Slashdot Mirror
UK Government Launches Virus Alert Service
Phil1 writes "The BBC is reporting that a rapid alerting service that tells home computer users about serious internet security problems is being launched by the UK government. Has this been attempted anywhere else in the world? Was it successful? And will they be plugging the Microsoft Anti-Spyware package (once it leaves beta)?"
You linked to the Anti-Spyware app... and mentioned the AV app... have they already released a beta of the AV? I know it's been purchased and in the process of rebranding... but come on!
Help Brendan pay off his student loans
When you sign up for the ITsafe mail, you will have to provide a "ITsafe word" which will be in the subject of the email, and therefor its easy to see if its a forged mail..
read more here: http://www.itsafe.gov.uk/terms/itsafeword.html
The Dutch Government CSIRT is doing this for two years already. So you can chill out to a cool Legowelt CD and get warned when there's a new threat.
On the site: http://www.itsafe.gov.uk/ theres no check to see if you are an UK citizen.. Also theres no mention of it being for UK'ers only on the site or in the press release...
Although i migth just use the service from DK-cert or some anti virus company..
One hopes the government is better at computer viruses than their attempts on humans.
for the las 3 years. At Alerta Antivirus
Since a few years the Belgian regulatory body for postal services and telecommunication (BIPT), has a special unit that tracks and warns for (possible) virus attacks.
Sometimes you get a warning of the BIPT in the radio news or during the traffic information announcements.
http://www.bipt.be/bipt_E.htm
I do not know how they work or how they are structured, and if it helps at all, but the UK is not the first country to do this...
any spammer can forge these messages to catch the unwary.
OK, this is FAQqed but it's a bit harsh to mod the guy down. This is a fair point, and the mechanisms on the site (pre-agreed token sent in plain, verify against non-SSL HTTP) aren't properly secure. Connecting to the site over SSL (https://www.itsafe.gov.uk/) doesn't work.
They should sign their messages (and use this as an opportunity to explain signing to non-techies?) and host bulletins over SSL.
Usual plug for free AVG. There's no excuse not to have a virus checker, no matter how clued you think you are.
When will we expect the first Trojan masquerading as an update from the "IT Safe" service?
They've thought of that. When you sign up, you enter a 'safe word' which will they will put in the subject line of every email they send you.
So a convincing spoof would require access to their database.
"Those who cast the votes decide nothing; those who count the votes decide everything." (attrib. Joseph Stalin)
Plus the advice summary is bullshit:
Install anti-virus software
That's corrective action. How about prevenaitive action like pointing out secure products and warning the public to avoid defective ones? An ounce of prevention is worth a pound of cure.
Keep your anti-virus software up to date
You can't patch fast enough. That includes so called anti-virus software. Someone has to get hit first. AV companies have to then react and update the AV software profile. Then users have to add the updated profile, over a modem that can take time. MS-Slammer reached saturation in 8.5 minutes.
Install a personal firewall
Web pages and e-mail go right through that fire wall, they're supposed to, so do outgoing connections usually. Unfortunately most MS malware comes in via MSIE (the web) or MS-Outlook (mail), so how exactly is a firewall going to help? How about swapping out vulnerable applications and services instead?
Use Windows updates to patch security holes
There are other systems besides MS-Windows. Currently these do not even get viruses or worms. Some of these (e.g. Ubuntu) are easy to install and work on existing x86 hardware. Macintoshes are low maintenance and work out of the box. Unless you're a heavy gamer, you don't need MS-Windows.
Do not open e-mail messages that look suspicious
A virus is only harmless data, unless your system is designed to run it on sight. How about choosing an e-mail client that's not designed to spread viruses. Thunderbird, Mozilla, and Eudora are excellent choices.
Do not click on e-mail attachments you were not expecting
Use one of the above mail clients and/or switch to an operating system not designed to spread viruses.
Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
You must be new here.
:)
Obviously, the next story will be this story posted again by *the same* editor.