call this "security software", Microsoft; remember, software should simply be secure. If you have to add a qualifier like this, guess what: you're saying most of your software has nothing to do with security, and this special extra software, for extra charge, provides the security "feature".

    These terminology differences really point to a philosophical difference at Microsoft, which is the root of all their problems. They really don't understand. Why should we think they ever will, at any price?

    --
    "Microsoft killed my company, I hold a personal grudge. I don't use Microsoft products and neither should you."-JWZ
    1. Re:Terminology is the root of the problem by Anonymous Coward · · Score: 0

      Good point. I'm off to remove Tripwire from my Linux servers.

    2. Re:Terminology is the root of the problem by TedTschopp · · Score: 1

      This isn't a bad idea. Advertise your software as secure already. Apple should try this approach with Tiger.

      --
      Fantasy remains a human right; we make in our measure and in our derivative mode... -- JRR Tolkien
    3. Re:Terminology is the root of the problem by benjamindees · · Score: 1

      Who's to say security isn't an additional "feature" ?

      --
      "I assumed blithely that there were no elves out there in the darkness"
  42. Re:Charging Allows Tracing to Culprits: Chinese by mbvgp · · Score: 0

    What makes you think these same companies wont warez these tools. If they can write spam,viruses and malware they sure can hack these tools so that it doesnt phone back to redmond with phone number and mailing address.

  43. Uh... Guess I missed the boat.. by Anonymous Coward · · Score: 0
    The security efforts, which cost hundreds of millions of dollars, are aimed at promoting consumer confidence in its flagship Windows products -- which generated nearly $3 billion in revenues this year. They also help attract new customers worried about growing threats from viruses, hacker attacks, spam e-mails and spyware

    What is this thing called windows? Can I run it on my watch? If I install it on my shoe can it make me walk faster?
    If I'm a new customer, can I get a large discount?
  44. Re:Charging Allows Tracing to Culprits: Chinese by njcoder · · Score: 1

    Yeah cause people that reverse engineer software to determine the maximum weakness of the browser would never think to get a pirated copy of the tools from the vast asian black market for software that doesn't exist.

  45. So let's see by YrWrstNtmr · · Score: 4, Insightful
    MS includes a necessary tool for free: "Unfair bundling! They're just trying to muscle everyone else out of the market"

    MS charges a fee for a necessary tool: "Charging for this? What a ripoff!" (even though their major competitors charge a fee for similar tools)

    Yes, that money may have been better spent in actually fixing the items that need these security tools, but it seems like they can't win either way.

    1. Re:So let's see by RealAlaskan · · Score: 2, Insightful
      MS includes a necessary tool for free: "Unfair bundling!

      MS charges a fee for a necessary tool: "Charging for this? What a ripoff!"

      How about:

      MS includes a necessary tool free, using the profits from their OS monopoly to destroy a competitor: ``Unfair bundling!''

      MS charges a fee for a tool which is only necessary because of their mal- or non-feasance: ``Charging for this? What a ripoff!''

      No inconsistancy here.

    2. Re:So let's see by yupie · · Score: 1

      Yes they can win. What about:
      Next time, MS brings out a new version of Win+IE reaching an acceptable quality and with no needs for this "necessary tool". Ideally free for existing Win users - no need for the extra layout features in any new version MS might be adding which basically will consist out of more clippies or dogs asking or suggesting me what I want to do.

      Viruses by e-mail or trojans or worms getting to me, not nice, but acceptable (c/q unavoidable to a certain extent) from an OS point of view. Software (or worms, trojans, etc) getting on my computer just by me browsing the net - unacceptable.

      --
      Sig (appended to the end of comments I post, 120 chars)
    3. Re:So let's see by Arch_Engie · · Score: 1

      My analogy:
      1. M$ constructed a great big road, but left a whoping great hole in the middle.
      2. M$ now wants to sell you the diggers to fill it back up.

      What they should have done is never left the hole in the first place, never mind charging people extra to fill it. If it came to it the honorable thing would be to fill it for free anyway :)

    4. Re:So let's see by miu · · Score: 1
      but it seems like they can't win either way.

      Exactly. MS is providing the OS and competing in the application market, they should be called to task because this sort of behavior is the exact definition of illegal use of a monopoly.

      --

      [Set Cain on fire and steal his lute.]
    5. Re:So let's see by incom · · Score: 1

      Option 3: Fix bugs and patch holes, and stay out of "security solutions" other than that. Screwing people isn't thier only choice.

      --
      True genius is grasping a situation like a peice of fruit, and peircing it just right so that it drains dry.
    6. Re:So let's see by ChuckleBug · · Score: 2, Interesting

      Yes, that money may have been better spent in actually fixing the items that need these security tools, but it seems like they can't win either way.

      Since they haven't fixed those items, they don't deserve to "win" either way.

      I keep seeing the analogy with people's complaints about IE. Not the same. With IE, MS undercut the competition with a tool for using the computer, not for fixing problems of its own making. The WWW isn't a Microsoft bug.

      MS is caught in a Catch-22 of its own making. My heart bleeds.

    7. Re:So let's see by shadowmatter · · Score: 1

      Necessary tool?

      You mean like...

      1. Media Player?
      2. Movie Maker?
      3. Windows Messenger?
      4. Internet Explorer?

      Because, we all know that if -- after the computer is booted for the first time -- the user can't sit down, edit his home movies, download trailers from the Internet and play them, all while blabbing to his friends about Natalie Portman's hot grits, then Microsoft has failed to provide what is "necessary," eh?

      - sm

    8. Re:So let's see by imess · · Score: 1

      How about providing a free tool as a separate download? This way nothing is bundled so the users have to make a choice among all the free/paid alternatives.

    9. Re:So let's see by kavau · · Score: 1
      MS includes a necessary tool for free: "Unfair bundling! They're just trying to muscle everyone else out of the market"

      No one in their right mind has ever complained about Microsoft bundling any free products with their operation system (well, many people did complain, but let's not talk about these...). What people complained about rightfully, is Microsoft not allowing computer distributors to customize the initial setup of their systems according to their own plans (i.e. have Netscape instead of IE preinstalled), or make it impossible to remove certain bundled software from the system (be it by threatening to revoke licenses or by "integrating" it tightly into the OS.

      To summarize:

      Microsoft shipping free security software with their OS: great!

      Microsoft preventing distributors to ship their systems with Norton AV or ZoneAlarm preinstalled: abuse of monopoly power that should be punished.

    10. Re:So let's see by Anonymous Coward · · Score: 0

      "MS charges a fee for a necessary tool"

      A tool that only is neccesary because of MS does a shoddy job at making a (half-way) secure OS. I mean, years at being in the business, and there is not a single copy of windows {name-your-version} to be gotten that is halfways secure or includes the latest security-fixes (on CD, or as download).

      You can think you're buying a copy of windows (or at least leasing a licence for a working version), but all you're getting (and be left with) is a beta-version, one that will not have moved from that position when its life-span has ended ....

    11. Re:So let's see by joepress · · Score: 1

      It's not about them winning or losing.
      It's fairness.
      If they can fix a problem with their OS - the main profit center - they should fix it.
      Are the security holes a feature we get for free and the patches a fix we need to pay for? What is to stop them from adding more holes to increase the number of patches needed?

    12. Re:So let's see by Anonymous Coward · · Score: 0

      I cant remember my password off hand, so this is AC. Monopoly leveraging isn't illegal in the good old USA.

      Check your sources.

    13. Re:So let's see by TrancePhreak · · Score: 1

      How dare RedHat try to charge for their OS. It's such debauchary!!!!oneoneoneeleven

      --

      -]Phreak Out[-
    14. Re:So let's see by zsau · · Score: 1

      You're right. MS can't win. But they chose to use an unethical method of software limitation, so screw them.

      --
      Look out!
    15. Re:So let's see by miu · · Score: 1
      I cant remember my password off hand, so this is AC. Monopoly leveraging isn't illegal in the good old USA.

      It usually isn't in itself, but Microsoft previously signed a consent decree with the US government that they would not engage in such practices.

      --

      [Set Cain on fire and steal his lute.]
    16. Re:So let's see by SharpFang · · Score: 1

      Time to look into my M2 poll and cull some braindead moderations.

      Say, a tire in your car tends to explode from time to time at random, putting you on risk of death. Are you all -that- grateful the manufacturer sells your car with their own tires and not letting the dealers, or even you, to replace them with something safer?

      And now, despite their long history of failed attempts to fix exploding tires in their cars, now they want to charge extra for replacement for a safer version. "Wow, great!" you shout.

      Unfortunately nobody got killed in IE crash yet, and EULA protects MS from any damage claims for loss of data and money.

      --
      45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
  46. Company charges money for product... by kahei · · Score: 4, Funny

    ...slashdotters baffled.

    --
    Whence? Hence. Whither? Thither.
    1. Re:Company charges money for product... by Lord_Dweomer · · Score: 1
      Company charges money for product when company has a financial incentive to make that product as flawed as possible......who's baffled now?

      --
      Buy Steampunk Clothing Online!
    2. Re:Company charges money for product... by clontzman · · Score: 1

      It's kinda similar, in a way, to the whole Linux "charge for support" model, isn't it? The OS is free, but you pay for installation and ongoing support, so the incentive is for the distro producer to make it as obtuse and difficult to use as possible so you're required to stay in a support agreement. Same logic.

    3. Re:Company charges money for product... by Anonymous Coward · · Score: 0

      I always run out of mod points before I can mod up the interesting posts...*sigh*

    4. Re:Company charges money for product... by f0rt0r · · Score: 1

      It costs money but we still get access to the source code right?....right?

      --
      I can't afford a sig!
  47. We're serious about security! by DrugCheese · · Score: 2, Interesting


    And for only $59.99 we'll show you how serious we are.

    --
    *DrugCheese rants*
    1. Re:We're serious about security! by Anonymous Coward · · Score: 0

      Is it impossible to expect you to read the article and have some idea what you're talking about before posting?

  48. IE is "free" by PoderOmega · · Score: 1

    Does anyone know if MS considers IE as a free (as in cost) program or if it considers it part of the OS? I could see where they could argue that because IE is a "free" program that you would have to pay for support and other "features". But if they consider it to be part of the OS then they are really just shafting people. Or how about this question: If Dell includes a "Free" printer with your Dell computer (yeah yeah, it really isnt free with the cable and ink is it? just pretend its free), and it breaks, do they repair it for free? I would guess yes. But I'm not really comparing apples to apples here. Just something to think about i guess.

    1. Re:IE is "free" by Anonymous Coward · · Score: 0

      i think they consider it part of the os.. sure you can dl and install ie.. but its always upgrading a previous version if you have win95a or something with no ie, the latest version of ie wont even install.. so the only way to get IE is to have an OS that comes with it, previous OS (like 95) that didnt come with it, cant get it (well they can get like ie4 but not ie6)

  49. Re:Uh... Guess I missed the boat.. by Anonymous Coward · · Score: 0

    Yep, they are going for customers worried about growing threats from viruses, hacker attacks, spam e-mails and spyware.

    If I don't use windows, does that mean that I'm worried about the above?

  50. User error... by kosmosik · · Score: 1

    This is kinda stupid. MS is trying (and they suceed with it) to make an OS aviable to every non-tech person to operate - OK - this is OK for me. But then why they blame people that they don't know shit about computing? People do not know shit - they bought Windows and wish to have their job (be it surfing net) done. I can take the same user surifng net on Windows with MSIE and on Linux with (also) MSIE. Guess which platform will be crawled to death by spyware... But where is user error?! Since the same user will be using the same software... Oh. It is the platform!

    Well Linux example is quite hardcore. Usualy I put Mozilla Firefox combined with Mozilla Firebird (I've made it a company policy :>, we also host some applications which are Firefox only) on Windows machine, antivirus and spybot for spyware removal running at 4AM and systems are clear...

    But where is user error?

    1. Re:User error... by Crimsane · · Score: 0

      put Mozilla Firefox combined with Mozilla Firebird

      I'm curious, do you have a patched copy of the old firebird, or do you in fact mean thunderbird?

      I haven't got the time to check what security fixes have been in since firebird (.7) and patch them myself, but if i had an updated copy i would definitly be using it.

      I love firefox and all, but when i want just a really *really* simple browser, firefird/phoenix as i remember them would be awesome.

  51. Apple did this a lot in the '80s by davidwr · · Score: 2, Informative

    Apple did this a lot in the '80s so they wouldn't tick off ISVs. They even went so far as to cripple their hard-disk formatting utility to only work with their drives, so utility vendors could make a living.

    Maybe Microsoft doesn't want to tick off the commercial anti-spyware tool vendors.

    Maybe, just maybe, they want to leave the door open for zero-cost or donation-supported anti-spyware vendors like Spybot Search & Destroy. Nahh, Balmer & Co. aren't that altruistic.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  52. Free Alternatives by CypherXero · · Score: 1

    Free alternatives DO exist, although many casual users don't know it. Things like Firefox, AVG, Zone Alarm, eTrust EZ Guard, etc... And it's companies like Best Buy and their "Geek Squad" who's unknowingly Microsoft's best partner, because instead of offering free solutions, they offer costly, expensive solutions, never telling the customer that there are other ways.

    1. Re:Free Alternatives by DerWulf · · Score: 1

      it's clearly the businesses obligation to act against their best interest. If the user is really ignorant about computers he should have someone to educate him. Turning to people that stand to gain from your ignorance is the last resort and customers usually make that choice deliberatly because it's the easiest way. Basically they trade time and though for money. It's like me wandering into bike store without prior research. I'll get a bike with features and endurance I'll never need at a price I can barely afford. What is there to complain about? Everyone knows this.

      --

      ___
      No power in the 'verse can stop me
  53. Software company purpose... by ReeprFlame · · Score: 1

    The ideal software company would create a package that does not nag the end-user but rather assists him as much as possible in the original suite. An OS has the intent to work optimally under its circumstances with limited bugs. Yet, Microsft deems this untrue by giving security software to users for free because of insecuity panics of these end-users. [Yes, MS, Firewalls and Automatic Patching count as security measures] They may not be optimally incorperated into all packages, however, tehy should be at least functional to an extent, maybe with a paid upgrade for them to perform better [in regard to anti-virus or firewalls, etc] Microsoft has misconcieved its presence in the software market once again... When will it stop? When will they realize that stupid, simple mistakes like this can comprimise the "Windows experience" for everyone.

  54. Ignorant remarks by ad0gg · · Score: 1, Informative
    " then they tie IE into the OS so tightly that a crash in IE can crash the computer"

    Yawn something called protected memory and considering IE runs in seperate process called IExplorer.exe, how is IE going to crash windows? I just love ignorant remarks.

    --

    Have you ever been to a turkish prison?

    1. Re:Ignorant remarks by CypherXero · · Score: 1

      Because IE is tied into the OS, and uses things like ActiveX which is a known security hazard. If a user is browsing with IE, and picks up a virus/malware, then it's going to infect the Operating System, since IE and Windows are tied into each other. That's why.

    2. Re:Ignorant remarks by Anonymous Coward · · Score: 0

      And where, exactly, are they browsing to pick up this virus/malware?

    3. Re:Ignorant remarks by Anonymous Coward · · Score: 0

      Have you ever used windows? Hell, I've seen NOTEPAD crash windows. Protected memory or not, when IE crashes with some DLL, that same DLL is used by EXPLORER, so explorer will crash, without a shell basically windows has crashed.. ok maybe its not a kernal crash but its still pretty bad.. and sure you can restart explorer but itll just crash again until you reboot thats for 2k/xp if you're running 9x, ie can crash the kernel

    4. Re:Ignorant remarks by dioscaido · · Score: 2, Informative

      The fact that the OS gets infected has nothing to do with IE being 'tied to the OS'. It has everything to do with the fact that most people who run windows run as Admin. When you are admin no security in the world can stop a user from clicking 'yes' when asked to install software. While IE definitely doesn't make it hard for the program to be installed, even running Mozilla won't stop grandma from downloading an executable and installing it.

      I'll refer you to my other post for good resources on how to fix the issue:
      http://it.slashdot.org/comments.pl?sid=133173&thre shold=-1&commentsort=0&tid=109&tid=172&tid=201&mod e=thread&cid=11121239

    5. Re:Ignorant remarks by dioscaido · · Score: 1

      I call bullshit. You must have been running the computer in a bathtub full of water if Notepad crashed 2000/XP.

    6. Re:Ignorant remarks by drsmithy · · Score: 1
      Because IE is tied into the OS [...]

      IE is no more "tied to the OS" than khtml is "tied to Linux".

      Here's a secret: that whole "integrated into the OS" and "inseparable from the OS" stuff ? They're talking about the OS in a *marketing* context not a computer science context.

      IE runs as a regular user process. It doesn't have ties into the kernel. It doesn't have the ability ot magically raise its privileges without user intervention. Technically, it's nothing more than an application.

    7. Re:Ignorant remarks by ad0gg · · Score: 2, Interesting

      Mozilla extensions have full access to your system constrained by the users security of course. Therefore if someone wanted to write a malicous extension that installed spyware/trojan/virus, they could. It has nothing to do with the OS. Try running IE under a non priviledge account and see if activex can install stuff.

      --

      Have you ever been to a turkish prison?

    8. Re:Ignorant remarks by RealAlaskan · · Score: 1
      It has everything to do with the fact that most people who run windows run as Admin.

      Sounds reasonable. Why is it that at home, I never log in as root, but at work, on a Windows box, I often need to be Admin? Putting it another way, why is it that Windows is set up so that most of us don't have any choice about running as Admin?

    9. Re:Ignorant remarks by danlor · · Score: 1

      I'm glad you love yourself. Here is the answer.

      Protected memory helps not at all as long as you are using shared dlls. In a multitasking environment, if a process flags a semaphore, and crashes before releasing, how do you get rid of it? You reboot. This is the joy of the of embedding your brower as a root level service. Having it vulnerable is just icing on the cake. When explorer burps, windows crashes down around your neck. Switching to Firefix has eliminated this frustration for me BTW.

      I am actually happier with windows now than I ever have been in the past. Maybe Microsoft should bundle Firefox with Windows. It makes a dang nice machine!

    10. Re:Ignorant remarks by dioscaido · · Score: 1

      You are totally right about this -- Microsoft dropped the ball when they opted for ease of use versus running the desktop securely. They knew that if 2000 or XP defaulted to making desktop users non-root, people would not understand why they couldn't install stuff, and why all the crappy software out there didn't quite work, so they tried to dodge that roadblock and created a nightmare for themselves.

      Longhorn's development has a whole team looking into these issues across the board -- how to make the 'LUA' (limited user account) experience streamlined, make sure that every component in the OS works as expected with LUA, and make sure the default Longhorn installation procedure is smart enough to create primary accounts as LUA. But the proof is in the pudding, we'll see.

      By the way, I'm sure you do, but hopefully you know it's really easy to remove yourself from the administrators group and run as a regular user. Refer to http://it.slashdot.org/comments.pl?sid=133173&cid= 11121239 for useful URLS on the subject.

    11. Re:Ignorant remarks by Eric604 · · Score: 1
      In a multitasking environment, if a process flags a semaphore, and crashes before releasing, how do you get rid of it? You reboot. This is the joy of the of embedding your brower as a root level service

      So.. normal processes do not give problems with locked semaphores? Explorer seems to me just a normal process: when it screws up (e.g locked taskbar), I shut it down with taskmanager and restart it. Actualy, my win2k never crashed once (excluding boot problems).

    12. Re:Ignorant remarks by RealAlaskan · · Score: 1

      I'm usually not in the admin group, but periodically, I need to be put there to make things work. That shouldn't be necessary.

    13. Re:Ignorant remarks by dioscaido · · Score: 1

      Make what things work?

    14. Re:Ignorant remarks by dioscaido · · Score: 1

      This has been my experience also. Any lock up of explorer.exe (be it caused by IE or not) can be remedied w/ a ctrl-alt-delete, click on task manager, kill explorer.exe. It will either automatically reload as if nothing happened, or in some instances you have to restart it from task manager. I have not seen a blue screen or system freeze in a long time (barring faulty hardware).

    15. Re:Ignorant remarks by Malc · · Score: 1

      I haven't seen IE cause the OS to crash since I started using NT in 1996. Perhaps it can do it under Win9x, but then so can any app as Win9x isn't a modern robust operating system.

    16. Re:Ignorant remarks by Foolhardy · · Score: 1
      In a multitasking environment, if a process flags a semaphore, and crashes before releasing, how do you get rid of it? You reboot.
      First, you shouldn't be using a semaphore in this type of situation; if an owner might die, use a mutex. When the owner of the mutex dies the next wait will return WAIT_ABANDONED. Worst case, destroy the semaphore object by closing all handles to it, possibly by closing all the processes that have it open, i.e. restart the shell.
      Rebooting is quite excessive as none of the system services open or even care about the shell's objects (including semaphors).
      This is the joy of the of embedding your brower as a root level service.
      Internet Explorer runs as a part of the shell entirely in the security context of the current user. No part is in the kernel or a system service.
      Switching to Firefix has eliminated this frustration for me BTW.
      Actually, I'm running Mozilla 1.7.3 to avoid the crap directed at IE and for its other features. More than once I've had it crash, taking all of its windows with it. I think its still more stable than IE though.
    17. Re:Ignorant remarks by Anonymous Coward · · Score: 0

      "Because IE is tied into the OS..."

      Please explain how IE is tied to the OS more than any other program (other than the fact it doesn't have an uninstaller)? It does not run in kernel space and uses the same APIs as every other program.

    18. Re:Ignorant remarks by fafalone · · Score: 1

      When you are admin no security in the world can stop a user from clicking 'yes' when asked to install software. Sure there is, just make the user have to pass a quiz on basic security they should know before enabling the yes button.

    19. Re:Ignorant remarks by f0rt0r · · Score: 1

      I did and it can.

      --
      I can't afford a sig!
  55. it's their business plan, not a "conflict" by Anonymous Coward · · Score: 2, Insightful

    really this is ingenius.

    monopoly
    +
    user-idiocy
    +
    shitty software
    =
    self-re-enforcing money machine.

    really a brilliantly simple plan if ya think about it from a monopoly business's p.o.v.

    no surprise to anyone familiar with thier previously demonstrated propensity for... ahem... evil?

    1. Re:it's their business plan, not a "conflict" by Anonymous Coward · · Score: 0

      replace software with product, and you have most of the American economy. GO USA! GO USA! GO USA!

  56. Much ado about nothing by unicorn · · Score: 1

    They are NOT suggesting that they will sell patches to the OS or anything of the sort. They are merely saying that they *may* sell a utility that uninstalls scumware. That's all. MS is talking about selling an app to remove all the crud that people install without thinking. Spyware is NOT a result of buggy, insecure code. It's a result of users that click on anything that promises to "enhance" their user experience.

    --
    "Politicians are interested in people. Not that this is always a virtue. Fleas are interested in dogs." P.J. O'Rourke
    1. Re:Much ado about nothing by DerWulf · · Score: 1

      don't bother. You are interupting the chanting. It's micheals religion to bitch about every single thing that microsoft does or not does regardless of actual fact. Most people posting to this story have the same mindset.

      --

      ___
      No power in the 'verse can stop me
  57. Hmmm... by gkwok · · Score: 1

    So first they charge for UNsecurity tools, and now they want to charge for security tools! Why not let the two cancel each other out and not charge anything at all? Oh wait, wrong OS.

  58. Sued for defective products by mollog · · Score: 1

    Instead of profiting from its craven lack of regard for quality, Microsoft should be sued.

    --
    Best regards.
  59. What a GENIUS EVIL plan... by Anonymous Coward · · Score: 0

    "and then they make IE so vulnerable that just using it is hazardous to the typical computer's health"

    Yep, they made IE so vulnerable on purpose...because they just love the negative publicity...it's very good for their business. Their new evil plan now is to make Windows so vulnerable so that they can sell you a Linux distro.

  60. Hold on a minute by rjelks · · Score: 1

    I'm no Microsoft fan, but I don't understand what the problem is. There are plenty of good, alternatives to buying MS Software for spyware (and the best ones are free). Spyware is a huge problem for most users. I can't tell you how many computers I've cleaned with Adaware, Spybot and CWshredder over the last few years (I just did one today with over 1000 files). I see this as a step in the right direction.

    Many of the vunerabilities are MS's fault, but there are plenty of user errors too.

    "That looks like a neat search bar"

    "Ooh, a free screensaver"

    The bottom line is, you have a choice....and you can also choose a new OS if you don't like what they offer. I hear there are some descent OSS operating systems out there.

  61. See what I'm sayin'? by Eggplant62 · · Score: 1

    Am I psychic, or what??

    http://it.slashdot.org/comments.pl?sid=133058&ci d= 11112095

  62. Sue MSFT for racketeering? by G4from128k · · Score: 2, Insightful

    This sounds like a classic protection racket. They create a defective product and then extort the customer. "Pay us or bad things happen to your computer." I wonder if a nice RICO suit will change their mind about this.

    --
    Two wrongs don't make a right, but three lefts do.
    1. Re:Sue MSFT for racketeering? by DerWulf · · Score: 2, Insightful

      RICO suit? Are you out of your mind? RICO is about membership in a criminal organization. Do you suggest that MS is the mafia? Has there been a MS led drive-by shooting I somehow missed in the news?

      Futhermore, their product is not defective because there is no standard of security that can be regared as 'whole'. Every operating system has ways to delete data for instance. There is your virus right there.

      Concerning your choice of words: Extortion would be if they exploitet the security holes to bully you into buying their security package. Now, the article did in no way, shape or form suggest that, did it?

      --

      ___
      No power in the 'verse can stop me
    2. Re:Sue MSFT for racketeering? by Anonymous Coward · · Score: 0

      Dude, did you forget your tinfoil hat? All those worms get written by M$ employees of course.

    3. Re:Sue MSFT for racketeering? by codeconfused · · Score: 1

      WoW !!!! this sounds so good :D But hell they've been extorting companies and people for years now.First it was the first hit for free drug deal aka IE for free. Now their into racketeering. Pay M$ or your network will suffer. M$ is just killing M$ with this pay forever stuff. What's next? they'll beat up grandma. So glad I'm an apple and linux user.

      --
      Danger Will Robinson! You are now entering a condescending Unix user zone!
    4. Re:Sue MSFT for racketeering? by Anonymous Coward · · Score: 0

      Complaining about Microsoft "Pay M$ or your network will suffer" while running Apple... the most monolithic computer company out there.

      See any mac-clones lately? How about Real media on your iPod?

      Pot, Kettle, black.

      You just won the "OMG M$ IS TEH GHAY!!!" troll award of the day.

    5. Re:Sue MSFT for racketeering? by PhrostyMcByte · · Score: 1

      Only on Slashdot would something like this get modded up. Do you honestly believe Microsoft knew about the exploits before stamping the CDs and left them out to later sell security software? Microsoft has money to burn, and PR is everything. They wouldn't take such a huge PR hit and be known as such an insecure company just to get a few people to buy $50 in softare.

    6. Re:Sue MSFT for racketeering? by mjh49746 · · Score: 1

      But if the gov't can't/won't break them up, then who's going to have the balls to go after them with the RICO statute? Do I have any volunteers here? They got so much money that they run almost everybody and anybody (including whole governments) into the ground in legal fees, appeals, and other frivolous bullshit. The only way to beat this well funded beast is to have an en masse switch to Linux, BSD, Apple, and such. It's the ONLY way to bring them to their knees, and you can expect a LOT of collateral damage as a result.

    7. Re:Sue MSFT for racketeering? by dnaumov · · Score: 1

      Maybe then we should sue RedHat as well? Because, you know... they charge for binary patches to RHLE...

    8. Re:Sue MSFT for racketeering? by upsidedown_duck · · Score: 1

      Do you honestly believe Microsoft knew about the exploits before stamping the CDs and left them out to later sell security software?

      1) Microsoft knows about exploits before selling their software. In such a big pile of source code, there is a 99.9999999999% (okay 100%) chance they have bug reports internally that are exploitable.

      2) They are trying to work adware/virus software into their business model, to do to McAffe/Symantec what they've done to dozens of companies (Stac, DR-DOS, etc.).

      So, basically, the GP post is right on the money. Sure, they don't break knees with bats, but they effectively to the same thing with people's egos and bank accounts.

      --
      -- "Makes Little Debbie look like a pile of puke!" - Moe Szyslak
  63. Yo! Iz mo' money, mo' money, mo' money! by khasim · · Score: 1
    Users/companies pay for licenses of Windows which is somewhat costly when you compare what other solutions can do for a fraction of a price (Linux?!) and on top of that, they want to potentially sell you crap so their crap can be more secure using the previous crap.
    Think of the invoice.

    MS Windows 500 seats $100/seat $50,000
    MS Office 500 seats $100/seat $50,000
    MS anti-virus 500 seats $10/seat $5,000
    MS anti-spyware 500 seats $10/seat $5,000

    Secret leaked internal memo:
    Re: More revenue!
    Guys, we're looking at increasing the per seat charge of our anti-virus package. Don't worry about fixing all the OS bugs on the next version, if you know what I mean (aItyd).

    Bill
    1. Re:Yo! Iz mo' money, mo' money, mo' money! by Anonymous Coward · · Score: 0

      Don't forget, as a volume license holder, you also paid for the OEM version of Windows that came on those 500 PC's. It went unnoticed though as it gets tallied up on the hardware costs speadsheet because it was rolled into the cost of the PC by the vendor.

  64. now a days, it IS user error by dioscaido · · Score: 1

    Let me preface this with the statement that the lax security in pre-SP2 IE is shameful. But MS has realized it's faults, and they are quickly securing their products. You can ascribe whatever evil motivation you like to the security push.

    While there have been a few viruses in the past that legitimately exploited vulnerabilities (like buffer overflows and such), all of the spyware in the post SP2 world requires (a) user intervention (pressing yes at a prompt) and (b) running as admin.

    Make your grandma a limited user, and even if she presses yes at the prompt, the installation will fail and she'll remain spyware free. While you are at it, you can install Mozilla and let her discover the joys of tabbed browsing.

    Here are some resources that might help:
    http://www.techproblemsolver.com/limited.html
    http://www.dotnetdevs.com/articles/RunningAsNonAdm in.aspx
    http://blogs.msdn.com/aaron_margosis/
    http://www.pluralsight.com/keith/book/html/howto_r unasnonadmin.html
    http://support.microsoft.com/default.aspx?scid=kb; en-us;305780

  65. I don't see anything wrong with this. by WasterDave · · Score: 2, Insightful

    See, there's been a bit of a noise around the web about this whole thing over the last day or so and I really can't see the problem with it.

    Microsoft charge for software. Charge. Money. Whether you pay it, or you pay it when you buy your box, or your suppliers pay it and pass the cost on, or your customers pay it and have less money left over to pay it for you, or your government taxes you then uses that to pay it the basic equation is still there. Micosoft charges money for software. Get over it.

    They also charge money for shit software, in case you hadn't noticed. Then they charge more money for shit-software-server, then more again for a CAL onto shit-software-server, then some more for shit-CMS and so on and so forth. So, on the rare occasion that Microsoft buys someone that makes good software and badge engineers it, why is everyone suddenly up in arms?

    It's not like this is the first time that Microsoft has used a flaw in one product to sell another.

    Dave

    --
    I write a blog now, you should be afraid.
    1. Re:I don't see anything wrong with this. by flushtwice · · Score: 1
      It's not like this is the first time that Microsoft has used a flaw in one product to sell another.

      Actually, that's over half their business:

      DOS 5.0 troubles you still? Move on up to DOS 6.22!
      Windows 3.11 a hassle? Try Windows 95!
      Win95 still too buggy? We got Windows 98!
      Did your PC come with Windows ME preinstalled? Yeah, that's a damn shame, but you can upgrade to XP today and start endlessly downloading security updates!

      Whether by initial design, or because they just stumbled upon it time and time again-- Microsoft cannot sell a new product unless it makes their old product look bad.

      I do agree with you: Whether it's good or bad, Microsoft Charges For Software. That's just what they do. Live with it...

      ...or learn to live with using one of their competitors. I'm told OSX is nice and GNU/Linux has been a very enjoyable alternative for me.

  66. yes. by Anonymous Coward · · Score: 0

    "...now they want to CHARGE users to fix it?"

    Uh,yes. Businesses are created to make money. This would make money, therfore it's a good idea.

    It's a free market. If you don't like it run a different OS or buy someone elses tools. I hear there are free OS alternatives out there too.

    To any would be moderators, stating the truth isn't a troll.

  67. HA-HA! by HangingChad · · Score: 1

    Makes you wonder how long the MSFT sheepies are going to keep taking it up the pooper?

    --
    That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
  68. Oh and by the way by dioscaido · · Score: 1

    Microsoft intends to provide the software free of charge. The article says they are considering providing it for a fee in the future. While that would be a dumb move, for the forseeable future it will be free.

    I wonder, if that boneheaded PM hadn't mentioned their considering a pricing model for the software, would the headline on slashdot have read 'Microsoft will provide free spyware remover, how nice of them!!'. Hmm... maybe not. :)

  69. who cares about Microsoft anymore? by Anonymous Coward · · Score: 0

    People who are still stupid enough to use Microsoft Windows nowadays don't deserve better. Even my grandmother and my little niece are using Linux.

    1. Re:who cares about Microsoft anymore? by dioscaido · · Score: 1

      Who cares about Microsoft?

      I dunno, with 3 billion dollars in profits this year year alone, I'd say quite a few people actually. :) It's a 11% increase... amazing given the security blunders last year.

  70. Congratulations by simpl3x · · Score: 1

    Should a browser or any function ever be tied so tightly into the OS? They made a strategic design decision in hopes of extending their monopoly, and the results are an unintended consequence. The wonderful thing about monopolies, as well as monolithic political systems, is that the decision making is often what brings them down. The shear inability to extend every decision to its logical conclusion is an advantage to adaptive systems.

    Careful, you might get what you wished for!

  71. So the monthly fee is going to start soon by Anonymous Coward · · Score: 0

    I think we may find this is just the tip of the iceberg, and an echo of things to come. Microsoft has already well publicized that they want to charge a monthly fee for NORMAL use of your computer.

  72. Drive by installs occur on many non-porn web sites by Hamster+Lover · · Score: 4, Interesting

    I am in much the same situation as yourself, fully patched, running Ad Aware and Spybot regularly with Javascript OFF.

    I was researching information on the Roman Empire and was directed by Google to a great web site. About five minutes in I notice a small pop up window that when maximized displayed a blank window. The router, modem and network lights start to blink and the hard drive begins to churn. Ugh, I realize I am the victim of drive by spyware installation on of all things a web site on Ancient Rome. If I can't protect myself given all the above safeguards, how the hell is the average person going to?

    It took an hour or two of work with Ad Aware, Spybot and Hijackthis to remove the five or six pieces of spyware shit that installed from an innocuous web site. I am well and truly tired of this bullshit, Firefox here I come...

  73. Doesn't That Open Them Up To A Lawsuite ? by rhino_badlands · · Score: 1

    Charging for security that should be built in ?

    Does this mean selling Windows is like selling a swiss cheese condom. Hey we told you she would get pregnant unless you bought the swiss pieces to patch that up !

    You don't charge for a security application you do it like Apple Does it. Improve your product, come out with a new version every other year and say we don't support the older version and give free updates to the newest version.

    Selling the security application is the worst thing you could ever do ... what if ... a hole was left in windows that was left there on purpose ? To buy another product from that company ?

    --
    - MOSKIE
    1. Re:Doesn't That Open Them Up To A Lawsuite ? by Anonymous Coward · · Score: 0

      How about you RTFA so you have some clue as to what you're talking about?

  74. that's why by Anonymous Coward · · Score: 0

    I love my mac

  75. The Microsoft Trinity by Anonymous Coward · · Score: 0

    Everything Microsoft says or does can be explained as being motivated by a mixture of exactly three components, (1) Greed, (2) Incompetence, (3) Malice, and nothing else. This is also known as the Microsoft Trinity.

  76. In other news.. by Renraku · · Score: 1

    Why should it matter? We should make all kinds of malware flat out illegal. With punishments being handed down to the individuals in the company, rather than the company.

    Then we can bitch at Microsoft. They're just riding an advantage given to them by those assholes that make a profit from $0.01 a 'view'.

    --
    Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
  77. A simple fix by the+angry+liberal · · Score: 1

    "So first they edge their competition out of the browser market, then they tie IE into the OS so tightly that a crash in IE can crash the computer, and then they make IE so vulnerable that just using it is hazardous to the typical computer's health, and now they want to CHARGE users to fix it?"

    Not to pee on the FUD convention, but it is optional as to whether you would like explorer to launch a separate instance for the web browser and the shell. Ever since I first installed Win2k, I changed this option. Not that Microsoft is a positive force, but I see this about as trivial knowing to turn off telnet.d after you install Linux.

  78. I hope they charge -- and raise the price, too. by timothy · · Score: 1

    It comes down to Woody Allen's punchline: "... and such small portions!"

    If Microsoft wants to charge money for security fixes, Hey, great.

    The more money, the better!

    Software is never finished, only released, as the old saying goes, and it's a more accurate old saying than a lot of the weird ones like "a stitch in time saves nine." Not quite as old, I warrant, but still.

    Security fixes cost time to produce and propagate. It's *nice* when Microsoft (or any company) provides free fixes to previously released products, but hardly morally incumbent on them unless there was a moral failing in the initial sale. (A point I won't argue here wrt Windows' and security, note! :))

    If Microsoft wants to charge for security updates, it's one more reason to point out that Free software distributors *can* charge for the distribution of that software, but need not and often do not.

    As other people have pointed out in this thread already, Microsoft is in a strange position: if they release things free (esp. bundled with their OS, people complain (justifiably) that they're making it hard on competitors; if they charge for them, people complain that they're gouging for obvious functionality that customers should reasonably expect. Just as justifiable :)

    timothy

    --
    jrnl: http://tinyurl.com/c2l8yr / foes: http://tinyurl.com/ckjno5
  79. Re:Drive by installs occur on many non-porn web si by Anonymous Coward · · Score: 0

    FIREWALL!?!

  80. What? A slashdot article where the poster ... by Anonymous Coward · · Score: 0

    didn't RTFA???

    If you actually read the article, you find that the charges aren't for SECURITY SOFTWARE, but rather for a spyware removal tool written by a company MS acquired. Facts:

    1) Microsoft recently acquired a company who publishes spyware removal software.
    2) Due to browser habits and insecure default settings, many NOVICE users end up infected with spyware.
    3) There is a lucrative business making spyware detectors (see AdAware, etc, etc.)

    Imagine that MS releases the spyware removal software as freeware in a service pack. Every company that makes good products to remove spyware (Lavasoft is the prime example) is now out of business. Cue slashdot with the "MS is anticompetitive! Where are the trustbusters?" nonsense.

    The article clearly states this "charging for security updates" in the context of spyware removal. Releasing such software for free would destroy a business that really shouldn't be packaged with an OS anyway.

    The fact that the poster complains that IE is an inseperable piece of the OS, and then immediately criticizes MS for not releasing an adware removal program free for an OS purchase is hypocrisy of the highest order.

    I can't believe that there are those that think that Slashdot actually represents any section of the population but a small, irritated minority. BS articles like this are why I used to actually respect it until I got a job, decided I would read articles and not write kneejerk garbage after reading a headline.

  81. Free at first by baomike · · Score: 1

    It will be free as long and there are other companies producing like software. When they are gone then MSFT user get to PAY. Not a mystery.

  82. Terminology by Thunderstruck · · Score: 1

    I've seen quite a few of the posts so far under this article which describe getting a "trojan" in a certain amount of time without actively doing anything, or by just surfing the web.

    Now at one time I thought I understood the terminology of the trade. A trojan was, like the Trojan Horse, something the user needed to actively install before bad things could happen. Has the vernacular shifted on this term? If so, how is the trojan different than the worm or the virus? Is this word, like "hacker" now more used as a term for any malicious program that sneaks in without being expected?

    --
    Trying to use sarcasm in text-based forums does not work.
  83. Okay, so by Dorsai65 · · Score: 1

    Microsoft gets people bent over a barrel, and then decides to start charging them barrel rent, too. How is this news?

    --
    --- Asking inconvenient questions for over 30 years...
    1. Re:Okay, so by Anonymous Coward · · Score: 0

      You might want to read the article......

  84. alls I can say is . . . by synergy3000 · · Score: 1

    Hey you bought the shit, now live with the consequences of it.

  85. The problem it is not M$... by tetabiate · · Score: 1

    it is the people who use their products. I know myself some die-hard Windows users, I tried my best to understand their reasons to stick on it and arrived to the following conclusion: people that are not used to think on data in an abstract way search for a connection with reality, something perceptible by the senses. Windows does a good work in providing users with a graphical representation of data. That is in fact the value of Windows. People who learnt to use computers that way will not change to change their minds unless, perhaps, if a better visual representation is provided like Mac OS X. On the contrary, I have a good respect for command line users since they understand the underlying structure of the OS without making a connnection with the common sense. But few people in fact like the command line...

  86. Re:Drive by installs occur on many non-porn web si by MightyMartian · · Score: 0

    A firewall is only going to stop most spyware from sending data out. The crap is still there, and the second you stop the firewall it's going to blast away. I finally told the wife and kids to have fun with their computer, don't bitch to me when it starts running slow. I'm running Slack10 Linux on my box, so nya to them.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
  87. What did you all expect? by Anonymous Coward · · Score: 0

    ... and then they make IE so vulnerable that just using it is hazardous to the typical computer's health, and now they want to CHARGE users to fix it?"

    Did you expect something different? Are you really surprised by these developements? This is the way the system works. It's so logical, I would think that this would have been invented on the planet Vulcan. Let 'em charge for it. The underground will take care of that little problem. When they do start charging, unless pirated fixes show up on the net, there will be that many more unpatched machines out there, and hopefully more people wiil move away from Microsoft. Piracy is Microsoft's friend, and here it will help them maintain their monopoly. If piracy was actually to be eliminated, then people will see the true cost of using MS products, they'll starting looking for alternatives pretty damn fast. As long as Apple behaves, they won't have to look too far. Linux just isn't idiot proof enough to count yet. The liveCD is linux's best hope. Unless you break the CD, it's pretty hard to hose the system. I use slax, and everything that I tried worked so far, but I didn't try to print or use my scanner yet.

  88. how to become rich by wikinerd · · Score: 2, Funny

    1. Start a software company and fill up a new market with buggy software
    2. Charge for bugfixes
    3. Profit!!!

    1. Re:how to become rich by Anonymous Coward · · Score: 0

      wtf... at least check the first post?

  89. Good marketing by Tribbin · · Score: 1

    They have done well in promoting the need for their security-software.

    Is it possible for a company or community to build a counterpart?

    --
    If you mod this up, your slashdot background will turn into a beautiful sunset!
  90. MICROSOFT SUCKS by Anonymous Coward · · Score: 0

    the sweat off dead, gay homos with HIV!!!!!

    1. Re:MICROSOFT SUCKS by UnderLoK · · Score: 1

      It would appear it sucks brains as well there skippy. gj

    2. Re:MICROSOFT SUCKS by Anonymous Coward · · Score: 0

      just use ad-aware then yell at bill gates that he licks monkey nuts

  91. Imagine the 2008 annual report by Anonymous Coward · · Score: 0

    "This has been a banner year for Microsoft. Revenues are up 30% primarily due to our increased focus on bugs and exploits. We are especially proud of MSQA, our new quality avoidance initiative, which has leveraged our core strength into our second most profitable business unit. We also expect continued strong revenue growth with the upcoming release of MDK 2.0 (Malware Development Kit) 2.0 and VB 8.

  92. Re:Charging Allows Tracing to Culprits: Chinese by PsyoKotiK · · Score: 1

    You dont seriously believe that microsoft gives even an ounce of crap about its users do you?

    --
    This is my sig. There are many like it, but this one is mine. My sig is worthless without me, and I am worthless with ou
  93. The difference between a software salesman... by AmazingRuss · · Score: 2, Insightful

    ...and a used car salesman is that the used car salesman KNOWS when he's lying to you.

  94. Just not running as Admin by hirschma · · Score: 1

    Running Windows as a non-root user is nearly impossible for Grandma. Nothing will work, nothing installs. Games, most shareware, and even a whole lot of commercialware - they just will not work, or they will not install. And just try to explain the concept of users or permissions to her!

    There's a reason why Windows users do what they do - the OS forces you to do so.

    1. Re:Just not running as Admin by dioscaido · · Score: 1

      Games, most shareware, and even a whole lot of commercialware - they just will not work

      Is that the fault of Windows, or the fault of bad programmers? If you ran across, say, an accounting program in linux that requires you to be root to run it, would you think that Linux sucks, or that the programmers for that accounting package suck?

      I'm not going to let MS off the hook on this one, though, they definitely ran a loose ship for too long a time and let programmers do really dumb things. But it's high time we start holding the software designers to task -- they shouldn't expect a user to have full access to their machine in order to run. And the fact is, since Windows 2000 (even NT4) there has been built in user access control mechanisms for both filesystem and system resources. Try it out, Win2k lets you run as non-admin, and even has built in 'run as...' capability (you have to right click the executable with shift held down for the option to come up). It's not something new in Windows -- software ompanies have had 5 years to adopt the right way to do things. The problem is that it took until SP2 and Microsoft's push for security for those companies to even care that they were also guilty of running insecure software.

      I've been running as non-administrator for years now, and at least all the professional commercial apps I run work just fine (photoshop, all the MS products, norton anti-virus, etc...). There are certainly a bunch that don't work perfectly, but it should be the responsibility of the company to fix up their software.

      nothing installs

      Well that's really how it should be! If she needs to install something, it's probably for the best that she require your direct intervention to do so. Personally, my dad knows the Administrator password for the machine, and I've showed him how to either 'Run As.." or switch users to install, but we have a set procedure where he consults with me before installing anything. It's kept him spyware free since I made the move the change for him in '03.

    2. Re:Just not running as Admin by dvNull · · Score: 1

      Supposing grandma doesnt have a techie grandson always running to fix stuff when she calls, heaven forbid you are out of town and she wants to install something .. then what ?

      In my opinion 90% of the spyware issues will go away when people learn how to use the tool ( computer) that they have spent $$$ on. I am not saying MS isnt partly guilty when it comes to bad security but the users have to take part of the blame as well for not wanting to learn how to use their computers.

    3. Re:Just not running as Admin by Anonymous Coward · · Score: 0

      Supposing grandma doesnt have a techie grandson always running to fix stuff when she calls, heaven forbid you are out of town and she wants to install something .. then what ?

      Remote assistance. Or even NetMeeting. Even usable over a modem connection. Just tell her to put in the CD and connect to the internet.

    4. Re:Just not running as Admin by Foolhardy · · Score: 1
      And the fact is, since Windows 2000 (even NT4) there has been built in user access control mechanisms for both filesystem and system resources.
      All of these control mechanisms have existed since the very first version of WinNT, 3.1 released in 1993. They've had 11 years. Still, NT hasn't been marketed as a consumer OS until XP, only 3 years ago. I guess the only reasons it took this long to make NT the consumer OS is that it had too little compatibility (a lot of DOS stuff broke because it prevents direct hardware access) and the memory usage was too high. NT 3.1 required a minimum of 16MB or even 24 with a few things running while Win3.1 was more like 2MB and 95 a min of 4 (offically) or 8 with the same amount of paging.

      I agree with and support everything you are saying.
  95. Of course you must pay by Tribbin · · Score: 1

    Do you think money grows on Gates' back?

    --
    If you mod this up, your slashdot background will turn into a beautiful sunset!
  96. Profit? From where? by Alwin+Henseler · · Score: 5, Insightful
    I wonder where MSFT thinks the money for this extra software should come from? I mean, are IT budgets of customers (including Joe Sixpack) suddenly going up, so that extra funds are available to sink into these tools? If not, that would mean that either:
    1. Windows should get cheaper, otherwise customers wouldn't have money left over to invest in these extra tools. This seems feasible; with competition from Free/OSS and users getting fed up with buggy software, market value of Windows is likely to drop. This could be a covert way to restore profit margins.
    2. Hardware should get cheaper, so that more money is left over for software. Doesn't seem likely; hardware does get cheaper, but Joe Sixpack still buys expensive PC's, he just gets more bang for his bucks.
    3. These extra tools are meant to replace competitor's offerings. Interesting option: if they are just another offering in a crowded field, okay. But first given away as a freebie, and then start charging after a while, when users become convinced they absolutely need it? In that case, could be an interesting candidate for another anti-competitive investigation.

    If you can't baffle them with brilliance, dazzle them with bullshit.

    1. Re:Profit? From where? by Matt2k · · Score: 1

      What?

      No seriously, I was going to reply to this, but I just don't know where to start.

      WTF

  97. Same old Microsoft by Anonymous Coward · · Score: 0

    For 20 years, they've been selling idiots the disease, and then selling them the cure.

  98. MS and the free stuff by Tojosan · · Score: 1

    Note to moderators: the following is probably redundant... :)

    MS is probably going to charge for any goodies they produce other than minor or required fixes. The main reason being that even if they'd be happy to give it away, and we'd be happy to get it, many individuals would see this as continuing and strengthening and already strong monopoly, especially if these tools competed direclty with some you or I are already paying for.

    I'd be happy to pay for a really good tool, MS or otherwise. In fact, I'm willing to bet most of you who read this not only use the 'lite' versions of various software tools but have purchased them also.

    Heck, rather than complain, just continue using what you prefer. But I'm hoping if MS puts out something halfway decent, it will raise the bar for everyone else. Competition is healthy!

    Ob MS negative comment: Those silly MS folks, charging me again for an OS I already bought?!

    Ob new tool comment: Yet another company trying to one up my favority freeware tool, rocks!!!

    Laters folks and be well,
    Tojosan

  99. bye by master_meio · · Score: 0

    I found this cool site where you cansearch for a discussion forum that wont expose you to viewpoints that offend you.

    1. Re:bye by DerWulf · · Score: 1

      yes, but thats just boring, isn't it. The majority of slashdotters hold views that vehemently oppose mine and I wouldn't have it any other way. It's good training, keeps the brain sharp. And besides someone has to call bullshit on, well, things that are bullshit like mindless MS bashing that totally ignores that the large majority of computer users are quite happy with their operating system.

      See, somethingawful.com has wonderful forums and nice debates. But I needn't go there because the different viewpoints are so balanced against each other that by the 10th post somebody already stated my opinion on the subject. So what is it I should do there?

      --

      ___
      No power in the 'verse can stop me
    2. Re:bye by DerWulf · · Score: 1

      Also, it should be a cause of concern to you that you want dissenters to leave. I hope your ideal of a discussion forum is not one where all users are in total agreement with each other and circle-jerk about their supposed enlightenment.

      --

      ___
      No power in the 'verse can stop me
  100. (*^&*&()%^ sharing by mollyhackit · · Score: 1

    This is off topic, but why doesn't simple sharing work goddamnit. It works five minutes and then it fucking breaks. Worthless hunk of shit, why doesn't anybody have a distro that my roommates would actually want to run.

    1. Re:(*^&*&()%^ sharing by Anonymous Coward · · Score: 0

      "This is off topic, but why doesn't simple sharing work goddamnit."

      I think you just don't know how to setup sharing. Do you really think that it's been this long and no one noticed that simple sharing wasn't working? Oh wait it seems to be working fine on the computer I am on now. If you can't setup sharing you're the problem not Microsoft. I have setup sharing between Windows XP, various Linux distributions and Solaris and have yet to see any problem.

      "Worthless hunk of shit, why doesn't anybody have a distro that my roommates would actually want to run."

      Yeah it's really Windows fault that you're clueless. Blame the OS for your stupidity.....

  101. In other news... by techsoldaten · · Score: 1

    Following Microsoft's lead, my ass today announced plans to begin charging for dingleberries produced through the explusion of fecal matter. Said my ass, 'Dingleberries usually are a product of human error, so it only makes sense to charge for them.'

    Industry groups complained my ass has a monopoly on dingleberry production.

    M

  102. You know what I love more than ignorant remarks? by master_meio · · Score: 0

    People with no communication skills. Yawn something called protected memory and considering

  103. deneme by cwdoktoray · · Score: 1

    cyber-warrior

  104. Why not by The+Cisco+Kid · · Score: 1

    Their customers are obviously fools - why shouldnt they milk them for all they're worth?

    There are several groups of people still using MS software - 'average consumers' who are barely even aware of the difference between a CPU and an OS, PHB's who are barely even aware of the difference between a CPU and an OS, (or employees of same who have no choice), or MS apologists who are so certain the ground MS walks on is holy that they wouldnt even consider looking at anything else, let alone actually using it and learning it. (and before anyone jumps in, I *have* experienced MS platforms - I absolutely cannot stand them and am baffled how anyone could get anything useful done using them)

    Seriously, if your customers were willing to pay you outrageous prices for absolute shit, had been doing so for quite some time, and were continuing to do so without complaint, why on earth *wouldnt* you come up with new and innovative forms of absolute shit to sell them for even more money?

    1. Re:Why not by The+Cisco+Kid · · Score: 1

      Oh I forgot one other group - those persons who arent terribly happy with MS, but in order to stay in business or pay the bills they must do business with one of the previous categories that includes exchanging data in MS various proprietary formats.

  105. Re: thpt! by jelizondo · · Score: 1

    Nope. "Help" is used the way IRS auditors do it: "we're here to help you..."

    --
    Be very, very careful what you put into that head, because you will never, ever get it out. - Cardinal Wolsey
  106. Leaving Microsoft Behind by neoteric · · Score: 1

    Its wasn't until I left web development and IT in general that I finally managed to rid myself of Microsoft products. Shame it took such a radical move, but I may be back when the Linux uprising really begins here in the UK, keeping my eye on the job boards ;)

    Still, news items like this make me laugh and shake my head in dismay at the same time, working in a normal administrative office now I see how people in "the real world" still think PCs just run Windows, that's all there is, a PC comes with Windows, what else is there?

    Tut.

  107. Mod parent asinine by crimethinker · · Score: 1
    It doesn't matter if you follow basic security practices or not; many services in Windows are vulnerable to remote exploits, but are necessary for the system to even function at all.

    Where's the user error?

    Not turning the firewall on before connecting to an untrusted network.

    Running untrusted code as an Administrator.

    Using buggy software like IE.

    Point 1 is conceded. Point 2 is forced by the crummy design of the OS. Point 3 suffers from a little problem - you have to run IE to get to WindowsUpdate.

    Yes, users commit a hefty number of the mistakes, but let's lay some blame where it rightly belongs, at Microsoft's feet.

    -paul

    --
    Pistol caliber is like religion: everyone has their favourite, and theirs is the only right choice.
    1. Re:Mod parent asinine by Anonymous Coward · · Score: 0

      Point 2 is forced by the crummy design of the OS.
      Please explain. What design flaw of Windows forces a user to run as an administrator?

    2. Re:Mod parent asinine by Martin+Blank · · Score: 1

      No, point 2 is forced by the crummy design of the software running on the OS. A lot of games have to be run at least the first time as an admin, but most productivity software can be run just fine as Users or Power Users. It's frustrating to me when I look at a game support site and see things about running them as admins.

      --
      You can never go home again... but I guess you can shop there.
    3. Re:Mod parent asinine by ad0gg · · Score: 1

      You can download updates without using windows updates. DUH. How do you think corporations deploy patches.

      --

      Have you ever been to a turkish prison?

    4. Re:Mod parent asinine by radish · · Score: 1

      Point 2 applies just as much to Linux/BSD as Windows. If you run untrusted code as a super user you deserve to get stung. You're more likely to get stung doing so under Windows, but that's not really microsofts fault.

      Point 3 - if Windows Update is the only site you use IE for, it's perfectly safe. It's only when you browse untrusted sites you have a problem. Sure IE sucks, but using it to connect to MS is OK.

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    5. Re:Mod parent asinine by burns210 · · Score: 1

      But if you are on an unprotected connection, Automatic Update(especially on a dial-up account) can take hours to download. Even on broadband accounts, the AU timer is a random check in a 48-hour something window to hit the WU server and check for new updates... It is highly inefficient for initial patching.

    6. Re:Mod parent asinine by drsmithy · · Score: 1

      It doesn't matter if you follow basic security practices or not; many services in Windows are vulnerable to remote exploits, but are necessary for the system to even function at all.

      So how do you envisage someone connecting to these (very few and becoming fewer) services with the firewall enabled ?

      Point 2 is forced by the crummy design of the OS.

      False. Applications that require admin rights to run are the fault of the application developer.

      Even if you do have applications that require Admin rights to run, that doesn't justify running as an admin user *all the time*.

      Point 3 suffers from a little problem - you have to run IE to get to WindowsUpdate.

      Firstly, you can download the updates manually.

      Secondly, it's only a problem if Windows Update is compromised. Chances of that are fairly low.

      Yes, users commit a hefty number of the mistakes, but let's lay some blame where it rightly belongs, at Microsoft's feet.

      There is no blame in these examples that lies with Microsoft.

    7. Re:Mod parent asinine by toddestan · · Score: 2, Interesting

      Please explain. What design flaw of Windows forces a user to run as an administrator?

      The fact that Windows started out as a single user OS, and a lot of programs are built with that mindset. Windows as a multiple user OS still feels like a hack upon a single user OS. A few years ago, Microsoft could of said, "Sorry, many of your old Win9x programs aren't going to work in the NT line", and we wouldn't have this problem. They even could of provided us with a "classic mode" sandbox to run them in too. But instead they went the backwards compatible route. Ferthermore, since all the old programs basically run as they used to, it didn't give the programmers any incentive to change their habits. So to this day, many programs, including some of MS's own applications do not run right (or at all) unless you are Administrator.

    8. Re:Mod parent asinine by Anonymous Coward · · Score: 0

      "Point 1 is conceded. Point 2 is forced by the crummy design of the OS. Point 3 suffers from a little problem - you have to run IE to get to WindowsUpdate."

      There is no design flaw that forces you to run as the administrator. Everything is possible through the run as dialog; it's just that clueless users don't want to use it.

    9. Re:Mod parent asinine by mindriot · · Score: 1

      Of course you can. But... so much for usability.

      "Windows is easy to use."

      "Umm, except you shouldn't use IE. And if you use OE, please remember all these workarounds. And, remember to take care of the firewall. And, install all those updates! But don't use IE for that; rather, do it by hand by following these instructions here......."

      Where has the ease-of-use gone?

    10. Re:Mod parent asinine by HuguesT · · Score: 1

      You should get hired by Id Software and tell them how to write their games. I'm sure they'll listen with great interest given how crummy their developers seemed to be.

      Doom3 will only install *and* run as an admin. Many recent games are in the same boat. You can use the 'run as' trick, of course, but this doesn't change the fact that you need to be running some code as an admin all the freaking time.

      Most users will give up (`run as' is not very user-friendly) and run as the local admin all the time. Most home users run games.

      You do the maths. Why is it that games developers come to the conclusion that they need admin rights all the time, I don't know, but something in the system design must force them to go down that route, unfortunately for all of us.

    11. Re:Mod parent asinine by julesh · · Score: 1

      So to this day, many programs, including some of MS's own applications do not run right (or at all) unless you are Administrator.

      Which of MS's applications need you to run as Administrator, other than during installation, a function which should be performed by your network administrator, and applications intended for use only for systems administration purposes, e.g. Windows Update?

    12. Re:Mod parent asinine by toddestan · · Score: 1

      Off the top of my head, Virtual PC, just about any of Microsoft's games.

    13. Re:Mod parent asinine by drsmithy · · Score: 1
      You should get hired by Id Software and tell them how to write their games. I'm sure they'll listen with great interest given how crummy their developers seemed to be.

      They're probably just lazy.

      Doom3 will only install *and* run as an admin.

      Doom 3 runs as a regular user just fine. It probably installs as one, too, if you don't try and put it into %PROGRAMFILES% (but I'm not about to deinstall it and reinstall it to try).

      The only thing in Doom 3 that breaks as a regular user is saving games and other settings - because id try to write them directly to the program's directory, not to the user's home directory (so if you give your user write permissions to the directory and appropriate existing files, it works fine). Ie: it's clearly their fault.

      Many recent games are in the same boat.

      Given that some games _aren't_, clearly running as a regular user is quite possible and not doing so is the fault of the developer.

      You can use the 'run as' trick, of course, but this doesn't change the fact that you need to be running some code as an admin all the freaking time.

      No, only when you're using those particular programs. Which is a hell of a lot better than running every as admin all the time.

      Or are you going to argue everyone on Linux should run as root all the time because a few tasks here and there require root privileges ?

      Most users will give up (`run as' is not very user-friendly) and run as the local admin all the time. Most home users run games.

      I agree. However, the problem here is not with Microsoft (except for the "Run As" UI, which could use a bit of improvement).

      You do the maths. Why is it that games developers come to the conclusion that they need admin rights all the time, I don't know, but something in the system design must force them to go down that route, unfortunately for all of us.

      They don't do it all the time. Nor do they need to - that is trivially demonstratable.

  108. This story is over two years old... by Anita+Coney · · Score: 1

    This is really old news.

    --
    If someone says he and his monkey have nothing to hide, they almost certainly do.
  109. Well... by SiO2 · · Score: 1

    Those bitch MS fuckers. This is reason 7,531 why I drive OS X.

    Mod me down. I don't care.

    BTW, Happy Christmas, Hannukah, Kwanza, etc.

    Gee, we all have choices in a lot of ways!

    SiO2

  110. How long until they charge for Service Packs? by FreeLinux · · Score: 2, Insightful

    This is something that has been bothering me lately. How long will it be before Microsoft starts charging for Service Packs and Hot Fixes? So far, they haven't done it but, it occurs to me that it is only a matter of time.

    But, the worst part of the idea is that Open Source vendors are opening the door for Microsoft and blazing a trail toward exactly that. Open Source vendors such as Red Hat and Novell/SuSE are selling "cheap" software, built by the Open Source community, and charging a premium for patches. It is a "new business model".

    The base software is sold cheap or given away and they make their real money from "support services". However, close inspection of the "support services" show that they offer very little in the way of technical support. They do however offer password protected access to the sites used to download the patches and security fixes for the free/cheap software.

    All this isn't going un-noticed by Microsoft, who has toyed with the idea of charging for Service Packs before. In the past however, customers told them in no uncertain terms that they would not pay for bug fixes to software that those customers had already paid a premium for.

    Microsoft then developed the "Software Assurance" subscription model, where customers pay a subscription fee that entitles them to future version upgrades. But, Microsoft is still spending money and effort to provide free patches and they don't like doing it as they perceive it as lost revenue.

    But, with the "new business model" that Open Source vendors are acclimating their customers to is likely to open up that revenue stream for Microsoft. Just as all the other software vendors were able to leverage the subscription model after Microsoft had acclimatized the customers, it is entirley likely that customers who are accustomed to the the Open Source method of paying for patches will not balk at paying Microsoft for their patches too.

    It's a dark and pessimistic vision of the future, I know. But, can you imagine Microsoft actually passing up a new revenue stream from the same old product? That doesn't seem likely to me.

    1. Re:How long until they charge for Service Packs? by julesh · · Score: 1

      Open Source vendors such as Red Hat and Novell/SuSE are selling "cheap" software, built by the Open Source community, and charging a premium for patches. It is a "new business model".

      I don't know about RedHat, but Novell/SuSE are _NOT_ charging for patches. I used YOU (the automatic update service for SuSE Linux) only a couple of days ago to download patched versions of a few packages I had installed, and haven't paid them a penny for the privelege.

    2. Re:How long until they charge for Service Packs? by FreeLinux · · Score: 1

      While it is true that both Red Hat and SuSE have free versions of their distributions, Fedora and SuSE Linux Personal/Professional respectively, and they provide free patches for these products, neither provides enterprise products for free.

      So, why not use the free version? Quite simply, it is because the upgrade and obsolescence cycle of the free products is too rapid for enterprise environments. The Linux version upgrade process is definitely not without its problems, some of which are cited here. Using the free products would require these upgrades every year. This is an enormous problem for production environments where large numbers of systems with things like third party accounting applications or databases are used. This is also part of the reason that the major vendors, such as Oracle and SAP, will not support their product on the free distributions.

      Novell/SuSE and Red Hat address this issue by offering Enterprise versions of their products. These Enterprise distributions have a much longer life/support cycle requiring far fewer upgrades. The third party vendors also support their applications on these Enterprise distributions which makes the Enterprise distributions a necessity for an enterprise that wishes to utilize Linux.

      It is these Enterprise distributions, SuSE Linux Enterprise Server 8&9 and Red Hat Enterprise Server 2&3, that I was referring to in my previous post. Neither of these distributions are free. They both require a subscription fee for "support". This support is primarily password restricted access to the updates for these products. To the best of my knowledge, there is no free source for these updates. Red Hat does provide free access to the source code for their product but, Novell does not make even the source code available to the downloading public. If you want bug fixes and security updates for these products you must pay for it.

      Microsoft is not blind to this. They are watching it very closely. If they determine that their customers in the enterprise space are suitably "softened up" by this business model it is entirely possible, if not likely, that Microsoft will try to cash in on it as well. If that happens, customers will be required to pay a subscription fee to access service packs for Windows instead of the free ones they get today.

      Now, as far as I am concerned, it is fine to charge for your product. It is also OK to charge for version upgrades. I suppose that the software industry has trained me to be accustomed to this and accept it. However, I have a major issue with paying for bug and security fixes to software that I have already paid good money for. In my opinion, the software that I paid for is defective and I should not have to pay additional fees for the repair or removal of those defects. I suppose we will have to wait and see what the future holds.

  111. Patching patches!! by Anonymous Coward · · Score: 0

    And I am going to start a company that charges for patching microsoft's patches!! Gee...sounds like a cool business model.

  112. Only Pron & Warez sites have spyware! lol lol by lordperditor · · Score: 1

    For all those saying stay away from pron & warez sites and have a firewall and you won't get spyware, I say hahahahaaaahha hahahahahaha haaahahahaa. That is absolute nonesense and you probably all know it, you'll still get some unless you only visit the same sites you know to be safe. Once you step of the beaten path looking for some different site Whammo! you'll catch something.

  113. That about sums it up by earlgreen · · Score: 2, Funny

    Sure, that's Microsoft's business model, isn't it? Trap users, screw them, charge them to get into the next trap. Is this a big surprise?

  114. Other possibilities by FreeLinux · · Score: 1

    This sounds like a likely possibility but, there are concerns with this idea too. In fact, Open Source vendors may make it easier for Microsoft to start charging for bug fixes. See my comment below.
    How long until they charge for services packs?

    --Is this astro turfing or is it spam?

  115. Perfect Strategy by Anonymous Coward · · Score: 0

    Perfect profit strategy:

    First, you deliver shitty software which dominates the marketplace.

    Second, you charge for fixing your shitty dominating software, which just sucks even if you "fix" it.

    Third, you deliver "fixes" and "fixes" forever,
    just because you can and stupid users will pay for that. It's just profit guys!

  116. RTFA! by Anonymous Coward · · Score: 1, Insightful

    It's a misleading headline. The article is about anti-spyware software, not about security-hole patches. Spyware can end up installed, by an app from a "reputable" vendor, on a perfectly "secure" machine on any OS (as anyone who's used any RealNetworks software knows**).

    Now, commence the nit-picking arguments about how xx% of spyware IS installed through security holes without the user doing anything, and the annoying semantic arguments about whether the fact that spyware is even possible means that there's a security hole.

    After you're done with that, realize that this is still not the same thing as charging to fix security holes.

    **this may have changed; I haven't used RealAnything in about 5 years.

    1. Re:RTFA! by Anonymous Coward · · Score: 0

      Dude, there is no such thing as a 'perfectly secure machine'. Get a clue.

    2. Re:RTFA! by the+angry+liberal · · Score: 1

      You should know better than to point out that the article is also speculation and by no means is it a definitive word on how the company will proceed.

      In my shallow wisdom, I see them releasing this as a free product with the option to upgrade. Either this, or they will probably end up releasing it for free, period, if public outcry is great.

      As I read the thread, I see a lot of "Insightful" Microsoft bashes though they are the same ones as always. Spyware/Virus troubles aren't an issue for an advanced Windows user, just as running not using root as a user account in Linux is common knowledge for a Linux user.

      1. Use FireFox
      2. Run HiJack This! occasionally to look for new autoexec and browser oriented registry keys.
      3. Install AdAware and Spybot, run if you actually ever use IE. I have yet to have any thing rude get added to my system while running FireFox.

      Remember, every flame, FUD, and whine has the potential to be read and really hit home with a Redmond developer. Do you really want to be responsible for making Windows a better, more competitive choice? :) /Attaches spittle guard and waits for someone to launch some silly assult on me for my perspective.

    3. Re:RTFA! by Sj0 · · Score: 1

      Mine is turned off, locked in a safe with adamantium chains affixed to a tectonic plate deep beneath the earth and therefore grounded against thousands of amps of charge.

      It's turned off. On the harddrive is 13 bytes, encrypted using encryption which takes up the entire 30GB on the drive to store them, requiring a 300 character passkey to be manually entered, and a hardware key containing an additional 2kb key and a biometric scan.

      Wanna piece of me? :P

      How's that?

      --
      It's been a long time.
  117. Browser wars II are offically over, mates. by Anonymous Coward · · Score: 0

    This will kill IE until MS figures out they have lost and changes it. Just give it time and people will get so sick of paying for that crap that happens to them and they don't know why they will glady switch. willingly go out and use something they no nothing about (mozilla) just to get away from IE just cause someone don't know nothign about computers dosent mean they don't know when they are getting screwed over by a company.

  118. IE CAN be "secure" by Anonymous Coward · · Score: 1, Interesting

    Before I start this rant, let me first preempt it with the following: IE is totally dated, a pain to use (when compared to other browsers), and is not secure (out of the box). However, it is important to realize that it CAN be secure. It just takes a little bit of work to setup. Hell, the typical amount of time it takes to get a linux disto operational to the point of it being "easy" to install applications, locked down, hardware and software configured, etc... one can easily get an IE installation to perform flawlessly. Not, that I would spend my time doing so, however I have done it on occasion. So please don't get all IE is satan, when one can configure the crap out of it (because it is part of the OS). I've had Firefox crash many more times then I've seen IE do the same. Would I then blanketly state that Firefox is a horrible piece of code because it is not tied into the Operating System. Of course not, plus for the longest amount of time... they could just state that they are in Beta, or are Open Source. I feel many times certain software isn't held as responsible for its uses because of this. I often see Open Source projects trying to become the be-all do-all next big thing, with everything about it being customizable. Yet, at the same Word "sucks" because it has to many options. Not saying I condone Microsoft and the many business practices, but shit... c'mon, be fair for goodness sake.
    oh by the way.
    Do you know how many people get tripped up with FireFox's "inability" to handle Java, Flash, Shockwave, "cool 3d super plugin", etc...
    Obviously it can, but on this same token... users can't simply click yes to everything and then it works (like they can with IE).

  119. Kill Bill Part One. by tdhillman · · Score: 1

    Bill: Hey Steve!

    Steve: Yeah Bill?

    Bill: I've got a brilliant idea!

    Steve: Again Bill?

    Bill: Yeah- let's create software that automatically screws up, then make people pay us to make sure it doesn't crash...

    Steve: Uh, didn't they already do that with the Ford Pinto?

    Bill: Yeah, and who ever said the American public is smart enough not to get fooled over and over and over again....

    (Suddenly, Uma Thurman flies in with a samurai sword...fade to black.)

    --
    befuddled (noun) 1. Unable to create a pithy sig
  120. "Don't worry" say the spyware companies! by EnronHaliburton2004 · · Score: 1

    Microsoft may charge extra for security software.

    Spyware companies around the globe say not to worry, because the spyware itself will remain free!

  121. Luck 10 minutes! by gnuman99 · · Score: 2, Interesting
    In under 10 minutes.

    You are lucky. I connected on *dial-up* with Windows to just DL one form from a gov't website and got infected in under 10 seconds. Before I could actually type the URL into Mozilla, the box was already infected.

    I'd say your 10 minutes is pretty good :P

    1. Re:Luck 10 minutes! by Anonymous Coward · · Score: 0

      And me it was in 2.47 seconds. And I didn't even have an internet connection. And my computer was turned off! Can you beat that?

    2. Re:Luck 10 minutes! by Jerry · · Score: 1

      Can I beat that?

      Easily!

      The computer I never bought was infected within 0.01 seconds after it was assembled, when they inserted the CPU chip.

      --

      Running with Linux for over 20 years!

  122. Slightly offtopic, but funny anyway. by Anita+Coney · · Score: 1

    This bit of satire seems appropriate.

    --
    If someone says he and his monkey have nothing to hide, they almost certainly do.
  123. mnb THE PROPER SPELLING IS GULLIBLE! by Anonymous Coward · · Score: 0

    Or am I gullible for falling for your troll?

  124. Backfire Possibility? by dshaw858 · · Score: 1

    I was just wondering what the probability is that this would totally and completely backfire. I mean, think about it for servers... Windows Servers and *nix servers seem to both have their advantages. Even though linux is free and is generally better secured, Microsoft is trying. But wait... take away the free security (attempt) by Microsoft, and you're left with an admittedly insecure system! This is insane, and could possibly give *nix the leading edge that it needs to cut into desktops, perhaps? (Linux seems to already dominate servers, anyway).

    - dshaw

  125. Mac OS /Linux Here we come......... by big-giant-head · · Score: 1

    MS is a perfect example of what happens when a company has no competion, even now that Linux is starting to compete, they are still too arrogant to imagine that they could ever lose market share.

    Crap this will eventually doom them. Look at Mac OS, a wonderful user-friendly on top a solid secure unix OS. Linux is getting better all the time. THe day linux gets really good support for consumer devices like digital cameras, MP3 players, the newes t color scanners and copiers, then MS is dead in the water in terms of OS.

    --

    So Long and Thanks for all the Fish.
    1. Re:Mac OS /Linux Here we come......... by hazah · · Score: 1

      I don't think MS would just die off. There's no motive, at least that I know of, to have MS be completely blown off in the future. Companies aren't just a source of income for the suits and ties, you know. Most people there have nothing to do with the quality of software, and aren't exactly a problem. It's all about someone's personal itch high up in the office. I think MS has done fairly well as far as experiments go. The real benefit is that no one else has to follow the same trend, and reputation will eventually catch up with them if they don't give up being stupid.

    2. Re:Mac OS /Linux Here we come......... by Jerry · · Score: 1

      I don't think it will either.

      At work I have written several in-house apps using VFP6. One took over three years to complete its development. We have instituted a company policy that no NEW apps will be created with Microsoft development tools, only tools that are cross platform. However, because re-developing the big app would take too much time, there will be a W2K box running those MS legacy apps for probably 10 years. How long has DOS 6.2 been around, 15+ years? Yet we only this year replaced our DOS batch routines with browser apps running against an Oracle database.

      What's really nice is that I discovered that I can run VFP6, and the apps I create with it, under WINE!!

      We had a server running a proprietary KODAK Imaging program for 10 years. It crashed. The backups were corrupted. After trying for three weeks to recover the data using Windows tools they gave me an HD with the ghosted image on it. I plugged it into my FC2 Webserver, a 5 year old DELL 800MHz with 512MB RAM. I couldn't mount the hd as sysv because of inode corruption, but I could use dd to read the entire 2GB drive into 10 text files of 200MB each. My problems arose when I attempted to edit those files using PFE32 on my 2.6GHz, 512MBRAM DELL Gx260 W2K box. Crash, crash, crash, reboot, crash, crash, crash...

      So, I used KWrite on the FC2 Webserver box. KWrite just worked. Records recovered.

      --

      Running with Linux for over 20 years!

    3. Re:Mac OS /Linux Here we come......... by hazah · · Score: 1

      Funny how the simplest tools are the most useful. I like the idea of making everything a text file : >

    4. Re:Mac OS /Linux Here we come......... by glapalom · · Score: 1

      Hey, Sorry to post here, but didnt want you to think I was ignoring your last question. Had alot going on lately and our last conversation went archive so I couldnt reply. Anyway, just to answer your question, Juvera got in some legal trouble last I heard and it all went bad from there. I was not close to his situation, so I dont know the details. G

      --
      Joshua 24:15
  126. This is exactly why I switched by linkinp4rk410 · · Score: 1

    Microsoft is always screwing up badly and always makes their own users pay for their own mistakes.

  127. You've got it wrong! by Marcus+Erroneous · · Score: 1

    They don't want to CHARGE you to fix it, they want to CHARGE you to keep it from getting broken. It's like buying a house with no locks and the builder then wants to charge you to put a security service around your house to keep from being broken into. Oh, and it's your fault, you bought the house!

    BUT FOR GOD'S SAKE, DON'T GO TO ANOTHER BUILDER!!!!!!!!!!

    You might get the house that you want, affordable, comfortable and safe. C'est la vie -insert gallic shrug here-

    --
    You must be the change you wish to see in the world - Ghandi
  128. Slashdot by Anonymous Coward · · Score: 0

    I'm new here but I think I get how this works now:

    Microsucks (see what I did there with the sucks? Micro - Sucks instead of Microsoft. I changed the soft to sucks... Because they suck.) = modded up

    Microsoft - the most successful company in the history of the world that is responsible for trillions of dollars worth of productivity gains over the past few decades = modded down

    What an enlighten bunch.

  129. Dr. Jack Kervorkian selling services.... by Anonymous Coward · · Score: 0

    This is like Jack Kervorkian selling his services....

  130. Readable version by Anonymous Coward · · Score: 0
  131. Can somebody say...Conflict of Interest? by mjh49746 · · Score: 1
    I wish I could write a shitty, insecure operating system so that I can charge people for fixing the bugs.

    Expect the lackluster quality of Windows to drop like a fucking lead weight! There's absolutely no incentive for them to patch the holes now. Why do it for nothing when you can get paid? Terrific! I get to pay $100-$200 to do beta testing on the 'gold' release, and I get to mail them a check just to fix the problems that they were supposed to, but NEVER BOTHER TO FIX in the first place? Sounds like it's time for another antitruat lawsuit to me.

    1. Re:Can somebody say...Conflict of Interest? by Anonymous Coward · · Score: 0

      "I wish I could write a shitty, insecure operating system so that I can charge people for fixing the bugs."

      Read the article jackass. They aren't charging people for bug fixes.

      "There's absolutely no incentive for them to patch the holes now."

      Are you joking or are you completely retarded? I haven't seen a post more idiotic then this in a while.

  132. It's a Sad Day when personal computing... by NullProg · · Score: 2, Interesting

    has come to this.

    The personal computer (Apple/Commadore/Tandy/IBM/Atari/Amiga) was supposed to release the creative gene in all of us. At first it did (1978 - 1995), Viri at most were limited boot sector infestations and nothing more.

    Leave it to Microsoft to add BSOD and AdWare, and Windows Virus to the english language (Whats it called in other languages)? Instead of removing IE from the core of the O/S they chose to patch the system by purchasing a supposed solution. Now they are going to charge money for a problem that they induced. I also see that Win98/ME is excluded from the list. If I sold buggy software and didn't update 40 percent of my clients, I would be sacked as a vendor.

    I'm sorry. Maybe I'm becoming too old, but Virus/Adware are/should not be the norm. When did it become mainstream to run all these utilities just to use your computer?

    Enjoy,

    --
    It's just the normal noises in here.
    1. Re:It's a Sad Day when personal computing... by P2Powah! · · Score: 1

      Today you don't feel safe with a computer if you are not running -A firewall -Adaware -Anti-Virus Sometimes I even need a spoofer to know what's going on with my computer.

  133. yet great by Anonymous Coward · · Score: 0

    they are wrong if they bundle stuff in for free, and they're wrong if they charge for it. Can't you make up your mind and stick to it? You make us all look like fool's before you do is complain about everything they do

  134. Planning for future 'lease plans' by nurb432 · · Score: 1

    This is setting up for when they will offer to lease your OS to you.. " we will also include security updates with your monthly fee".

    Still, its a scam. Too bad the Feds don't have the balls to do anything about these people. Any other company that has pulled 1/2 what Microsoft has, would have been broken up ( or just shut down ) and their board put in jail for fraud.

    Yet they get away with it, and continue to grow in strength and audacity of their actions. What gives?

    --
    ---- Booth was a patriot ----
  135. LitePC.com - Now THERE is security! No more IE! :) by Anonymous Coward · · Score: 0
  136. What about the sites people go to get spyware? by Anonymous Coward · · Score: 0

    People complain about having patched machines still being infected with viruses/spyware/etc. What the hell kind of sites are people going to that would intentionally try to malice the user anyway? It's not like they're getting stuff from CNN.com or Amazon.com.

    Sometimes you just have to know to stay away from visiting some sites. Same goes for browser exploits; you have to know if the site you're at is shady or not before you go. Don't be surprised if it jacks with you.

  137. In other news by LOBOestepaRIO · · Score: 1

    Microsoft may charge for your soul, because infringes xxx patents.

  138. Not to be confused as a Microsoft Supporter by scott9676 · · Score: 1

    Not that I'm a die hard Microsoftie, but do you think it's really possible to have an operating system that:

    1) Does as much as Windows
    2) Has 90% of the OS market
    3) Is written by a company that a lot of people don't care for.
    4) Is used by a large number of users that aren't computer savvy.
    5) Can easily install AOL.

    That wouldn't have security issues? Do you really think that Linux, OS X, any flavor of Unix, or any OS that you could think of that is hacker proof?

    Consider some of the non OS things that are easy hacked:
    1) WIFI with people leaving their networks open
    2) Alarm systems on houses that can be defeated by cutting a phone line
    3) Front doors on houses that have windows right next to the lock.

    To be a relatively safe computer user you have to almost be paranoid. Most users aren't. I have a neighbor that voluntarily runs Comet Cursor even though I've told him that it is spyware. I have other friends that don't care about spyware because 'they don't do anything bad on their computers'. With attitudes like that I could convince a lot of people (or enough of people) to install a program that would reformat their harddrive on Valentine's Day, and they'd type 'Supercalifragilisticexpialidocious' 5 times due to them misspelling it 4 times to install if if I put a nifty front end on it.

    Microsoft has done some really stupid things with Windows and IE, no doubt. But if people are so gullible that they give their credit card numbers and SSNs to fake bank websites (probably on banks they don't do business with), how do you prevent this?

    The alternative is to not allow anything to download and be installed. That would make rough for Adobe, Flash, the Bugmenot extension to Firefox, you get the picture. You can require them to be signed, but what's to stop Comet Cursor from being signed?

    What's the answer? I dunno, but it obviously isn't straightforward if thousands of people in Redmond can't think of one.

    1. Re:Not to be confused as a Microsoft Supporter by Anonymous Coward · · Score: 0

      Please mod this up!!!! Best post in the entire thread!!!!

  139. I just don't get it! by adolfojp · · Score: 1

    A couple of years ago they were getting bashed for bundling free software. Now they are being bashed for not bundling it for free?

    Cheers,
    Adolfo

  140. Who didn't see this coming... by Starsmore · · Score: 1
    ...when CowboyNeal posted this news story yesterday?

    Microsoft buys up a company making mid-range spyware removal apps, then turns around and starts selling techniques to spyware writers (under the table, no less) so the next generation of spyware and popupware infecting our computers will be absolutely unremovable unless you use the Microsoft-branded MSSpywareRemover.

    Then they turn around and charge an arm and a leg for the SpywareRemover software.

    Wonder if it'll be able to remove Clippy, too.

    --
    "If Common Sense was so common, it wouldn't be such a valued trait."
  141. truth hurts by Doc+Ruby · · Score: 1

    Story: "-1, Troll"

    Oh, wait, it's a story, not a post. I can't argue with it by anonymously modding it "Troll", though it does throw acid in the face of my favorite infallible monopoly.

    "The facts are clearly biased against George Bush."
    - paraphrase of "The Daily Show".

    --

    --
    make install -not war

  142. Typical zealot responses by knobboy · · Score: 1

    FA says that Microsoft may charge in the future for a product that they just bought and have yet to roll out. Everyone posts typical Microsoft slam responses, without fully comprehending the article.

    1. Re:Typical zealot responses by mjh49746 · · Score: 1
      Microsoft is a convicted criminal monopolist that deserves to have its every move spied on, criticized, and looked at with great suspicion. That's not my opinion. Those are FACTS!

      Would you expect a child molester to move in your neighborhood and EXPECT people not to spy on him, critisize him, and look at him with great suspicion?

      "Oh, but he paid his debt to society." I'd bet you say, but if was really true, then where's my fucking paycheck, huh?

      Now, do yourself a favor. Get your head out of your ass and stop drinking the M$ kool-aid.

    2. Re:Typical zealot responses by Anonymous Coward · · Score: 0

      I don't even like MS but the only 'FACT' that comes from your post is that you're an idiot.

  143. Microsoft... by rice_burners_suck · · Score: 2, Insightful
    So first they edge their competition out of the browser market, then they tie IE into the OS so tightly that a crash in IE can crash the computer, and then they make IE so vulnerable that just using it is hazardous to the typical computer's health, and now they want to CHARGE users to fix it?

    Microsoft is beginning to remind me of the INS. This kind of unreasonable reasoning is, in fact, quite similar to that which occurs in government bureaucracies. Allow me to explain: When I moved to the U.S. from Europe, I had to go through this government disaster called the INS. As it turns out, at the time that my paperwork was being processed by that disorganization, there were some people working there who shredded documents belonging to about 80,000 U.S. immigrants. They did this because there was a huge backlog in paperwork processing, so some wise guy decided that by shredding the documents instead of filing them, he could make it look like his company was making improvements. This was eventually caught, and I believe that criminal charges were filed.

    But that didn't exactly help me. I was one of those 80,000 people. The result of this shredding was that after going through the process, which takes years by the way, nearly all of the paperwork from my file was shredded. As a result, the INS got "confused" in a way very similar to that of a computer running Windows, when the operating system is suddenly deleted in mid-operation. It took quite a few years to finally get a hold of someone deep enough in the disorganization who had the power to do something about it.

    Here's the part relevant to this story: When they discovered that my file was shredded, they told me that as a result of the INS's errors, I would have to pay a fine of over 1,000 dollars to get the process back on track.

    In other words, they create a disorganization so big that putting some stamps on some pieces of papers takes years, then they shred my papers, then they make me wait years (and if I hadn't fought tooth and nail, they would never have acknowledged that they screwed up), and then, I had to pay a fine to fix it.

    So, yes, to people who put a system like that into effect, it makes a whole lot of sense to make a browser so crufty and full of holes that it won't hold water even when submerged, and then to charge people for bloated layers of crufty software that is supposed to fix it, except for hundreds of corner cases that malware authors can use to work around it. And, did I mention that they'll charge you for the priviledge? I suggest trying free software instead. It's so much less painful.

  144. Did anyone RTFA? No, of course not. by NotQuiteReal · · Score: 2, Informative
    The relevant part is initially will be free but the company isn't ruling out charging for future versions. So maybe they will charge for something later.

    So, Microsoft has announced FREE software - rant about that. Later, IF they start charging for it, you can rant again about them charging for it.

    Two-rants-for-one special!

    --
    This issue is a bit more complicated than you think.
  145. Who modded that funny? ;-) by mjh49746 · · Score: 1

    For all we know, that could actually be what M$ is planning to do. Hell, if I was Uncle Bill, then I'd likely do the same thing. That's just good business when you're a blood sucking monopoly. Blood? Milk? What's the difference?

  146. The latest MS ploy by 1davo · · Score: 1
    So what have you got there?

    Its the latest marketing extension/penetration ploy... I call it more money for no real effort.

    Tell me more.

    "So first they edge their competition out of the browser market, then they tie IE into the OS so tightly that a crash in IE can crash the computer, and then they make IE so vulnerable that just using it is hazardous to the typical computer's health, and now they want to CHARGE users to fix it?"

    Brilliant!

    Brilliant!

    Ching

  147. No reason for it to be free by DigitalCrackPipe · · Score: 2, Insightful

    Considering that Giant anti-spyware used a paid subscription-based model, it kindof makes sense that MS would charge for it. I wouldn't expect Halo to come free with windows just because MS owns it and it can run on windows. I would, however, be pissed if service pack 2 wasn't free.

    For all those who have forgotten, Giant showed a lot of promise in the big anti-spyware head-to-head on the /. front page a few weeks ago.

    And yes, as people mention this is good competetive behavior. You can buy the MS branded one, or you can buy something else (or use free stuff). If they have to compete for dollars, the spyware database will be maintained with more gusto.

  148. MSAV, yea, I remember by Anonymous Coward · · Score: 0

    I don't remember how much they used to charge for it though, since I don't recall having ever paid for it. Wasn't Microsoft AntiVirus included with DOS 5.0?

  149. Re:Drive by installs occur on many non-porn web si by liangzai · · Score: 2, Funny
    fully patched, running Ad Aware and Spybot regularly with Javascript OFF

    Man, I surf porn sites using Mac OS X, and just as I need no protection in real life, I need no protection in cyper space, save for blocking pop-ups. Safari usually gives the prettiest, fastest and most accurate rendering, but for porn surfing I usually turn to Firefox or Mozilla (I need them bookmarklets, particularly the "increment" one).

  150. Hey, I have an idea by Anonymous Coward · · Score: 0

    Someone should write an operating system that's as easy to use as Window, but without all the instabilities and insecurities. And, oh yeah, it should be free, have expert developers constantly perfecting it, and have forums monitored by experienced users who are willing to help you with your problems. And then we could all quit bitching about how "OMG M$ i5 teh 5ux0r5!!" and all be happy.

    But that's impossible.

  151. What's New by thunderpaws · · Score: 3, Insightful

    The average Windows user will feel that MS is sooo wonderful for securing their computers against the wild and wooly internet. As the Windows machines again slow down and bcome even more clunky, the solution will be to buy a newer computer, and sales people will show the buyers how economical the new PC's are compared to those sooo expensive Mac's. Doesn't sound much different than the past 20 years, and people still put up with it.

  152. Hard numbers: 18 minute survival tme by Anonymous Coward · · Score: 0

    It's not just anecdotal evidence. SANS has hard numbers of average the "survival time" before you're attacked. Currently it's 18 minutes.

    Put an unpatched windows machine unprotected on the Internet and you are toast.

  153. Linkified by Headcase88 · · Score: 1

    Good work, but this post could use a little html to make it more convenient :)

    --
    "When the atomic bomb goes off there's devastation...but when the atomic bong goes off there's celebraaaaation!"
  154. I'm gonna go code me a new Boat ! by Anonymous Coward · · Score: 0

    A rough quote from Dilbert's Wally,
    when they were going to be paid for each bug they found.

    Microsoft sounds like it is catching Wally Syndrome.

  155. Re:MS doing the right thing - B F&%&^%G ^& by Martix · · Score: 1

    So let me guess they sell shitty OS and now i have to pay to fix it thats like buying a car new car ......with a hole in the rad a leaky transmission and a poorly running engine....the after spending 25K or more on it pay 5k to get it to run the way it should be ....I say charge them for lost production.....reboots BSOD'S Lost files ect.

  156. And yet that happens by Anonymous Coward · · Score: 0

    Hilarious story you've probably already seen on the news. So, er, AC. But damn funny if you haven't.

  157. Re:Drive by installs occur on many non-porn web si by Anonymous Coward · · Score: 0

    I need no protection in cyper space

    Is this some small part of the internet with only Photoshop tutorials cordoned off for Mac users?

  158. Shopping Cart by jamesbuko · · Score: 2, Funny

    So now we can expect a shopping cart icon to appear on MS Security Bulletin page...!!!

  159. Re: Its all about Lowering Total Cost of Ownership by Stuart+Poss · · Score: 1, Insightful

    This should help them in their campaign with regard to total cost of ownership of their systems versus Linux!

    Its part of the new media blitz. Its all the rage these days. Get ignorant suckers to believe they are getting something great, when its only to charge them more for something that doesn't work well or at all in the first place.

  160. Netscap doesn't crash? by Transcendent · · Score: 1

    ...then they tie IE into the OS so tightly that a crash in IE can crash the computer, and then they make IE so vulnerable that just using it is hazardous to the typical computer's health...

    You've never had netscape crash your unix computer? Wow... I'm jealous...

    1. Re:Netscap doesn't crash? by talornin · · Score: 1

      Of course other browsers crash, but Netscape, Opera, Firefox and so on are no way near as tied to the OS as IE is. So when Netscape crashes Netscape crashes. Not the entire OS. I dont think anyone is using Netscape anymore either. And I for one has never had a web browser crash any of my unixboxes.

      --
      When in danger, whewn in doubt! Run in circles, scream and shout!
  161. Irony? by bradleyland · · Score: 1

    Microsoft creating and charging for anti-spyware tools is like a heroin dealer running a rehab clinic.

  162. Slashdot Morons by Anonymous Coward · · Score: 0

    Okay, so Microsoft purchases a software company that produces spyware removal tools, then announces that within 30 or so days they will release said software for free. When posed the question if they will continue to develop new versions and keep releasing it for free they state that they haven't made up their mind, and Microsoft is the evil one?

    Come on you zealot fucktards.

  163. I don''t think they'll do it by baggins2002 · · Score: 1

    I really don't think that they will charge for this
    . I believe what they have done is purchase a stop gap measure until Longhorn comes out. They are currently getting dinged on this TCO thing. One of the big points that kills them here is not the initial cost of OS, but the third party stuff that it also requires. Currently you can't run Windows and IE on the internet without Anti-virus, spyware detection/removal tool and a firewall. They have addressed, somewhat, the firewall issue with WinXP SP2. But the user is still out about another $60 in 3rd party software for AV and Spyware removal tools.

    But when MS purchased RAV, I also hoped they would bundle AV with the operating system. I've pretty much given up on that dream.

  164. Actually... by ForresterInc · · Score: 1

    You're a bit confused at the outcries here.

    MS includes a necessary tool for free: "Unfair bundling! They're just trying to muscle everyone else out of the market" Should be: MS includes a necessary tool for free without giving users the choice of using another application which does the same thing (Windows Media Player vs Media Player Classic/Winamp/...)

    MS charges a fee for a necessary tool: "Charging for this? What a ripoff!" Should be: MS charges a fee for a necessary tool which should have been included in the original OS or the OS wouldn't need if it were actually secure. We already paid for the OS.

    It's a bit overgeneralized, but that's about it.

  165. Re: thpt! by midav · · Score: 1

    Hi, my name is Billy Longhorn and this is my er... business associate, name's Balmey. You are using our software and so we are considering you our customer. I and Balmey here are very conserned about wellbeing of our customers, that's why we are offering you an additional er... protection for a very reasonable fee. You would not want anything bad happened to your computer, right?

  166. conflict of interest by at_slashdot · · Score: 1

    Isn't this a confict of interest?

    I mean, you make a crappy product and than you sell fixes for it, wouldn't that be an incentive to keep making the product as crappy as possible?

    Not that Microsoft need incentive for that...

    --
    "It is our choices, Harry, that show what we truly are, far more than our abilities." -- Prof. Dumbledore
  167. This doesn't need to be a problem by Anonymous Coward · · Score: 0

    For anyone but Microsoft.

    If everyone who bitches about windows would simply quit fucking using it, it would go away.

    Y'all already got the damn button, so push it already!

  168. Obligatory comment by Dark+Coder · · Score: 0, Flamebait

    I guess Micro$oft hasn't heard the expression... "Don't bite the hands that feeds you."

    1. Re:Obligatory comment by Anonymous Coward · · Score: 0

      I guess you haven't heard the expression... "RTFA you jackass."

  169. Key words by Anonymous Coward · · Score: 0

    trust, broken, repeatedly

    Aggregate as needed.

  170. ...and now for something completely different by rjch · · Score: 1
    Someone definately have too much time on their hands... :)

    Which indicated you are in australia, in the melbourne region.

    Entirely correct.

    Google search provided that the city has a chain of toll highways that is called citylink (more specifically the Mitchton-Frankston expressway), which was recently deprivitized, giving ownership (or partial ownership to macquarie's bank, and something referred to as connecteast, which is probably a consortium, which the bank is the head off...I could be wrong), which seemed to be set to making a huge profit off the road.

    CityLink is indeed privatised and they are indeed making a fortune off it as their tollway provides a very quick (usually - when lanes are not closed) way around the CBD of the city.

    However, the Mitcham-Frankston Tollway has not yet been built - ConnectEast is the name of the consortium recently awarded the contract to build and operate the freeway. Transurban - the owners of CityLink - are a separate company who were outbid to build the new toll road.

    BTW. Photo of citylink looked cool. The one with the circular beam 'roof'.

    That's the "sound tunnel" designed to reduce the noise of the road (which is elevated at that point) reaching the Ministry of Housing apartments 100m or so away from the tollway.

    My guess is the citylink would be the only one ripping people off in the region, as one is expected to do when the deprivatization took place within past 7 years or so.

    Full marks for resourcefulness. If you lived in Australia, you would have incurred a penalty for your reference to a tollway not yet built. (see the South East Integrated Transport Authority web site for more information on this road, which has it's own controvosy surrounding it) however the two would indeed look very similar according to Google...

  171. Bingo... by advocate_one · · Score: 1

    "As long as they are going to steal it, we want them to steal ours. They'll get sort of addicted, and then we'll somehow figure out how to collect sometime in the next decade." -- Bill Gates, Chairman, Microsoft Corp, 1998.

    --
    Donald 'Duck' Dunn: We had a band powerful enough to turn goat piss into gasoline.
  172. I bet you $100 by Anonymous Coward · · Score: 0

    It's because Cakewalk uses the HKEY\LOCAL_MACHINE Hive of the Registry, instead of HKEY\CURRENT_USER. Application Developer error, and a really common one too.

    1. Re:I bet you $100 by Anonymous Coward · · Score: 0

      Exactly. It's a problem with the application and has nothing to do with a flaw in Windows.

  173. PEICE OF CRAP MICROSOFT!!! by *david+the+geek* · · Score: 1

    Well, yet another reason to get Linux, eh? By he way, this was bound to happen some time!

    --
    -David Grubba
  174. the boy is slow, but he catches on. by master_meio · · Score: 0
    seriously, try it.

    bye.

  175. Microsoft does NOT have a monopoly by rsilvergun · · Score: 1

    Not yet anyway, unless you count customer's cheapness and laziness and a legit reason for thier monopoly. There isn't a God damned thing that 80% or 90% percent of the things people out there do that they can't do on a Mac. They're just too cheap and lazy to get one.

    And if Microsoft does have a monopoly, I say so the fuck what? You people gave it to them when you let them side on the whole trial thing (you people being 99% of America). You don't like it? Tough. You sold yourselve for the $499 dollar PC, and Microsoft was buying. Now that the transaction's over, it's too late for a refund.

    I guess I'm bitter because it's getting harder and harder to sell people a decent computer (at least in America) because all people care about is getting it cheap, and they never once stop to think of the consequences of all those dirt cheap computers and all that free tech support. As a technician I'm getting screwed hard by these people. They don't want to buy a good computer from me and then pay me for my time when it breaks and I service it (or buy a service contract so they don't have to pay whenever something breaks). They want their cheap Dell with it's 24 hour free support that just tells you to call Microsoft. Then they fume and moan and bitch, buy a Gateway and get the same crap from a different company. Well, fuck those people. I say they'll get what they deserve in the long run, it's just too bad I'm going down with them....

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
  176. An easy answer to this problem by Anonymous Coward · · Score: 0

    Buy a Mac

  177. Of course Microsoft is blaming users by Gary+Destruction · · Score: 2, Informative

    It's like the government scaring people into giving up their freedoms for security. Since most people are uneducated, they will fall for it. They don't know any better. And that plays into Microsoft's hands because A)people will think that Microsoft isn't at fault and B)Experts will appear descredited in the eyes of the consumer. And Eeye doesn't know what it's talking about. They've never heard of "Marked safe for scripting" ActiveX controls. You know, the kind that are *supposed* to be safe but have been modified to infect and/or damage computers. That's hardly a user error.

  178. Ms charge extra for security tools by demon_2k · · Score: 1

    I wonder if this has anything to do with Microsoft buying out that Spyware Removal Company?
    Slashdot post here
    Giant Company Software In. site here

  179. Still blaming the user by SgtChaireBourne · · Score: 1
    I imagine the average user's behavior to be something like this: ...
    That's just another variation on MS' tactic of blaming the user. Patching has nothing to do with it. There are plenty of exploits that affect even machines with the latest patches, this is simply due to faulty design.

    Pintos exploded when rammed by another car from behind. The courts forced the manufacturer to recall the defective models fix the faulty design. Or should the courts just have told Pinto owners not to let people tailgate on them?

    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
  180. Would U buy a used car from Microsoft? by rewinn · · Score: 1

    Microsoft makes the most popular car in the world. Unfortunately its undercarriage is so poorly designed that a simple worm crossing the road can easily cling to the frame and slow the car to a crawl. Also if the driver has a cold or the flu, the car catches the virus too and often crashes. Currently Microsoft provides a free seat-belt (... well, actually the price is bundled into the car's purchase price ... but we'll call it "free" ...) and a scraper that can get rid of most worms. Of course, you have to stop the car to scrape off the worms, and the seat-belt doesn't mean that crshes don't sometimes kill you. But you can't blame Microsoft for the loss of time or risk of death. It's the worm's fault for exploiting a vulnerability of the car! And above all, it's the driver's fault for driving the car in the first place! Is it any wonder that drivers would be angry if Microsoft started charging explicitly for worm scrapers and and seat-belts?

  181. OOPS!!!! BIG OOOPS!!!BEWARE THE SCIENOS!!! by Ded+Mike · · Score: 2, Informative
    It is currently being reported that there is a further problem with the deal:
    A Florida-based computer security vendor, Sunbelt Software, said yesterday that it had been part owner of anti-spyware technology developed by Giant Company Software Inc., the company that Microsoft had acquired a day before. Microsoft knew about the relationship between the companies but didn't contact Sunbelt about the Giant deal before announcing it earlier this week...At the same time, Eckelberry declined to comment on reports that Sunbelt continues to hold some related rights to the Giant anti-spyware technology, including exclusive rights to offer software development kits related to the technology.
    Sunbelt Software is a Scientology, money-laundering front-company, as seen in this quote:
    Sunbelt Software Distribution, Inc (Scientologists in the management: Stu Sjouwerman, Alexander Eckelberry, Sam Licciardi (married to Denise Licciardi, the sister of Scientology boss David Miscavige!), Greg Kras). It is unknown if the parent company Sunbelt International Group is run by Scientologists - I have no information that J.M. is a Scientologist.Corporate Information.
    some of whose officers have run afoul of the SEC and who are notorious spammers and spyware distributors themselves. Sunbelt was founded to launder the money of the Scientology cult, and are absolutely notorious spammers. Recently, they also ran afoul of us, here at Slashdot, in the past.
    --
    Remember guys, this is Amerika. Just because you have the most votes, doesn't mean you get to win.--Fox Mulder
  182. Nice computer you have here! by Anonymous Coward · · Score: 0

    Nice computer software you have here. It would be a shame if, like something were to, like break, ya know? I mean, what if all of a sudden nothing worked right? It might be a problem, ya know. Well for a small sum, we can guarantee you nothing will happen to your software. Just pay us on a regular basis and we guranatee, nothing will happen to your nice computer. Noooooo! We aren't threatening you, no! No! Not at all, its just, well you do want your nice computer to work, don't you? ....
    Isn't paying these bozos a penny sort of like paying them for incompetence and bad software?

  183. Alexa by Nikademus · · Score: 1

    How can you trust MS for a spyware removal tool when they bundle spyware with a fresh install.

    --
    I gave up with the idea of an useful sig...
  184. Let Microsoft charge for what they want by HuguesT · · Score: 1

    The more obnoxious Microsoft (a renowned cash-strapped company if there is one), the better the alternatives look.

  185. It doesn't matter! by Anonymous Coward · · Score: 1, Insightful

    " I wonder where MSFT thinks the money for this extra software should come from?"

    They don't care. Their latest licensing schemes are just ways to raise costs without appearing to raise costs.

    The problem with MS is that the market is saturated, so the only way for them to show revenue growth is to (a) cut down on piracy or (b) raise the price.

    In scenario A, we get product activation. Does it stop piracy? No, but maybe it improves it 10%, which helps the bottom line by, I dunno...1%? and scenario B can help to a certain extent because they effectively have a database. Butits hard to justify charging $100 for XP this year and $110 next, particularly since most are OEM deals that cannot be changed. So another way to raise prices is to charge for every little "innovation". The way you do that is to make it look as if you're adding real value to a product.

    In this case, they have an abysmal security policy and they augment that by charging you money to fix their own problem. And it works because some portion of the people....30%? are convinced that MS is a good, decent company and that they must do this "because they must show a profit".

    People keep saying "this will be hacked" or "people won't fall for this">

    They don't need it to be 100%, only enough so that they show an increase in revenue.

  186. Re: That's Windows File Protection putting back cr by RedLaggedTeut · · Score: 2, Funny
    That's Windows File Protection putting back critical files

    Which somehow means that virus-infested files are critical to Windows' operation?

    --
    I'm still trying to figure out what people mean by 'social skills' here.
  187. This is heartening and disheartening by HuguesT · · Score: 2, Insightful

    Since about the days of NT4.0 many people in the IT business were saying something along the line: "MS got their act together, they have released a professional O/S with security built-in, a reasonable kernel, good performance, that runs on multiple platforms including commodity hardware. This is the end of UNIX, and not a moment too soon, we are tired of the expensive hardware and of the Unix wars".

    However MS has continually disappointed. Security ended up being very very bad, and becoming in fact worse with every new release (Microsoft still hasn't been able to break the old conflict between ease-of-use and security, unlike Apple).

    Since then we've had Linux and the BSDs maturing (including Darwin). MS security is in fact worse with XP than it ever was with NT4 and this is affecting mere users in a huge way. Spyware removal has moved from a little cottage industry to big multinational business. Running a simple PC with Windows is fast becoming harder and more labour intensive than simply installing Linux on it.

    My family members and friends are constantly asking me for advice. I'm always happy to help them with their Windows troubles (after all this keeps my skills up to date to a degree). I never mention the fact that they should try Linux or buy and Apple but when they ask me why I don't run Windows I simply say: "no spyware, no virus" and they start thinking about it. A few more years of Linux and OpenOffice maturing, and we'll see a shift of the order of the Firefox one.

    Unless Microsoft get their act together, fast. But they are not, witness the current decision.

    Microsoft is unable to make long term decisions that will affect their users positively. This is because they are driven by short-term profits. Even thought they have the resources 10 times over to make the right decisions, they are being trounced, little by little, by a band of volunteers.

    This is both heartening and disheartening.

    BTW I find all the replies to remarks along the line "but you can't even plug a windows machine in default mode to the Internet more than 10 minutes before becoming infected" absolutely hilarious.

    1- first find a secure machine
    2- download all the patches by hand
    3- burn to CD
    4- go to insecure machine.
    5- unplug from network
    6- install OS
    7- install patches
    8- boot
    9- make sure firewall is on
    10- plug network cable in. Browse to you heart's content!
    11- Oh, and make sure you don't run IE, and keep your machine up-to-date! and don't run as the admin! What? games don't run except as admin? don't play games!

    Easy! speaks for itself, doesn't it?

    1. Re:This is heartening and disheartening by wizkid · · Score: 1

      You stated that you can't plug a un-patched non-firewalled system into the net for 10 minutes. I hate to disappoint you, but I've seen systems get infected in 20 seconds, and the norm is down to 4 minutes.

      The SPAMBOT ARMIES RULE THE NET.
      Sorry, but it's the way of things these days.

      --
      I take no responsibility for what I say. Even though I'm never wrong :)
    2. Re:This is heartening and disheartening by Anonymous Coward · · Score: 0

      I had a run-in with this at Georgia Tech. I am a student.

      After using a particular windoze install for about 3 months, it came time for me to do my usual; backup, wipe, reinstall. Even under normal use, my machine gets bogged down, I even use Spybot S&D, and Diskeeper Pro to keep my installation as clean as possible. On top of the fact that i use ZoneAlarm Security Suite for my firewall and virus protection. Nothing can keep a windows install in its prime anymore.

      well, on this particular instance (my first attempt while connected to GaTech's network) I installed and began windoze updates as my normal practice is, and left for class with SP2 on its way. I came back to find my internet connection under probation (for network disruption) which i easily pinned as an infection that hijacked my connection and began ping sweeps.

      Now, my practice goes like so: backup, disconnect from the network, wipe, reinstall 'doze, Install ZoneAlarm Security Suite, install drivers, connect network, -->windoze updates.

      After recent frustration i just said "screw it" and installed Fedora Core 3.

  188. Not to justify it, but... by Anonymous Coward · · Score: 0

    The human error aspect of the problem is staggering. A Sympatico (broadband ISP here in Canada) tech told me to turn off the Windows firewall when connecting a computer. Said it would make some websites not work. If that's really the party line amongst phone center reps, then we have tech support helping to spread worms. Scary.

  189. Comical by Anonymous Coward · · Score: 0

    Who, in their right mind, would actually trust Microsoft with their security. Nevertheless pay them a premium for it.

    The company has been disgraced at every turn with their shoddy products and the realization that security is as much culture as it is code. And, they are fighting an uphill battle with their proprietary code model.

    If I have to pay for security, which is the case today, the last people on the planet I will rely on is Microsoft. (Written a day after another fatal flaw was found in IE)

  190. You f*cking Linux zealots by Anonymous Coward · · Score: 0

    Stick your pot heads into a camels ass and shut up !

    Nobody wants your Anti-M$-FUD, you dumbasses !

  191. STFU by northcat · · Score: 1

    I'm sick of people saying bundling the program would have been wrong too. You can't compare it to IE or Windows Media Player. A browser and a multimedia player are extra to an OS. But not getting fucked up every 5 seconds is definitely in the mandate of an OS. Regardless of whether they are doing it in the form of making the OS itself secure or providing security tools, it is, in fact, their duty to make sure that we don't get incredibly fucked up.

  192. Sunbelt-software by tealtalon · · Score: 1
    Sunbelt Software of Clearwater, Fla., on Friday confirmed reports that it has exclusive rights over certain aspects of the anti-spyware programs Microsoft gained in its acquisition of Giant Company Software on Thursday.

    http://news.com.com/Microsoft+buy+comes+with+strin gs+attached/2100-7350_3-5495994.html

  193. What is next? by bill_doors · · Score: 1

    He he he... i can not imagine what is the next "Business great idea" coming from Microsoft... mmmh... let me think: If you get the "fatal blue screen" using Windows, you have to pay some money to Microsoft because you were who turned on the computer... so, you are the cause of the problem... it is logic, isn't?

  194. 25-35 million isn't a big enough target? by Anonymous Coward · · Score: 0

    apple estimates 25-35 million mac os x users

    I know the marketshare percentage of 2% gets thrown around a lot..but cash registers aren't really the target of many attacks. apple really has closer to 15% of the DESKTOP market...the home users. that's their base.

    so over the last 3 or so years I've heard "when the market share grows enough"

    being that mac users are some of the most HATED in the industry...you'd think at least one person would have written something. just one good virus. maybe even a reasonable trojan.

    to date there have been a few web exploits, the famous mp3 spoofing trojan, and a few other buffer explots. they've all been patched pretty damn fast.

    the point being..the argument that macs aren't exploited because of lack of marketshare is crap. there's plenty of opportunity and reason to go after Mac users..people don't because a retarded monkey fart could hack windows, whereas it would take some REALLY serious brains to attack OS X. and even if you made a trojan, there's no activex to automatically execute it. it takes someone willingly installing, then authenticating a process to allow it to install.

    you can't even install a friggin' printer driver without giving the OS an admin password. anytime a file launches an application for the first time, the OS lets you know about it.

    it ain't gonna happen. and if it does..the problem isn't going to linger like in windows.

  195. why would apple write virus software? by Anonymous Coward · · Score: 0

    why in the hell should apple write antivirus software and include it in the OS? there aren't any fucking mac viruses!

    lets assume there ARE....apple has to watch the toes they step on. if they include EVERYTHING in the OS..their developer base disappears. they NEED that developer base.

    not to mention the fact that it is NOT a simple undertaking. virus checking is extremely resource intensive. it takes a lot of people doing a lot of work non-stop. you have to update the virus definitions. and again..I bring up the silly little minor detail of the fact that there ARE NO FUCKING MAC VIRUSES.

    so why again does apple need to include snake oil with their OS?

    1. Re:why would apple write virus software? by thogard · · Score: 1

      Why is antivirus software included with .mac?
      Their are remote exploits for every other OS including things such as Solaris, AIX and Linux. It seems reasonable to assume that one will be found for OSX and they need a way to stop it in a timely manner without giving a third party an incentive to take advantage of such a bug. The point is if a company will make a huge amount of cash selling anti-virus software for the mac and they can find just one exploit, then they can encourage others to find more.

      So the point of including the snake oil is to make sure others don't. Its a developer base Apple doesn't need.

  196. living in the ghetto... by Jerry · · Score: 1

    After reading most of the replies from supporters of Windows they all amount to the same response:

    You got infected because:

    You didn't install the iron bars on your windows before you moved in...

    Your definition of 'dark' is not correct.

    You must've looked someone in the eyes and didn't realize it.

    You're lying because I've lived in the ghetto for years without iron bars, I roam at night, and I look everyone in the eye and I haven't been shot. (This one must be one of the bad guys that make living in the ghetto so dangerous!)

    Ad nauseum... The Stockholm Syndrome over and over and over...

    --

    Running with Linux for over 20 years!

  197. Wait until they charge for printing... by kellererik · · Score: 1

    ... or saving in a non M$ format. There won't be much you can do about that, either.
    -- Dialogbox
    Since you are trying to save into a non MS owned file format, enter your credit card details in the fields below to proceed...
    -- end Dialogbox
    I don't care if I gave them a new business idea, I avoid being locked into proprietary file formats when creating things.

    My 2 cents

  198. sounds like good business to me! by Anonymous Coward · · Score: 0

    Of course, not "good" in any sort of moral or humanitarian sense. Nor even "good" in the sense of traditional free market capitalism (since a monopoly produces only controlled markets).

    This plan is good in that it makes tremendous amounts of money! Microsoft is simply doing what ANY monopoly in their position would do. In fact, I would go so far as to say that this behavior displays absolutely no creativity or free will or anything of the sort...but simple, mechanical, obvious response to market conditions.

    "Duh" comes to mind.

  199. Re: thpt! by bheerssen · · Score: 1

    You know, there's a reason they call it "My Computer" and it has nothing to do with you.

    --
    (Score: -1, Stupid)
  200. RICO is not just crim orgs by Kjyn · · Score: 1

    It seems you missed the news about Providence, RI's mayor Buddy Cianci being charged and convicted under the RICO Act for corruption.

    At the time, it was surprising that government officials could fall under the act. I'm sure RICO could be applied to Microsoft as well if the evidence was right.

  201. an open letter by water-and-sewer · · Score: 1

    Dear Bill,

    Thank you! You're the best. Keep 'em coming. We can't say thank you enough. Wow - that 'charging for security' thing was a great one.

    sincerely,

    Linus and Steve

    --
    If this were Usenet, I'd killfile the lot of you.
  202. Re: by Anonymous Coward · · Score: 0

    good move M$. gotta make those billions back that you're losing to *nix webservers out there somehow.

  203. Fair is Fair. Being ethical is good for business. by CloaknDagr · · Score: 1

    I'd have to point out that holding Microsoft at fault for the criminal or malicious actions of others is exactly the same as saying that a woman in skimpy clothing is asking to be raped. Rape shouldn't be the penalty for poor taste, and Microsoft isn't wholly to blame for virus, hacking, and spyware attacks. The malice and greed of the malware crafters is the real evil entity in the equation.

    The computer industry would be no where near as advanced as it is were it not for Microsoft or it's equivalant. Microsoft deserves serious bashing sometimes but they're not Lucifer Incarnate over there in Redmond. I've worked with every Microsoft OS since DOS 1.1 and I still have an original copy of it.

    Having said that, I cannot for the life of me understand what the hell those people are thinking sometimes.

    What was the freakin' point with the XP GUI? Everything is still there, more or less, so why move it all over the place and make it look different? As soon as I get my hands on an XP machine I revert it to "Classic" and my users breath a sigh of relief. It wasn't a marketing tool because you don't see the GUI until you own the machine and fire it up. I think they did it to force MCSE's to recertify on the new OS, huh?

    Same thing goes for this spyware problem. I don't understand what the hell they're thinking. You can download great and effective tools for free to deal with it. AdAware SE does as good as the best and there are commercial programs that augment it very well, like the one that MS just bought, GIANT.

    The thing is, like it or not they DO lead the market and if they want to keep that position, this security issue is going to bite them in the ass. If they want Aunt Tillie to be able to buy a nice computer and plug it in and use it for more than a day, they'd better do something fast about spyware/malware. They already charge enough and I'm not quibbling about the price of MS code, but... It DOES behoove them to keep their product useful and productive without increasing the cost or demanding a subscription to fix the drek they let in.

    There are really only two solutions to their business dilemma; 1. Fix the vulnerabilities constantly and immediately. This would mean a whole new branch of the business. Or-2. Buy a decent anti-spyware company, pay them to do what they already know how to do, and incorporate the software in the browser/OS. Update constantly via Windows Update and don't charge anything extra to keep their software usable.

    The point being, 80% of home users systems are infected, infested, compromised and possibly propagating. There are people losing big money because they don't know how to protect their computer systems and bad guys are getting access to their finances. If Microsoft can't field a reasonably secure and useful product, Microsoft will have to live off it's past. In this industry I don't think that's going to work for very long.

    If this industry is going to thrive, the Aunt Tillies of the world are going to have to be able to buy a computer, plug it in, and not know a damn thing about anti-hacking, antivirus, anti-spyware, etc. And it will WORK for them when they want to dl a coupon from a fabric store or check the local grocery specials.

    I live in the Los Angeles Basin and personally I'd be thrilled to death if all the Aunt Tillies never had to drive anywhere at all...

    I know people, very intelligent people, Doctors, Lawyers, some of them retired. They're gems in their field but their field isn't computers. They're NOT stupid or lazy but they're NOT the kind of people that would have a subscription to /. either. One of my users is a wonderful retired man who spends ages working on a video biography to give to his grandchildren so they'll know who he was and they are. It's amazing and wonderful the things that you can do now that you never ever could before.

    These people shouldn't have their labors risked or their productivity diminsished because they're axle deep in pop

  204. Re:Drive by installs occur on many non-porn web si by Psyrg · · Score: 1

    In my experience you must also disable ActiveX. Before I discovered Firefox, I used to use IE with both Javascript and Active X disabled, and as far as I am aware I never got infected.

    These days it is just a no brainer though, I regularly prompt people to install firefox.

  205. It's sort of an insurance policy by Anonymous Coward · · Score: 0

    someone may come around and break your windows.

    You should buy insurance from us (the window breakers corp.).

    And then your windows may not get broken. As often.

    Where have I heard this before? And where I heard it, the guarantee that no one would break your windows usually was a guarantee you could bank on.

    Hair Trap Hair Salon New York